last executing test programs: 15m31.764806587s ago: executing program 32 (id=49): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x455, 0x40000008, r0, 0x0) fanotify_mark(0xffffffffffffffff, 0x7e, 0x8000008, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@local, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 15m19.081321714s ago: executing program 33 (id=69): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = timerfd_create(0x8, 0x800) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)=@generic={0x0, 0x0, 0x10}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@fallback=r0, r0, 0x15, 0x8f4803075bae1cc4, 0x0, @void, @value=r2}, 0x20) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x40, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpgid(0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r4, 0x29, 0x1c, 0x0, &(0x7f0000000340)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getnexthop={0x20, 0x76, 0x1, 0x0, 0x0, {0x3}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001800010a04000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) 15m15.49755559s ago: executing program 34 (id=94): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000003040), 0x80100, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5207, 0x0) 15m14.160754451s ago: executing program 35 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x80}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x8000, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) 14m30.87061408s ago: executing program 36 (id=110): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$eJzs3c9vI1cdAPCvnV9OmjZp6QEQokspLGi1TuJto6oHKCeEUCVEjyBtQ+KNothxFDulCXvY/g9IVOIER/4Azj3xJyC4cYEDEj8iULMSSFPNeLzrzdob7yaxs/HnI41m3ryxv+/t7rzn+W7iF8DYuhYR9yJiOiI+iIiF/Hwh3+Ld9pZe99nR3fXjo7vrhUiS9/9VyOrTc9H1mtQL+XuWIuLH34/4WeHxuM2Dw+21Wq261y7OLrXqu0vNg8ObW/W1zepmdadSWV1ZXX771luVc+vra/Xp9sFE2sBv/yJt1nxe192Pc/T/JDP1IE5qMiJ+eAHBRmEi78/0qBvCMylGxCsR8Xp2/y/ERPa3CQBcZUmyEMlCdxkAuOqKWQ6sUCznuYD5KBbL5XYO79WYK9YazdaNO439nY12rmwxpop3tmrV5TxXuBhThbS8kh0/LFdOlG9FxMsR8cuZ2axcXm/UNkb5wQcAxtgLJ+b//860538A4IorjboBAMDQmf8BYPyY/wFg/Jj/AWD8mP8BYPyY/wFg/Jj/AWCs/Oi999ItOc6//3rjw4P97caHNzeqze1yfX+9vN7Y2y1vNhqb2Xf21E97v1qjsbvyZux/tPid3WZrqXlweLve2N9p3c6+1/t2dWoovQIAnuTl1z79cyEi7r0zm23RtZaDuRqutuJZXjx7fu0Ahm9i1A0ARsZqXzC+zvCMLz0AV0SPJXofUXrkcT+/OkmS5GKbBVyg61+S/4dx1ZX/91PAMGbk/2F8DZr/Py0/ADx/kqQw6Jr/MeiFAMDlJscP9Hm+fyXf/y7/z4Gfbpy84pOLbBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcbp31f8v5WuDzUSyWyxEvRsRiTBXubNWqyxHxUkT8aWZqJi2vjLjNAMBZFf9eyNf/ur7wxvzJ2unC/ZlsHxE///X7v/pordXa+2N6/t8Pzrc+yc9XRtF+AOA0nXk623c9yH92dHe9sw2zPf/4XkSU2vGPj6bj+EH8yZjM9qWYioi5/xTycluhK3dxFvc+jogv9up/IeazHEh75dOT8dPYLw41fvGR+MWsrr1P/yy+8NSRk4VzaD481z5Nx593e91/xbiW7Xvf/6VshDq7fPxL32r9OBsDH8bvjH8Tfca/a4PGePMPP2gfzT5e93HElycjOrGPu8afTvxCn/hvDBj/L1/56uv96pLfRFyP3vG7Yy216rtLzYPDm1v1tc3qZnWnUlldWV1++9ZblaUsR73Ufzb45zs3XupXl/Z/rk/80in9/8aA/f/t/z74ydeeEP9bX+8VvxivPiF+Oid+c8D4a3O/L/WrS+Nv9Ox/R//+3xgw/l//dvjYsuEAwOg0Dw6312q16t4wDzofJIYa1MEVOEj/1VyCZvQ8+O6wYk3HU70qSZ4pVr8R4zyybsBl0L7Xk+peRNwfdWMAAAAAAAAAAAAAAICehvEbS6PuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFfX5wEAAP//90HVog==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.idle_time\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x3}) fcntl$lock(r3, 0x7, &(0x7f00000001c0)={0x1, 0x1, 0x4000000000000, 0xf5d}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000780)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff7000/0x5000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280)="60c1aea348e6ddb6493609896d5b199f2a9b", 0x12, r0}, 0x68) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r6 = open(&(0x7f00000002c0)='./file2\x00', 0x189242, 0x0) fallocate(r6, 0x10, 0x2, 0x7000000) write$cgroup_type(r1, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000300)={'syz0\x00', {0x4, 0x1, 0x8, 0x1ff}, 0x51, [0x3, 0xceb0, 0x5, 0x1, 0x9, 0x4, 0x1, 0x5, 0x1, 0x2, 0x4, 0x22, 0x7, 0x80000001, 0x80000001, 0x8, 0x5, 0x401, 0x7, 0x3, 0x1, 0x3, 0x75d9, 0x7, 0x1000, 0x2, 0x100, 0x1, 0x3, 0xa8, 0x200000, 0x2, 0x3, 0x9, 0x2, 0x8430, 0xfff, 0x3, 0x1, 0x3, 0x6, 0x9, 0x7, 0x0, 0x1, 0x1c, 0x0, 0x1ff, 0x8, 0x4, 0x7fff, 0x80, 0x912, 0x5, 0x9, 0x3, 0x7fff, 0x4, 0x1, 0x2, 0x2, 0x0, 0x3, 0x2], [0x3534, 0x1, 0x32, 0x7d0, 0xcbf, 0xa0, 0x4, 0x0, 0x6, 0x4, 0x157, 0x8, 0x2, 0x7, 0x6, 0x9, 0x9, 0xffffff48, 0x7e, 0x2, 0x4, 0xfffffffc, 0x5, 0xc, 0x9, 0x6, 0x80000, 0x8, 0x10, 0x7, 0x1fe, 0x1, 0x8, 0xffff2ee1, 0xfffffffc, 0x4, 0x0, 0x1, 0x3, 0x800, 0xffffffff, 0xc01f, 0x8001, 0x9, 0x9, 0x80000000, 0x8, 0xfff, 0x6, 0x0, 0x2, 0x7, 0x7ff, 0x80000000, 0x2, 0x6112, 0xa, 0x1ff, 0x5, 0x7, 0x2, 0x0, 0x7ff, 0xfffffff7], [0x29, 0x5, 0x1, 0x2, 0xe46, 0xc, 0xfffffff8, 0x9, 0x0, 0x30dc5391, 0x101, 0x7, 0x8, 0x6, 0x7, 0xf25, 0xa, 0xfff, 0x9, 0x401, 0x2, 0x5, 0x9, 0xe7, 0x6, 0x1, 0x1, 0x3cfb, 0x9, 0x10001, 0x100, 0x667, 0x7f, 0x3, 0x0, 0xd1, 0x2, 0xfffffffd, 0x7f, 0x3, 0x6, 0x10, 0x1af1d7a8, 0x2, 0x9, 0x4a9a, 0x4, 0x9, 0x1, 0x8, 0xa951, 0x10001, 0xfffffff8, 0x6, 0x8000, 0x8, 0x7, 0xd05a, 0x9, 0x3, 0x0, 0xf, 0xeec2, 0x3], [0x3, 0x2, 0x610, 0x58, 0x0, 0x1, 0x140, 0x2, 0x5, 0x7, 0x2, 0xfffffffd, 0x8, 0x4a, 0x5, 0x5, 0x6, 0x80000000, 0x1, 0x2, 0x0, 0x8, 0x7, 0x9, 0x5, 0x9, 0x9, 0xdb8, 0x3, 0x1a44, 0x1f39, 0x7, 0x9, 0x1f, 0x2, 0x7, 0x2, 0x2, 0x4, 0x8, 0x4, 0x21a, 0x1, 0xff, 0x6, 0x5, 0xfffffff1, 0xf0, 0xea2e, 0x0, 0x4, 0x178, 0x5, 0x3, 0x1, 0x101, 0xc1, 0x7cf8, 0x2, 0x3, 0x8e, 0x8001, 0x2, 0x7]}, 0x45c) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187042, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, 0x0) 14m4.54665496s ago: executing program 37 (id=133): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x4) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x36, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$rtc(&(0x7f00000004c0), 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000000)={0x27, 0x19, 0x3, 0x1b, 0x6, 0x0, 0x4, 0xdd, 0x1}) ptrace(0x10, r4) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000990000009500000000000010"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000a0000000150000000000080045000000000000009100000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0xaa, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) ptrace$pokeuser(0x6, r4, 0x358, 0x0) 13m16.893794088s ago: executing program 38 (id=207): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f00000003c0)=[@enter_looper, @register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x1, 0x1}, 0x20) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) 13m14.931232532s ago: executing program 39 (id=210): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x3, [@func={0x6, 0x0, 0x0, 0xc, 0x4}, @enum={0xd, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x5e49}]}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x1, 0x4}, @func_proto]}, {0x0, [0x5f]}}, &(0x7f0000000600)=""/188, 0x57, 0xbc, 0x0, 0x168, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0xfff, 0x6, 0xffffffff, 0x48206, r0, 0x0, '\x00', r3, r4, 0x1, 0x1, 0x2}, 0x50) getpid() sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) syz_emit_ethernet(0x6f, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810412, &(0x7f00000005c0)=ANY=[], 0x4, 0x1ef, &(0x7f00000001c0)="$eJzsmb+LE0EUx78z2dvcnSLYWNhYeOKJ3mZ3T+WaQ06wF+781Rm8TYhuEklWSAKCwSaNpYVg6z9gYZHKws7OVgsVBAtTWq/M7OzuZDcJKwoRfB+42e+8fTtv3tzyDSQgCOK/5euXn5+fXd05uADgKDZQVvHvpTSHa/mfXjw6/3z32svXH1+9ax17PM6uxwCEYfH6awDe7pUQRNMna5n7G+p6AJ7oG+A4p/QtMJxR+i44birtgeGO0vc13Y4L+J51r+0f1hq+Z4vBEYNbK2XqGwAmQ4ZDAKuytzBkkZR0+4MHVd/3OlmxEsZ1creKCBPp44vOT+5vj2NXzcX+xP/r9ujpUMwtFbe183PA4Si9DYZ9pXdQhmVZ6ZFo/Z800vX1M8o1wPItgf1+/39FHN+ailxZyjZMLKV3EnNF7hUVppVETkzG77VkQIpv/8rmi4gj05HYrXLJH9b/rFZsUjNzUn9iBnBW8ycDRuIflaD5sNLtD7YazWrdq3st192+bF+07UtuRRpRNC7wv1XpT+va+itzck1molcNgo7TA4KOk8zdaEwbwP6b9g/5DJf+x7F5OlpDvCqy7fLsGkz9cXkVajP7kUIQBEEQBEEQBEEQBEEQBFGY0dTsFJj8FjT6oSqWOdzrMvtXAAAA//+7YV3R") r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x1ec, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@empty, 0x4d4, 0x32}, @in=@remote, {0xfffffffffffffffd, 0x0, 0x0, 0x2dcd, 0x0, 0x0, 0x0, 0x8000000000}, {0x0, 0x0, 0x0, 0x1fffffc}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x2}, [@algo_crypt={0xb4, 0x2, {{'ecb(cipher_null)\x00'}, 0x360, "1e66fde27657422c890897ae54adbeecd030551b17077ff1278a0685e499ab3ab292c89713aae2bb4cbdd42202c63dfa9f72a94c31abc1c0b4ca20f35e968ab9cc80832b95c1397c4d882eb3f060a26f51fdc67e1246170e861d5503a493d839ba74d7850ba19fbf04da0be2"}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x1ec}}, 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x0, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x6, 0x8, 0x0, 0x10, 0x10}, @extension_unit={0xc, 0x24, 0x8, 0x6, 0x6, 0x8, "9410024849"}, @feature_unit={0x9, 0x24, 0x6, 0x0, 0x6, 0x1, [0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x0, 0x0, 0x5}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x0, 0x1, [0x5]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x40, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x2}}}}}}}]}}, 0x0) 12m55.314607761s ago: executing program 40 (id=231): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptp0(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe2$9p(0x0, 0x4800) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r1, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) 12m44.324284008s ago: executing program 41 (id=241): r0 = socket$inet6_udp(0xa, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r0, 0x4, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000007000)={{}, {0x0, 0x3938700}}, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x40, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpgid(0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000300)={@initdev}, &(0x7f0000000340)=0x14) 12m41.756545559s ago: executing program 42 (id=242): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000002c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = eventfd2(0x3ff, 0x80000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019380)=""/102400, 0x19000) r3 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) 12m11.146269347s ago: executing program 43 (id=254): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) 11m18.600399937s ago: executing program 44 (id=307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000800009500000000000000180100002020642500000000002020207b1af8ff00"], &(0x7f0000000000)='GPL\x00', 0x1}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x103e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001100010800000000ffdbdf0180000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x20000040) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) fsopen(&(0x7f0000000300)='afs\x00', 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0xc63b, 0x2, 0x0, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) io_uring_enter(r3, 0x0, 0x5, 0xf, &(0x7f0000000000), 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000003cb27919b8000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0xb9, &(0x7f0000000080)=""/185}, 0x94) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e20, 0x5, @empty, 0x8}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000313000085000000060000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m17.895396023s ago: executing program 45 (id=311): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) pipe2(0x0, 0x80000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) 10m46.713245867s ago: executing program 46 (id=362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c0d4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0xfffffff9, 0x4) r3 = syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000001100)='./file0\x00', 0x800050, &(0x7f00000043c0)=ANY=[], 0x1, 0x19b, &(0x7f0000000040)="$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") socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000180)=""/131, 0x83}], 0x1, 0x0, 0x7fffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaab3aaaaaaaa3b848bdcaa86dd000000f7ff06d2fe80000073f700000000004d39cc4ee883d53307b43a0000800000000000000000000000000000000000214a63e72c878235333d0bfc83dd5182bcc253fc663ffa37f73515847b1b361fe4ceef8d941af82ca8fce289514a671737", @ANYRESOCT=r3, @ANYRESDEC=r4, @ANYBLOB="6002003d070d57b04566b1cf4cac8861601190"], 0x0) 10m44.970902704s ago: executing program 47 (id=363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ec0)='net/snmp6\x00') setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f00000002c0)=0x14, 0x4) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000080)=""/14, 0xe}], 0x1, 0xef, 0x1) 9m59.164827336s ago: executing program 48 (id=402): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x2, 0x4) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) socket$nl_generic(0x10, 0x3, 0x10) 9m54.568052902s ago: executing program 49 (id=404): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES8=r1, @ANYRES64, @ANYBLOB="44a837b4012918a47d0187", @ANYRES16, @ANYRESDEC=r1, @ANYRESOCT=r0], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) fsopen(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e65204361707455726527203030303030303430303030"], 0xb8) sched_getparam(r2, &(0x7f0000000540)) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) dup3(r6, r5, 0x1f) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) keyctl$instantiate(0xc, 0x0, &(0x7f00000004c0)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'GPL\x00', 0x20, 0x2, 0x20, [0x36, 0x66]}, 0x30, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x3}]}}}]}, 0x3c}}, 0x0) 9m22.15352696s ago: executing program 50 (id=436): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r1 = openat$audio1(0xffffff9c, &(0x7f0000000240), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x4f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x4, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x2}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x23010, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000d00)={[&(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f00000001c0)) sched_setaffinity(r2, 0x8, &(0x7f0000000380)) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, r0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80c1}, 0x20040000) 8m16.223962854s ago: executing program 51 (id=499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYBLOB="9d42028deb1495fdad7665af50f3bfae10575a56aa24a0cc460ac5088efedb0a64060422cd2f70f19a5388705f545f5f719a794ce7f26f109f3bab1a5347882b", @ANYRESOCT, @ANYRES16=r1, @ANYBLOB="12dea9098e580c9af4c20276d93f2b5317cbe03a00e061839db50ad20c8937fd1d3b1041696b9375391cabe774b4fd5a90d89e5fe82b61cc4b4c869d261c6439e0a591a7e342871c7ec1693428d870d912dda5d4ed9174a82689fe6973f10ee25c575913d6b8e45fec470d0bf076959d9c9bd3d60655504d9ce35d5b9dd6b8fe6deeb8926f0672f4729b43aedd3ed4c8f92969ce7f1df2e0b8145e", @ANYRES32, @ANYRESOCT], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800110001000000", 0x24) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) 8m8.113469292s ago: executing program 52 (id=513): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0xc0) r1 = syz_open_dev$usbmon(0x0, 0x1, 0x10280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRES16=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff9824}, 0x3d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r6, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback={0x700}}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r6, 0x9}}, 0x10) 7m36.005999968s ago: executing program 53 (id=565): syz_emit_ethernet(0x45, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r1, &(0x7f00000000c0)=""/177, 0xb1) read(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setitimer(0x1, &(0x7f0000000080)={{0xfffffffffffffff5, 0x8876}, {0x80000, 0x8}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000240)=ANY=[]) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x40) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, 0x1c) 6m35.16969846s ago: executing program 54 (id=655): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r2 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fd", 0x29, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) getpgid(0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 6m2.85991643s ago: executing program 8 (id=733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x4, 0x8, 0x1014}, 0x50) pipe2$9p(0x0, 0x9633f182736682ca) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) 5m57.397888135s ago: executing program 8 (id=740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 5m54.137986578s ago: executing program 8 (id=743): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x507d, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='6'], 0x118) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5m52.922585515s ago: executing program 8 (id=746): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f00000005c0)="f4", 0x0}, 0x20) 5m52.356148241s ago: executing program 8 (id=748): memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0189436, &(0x7f0000000140)) 5m51.619984s ago: executing program 8 (id=750): socket(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioprio_get$pid(0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x6, 0x0, 0x37303250, 0x1, 0xea, 0x0, 0x3, 0x3, 0x0, 0x6, 0x1, 0x1}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x1, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) clock_settime(0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x4000010, r0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7}) mq_timedreceive(r3, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) 5m38.400355626s ago: executing program 1 (id=789): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x200, 0x0, 'queue1\x00', 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff133a, 0x3], [{0x0, 0x3ff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x7}, {0xffffffff}, {0xfffffffc}, {}, {}, {0xffffffff}, {}, {}, {}, {0x100}], 0x2}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, 0x0) 5m38.056427572s ago: executing program 0 (id=791): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 5m36.800598791s ago: executing program 4 (id=792): r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000480), 0x20) 5m36.787356945s ago: executing program 1 (id=793): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f00000005c0)="f4", 0x0}, 0x20) 5m36.746686076s ago: executing program 0 (id=794): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000040000000000000000711221000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m36.652274571s ago: executing program 5 (id=795): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x507d, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5m36.187049543s ago: executing program 4 (id=796): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 5m35.955070703s ago: executing program 55 (id=750): socket(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioprio_get$pid(0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x6, 0x0, 0x37303250, 0x1, 0xea, 0x0, 0x3, 0x3, 0x0, 0x6, 0x1, 0x1}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x1, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) clock_settime(0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x4000010, r0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7}) mq_timedreceive(r3, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) 5m35.886917316s ago: executing program 0 (id=798): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r0, 0x8) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0x7, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff, 0x1000000000, 0x5, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 5m35.792630283s ago: executing program 1 (id=799): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r2 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0xc000) 5m35.650674813s ago: executing program 5 (id=800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) 5m34.934648601s ago: executing program 1 (id=801): memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 5m34.759991305s ago: executing program 4 (id=802): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0x8) 5m34.757259211s ago: executing program 0 (id=803): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x200, 0x0, 'queue1\x00', 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x6}}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff133a, 0x3], [{0x0, 0x3ff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x7}, {0xffffffff}, {0xfffffffc}, {}, {}, {0xffffffff}, {}, {}, {}, {0x100}], 0x2}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, 0x0) 5m34.532574938s ago: executing program 5 (id=804): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003500)={0x11, 0x3, &(0x7f0000003280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000003340)='syzkaller\x00', 0xf, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff001}, 0x94) 5m34.137653315s ago: executing program 1 (id=805): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x172, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001100)=@migrate={0x54, 0x21, 0x1, 0x70bd28, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x80004}, [@migrate={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40180}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) membarrier(0x8, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x68}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fe000/0x800000)=nil) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80d4}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x2000}], 0x1, 0x0, 0x0, 0x0) 5m33.712676715s ago: executing program 4 (id=806): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000080)=@nl=@unspec, 0x80, 0x0}, 0xe07e872420dfefca) 5m33.712542434s ago: executing program 5 (id=807): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m33.320064232s ago: executing program 0 (id=808): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f00000005c0)="f4", 0x0}, 0x20) 5m32.716204352s ago: executing program 5 (id=809): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x507d, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5m32.557479418s ago: executing program 4 (id=810): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000192c0)=@newtaction={0x14, 0x30, 0xcac229faa96ee7df, 0xffffffff, 0xfffffffd}, 0x14}}, 0x0) 5m32.185714097s ago: executing program 0 (id=811): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 5m31.729256096s ago: executing program 1 (id=812): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)="d08080", 0x3}], 0x1}, 0x20000801) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 5m31.536712413s ago: executing program 4 (id=813): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) 5m31.297339046s ago: executing program 5 (id=814): memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 3m59.98897035s ago: executing program 56 (id=812): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)="d08080", 0x3}], 0x1}, 0x20000801) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 3m59.149221919s ago: executing program 57 (id=811): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3m58.626868578s ago: executing program 58 (id=813): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) 3m57.775515828s ago: executing program 59 (id=814): memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 1m14.31276672s ago: executing program 3 (id=1040): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0xffffffffffffff55) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) clock_getres(0xeef77201c7a121ec, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xaf4, 0x0) 1m13.561423902s ago: executing program 3 (id=1041): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) 34.285257458s ago: executing program 3 (id=1041): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) 33.360861321s ago: executing program 3 (id=1061): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='attr/current\x00') r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x920421, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, 0x0, 0x0) 32.811220358s ago: executing program 2 (id=1043): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x172, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x2000}], 0x1, 0x0, 0x0, 0x0) 32.336706578s ago: executing program 3 (id=1064): socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0xc000) 31.323966811s ago: executing program 3 (id=1066): r0 = syz_io_uring_setup(0x507d, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 31.211812097s ago: executing program 2 (id=1067): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 27.691664548s ago: executing program 2 (id=1069): r0 = syz_usb_connect(0x5, 0x34, &(0x7f0000000e80)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540040904ce01090000000007"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x20, 0xb, 0x2, {0x2, 0xb}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}, 0x0, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x63, 0x10, 0x1, {0x22, 0x92f}}}}, 0x0) 24.890756314s ago: executing program 2 (id=1074): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='attr/current\x00') r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x920421, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, 0x0, 0x0) 23.624712874s ago: executing program 2 (id=1077): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x172, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x2000}], 0x1, 0x0, 0x0, 0x0) 23.098324683s ago: executing program 2 (id=1079): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 20.056876746s ago: executing program 9 (id=1082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2082, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0xffffff79, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x2040) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="89edee2c78daddb4b473fec988ca004063cac50580088b", 0x26}, {&(0x7f0000000100)="93823f08c826a46e670b192cd7a2fa", 0x27}], 0x2) 16.433987589s ago: executing program 9 (id=1086): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {}, {0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 15.212865755s ago: executing program 9 (id=1089): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.756926461s ago: executing program 9 (id=1090): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2008800, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x4, 0x1534, &(0x7f0000001f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fsync(r0) 14.494117658s ago: executing program 7 (id=1091): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4002, &(0x7f0000000140)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@delalloc}, {@errors_remount}]}, 0x1, 0x7a2, &(0x7f0000000f80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) dup3(r0, r0, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) openat(0xffffffffffffffff, 0x0, 0x8000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8884) 13.677906107s ago: executing program 9 (id=1092): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 13.524626756s ago: executing program 6 (id=1093): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0xa4, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "5b23a7"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x0, 0xff, 0x26}, {0x6, 0x24, 0x1a, 0x1, 0x20}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @acm={0x4, 0x24, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x28, 0x0, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x1, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x220, 0x7, 0x6}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x1, 0xf, 0x4, 0x40, 0x5}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0xb5, 0x0, 0x8, 0x43}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3c1a}}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000380)={0x14, &(0x7f0000000440)={0x40, 0x30, 0xdd, {0xdd, 0x21, "1315688782d1df4b4185fa601c86afe38f5b44ddba3850676c79a5ca94a1a6e838f50b8b9e328c97c23b104b0fd8a436336217ffce92942cfe10b3366054c8e983053a7e01f741dc7b51e0b9c9019669ab555480f423b01db9b6fae4408edd8322cfbd10d10e44309c1e6a4b372f5b2ba294d671e0f8601c9a1c81ce298798779584e2f1ec54702271696b05148d8b932e3b4752bc67a3cba618f2ce4ba6f9dd3e9b3eca2650fa18442619dfd81c3f7a4650b3caa190d1ea3887231c869412195527d33f1c781ce50bfb9f9892c473db4f8e7de4b0e7feae70eab9"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000540)={0x0, 0x9}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3a}, &(0x7f0000000600)={0x0, 0x8, 0x1}, &(0x7f0000000640)={0x20, 0x80, 0x1c, {0x1, 0xfe6e, 0x6, 0x4, 0xd, 0x800, 0x2, 0xf4, 0x4, 0xfffa, 0x400, 0x1}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0x10}, &(0x7f0000000700)={0x20, 0x83, 0x2}, &(0x7f0000000740)={0x20, 0x87, 0x2}, &(0x7f0000000780)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000400)={0x24, &(0x7f0000000080)={0x0, 0xb, 0x8d, {0x8d, 0x9, "9fee84b64bde36f9962690cf88fe409431d4430ba51d8505c0df1160dc9c1b557cc3839ffd4a0f9c80df570011284d5698f1995b950cf454f6e8f3d0440c9fcea4ef42c0d4dd344113a8197ac2aa032c9fbcb8f8a205f638267cc662da98571239aee6e40894b0bde0db41224002f6f79222d0c2660f8d619cb556c4e9b4483b193de415c39cab60abd7cc"}}, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 13.117251722s ago: executing program 9 (id=1094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000840)={[{@bh}, {@nolazytime}, {@noblock_validity}, {@barrier}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x800400, 0x0, 0x3, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x8000008000000317}) 12.810895071s ago: executing program 7 (id=1095): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 11.792531818s ago: executing program 7 (id=1096): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x0, 0x83, 0xec}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00\x00', @ANYRES64], 0x0, 0x0, 0x0, 0x0}) 9.394193964s ago: executing program 6 (id=1097): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) syz_emit_ethernet(0x6a, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="000000000000000005"], 0x48) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000002380)={[{@sysvgroups}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@usrjquota}, {@data_journal}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x313}}, {@block_validity}]}, 0x0, 0x5fd, &(0x7f00000004c0)="$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") ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3") ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000002340)={0x28, 0x0, 0x0, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 7.840082086s ago: executing program 7 (id=1098): ioperm(0x2, 0x903, 0xa) gettid() r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0xc, 0x0, 0x4, 0x80}]}, &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, &(0x7f0000000040)=0x7, 0x7, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x6, 0x0, &(0x7f00000000c0)) 7.36612132s ago: executing program 6 (id=1099): r0 = syz_usb_connect$hid(0x0, 0x68, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, &(0x7f0000000100)={0x40, 0x22, 0x1e, {0x1e, 0xd, "eeea2a01d3862c3a0f25af0500000000000000e0c806ffdd0b66be14"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.617454726s ago: executing program 6 (id=1100): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f00000005c0)="f4", 0x0}, 0x20) 3.68429909s ago: executing program 6 (id=1101): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.584844713s ago: executing program 7 (id=1102): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000d40)={[{@test_dummy_encryption}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.445838444s ago: executing program 7 (id=1103): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "813e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x3, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 0s ago: executing program 6 (id=1104): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x3}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000006221184f59658691331333c605f1109a99a60a17f81e5374921d50df95a9976ffae47268f7ee55cd0836ff8bf94143e7162739234babab840f5674c9341dcd4c88611c3b8d8fcb01b3bdb4074d6293177c297ef6908f2c1176e4a9536200fc", @ANYRES16=r7, @ANYBLOB="010027bd7000040000000500000008000c00a80a000014000800767863616e310000000000000000000008000b000400000008000900020000"], 0x40}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448c9, 0x0) sendmmsg$inet(r8, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000078c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x9, 0xffff}, {0xc}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x8, 0x10d, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): ?? [ 1057.515807][ T8775] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1057.750369][ T5854] rc_core: IR keymap rc-hauppauge not found [ 1057.756681][ T5854] Registered IR keymap rc-empty [ 1057.762822][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1057.790120][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1057.822512][ T5854] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1057.882770][ T5854] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 1057.990925][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1058.019370][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1058.047330][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1058.095413][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1058.123241][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1058.156168][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1058.225364][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1058.269222][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1058.319316][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1058.330535][ T8775] gspca_sonixj: reg_r err -32 [ 1058.335649][ T8775] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 1058.399081][ T5854] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1058.422506][ T5854] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1058.431351][ T5854] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1058.522724][ T5854] usb 3-1: USB disconnect, device number 12 [ 1058.706696][T11208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.714351][T11208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.722111][T11208] bridge_slave_0: entered allmulticast mode [ 1058.774568][T11208] bridge_slave_0: entered promiscuous mode [ 1058.869204][T11208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.876717][T11208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.884984][T11208] bridge_slave_1: entered allmulticast mode [ 1058.900524][T11208] bridge_slave_1: entered promiscuous mode [ 1059.058721][ T14] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.086818][T11228] 9pnet_virtio: no channels available for device syz [ 1059.413021][ T14] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.433979][ T5806] Bluetooth: hci0: command tx timeout [ 1059.466255][T11208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.505932][T11208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.542285][ T14] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.748084][ T14] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.774042][T11208] team0: Port device team_slave_0 added [ 1059.797148][T11208] team0: Port device team_slave_1 added [ 1060.068061][T11208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1060.075355][T11208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.102063][T11208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.114533][ T8775] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1060.150394][ T1959] usb 7-1: USB disconnect, device number 10 [ 1060.331769][ T8775] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1060.340983][ T8775] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1060.351771][ T8775] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1060.361150][ T8775] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1060.372484][ T8775] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1060.481096][T11208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.488250][T11208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.515257][T11208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.569201][ T8775] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1060.578754][ T8775] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1060.586994][ T8775] usb 4-1: Product: syz [ 1060.591557][ T8775] usb 4-1: Manufacturer: syz [ 1060.626567][ T14] bridge_slave_1: left allmulticast mode [ 1060.632688][ T14] bridge_slave_1: left promiscuous mode [ 1060.643014][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.747798][ T8775] cdc_wdm 4-1:1.0: skipping garbage [ 1060.753399][ T8775] cdc_wdm 4-1:1.0: skipping garbage [ 1060.788978][ T8775] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1060.795118][ T8775] cdc_wdm 4-1:1.0: Unknown control protocol [ 1060.815600][ T14] bridge_slave_0: left allmulticast mode [ 1060.821633][ T14] bridge_slave_0: left promiscuous mode [ 1060.828159][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.997865][T11233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.009177][T11233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.370367][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1061.410300][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1061.434548][ T14] bond0 (unregistering): Released all slaves [ 1061.499576][ T5806] Bluetooth: hci0: command tx timeout [ 1061.693331][T11239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.703567][T11239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.806354][T11208] hsr_slave_0: entered promiscuous mode [ 1061.816175][T11208] hsr_slave_1: entered promiscuous mode [ 1061.824849][T11208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1061.832729][T11208] Cannot create hsr debugfs directory [ 1062.586426][ T14] hsr_slave_0: left promiscuous mode [ 1062.606106][ T14] hsr_slave_1: left promiscuous mode [ 1062.615147][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1062.623218][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1062.679809][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1062.690015][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1062.809614][ T14] veth1_macvtap: left promiscuous mode [ 1062.815454][ T14] veth0_macvtap: left promiscuous mode [ 1062.821758][ T14] veth1_vlan: left promiscuous mode [ 1062.827447][ T14] veth0_vlan: left promiscuous mode [ 1062.949365][T10520] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1063.143091][T10520] usb 10-1: device descriptor read/64, error -71 [ 1063.385091][ T1959] usb 4-1: USB disconnect, device number 10 [ 1063.409060][T10520] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1063.580036][ T5806] Bluetooth: hci0: command tx timeout [ 1063.589208][T10520] usb 10-1: device descriptor read/64, error -71 [ 1063.686009][T10458] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1063.696466][T10458] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1063.719283][T10520] usb usb10-port1: attempt power cycle [ 1063.726671][T10458] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1063.762516][T10458] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1063.776168][T10458] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1064.011032][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1064.075234][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1064.345817][T10520] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1064.377297][T10520] usb 10-1: device descriptor read/8, error -71 [ 1064.689083][T10520] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1064.860197][T10520] usb 10-1: device descriptor read/8, error -71 [ 1064.970791][T10520] usb usb10-port1: unable to enumerate USB device [ 1065.528922][ T8775] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1065.710719][ T8775] usb 4-1: Using ep0 maxpacket: 16 [ 1065.748749][ T8775] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.761393][ T8775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1065.773369][ T8775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1065.783413][ T8775] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1065.793440][ T8775] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1065.899638][ T5806] Bluetooth: hci1: command tx timeout [ 1065.906142][ T8775] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1065.919175][ T8775] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1065.927429][ T8775] usb 4-1: Manufacturer: syz [ 1065.973899][ T8775] usb 4-1: config 0 descriptor?? [ 1066.126058][T11208] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1066.262318][T11208] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1066.378348][T11208] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1066.453332][T11208] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1066.561762][ T8775] rc_core: IR keymap rc-hauppauge not found [ 1066.567881][ T8775] Registered IR keymap rc-empty [ 1066.576892][ T8775] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1066.637516][ T8775] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1066.748081][ T8775] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1066.763492][ T8775] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 1066.812131][ T3502] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.891977][ T8775] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1066.903185][T11254] chnl_net:caif_netlink_parms(): no params data found [ 1067.002555][ T8775] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1067.013037][ T3502] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.030205][ T8775] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1067.053513][ T8775] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1067.094619][ T8775] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1067.149699][ T8775] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1067.176142][ T8775] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1067.203363][ T3502] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.231073][ T8775] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1067.266061][ T8775] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1067.321222][ T8775] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1067.353303][ T8775] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1067.357250][ T3502] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.361629][ T8775] mceusb 4-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 1067.427763][ T8775] usb 4-1: USB disconnect, device number 11 [ 1067.979056][ T5806] Bluetooth: hci1: command tx timeout [ 1068.056332][ T3502] bridge_slave_1: left allmulticast mode [ 1068.062716][ T3502] bridge_slave_1: left promiscuous mode [ 1068.072965][ T3502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.201270][ T3502] bridge_slave_0: left allmulticast mode [ 1068.207249][ T3502] bridge_slave_0: left promiscuous mode [ 1068.216581][ T3502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.711176][ T3502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.765156][ T3502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.782207][ T3502] bond0 (unregistering): Released all slaves [ 1069.047600][T11208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1069.494530][ T3502] hsr_slave_0: left promiscuous mode [ 1069.508362][ T3502] hsr_slave_1: left promiscuous mode [ 1069.519352][ T3502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1069.527007][ T3502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.571445][ T3502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1069.579306][ T3502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.636459][ T3502] veth1_macvtap: left promiscuous mode [ 1069.645898][ T3502] veth0_macvtap: left promiscuous mode [ 1069.652503][ T3502] veth1_vlan: left promiscuous mode [ 1069.658053][ T3502] veth0_vlan: left promiscuous mode [ 1070.065750][ T5806] Bluetooth: hci1: command tx timeout [ 1070.399698][ T3502] team0 (unregistering): Port device team_slave_1 removed [ 1070.539284][ T3502] team0 (unregistering): Port device team_slave_0 removed [ 1070.639987][T10520] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1070.854911][T10520] usb 4-1: Using ep0 maxpacket: 16 [ 1070.884239][T10520] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1070.893816][T10520] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.907859][T10520] usb 4-1: config 0 descriptor?? [ 1070.927425][T10520] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1070.961532][T11208] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.187159][T11254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.195205][T11254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.204814][T11254] bridge_slave_0: entered allmulticast mode [ 1071.215778][T11254] bridge_slave_0: entered promiscuous mode [ 1071.264292][ T3740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.271859][ T3740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.344002][ T3740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.351621][ T3740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.373816][T11254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.381534][T11254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.391705][T11254] bridge_slave_1: entered allmulticast mode [ 1071.401089][T11254] bridge_slave_1: entered promiscuous mode [ 1071.627919][T10458] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1071.641735][T10458] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1071.652927][T10458] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1071.666019][T10458] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1071.677290][T10458] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1071.924985][T10520] gspca_sonixj: reg_r err -32 [ 1071.930253][T10520] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 1072.027200][T11254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.137466][T11254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.150266][T10458] Bluetooth: hci1: command tx timeout [ 1072.384739][T11254] team0: Port device team_slave_0 added [ 1072.450408][T11254] team0: Port device team_slave_1 added [ 1072.705028][T11254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.712591][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.740978][T11254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.904852][T11254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.912274][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.940628][T11254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.405374][ T5421] usb 4-1: USB disconnect, device number 12 [ 1073.481286][T11254] hsr_slave_0: entered promiscuous mode [ 1073.491226][T11254] hsr_slave_1: entered promiscuous mode [ 1073.502598][T11254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1073.510690][T11254] Cannot create hsr debugfs directory [ 1073.768989][T10458] Bluetooth: hci2: command tx timeout [ 1073.920675][T11305] chnl_net:caif_netlink_parms(): no params data found [ 1074.118668][ T8775] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1074.263747][T11208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.285688][ T8775] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1074.295264][ T8775] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1074.306028][ T8775] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1074.315447][ T8775] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1074.326822][ T8775] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1074.487046][ T8775] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1074.496501][ T8775] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1074.505008][ T8775] usb 4-1: Product: syz [ 1074.509468][ T8775] usb 4-1: Manufacturer: syz [ 1074.619428][ T8775] cdc_wdm 4-1:1.0: skipping garbage [ 1074.624902][ T8775] cdc_wdm 4-1:1.0: skipping garbage [ 1074.686659][ T8775] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1074.694696][ T8775] cdc_wdm 4-1:1.0: Unknown control protocol [ 1074.869723][T11324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.879824][T11324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.279229][T11337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.290493][T11337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.678961][T11305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.689093][T11305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.696761][T11305] bridge_slave_0: entered allmulticast mode [ 1075.706346][T11305] bridge_slave_0: entered promiscuous mode [ 1075.762362][T11305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.771753][T11305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.779642][T11305] bridge_slave_1: entered allmulticast mode [ 1075.791303][T11305] bridge_slave_1: entered promiscuous mode [ 1075.840549][T10458] Bluetooth: hci2: command tx timeout [ 1075.874918][T11254] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1075.968987][T11254] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1076.059774][T11254] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1076.165979][T11254] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1076.212909][T11305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.258367][T11305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.592283][T11305] team0: Port device team_slave_0 added [ 1076.691451][T11305] team0: Port device team_slave_1 added [ 1076.934625][T11305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.944294][T11305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.971247][T11305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1077.022324][T11305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1077.030022][T11305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1077.056593][T11305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.152764][ T1959] usb 4-1: USB disconnect, device number 13 [ 1077.185030][T11208] veth0_vlan: entered promiscuous mode [ 1077.562809][T11305] hsr_slave_0: entered promiscuous mode [ 1077.572731][T11305] hsr_slave_1: entered promiscuous mode [ 1077.581508][T11305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1077.589374][T11305] Cannot create hsr debugfs directory [ 1077.709856][T11208] veth1_vlan: entered promiscuous mode [ 1077.900362][T10458] Bluetooth: hci2: command tx timeout [ 1078.574720][T11254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.600371][T11208] veth0_macvtap: entered promiscuous mode [ 1078.737676][T11208] veth1_macvtap: entered promiscuous mode [ 1079.046871][T11254] 8021q: adding VLAN 0 to HW filter on device team0 [ 1079.126618][ T3631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.134241][ T3631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.202945][T11208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.320515][ T3631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.328063][ T3631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.387341][T11208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.490871][T11208] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.537617][T11208] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.546914][T11208] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.556085][T11208] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.569115][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1079.575741][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1079.742097][T11305] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1079.919932][T11305] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1079.979046][T10458] Bluetooth: hci2: command tx timeout [ 1080.000454][T11305] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1080.159889][T11305] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1080.960793][ T8775] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1081.159128][ T8775] usb 4-1: device descriptor read/64, error -71 [ 1081.429825][ T8775] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1081.460449][T11305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.571662][T11305] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.612458][ T8775] usb 4-1: device descriptor read/64, error -71 [ 1081.703539][T10433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.711141][T10433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.749609][ T8775] usb usb4-port1: attempt power cycle [ 1081.807089][T10433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.814664][T10433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.964442][T11254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.090534][T11305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1082.101319][T11305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1082.139690][ T8775] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1082.206617][ T8775] usb 4-1: device descriptor read/8, error -71 [ 1082.436675][T11254] veth0_vlan: entered promiscuous mode [ 1082.471182][ T8775] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1082.541805][ T8775] usb 4-1: device descriptor read/8, error -71 [ 1082.563685][T11254] veth1_vlan: entered promiscuous mode [ 1082.679060][ T8775] usb usb4-port1: unable to enumerate USB device [ 1082.881522][T11254] veth0_macvtap: entered promiscuous mode [ 1082.928975][T11254] veth1_macvtap: entered promiscuous mode [ 1083.090145][T11254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1083.204874][T11254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1083.294029][T11254] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.303340][T11254] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.312489][T11254] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.321603][T11254] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.075187][T11305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1084.549301][ T5854] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1084.788239][ T5854] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1084.798094][ T5854] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1084.811081][ T5854] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1084.821263][ T5854] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1084.833011][ T5854] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1084.993026][ T5854] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1085.003544][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1085.014222][ T5854] usb 4-1: Product: syz [ 1085.020898][ T5854] usb 4-1: Manufacturer: syz [ 1085.111538][ T5854] cdc_wdm 4-1:1.0: skipping garbage [ 1085.117033][ T5854] cdc_wdm 4-1:1.0: skipping garbage [ 1085.193355][ T5854] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1085.200844][ T5854] cdc_wdm 4-1:1.0: Unknown control protocol [ 1085.404639][T11408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.415450][T11408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.719258][ T5854] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1085.867570][T11430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.878362][T11430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.909774][ T5854] usb 10-1: Using ep0 maxpacket: 16 [ 1085.959490][ T5854] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.970095][ T5854] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1085.981517][ T5854] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1085.993909][ T5854] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1086.004166][ T5854] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1086.095830][ T5854] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1086.106205][ T5854] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1086.114923][ T5854] usb 10-1: Manufacturer: syz [ 1086.195343][ T5854] usb 10-1: config 0 descriptor?? [ 1086.653938][T11305] veth0_vlan: entered promiscuous mode [ 1086.699518][T10436] Bluetooth: hci8: command 0x0406 tx timeout [ 1086.702427][ T5803] Bluetooth: hci10: command 0x0406 tx timeout [ 1086.780262][T11305] veth1_vlan: entered promiscuous mode [ 1086.840326][ T5854] rc_core: IR keymap rc-hauppauge not found [ 1086.846448][ T5854] Registered IR keymap rc-empty [ 1086.854425][ T5854] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1086.884353][ T5854] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1086.913374][ T5854] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1086.929430][ T5854] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input12 [ 1086.990971][T11305] veth0_macvtap: entered promiscuous mode [ 1087.018070][T11305] veth1_macvtap: entered promiscuous mode [ 1087.048679][ T5854] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1087.072078][ T5854] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1087.149156][ T5854] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1087.183772][ T5854] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1087.215037][ T5854] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1087.217034][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.232223][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.252595][ T5854] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1087.295641][ T5854] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1087.321784][T11305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1087.384829][ T5854] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1087.412026][ T5854] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1087.451983][T11305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.481046][ T5854] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1087.529358][ T5854] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 1087.537797][ T5854] mceusb 10-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 1087.583663][T11305] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.594185][T11305] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.603383][T11305] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.612513][T11305] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.649310][ T5854] usb 10-1: USB disconnect, device number 14 [ 1087.678761][ T3631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.679968][ T8775] usb 4-1: USB disconnect, device number 18 [ 1087.686710][ T3631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.768822][ T5854] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1088.848906][ T8775] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1089.000662][ T5854] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1089.009799][ T5854] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1089.020717][ T5854] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1089.030167][ T5854] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1089.041523][ T5854] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1089.081043][ T8775] usb 10-1: Using ep0 maxpacket: 16 [ 1089.160956][ T8775] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1089.171691][ T8775] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.227596][ T8775] usb 10-1: config 0 descriptor?? [ 1089.278382][ T5854] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1089.288010][ T5854] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1089.296472][ T5854] usb 8-1: Product: syz [ 1089.301025][ T5854] usb 8-1: Manufacturer: syz [ 1089.317907][ T8775] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1089.444796][ T5854] cdc_wdm 8-1:1.0: skipping garbage [ 1089.450662][ T5854] cdc_wdm 8-1:1.0: skipping garbage [ 1089.553745][ T5854] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1089.560262][ T5854] cdc_wdm 8-1:1.0: Unknown control protocol [ 1089.705417][T11456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.717489][T11456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.120854][ T8775] gspca_sonixj: reg_r err -32 [ 1090.128930][ T8775] sonixj 10-1:0.0: probe with driver sonixj failed with error -32 [ 1090.217795][T11472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.230929][T11472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.543166][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.552023][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.722725][ T4625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.731925][ T4625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.759928][ T7550] usb 10-1: USB disconnect, device number 15 [ 1091.852524][ T8775] usb 8-1: USB disconnect, device number 16 [ 1092.569450][ T7550] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1092.881537][ T7550] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1092.893564][ T7550] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1092.904803][ T7550] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1092.914257][ T7550] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1092.925633][ T7550] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1093.134363][ T7550] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1093.143996][ T7550] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1093.152322][ T7550] usb 10-1: Product: syz [ 1093.156679][ T7550] usb 10-1: Manufacturer: syz [ 1093.212479][ T7550] cdc_wdm 10-1:1.0: skipping garbage [ 1093.218196][ T7550] cdc_wdm 10-1:1.0: skipping garbage [ 1093.228101][ T7550] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1093.234404][ T7550] cdc_wdm 10-1:1.0: Unknown control protocol [ 1093.511459][T11492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.520975][T11492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.962771][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1093.962844][ T30] audit: type=1326 audit(1751523270.777:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.7.985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1093.992520][ T30] audit: type=1326 audit(1751523270.787:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.7.985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1094.036593][T11513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.047362][T11513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.210649][ T30] audit: type=1326 audit(1751523270.897:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.7.985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1094.250202][ T30] audit: type=1326 audit(1751523270.897:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.7.985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1094.276942][ T30] audit: type=1326 audit(1751523270.897:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.7.985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1094.299432][ T30] audit: type=1326 audit(1751523270.917:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.7.985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1094.322899][ T30] audit: type=1326 audit(1751523270.917:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.7.985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1094.402114][ T8775] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1094.579786][ T8775] usb 3-1: device descriptor read/64, error -71 [ 1094.825113][ T8775] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1095.018951][ T8775] usb 3-1: device descriptor read/64, error -71 [ 1095.087363][ T4625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.095587][ T4625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.163155][ T8775] usb usb3-port1: attempt power cycle [ 1095.208878][ T7550] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1095.228267][T10433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.237128][T10433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.374257][ T7550] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1095.383454][ T7550] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1095.394085][ T7550] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1095.403367][ T7550] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1095.414685][ T7550] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1095.445645][ T7550] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1095.459634][ T7550] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1095.467883][ T7550] usb 4-1: Product: syz [ 1095.475368][ T7550] usb 4-1: Manufacturer: syz [ 1095.545745][ T8775] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1095.561856][ T5854] usb 10-1: USB disconnect, device number 16 [ 1095.627791][ T8775] usb 3-1: device descriptor read/8, error -71 [ 1095.664392][ T7550] cdc_wdm 4-1:1.0: skipping garbage [ 1095.669969][ T7550] cdc_wdm 4-1:1.0: skipping garbage [ 1095.740988][ T7550] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1095.747131][ T7550] cdc_wdm 4-1:1.0: Unknown control protocol [ 1095.853235][T11520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.867545][T11520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.879617][ T8775] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1095.955352][ T8775] usb 3-1: device descriptor read/8, error -71 [ 1096.096379][ T8775] usb usb3-port1: unable to enumerate USB device [ 1096.203650][T11531] 9pnet_virtio: no channels available for device syz [ 1096.286361][T11535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.295800][T11535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.307822][ T7550] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1096.325926][ T5421] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1096.509725][ T7550] usb 10-1: Using ep0 maxpacket: 16 [ 1096.519052][ T5421] usb 8-1: Using ep0 maxpacket: 16 [ 1096.542106][ T7550] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1096.551880][ T7550] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.584582][ T5421] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.595368][ T5421] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1096.606997][ T5421] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1096.616903][ T5421] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1096.626852][ T5421] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1096.654288][ T7550] usb 10-1: config 0 descriptor?? [ 1096.677468][ T7550] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1096.762198][ T5421] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1096.771823][ T5421] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1096.789951][ T5421] usb 8-1: Manufacturer: syz [ 1096.845291][ T5421] usb 8-1: config 0 descriptor?? [ 1097.282053][ T5421] rc_core: IR keymap rc-hauppauge not found [ 1097.288623][ T5421] Registered IR keymap rc-empty [ 1097.294123][ T5421] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1097.360604][ T5421] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1097.381803][ T5421] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1097.397112][ T5421] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input13 [ 1097.429016][ T5421] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1097.451275][ T5421] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1097.504171][ T5421] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1097.514610][ T7550] gspca_sonixj: reg_r err -32 [ 1097.520592][ T7550] sonixj 10-1:0.0: probe with driver sonixj failed with error -32 [ 1097.556688][ T5421] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1097.590725][ T5421] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1097.719961][ T5421] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1097.785294][ T5421] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1097.839671][ T5421] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1097.874803][ T5421] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1097.903193][ T5421] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1097.999213][T10520] usb 4-1: USB disconnect, device number 19 [ 1098.100644][ T5421] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 1098.108861][ T5421] mceusb 8-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 1098.293360][ T5421] usb 8-1: USB disconnect, device number 17 [ 1099.317302][ T8775] usb 10-1: USB disconnect, device number 17 [ 1101.409461][ T5854] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1101.419040][ T5421] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1101.611826][ T5854] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1101.621083][ T5854] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1101.628833][ T5421] usb 4-1: Using ep0 maxpacket: 16 [ 1101.631600][ T5854] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1101.646045][ T5854] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1101.657520][ T5854] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1101.679256][ T8775] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1101.681716][ T5421] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.701935][ T5421] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1101.796403][ T5854] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1101.809731][ T5854] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1101.817979][ T5854] usb 8-1: Product: syz [ 1101.818309][ T5421] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1101.824055][ T5854] usb 8-1: Manufacturer: syz [ 1101.831610][ T5421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.844606][ T5421] usb 4-1: Product: syz [ 1101.849082][ T5421] usb 4-1: Manufacturer: syz [ 1101.853898][ T5421] usb 4-1: SerialNumber: syz [ 1101.879787][ T5854] cdc_wdm 8-1:1.0: skipping garbage [ 1101.885224][ T5854] cdc_wdm 8-1:1.0: skipping garbage [ 1101.931203][ T8775] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1101.940528][ T8775] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1101.951334][ T8775] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1101.960747][ T8775] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1101.972208][ T8775] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1101.998929][T10520] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1102.000695][ T5854] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1102.017856][ T5854] cdc_wdm 8-1:1.0: Unknown control protocol [ 1102.214228][T10520] usb 3-1: Using ep0 maxpacket: 8 [ 1102.221842][ T8775] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1102.231769][ T8775] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1102.240355][ T8775] usb 10-1: Product: syz [ 1102.245010][ T8775] usb 10-1: Manufacturer: syz [ 1102.260350][T10520] usb 3-1: config 162 has an invalid interface number: 80 but max is 0 [ 1102.269345][T10520] usb 3-1: config 162 has no interface number 0 [ 1102.275927][T10520] usb 3-1: config 162 interface 80 has no altsetting 0 [ 1102.385167][ T5421] usb 4-1: USB disconnect, device number 20 [ 1102.421309][T11587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.432134][T11587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.432388][T10520] usb 3-1: New USB device found, idVendor=03a8, idProduct=5732, bcdDevice=5e.12 [ 1102.449774][T10520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.458009][T10520] usb 3-1: Product: syz [ 1102.463084][T10520] usb 3-1: Manufacturer: syz [ 1102.467897][T10520] usb 3-1: SerialNumber: syz [ 1102.533817][ T8775] cdc_wdm 10-1:1.0: skipping garbage [ 1102.542071][ T8775] cdc_wdm 10-1:1.0: skipping garbage [ 1102.628383][ T8775] cdc_wdm 10-1:1.0: cdc-wdm1: USB WDM device [ 1102.635019][ T8775] cdc_wdm 10-1:1.0: Unknown control protocol [ 1102.837360][T11573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.848232][T11573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.915286][T11590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.925509][T11590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.064322][T10520] usb 3-1: USB disconnect, device number 17 [ 1103.486800][T11594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.500030][T11594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.639415][T10520] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1104.720184][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1104.727046][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1104.738490][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1104.745335][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1104.758892][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1104.765742][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1104.776238][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1104.783089][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1104.791521][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1104.798357][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1104.805665][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1104.812491][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1104.828809][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1104.835648][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1104.842624][ T8775] usb 8-1: USB disconnect, device number 18 [ 1104.848830][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1104.848934][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1104.849032][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1104.855563][T10520] usb 3-1: Using ep0 maxpacket: 16 [ 1105.017020][T10520] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1105.026772][T10520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.060660][T11605] 9pnet_virtio: no channels available for device syz [ 1105.071392][T10520] usb 3-1: config 0 descriptor?? [ 1105.164299][T10520] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1105.515042][T10520] gspca_sonixj: reg_r err -32 [ 1105.520310][T10520] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 1105.574488][ T8775] usb 10-1: USB disconnect, device number 18 [ 1108.279763][T10520] usb 3-1: USB disconnect, device number 18 [ 1108.777350][ T8775] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1108.792809][ T4625] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.964663][ T4625] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.992829][ T8775] usb 8-1: Using ep0 maxpacket: 16 [ 1109.072063][ T8775] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.072186][ T8775] usb 8-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1109.083812][ T8775] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1109.083951][ T8775] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.084070][ T8775] usb 8-1: Product: syz [ 1109.084166][ T8775] usb 8-1: Manufacturer: syz [ 1109.084263][ T8775] usb 8-1: SerialNumber: syz [ 1109.140038][ T5854] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1109.160654][ T4625] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.299401][ T5854] usb 7-1: Using ep0 maxpacket: 8 [ 1109.317459][ T5854] usb 7-1: config 162 has an invalid interface number: 80 but max is 0 [ 1109.344836][ T4625] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.347159][ T5854] usb 7-1: config 162 has no interface number 0 [ 1109.393427][ T5854] usb 7-1: config 162 interface 80 has no altsetting 0 [ 1109.532428][ T5854] usb 7-1: New USB device found, idVendor=03a8, idProduct=5732, bcdDevice=5e.12 [ 1109.532574][ T5854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.532701][ T5854] usb 7-1: Product: syz [ 1109.532799][ T5854] usb 7-1: Manufacturer: syz [ 1109.532894][ T5854] usb 7-1: SerialNumber: syz [ 1109.559063][T10520] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1109.718817][ T1959] usb 8-1: USB disconnect, device number 19 [ 1109.794673][T10520] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1109.794807][T10520] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1109.794923][T10520] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1109.795065][T10520] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1109.795219][T10520] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1109.827334][T10520] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1109.827490][T10520] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1109.827611][T10520] usb 4-1: Product: syz [ 1109.827706][T10520] usb 4-1: Manufacturer: syz [ 1109.886747][T10520] cdc_wdm 4-1:1.0: skipping garbage [ 1109.886837][T10520] cdc_wdm 4-1:1.0: skipping garbage [ 1109.920024][T10520] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1109.920124][T10520] cdc_wdm 4-1:1.0: Unknown control protocol [ 1109.980679][ T5854] usb 7-1: USB disconnect, device number 11 [ 1110.135458][T11640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.136760][T11640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.189421][ T4625] bridge_slave_1: left allmulticast mode [ 1110.189522][ T4625] bridge_slave_1: left promiscuous mode [ 1110.190492][ T4625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.231500][ T4625] bridge_slave_0: left allmulticast mode [ 1110.231604][ T4625] bridge_slave_0: left promiscuous mode [ 1110.232448][ T4625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.126554][ T4625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1111.156534][ T4625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1111.162116][ T4625] bond0 (unregistering): Released all slaves [ 1111.835899][ T4625] hsr_slave_0: left promiscuous mode [ 1111.847682][ T4625] hsr_slave_1: left promiscuous mode [ 1111.855878][ T4625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.863752][ T4625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.900390][ T4625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1111.908068][ T4625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.988849][ T4625] veth1_macvtap: left promiscuous mode [ 1111.994689][ T4625] veth0_macvtap: left promiscuous mode [ 1112.001017][ T4625] veth1_vlan: left promiscuous mode [ 1112.006594][ T4625] veth0_vlan: left promiscuous mode [ 1112.639415][T10520] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1112.743249][ T8775] usb 4-1: USB disconnect, device number 21 [ 1112.877529][T10520] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1112.886600][T10520] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1112.897270][T10520] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1112.906593][T10520] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1112.917977][T10520] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1113.149117][T10520] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1113.158624][T10520] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1113.170642][T10520] usb 3-1: Product: syz [ 1113.175035][T10520] usb 3-1: Manufacturer: syz [ 1113.340273][T10520] cdc_wdm 3-1:1.0: skipping garbage [ 1113.345813][T10520] cdc_wdm 3-1:1.0: skipping garbage [ 1113.466442][T10520] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1113.480110][T10520] cdc_wdm 3-1:1.0: Unknown control protocol [ 1113.638945][T10458] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1113.681047][T10458] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1113.681804][T11659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.697653][T10458] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1113.704499][T10458] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1113.706722][T11659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.721792][T10458] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1113.910406][ T4625] team0 (unregistering): Port device team_slave_1 removed [ 1114.001395][ T4625] team0 (unregistering): Port device team_slave_0 removed [ 1114.175729][T11673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.185871][T11673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.431356][T11675] 9pnet_virtio: no channels available for device syz [ 1114.981907][ T4625] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.183924][ T4625] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.430591][ T4625] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.592692][ T4625] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.819568][T10458] Bluetooth: hci3: command tx timeout [ 1116.138671][T10520] usb 3-1: USB disconnect, device number 19 [ 1116.483293][T11669] chnl_net:caif_netlink_parms(): no params data found [ 1116.532767][ T4625] bridge_slave_1: left allmulticast mode [ 1116.539212][ T4625] bridge_slave_1: left promiscuous mode [ 1116.549129][ T4625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.665366][ T4625] bridge_slave_0: left allmulticast mode [ 1116.671795][ T4625] bridge_slave_0: left promiscuous mode [ 1116.678270][ T4625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.247650][ T4625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1117.287949][ T4625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1117.346199][ T4625] bond0 (unregistering): Released all slaves [ 1117.903490][T10458] Bluetooth: hci3: command tx timeout [ 1118.066422][ T4625] hsr_slave_0: left promiscuous mode [ 1118.082345][ T4625] hsr_slave_1: left promiscuous mode [ 1118.090203][ T4625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1118.097887][ T4625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1118.124822][ T4625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1118.132764][ T4625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.162663][ T4625] veth1_macvtap: left promiscuous mode [ 1118.168402][ T4625] veth0_macvtap: left promiscuous mode [ 1118.174812][ T4625] veth1_vlan: left promiscuous mode [ 1118.180652][ T4625] veth0_vlan: left promiscuous mode [ 1118.848958][ T5854] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1119.120559][ T5854] usb 7-1: Using ep0 maxpacket: 16 [ 1119.142922][ T5854] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.153625][ T5854] usb 7-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1119.363704][ T5854] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1119.373954][ T5854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.382610][ T5854] usb 7-1: Product: syz [ 1119.386998][ T5854] usb 7-1: Manufacturer: syz [ 1119.391961][ T5854] usb 7-1: SerialNumber: syz [ 1119.426562][ T4625] team0 (unregistering): Port device team_slave_1 removed [ 1119.470344][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1119.481735][ T4625] team0 (unregistering): Port device team_slave_0 removed [ 1119.559787][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1119.734829][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1119.748652][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1119.760164][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1119.799901][T10520] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1119.856539][ T5854] usb 7-1: USB disconnect, device number 12 [ 1120.032654][T10458] Bluetooth: hci3: command tx timeout [ 1120.139830][T10520] usb 4-1: Using ep0 maxpacket: 8 [ 1120.224372][T10520] usb 4-1: config 162 has an invalid interface number: 80 but max is 0 [ 1120.235368][T10520] usb 4-1: config 162 has no interface number 0 [ 1120.246054][T10520] usb 4-1: config 162 interface 80 has no altsetting 0 [ 1120.320895][T10520] usb 4-1: New USB device found, idVendor=03a8, idProduct=5732, bcdDevice=5e.12 [ 1120.330361][T10520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.341969][T10520] usb 4-1: Product: syz [ 1120.347542][T10520] usb 4-1: Manufacturer: syz [ 1120.352451][T10520] usb 4-1: SerialNumber: syz [ 1120.819083][T11669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.826927][T11669] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.835054][T11669] bridge_slave_0: entered allmulticast mode [ 1120.849546][T11669] bridge_slave_0: entered promiscuous mode [ 1120.870072][T11669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.877886][T11669] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.885981][T11669] bridge_slave_1: entered allmulticast mode [ 1120.895559][T11669] bridge_slave_1: entered promiscuous mode [ 1120.924041][T10520] usb 4-1: USB disconnect, device number 22 [ 1121.451268][T11718] loop6: detected capacity change from 0 to 512 [ 1121.576088][T11669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.601129][T11718] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1121.686362][T11718] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.1034: corrupted in-inode xattr: invalid ea_ino [ 1121.739950][T11669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.750726][T11696] chnl_net:caif_netlink_parms(): no params data found [ 1121.792068][T11718] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.1034: couldn't read orphan inode 15 (err -117) [ 1121.841775][T11718] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1121.910516][T10458] Bluetooth: hci0: command tx timeout [ 1122.058926][T10458] Bluetooth: hci3: command tx timeout [ 1122.234673][T11718] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1122.271830][T11728] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1122.367484][T11669] team0: Port device team_slave_0 added [ 1122.429169][T11669] team0: Port device team_slave_1 added [ 1122.811827][T11305] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.851043][T11669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.858345][T11669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1122.886388][T11669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.113411][T11669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.121535][T11669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.148066][T11669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.471529][T11747] cgroup: fork rejected by pids controller in /syz2 [ 1123.576177][ T5854] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1123.749093][T11669] hsr_slave_0: entered promiscuous mode [ 1123.759187][T11669] hsr_slave_1: entered promiscuous mode [ 1123.767646][T11669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1123.775591][T11669] Cannot create hsr debugfs directory [ 1123.782686][ T5854] usb 7-1: Using ep0 maxpacket: 32 [ 1123.827696][ T5854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.839409][ T5854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.849609][ T5854] usb 7-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 1123.859029][ T5854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.961006][ T5854] usb 7-1: config 0 descriptor?? [ 1123.989062][T10458] Bluetooth: hci0: command tx timeout [ 1124.110381][T11696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.118030][T11696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.129603][T11696] bridge_slave_0: entered allmulticast mode [ 1124.191872][T11696] bridge_slave_0: entered promiscuous mode [ 1124.246635][ T14] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.349964][T11696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.357608][T11696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.365484][T11696] bridge_slave_1: entered allmulticast mode [ 1124.374731][T11696] bridge_slave_1: entered promiscuous mode [ 1124.422665][ T5854] usbhid 7-1:0.0: can't add hid device: -71 [ 1124.432694][ T5854] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1124.468360][ T14] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.528862][ T5854] usb 7-1: USB disconnect, device number 13 [ 1124.780049][ T14] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.133288][ T14] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.234435][T11696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1125.286366][T11696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1125.895795][T11696] team0: Port device team_slave_0 added [ 1125.984817][T11696] team0: Port device team_slave_1 added [ 1126.020630][ T14] bridge_slave_1: left allmulticast mode [ 1126.026544][ T14] bridge_slave_1: left promiscuous mode [ 1126.033679][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.071299][T10458] Bluetooth: hci0: command tx timeout [ 1126.074384][ T14] bridge_slave_0: left allmulticast mode [ 1126.083231][ T14] bridge_slave_0: left promiscuous mode [ 1126.089931][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.484561][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1126.525485][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1126.553561][ T14] bond0 (unregistering): Released all slaves [ 1126.892730][T11696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1126.900066][T11696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1126.927081][T11696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1127.093561][T11696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1127.101472][T11696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1127.128025][T11696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1127.529658][ T14] hsr_slave_0: left promiscuous mode [ 1127.560612][ T14] hsr_slave_1: left promiscuous mode [ 1127.568389][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.576557][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.620972][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1127.628782][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1127.691010][ T14] veth1_macvtap: left promiscuous mode [ 1127.696767][ T14] veth0_macvtap: left promiscuous mode [ 1127.704198][ T14] veth1_vlan: left promiscuous mode [ 1127.711757][ T14] veth0_vlan: left promiscuous mode [ 1127.754796][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1127.789584][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1127.820950][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1127.833957][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1127.845059][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1128.169642][ T5806] Bluetooth: hci0: command tx timeout [ 1128.360571][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1128.420239][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1128.748885][ T5854] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1128.956583][ T5854] usb 7-1: Using ep0 maxpacket: 16 [ 1129.008088][ T5854] usb 7-1: config 8 has an invalid interface number: 206 but max is 0 [ 1129.016752][ T5854] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.027355][ T5854] usb 7-1: config 8 has no interface number 0 [ 1129.033786][ T5854] usb 7-1: config 8 interface 206 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1129.049451][ T5854] usb 7-1: config 8 interface 206 has no altsetting 0 [ 1129.161042][ T5854] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1129.170562][ T5854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.178997][ T5854] usb 7-1: Product: syz [ 1129.183380][ T5854] usb 7-1: Manufacturer: syz [ 1129.188194][ T5854] usb 7-1: SerialNumber: syz [ 1129.247696][T10458] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1129.259196][T10458] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1129.276230][T10458] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1129.360517][T10458] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1129.388286][T10458] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1129.433441][T11696] hsr_slave_0: entered promiscuous mode [ 1129.443380][T11696] hsr_slave_1: entered promiscuous mode [ 1129.454434][T11696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1129.462274][T11696] Cannot create hsr debugfs directory [ 1129.520384][ T5854] garmin_gps 7-1:8.206: Garmin GPS usb/tty converter detected [ 1129.531279][ T5854] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1129.538900][ T5854] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1129.781098][T10517] usb 7-1: USB disconnect, device number 14 [ 1129.790823][T10517] garmin_gps 7-1:8.206: device disconnected [ 1129.957035][ T14] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.999387][T10458] Bluetooth: hci1: command tx timeout [ 1130.260545][ T14] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.328770][T11669] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1130.402322][T11669] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1130.523806][ T14] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.666574][T11669] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1130.770258][ T14] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.842572][T11669] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1131.058735][ T5854] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1131.259562][ T5854] usb 7-1: Using ep0 maxpacket: 8 [ 1131.327417][ T5854] usb 7-1: config 162 has an invalid interface number: 80 but max is 0 [ 1131.336135][ T5854] usb 7-1: config 162 has no interface number 0 [ 1131.343102][ T5854] usb 7-1: config 162 interface 80 has no altsetting 0 [ 1131.384180][ T5854] usb 7-1: New USB device found, idVendor=03a8, idProduct=5732, bcdDevice=5e.12 [ 1131.395446][ T5854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.404431][ T5854] usb 7-1: Product: syz [ 1131.408933][ T5854] usb 7-1: Manufacturer: syz [ 1131.413750][ T5854] usb 7-1: SerialNumber: syz [ 1131.529288][T10458] Bluetooth: hci4: command tx timeout [ 1131.766770][ T5854] usb 7-1: USB disconnect, device number 15 [ 1131.890890][ T14] bridge_slave_1: left allmulticast mode [ 1131.896890][ T14] bridge_slave_1: left promiscuous mode [ 1131.907101][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.967949][ T14] bridge_slave_0: left allmulticast mode [ 1131.974225][ T14] bridge_slave_0: left promiscuous mode [ 1131.980919][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.072674][T10458] Bluetooth: hci1: command tx timeout [ 1132.474562][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1132.527516][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1132.573986][ T14] bond0 (unregistering): Released all slaves [ 1132.841711][T11769] chnl_net:caif_netlink_parms(): no params data found [ 1133.393783][T11780] chnl_net:caif_netlink_parms(): no params data found [ 1133.531608][ T14] hsr_slave_0: left promiscuous mode [ 1133.550176][ T14] hsr_slave_1: left promiscuous mode [ 1133.557968][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.566116][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.578820][T10458] Bluetooth: hci4: command tx timeout [ 1133.616826][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1133.625975][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.707492][ T14] veth1_macvtap: left promiscuous mode [ 1133.715570][ T14] veth0_macvtap: left promiscuous mode [ 1133.721777][ T14] veth1_vlan: left promiscuous mode [ 1133.727328][ T14] veth0_vlan: left promiscuous mode [ 1134.138948][T10458] Bluetooth: hci1: command tx timeout [ 1134.434452][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1134.459629][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1135.176143][T11696] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1135.301778][T11696] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1135.392653][T11696] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1135.469970][T11696] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1135.568306][T11669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.677654][T10458] Bluetooth: hci4: command tx timeout [ 1135.746592][T11769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.754250][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.762098][T11769] bridge_slave_0: entered allmulticast mode [ 1135.771483][T11769] bridge_slave_0: entered promiscuous mode [ 1135.881100][T11769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.890144][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.899397][T11769] bridge_slave_1: entered allmulticast mode [ 1135.908830][T11769] bridge_slave_1: entered promiscuous mode [ 1135.947312][T11669] 8021q: adding VLAN 0 to HW filter on device team0 [ 1136.004799][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.012456][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.190895][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.198571][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.279692][T10458] Bluetooth: hci1: command tx timeout [ 1136.536919][T11769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.578382][T11780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.586609][T11780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.594407][T11780] bridge_slave_0: entered allmulticast mode [ 1136.603847][T11780] bridge_slave_0: entered promiscuous mode [ 1136.719447][T11769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.765687][T11780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.773489][T11780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.781429][T11780] bridge_slave_1: entered allmulticast mode [ 1136.790721][T11780] bridge_slave_1: entered promiscuous mode [ 1137.203173][T11780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1137.237378][T11769] team0: Port device team_slave_0 added [ 1137.363749][ T3740] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.423546][T11769] team0: Port device team_slave_1 added [ 1137.442145][T11780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1137.607924][ T3740] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.741129][T10458] Bluetooth: hci4: command tx timeout [ 1137.952617][ T3740] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.023885][T11780] team0: Port device team_slave_0 added [ 1138.037093][T11769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1138.046087][T11769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1138.073589][T11769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1138.119699][T11780] team0: Port device team_slave_1 added [ 1138.160101][ T3740] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.195920][T11769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1138.204629][T11769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1138.232303][T11769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1138.502506][T11780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1138.511140][T11780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1138.537717][T11780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1138.812301][T11769] hsr_slave_0: entered promiscuous mode [ 1138.824978][T11769] hsr_slave_1: entered promiscuous mode [ 1138.833588][T11769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1138.841526][T11769] Cannot create hsr debugfs directory [ 1138.851839][T11780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1138.859687][T11780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1138.887258][T11780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1138.974192][T11696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1139.016692][T11669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1139.433361][ T3740] bridge_slave_1: left allmulticast mode [ 1139.439446][ T3740] bridge_slave_1: left promiscuous mode [ 1139.445968][ T3740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.513267][ T3740] bridge_slave_0: left allmulticast mode [ 1139.519955][ T3740] bridge_slave_0: left promiscuous mode [ 1139.526478][ T3740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.010799][ T3740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1140.027975][ T3740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1140.067086][ T3740] bond0 (unregistering): Released all slaves [ 1140.243363][T11780] hsr_slave_0: entered promiscuous mode [ 1140.253298][T11780] hsr_slave_1: entered promiscuous mode [ 1140.261878][T11780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1140.269746][T11780] Cannot create hsr debugfs directory [ 1140.332898][T11696] 8021q: adding VLAN 0 to HW filter on device team0 [ 1140.523675][T10433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.531348][T10433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1140.606546][T10433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.614190][T10433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1140.975021][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1140.981776][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1140.984608][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1140.989122][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1141.000295][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1141.014860][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1141.030378][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1141.360481][ T3740] hsr_slave_0: left promiscuous mode [ 1141.411287][ T3740] hsr_slave_1: left promiscuous mode [ 1141.419179][ T3740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1141.426876][ T3740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1141.471021][ T3740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1141.480176][ T3740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1141.561641][ T3740] veth1_macvtap: left promiscuous mode [ 1141.567398][ T3740] veth0_macvtap: left promiscuous mode [ 1141.574683][ T3740] veth1_vlan: left promiscuous mode [ 1141.580795][ T3740] veth0_vlan: left promiscuous mode [ 1142.280993][ T3740] team0 (unregistering): Port device team_slave_1 removed [ 1142.306228][ T3740] team0 (unregistering): Port device team_slave_0 removed [ 1143.146841][ T5806] Bluetooth: hci2: command tx timeout [ 1143.723758][T11669] veth0_vlan: entered promiscuous mode [ 1143.805439][T11669] veth1_vlan: entered promiscuous mode [ 1144.170535][T11769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1144.223621][T11769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1144.317674][T11769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1144.449916][T11769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1144.512214][T11669] veth0_macvtap: entered promiscuous mode [ 1144.581589][T11870] chnl_net:caif_netlink_parms(): no params data found [ 1144.659379][T11669] veth1_macvtap: entered promiscuous mode [ 1145.000971][T11669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1145.083815][T11669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.140040][T11780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1145.180902][T10458] Bluetooth: hci2: command tx timeout [ 1145.216366][T11780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1145.242397][T11780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1145.300415][T11669] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.309819][T11669] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.319026][T11669] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.328014][T11669] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.356398][T11780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1145.492719][T11696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1146.014087][T11769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1146.364082][T11870] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.371885][T11870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.382053][T11870] bridge_slave_0: entered allmulticast mode [ 1146.391473][T11870] bridge_slave_0: entered promiscuous mode [ 1146.421364][T11769] 8021q: adding VLAN 0 to HW filter on device team0 [ 1146.453613][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.461208][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.492574][T11870] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.500184][T11870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.507849][T11870] bridge_slave_1: entered allmulticast mode [ 1146.517378][T11870] bridge_slave_1: entered promiscuous mode [ 1146.644818][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.652422][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.948401][T11870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1147.034377][T11870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1147.265522][T10458] Bluetooth: hci2: command tx timeout [ 1147.287274][T11780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.548163][T11870] team0: Port device team_slave_0 added [ 1147.630175][T11870] team0: Port device team_slave_1 added [ 1147.651436][T11780] 8021q: adding VLAN 0 to HW filter on device team0 [ 1147.966309][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.973953][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1148.042817][T11870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1148.050163][T11870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1148.078000][T11870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1148.241477][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.249120][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.464346][T11870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1148.472816][T11870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1148.500329][T11870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1148.757418][T11696] veth0_vlan: entered promiscuous mode [ 1149.032547][T11696] veth1_vlan: entered promiscuous mode [ 1149.263905][T11870] hsr_slave_0: entered promiscuous mode [ 1149.273812][T11870] hsr_slave_1: entered promiscuous mode [ 1149.282624][T11870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1149.290477][T11870] Cannot create hsr debugfs directory [ 1149.340335][T10458] Bluetooth: hci2: command tx timeout [ 1149.455982][T11769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1149.617080][T11696] veth0_macvtap: entered promiscuous mode [ 1149.697845][T11696] veth1_macvtap: entered promiscuous mode [ 1150.074627][T11696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1150.208779][T11696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1150.350247][T11696] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.361626][T11696] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.370786][T11696] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.379942][T11696] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.423886][T11769] veth0_vlan: entered promiscuous mode [ 1150.597228][T11769] veth1_vlan: entered promiscuous mode [ 1150.689978][T11780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1151.397318][T11769] veth0_macvtap: entered promiscuous mode [ 1151.551383][T11769] veth1_macvtap: entered promiscuous mode [ 1151.705174][T11780] veth0_vlan: entered promiscuous mode [ 1151.866552][T11769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.924580][T11780] veth1_vlan: entered promiscuous mode [ 1151.945015][T11870] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1152.051987][T11769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1152.074507][T11870] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1152.206805][T10433] bridge_slave_1: left allmulticast mode [ 1152.213352][T10433] bridge_slave_1: left promiscuous mode [ 1152.221344][T10433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.266773][T10433] bridge_slave_0: left allmulticast mode [ 1152.272991][T10433] bridge_slave_0: left promiscuous mode [ 1152.279814][T10433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.577213][T10433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1152.592498][T10433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1152.604650][T10433] bond0 (unregistering): Released all slaves [ 1152.644346][T11870] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1152.704390][T11870] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1152.778192][T11769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.787682][T11769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.798142][T11769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.808012][T11769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.923985][T11780] veth0_macvtap: entered promiscuous mode [ 1152.964297][T11780] veth1_macvtap: entered promiscuous mode [ 1153.310778][T11780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1153.481531][T10433] hsr_slave_0: left promiscuous mode [ 1153.509589][T10433] hsr_slave_1: left promiscuous mode [ 1153.517159][T10433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1153.529460][T10433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1153.754836][T10433] team0 (unregistering): Port device team_slave_1 removed [ 1153.788690][T10433] team0 (unregistering): Port device team_slave_0 removed [ 1154.143560][T11780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1154.249242][T11780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.258281][T11780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.267459][T11780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.276525][T11780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.485189][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.493636][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.806793][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.815799][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.267720][T11870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1156.320111][T11870] 8021q: adding VLAN 0 to HW filter on device team0 [ 1156.364040][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.371649][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.387303][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.394974][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.547582][T11870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1156.558335][T11870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1158.287939][T11870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1158.618768][T10638] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1158.661292][ T3740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.669514][ T3740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.811493][T10638] usb 10-1: Using ep0 maxpacket: 32 [ 1158.837521][T10638] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.850166][T10638] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.865937][T10638] usb 10-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 1158.877246][T10638] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.962997][T10638] usb 10-1: config 0 descriptor?? [ 1158.979357][ T3773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.987400][ T3773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.471611][T10638] usbhid 10-1:0.0: can't add hid device: -71 [ 1159.478306][T10638] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1159.571684][T10638] usb 10-1: USB disconnect, device number 19 [ 1160.002000][T12030] loop7: detected capacity change from 0 to 512 [ 1160.202125][T12030] EXT4-fs (loop7): too many log groups per flexible block group [ 1160.211623][T12030] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 1160.247338][T12030] EXT4-fs (loop7): mount failed [ 1161.163503][T12047] binder: 12045:12047 ioctl c0306201 0 returned -14 [ 1161.193514][T10520] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1161.211801][T11870] veth0_vlan: entered promiscuous mode [ 1161.325291][T11870] veth1_vlan: entered promiscuous mode [ 1161.410206][T10520] usb 10-1: Using ep0 maxpacket: 16 [ 1161.433389][T10520] usb 10-1: config 8 has an invalid interface number: 206 but max is 0 [ 1161.442046][T10520] usb 10-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.454400][T10520] usb 10-1: config 8 has no interface number 0 [ 1161.461361][T10520] usb 10-1: config 8 interface 206 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1161.474922][T10520] usb 10-1: config 8 interface 206 has no altsetting 0 [ 1161.609231][T10520] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1161.619600][T10520] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.627934][T10520] usb 10-1: Product: syz [ 1161.633303][T10520] usb 10-1: Manufacturer: syz [ 1161.638215][T10520] usb 10-1: SerialNumber: syz [ 1161.771564][T11870] veth0_macvtap: entered promiscuous mode [ 1161.832064][T11870] veth1_macvtap: entered promiscuous mode [ 1161.978099][T11870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1162.075185][T10520] garmin_gps 10-1:8.206: Garmin GPS usb/tty converter detected [ 1162.083273][T11870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1162.099098][T10520] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1162.106578][T10520] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1162.237940][T11870] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.248391][T11870] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.258301][T11870] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.267502][T11870] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.329838][T10520] usb 10-1: USB disconnect, device number 20 [ 1162.338820][T10520] garmin_gps 10-1:8.206: device disconnected [ 1162.436520][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.444863][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.840874][ T3631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.849894][ T3631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1163.577534][ T3631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1163.585921][ T3631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1163.759576][ T30] audit: type=1326 audit(1751523340.547:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1163.782149][ T30] audit: type=1326 audit(1751523340.587:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1163.804821][ T30] audit: type=1326 audit(1751523340.587:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1164.073831][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.082847][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.175450][ T30] audit: type=1326 audit(1751523340.667:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1164.198292][ T30] audit: type=1326 audit(1751523340.667:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1164.224015][ T30] audit: type=1326 audit(1751523340.667:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1164.248921][ T30] audit: type=1326 audit(1751523340.667:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1164.272786][ T30] audit: type=1326 audit(1751523340.667:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1164.295864][ T30] audit: type=1326 audit(1751523340.677:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1164.319481][ T30] audit: type=1326 audit(1751523340.677:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1166.219428][ T3473] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.423081][ T3473] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.612948][ T3473] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.777700][ T3473] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.829029][T12104] binder: 12103:12104 ioctl c0306201 0 returned -14 [ 1166.928749][T10638] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1167.131712][T10638] usb 8-1: Using ep0 maxpacket: 32 [ 1167.171059][T10638] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.192451][T10638] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1167.204033][T10638] usb 8-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 1167.213456][T10638] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.393955][T10638] usb 8-1: config 0 descriptor?? [ 1167.429975][ T3473] bridge_slave_1: left allmulticast mode [ 1167.435991][ T3473] bridge_slave_1: left promiscuous mode [ 1167.445252][ T3473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.585332][ T3473] bridge_slave_0: left allmulticast mode [ 1167.591515][ T3473] bridge_slave_0: left promiscuous mode [ 1167.598626][ T3473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.855036][T10638] usbhid 8-1:0.0: can't add hid device: -71 [ 1167.863152][T10638] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1167.940704][T10638] usb 8-1: USB disconnect, device number 20 [ 1168.530092][ T3473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1168.611352][ T3473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1168.654102][ T3473] bond0 (unregistering): Released all slaves [ 1169.439877][ T3473] hsr_slave_0: left promiscuous mode [ 1169.460146][ T3473] hsr_slave_1: left promiscuous mode [ 1169.468014][ T3473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1169.476132][ T3473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1169.563506][ T3473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1169.571420][ T3473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1169.669343][ T3473] veth1_macvtap: left promiscuous mode [ 1169.675133][ T3473] veth0_macvtap: left promiscuous mode [ 1169.681788][ T3473] veth1_vlan: left promiscuous mode [ 1169.687367][ T3473] veth0_vlan: left promiscuous mode [ 1170.247222][T12131] usb usb8: usbfs: process 12131 (syz.7.1068) did not claim interface 0 before use [ 1170.458932][ T5854] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1170.829197][ T5854] usb 3-1: Using ep0 maxpacket: 16 [ 1170.885061][ T5854] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 1170.893897][ T5854] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.904786][ T5854] usb 3-1: config 8 has no interface number 0 [ 1170.911219][ T5854] usb 3-1: config 8 interface 206 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1170.928269][ T5854] usb 3-1: config 8 interface 206 has no altsetting 0 [ 1171.064613][ T3473] team0 (unregistering): Port device team_slave_1 removed [ 1171.089215][ T5854] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1171.099310][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.107556][ T5854] usb 3-1: Product: syz [ 1171.113038][ T5854] usb 3-1: Manufacturer: syz [ 1171.117863][ T5854] usb 3-1: SerialNumber: syz [ 1171.139666][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1171.158182][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1171.173274][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1171.190607][ T3473] team0 (unregistering): Port device team_slave_0 removed [ 1171.357422][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1171.373079][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1171.568071][ T5854] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 1171.578743][ T5854] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1171.586248][ T5854] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1171.860053][ T5854] usb 3-1: USB disconnect, device number 20 [ 1171.870994][ T5854] garmin_gps 3-1:8.206: device disconnected [ 1172.983158][T10433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1172.991486][T10433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.345296][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.354285][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.419048][ T5806] Bluetooth: hci1: command tx timeout [ 1173.539134][T12137] chnl_net:caif_netlink_parms(): no params data found [ 1174.460798][ T3473] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.724340][ T3473] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.943489][ T3473] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.123583][ T5854] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1175.140766][ T3473] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.288832][ T5854] usb 8-1: Using ep0 maxpacket: 32 [ 1175.302435][ T5854] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.314027][ T5854] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1175.330129][ T5854] usb 8-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 1175.339633][ T5854] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.392738][ T5854] usb 8-1: config 0 descriptor?? [ 1175.407605][T12137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.416185][T12137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.431100][T12137] bridge_slave_0: entered allmulticast mode [ 1175.440279][T12137] bridge_slave_0: entered promiscuous mode [ 1175.508980][ T5806] Bluetooth: hci1: command tx timeout [ 1175.537010][T12137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.547193][T12137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.555480][T12137] bridge_slave_1: entered allmulticast mode [ 1175.566516][T12137] bridge_slave_1: entered promiscuous mode [ 1175.869404][ T5854] usbhid 8-1:0.0: can't add hid device: -71 [ 1175.876012][ T5854] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1175.926848][ T5854] usb 8-1: USB disconnect, device number 21 [ 1176.068229][T12137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.124640][ T3473] bridge_slave_1: left allmulticast mode [ 1176.130635][ T3473] bridge_slave_1: left promiscuous mode [ 1176.137240][ T3473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.218081][ T3473] bridge_slave_0: left allmulticast mode [ 1176.224222][ T3473] bridge_slave_0: left promiscuous mode [ 1176.231120][ T3473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.130180][ T3473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1177.192679][ T3473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1177.213788][ T3473] bond0 (unregistering): Released all slaves [ 1177.317707][T12137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1177.580616][ T5806] Bluetooth: hci1: command tx timeout [ 1177.835875][T12137] team0: Port device team_slave_0 added [ 1178.032703][T12137] team0: Port device team_slave_1 added [ 1178.150496][ T3473] hsr_slave_0: left promiscuous mode [ 1178.174804][ T3473] hsr_slave_1: left promiscuous mode [ 1178.183300][ T3473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1178.195100][ T3473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1178.242353][ T3473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1178.248973][T10458] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1178.250126][ T3473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1178.280934][T10458] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1178.296374][T10458] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1178.311848][T10458] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1178.323450][T10458] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1178.420530][ T3473] veth1_macvtap: left promiscuous mode [ 1178.426374][ T3473] veth0_macvtap: left promiscuous mode [ 1178.432770][ T3473] veth1_vlan: left promiscuous mode [ 1178.438335][ T3473] veth0_vlan: left promiscuous mode [ 1178.930686][T10520] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1179.121702][ T3473] team0 (unregistering): Port device team_slave_1 removed [ 1179.174542][ T3473] team0 (unregistering): Port device team_slave_0 removed [ 1179.238922][T10520] usb 8-1: Using ep0 maxpacket: 32 [ 1179.250932][T10520] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1179.262808][T10520] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1179.274083][T10520] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1179.284277][T10520] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1179.293727][T10520] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.431537][T10520] usb 8-1: config 0 descriptor?? [ 1179.459967][T10520] hub 8-1:0.0: USB hub found [ 1179.681511][ T5806] Bluetooth: hci1: command tx timeout [ 1179.741310][T12183] tipc: Started in network mode [ 1179.746468][T12183] tipc: Node identity f6695c4e34cf, cluster identity 4711 [ 1179.755040][T12183] tipc: Enabled bearer , priority 0 [ 1179.820860][T12191] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1084'. [ 1179.937332][T12184] syzkaller0: entered promiscuous mode [ 1179.943220][T12184] syzkaller0: entered allmulticast mode [ 1179.951951][T12184] tipc: Resetting bearer [ 1179.958917][T10520] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 1179.999407][ T4625] tipc: Resetting bearer [ 1180.030402][T10520] usbhid 8-1:0.0: can't add hid device: -71 [ 1180.039220][T10520] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1180.098130][T10520] usb 8-1: USB disconnect, device number 22 [ 1180.178961][T12193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.188659][T12193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.392583][T12193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1180.415958][T12193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1180.468900][ T5806] Bluetooth: hci4: command tx timeout [ 1180.637979][T12193] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.651999][T12193] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.664429][T12193] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.673775][T12193] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.842062][T12182] tipc: Resetting bearer [ 1180.951551][T12182] tipc: Disabling bearer [ 1180.974847][T12137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.983961][T12137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.011468][T12137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.271968][T12137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1181.280182][T12137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.306700][T12137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.674755][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1086'. [ 1181.871371][T12201] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.925960][T12201] bridge_slave_0 (unregistering): left allmulticast mode [ 1181.933395][T12201] bridge_slave_0 (unregistering): left promiscuous mode [ 1181.941058][T12201] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.010323][T12137] hsr_slave_0: entered promiscuous mode [ 1182.027119][T12137] hsr_slave_1: entered promiscuous mode [ 1182.108791][ T8775] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1182.302885][ T8775] usb 7-1: config 0 has an invalid interface number: 101 but max is 0 [ 1182.312141][ T8775] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.322739][ T8775] usb 7-1: config 0 has no interface number 0 [ 1182.329151][ T8775] usb 7-1: config 0 interface 101 has no altsetting 0 [ 1182.369676][ T8775] usb 7-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=ef.18 [ 1182.379510][ T8775] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.390094][ T8775] usb 7-1: Product: syz [ 1182.394493][ T8775] usb 7-1: Manufacturer: syz [ 1182.401437][ T8775] usb 7-1: SerialNumber: syz [ 1182.462107][ T8775] usb 7-1: config 0 descriptor?? [ 1182.485266][ T8775] usb 7-1: bad CDC descriptors [ 1182.497098][ T8775] option 7-1:0.101: GSM modem (1-port) converter detected [ 1182.541311][ T5806] Bluetooth: hci4: command tx timeout [ 1182.835505][T12203] loop6: detected capacity change from 0 to 1024 [ 1182.957078][T12203] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1182.970130][T12203] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1183.046586][T12214] loop9: detected capacity change from 0 to 256 [ 1183.111723][T10517] usb 7-1: USB disconnect, device number 16 [ 1183.120972][T10517] option 7-1:0.101: device disconnected [ 1183.147432][T12214] exfat: Deprecated parameter 'utf8' [ 1183.153398][T12214] exfat: Deprecated parameter 'utf8' [ 1183.323458][T12214] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 1183.558153][T12185] chnl_net:caif_netlink_parms(): no params data found [ 1183.860912][T12217] loop7: detected capacity change from 0 to 2048 [ 1183.967442][T12217] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1184.013650][T11870] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.172365][T12137] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1184.286511][T12137] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1184.417062][T12137] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1184.540235][T12212] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1184.550577][T12137] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1184.593231][T12212] EXT4-fs (loop7): Remounting filesystem read-only [ 1184.621008][ T5806] Bluetooth: hci4: command tx timeout [ 1184.787004][T11696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.099854][T10517] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1185.331776][T10517] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1185.340905][T10517] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1185.351599][T10517] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1185.361706][T10517] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1185.373415][T10517] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1185.421587][T12232] loop9: detected capacity change from 0 to 512 [ 1185.470423][T10517] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1185.479979][T10517] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1185.488237][T10517] usb 7-1: Product: syz [ 1185.493991][T10517] usb 7-1: Manufacturer: syz [ 1185.544115][T12185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.552148][T12185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.559967][T12185] bridge_slave_0: entered allmulticast mode [ 1185.571647][T12185] bridge_slave_0: entered promiscuous mode [ 1185.652520][T10517] cdc_wdm 7-1:1.0: skipping garbage [ 1185.658010][T10517] cdc_wdm 7-1:1.0: skipping garbage [ 1185.681649][T12232] EXT4-fs: Ignoring removed bh option [ 1185.699126][T10517] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1185.705284][T10517] cdc_wdm 7-1:1.0: Unknown control protocol [ 1185.790292][T12185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.797856][T12185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.805877][T12185] bridge_slave_1: entered allmulticast mode [ 1185.815100][T12185] bridge_slave_1: entered promiscuous mode [ 1185.884708][T12228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.894801][T12228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.902706][T12137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1185.925474][T12232] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1186.016535][T12232] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1186.145850][T12232] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1094: bg 0: block 248: padding at end of block bitmap is not set [ 1186.181067][T12232] __quota_error: 4 callbacks suppressed [ 1186.181146][T12232] Quota error (device loop9): write_blk: dquota write failed [ 1186.195114][T12232] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1186.205543][T12232] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.1094: Failed to acquire dquot type 1 [ 1186.239555][T12232] EXT4-fs (loop9): 1 truncate cleaned up [ 1186.256999][T12185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1186.290892][ T8775] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1186.300792][T12185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1186.356046][T12232] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1186.428730][T12239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.438925][T12239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.527871][T12137] 8021q: adding VLAN 0 to HW filter on device team0 [ 1186.542516][T12185] team0: Port device team_slave_0 added [ 1186.542572][T12232] EXT4-fs error (device loop9): ext4_lookup:1791: inode #2: comm syz.9.1094: deleted inode referenced: 12 [ 1186.567425][ T8775] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.578102][ T8775] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1186.590800][T12185] team0: Port device team_slave_1 added [ 1186.596937][ T8775] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.681822][ T9718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.689483][ T9718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1186.710907][ T5806] Bluetooth: hci4: command tx timeout [ 1186.786031][ T8775] usb 8-1: config 0 descriptor?? [ 1186.828675][ T8775] pwc: Askey VC010 type 2 USB webcam detected. [ 1186.913933][ T9718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.921589][ T9718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1187.026075][ T8775] pwc: send_video_command error -71 [ 1187.031940][ T8775] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1187.040229][ T8775] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 1187.048093][T12185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1187.057289][T12185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.084938][T12185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1187.172353][ T8775] usb 8-1: USB disconnect, device number 23 [ 1187.363416][T12185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1187.370716][T12185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.398329][T12185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1187.580191][ T8775] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1187.728290][T12185] hsr_slave_0: entered promiscuous mode [ 1187.738218][T12185] hsr_slave_1: entered promiscuous mode [ 1187.748696][T12185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1187.756467][T12185] Cannot create hsr debugfs directory [ 1187.808226][ T8775] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.821359][ T8775] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1187.831852][ T8775] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.900726][ T8775] usb 8-1: config 0 descriptor?? [ 1187.963693][ T8775] pwc: Askey VC010 type 2 USB webcam detected. [ 1188.105119][ T5854] usb 7-1: USB disconnect, device number 17 [ 1188.333150][ T8775] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1188.362037][ T8775] pwc: recv_control_msg error -32 req 02 val 2700 [ 1188.396319][ T8775] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1188.469207][ T8775] pwc: recv_control_msg error -32 req 04 val 1000 [ 1188.509152][ T8775] pwc: recv_control_msg error -32 req 04 val 1300 [ 1188.545284][ T8775] pwc: recv_control_msg error -32 req 04 val 1400 [ 1188.579822][ T8775] pwc: recv_control_msg error -32 req 02 val 2000 [ 1188.592025][ T8775] pwc: recv_control_msg error -32 req 02 val 2100 [ 1188.621000][ T8775] pwc: recv_control_msg error -32 req 04 val 1500 [ 1188.638119][ T8775] pwc: recv_control_msg error -32 req 02 val 2500 [ 1188.673137][ T8775] pwc: recv_control_msg error -32 req 02 val 2400 [ 1188.893465][ T8775] pwc: recv_control_msg error -71 req 02 val 2900 [ 1188.943531][ T8775] pwc: recv_control_msg error -71 req 02 val 2800 [ 1188.972530][ T8775] pwc: recv_control_msg error -71 req 04 val 1100 [ 1188.995735][ T8775] pwc: recv_control_msg error -71 req 04 val 1200 [ 1189.049718][ T8775] pwc: Registered as video103. [ 1189.057952][ T8775] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input14 [ 1189.062507][T12137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1189.128655][ T8775] usb 8-1: USB disconnect, device number 24 [ 1189.281396][T12246] loop6: detected capacity change from 0 to 1024 [ 1189.363782][T12246] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1189.372964][T12246] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1189.384431][T12246] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1189.394439][T12246] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1189.404949][T12246] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: comm syz.6.1097: inode #1: comm syz.6.1097: iget: illegal inode # [ 1189.593733][T12246] EXT4-fs (loop6): Remounting filesystem read-only [ 1189.601095][T12246] EXT4-fs (loop6): no journal found [ 1189.990787][T12137] veth0_vlan: entered promiscuous mode [ 1190.134944][T12137] veth1_vlan: entered promiscuous mode [ 1190.265158][T12185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1190.410259][T12185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1190.509981][T12185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1190.610812][T12185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1190.661321][T12137] veth0_macvtap: entered promiscuous mode [ 1190.720547][T12137] veth1_macvtap: entered promiscuous mode [ 1190.758852][ T8775] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1190.916000][T12137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1191.011990][ T8775] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.023390][T12137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1191.023394][ T8775] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.023581][ T8775] usb 7-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 1191.050230][ T8775] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.126684][T12137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.136051][T12137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.145895][T12137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.154959][T12137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.230714][ T8775] usb 7-1: config 0 descriptor?? [ 1191.733898][ T8775] ntrig 0003:1B96:000E.000A: item fetching failed at offset 3/5 [ 1191.795157][ T8775] ntrig 0003:1B96:000E.000A: parse failed [ 1191.801669][ T8775] ntrig 0003:1B96:000E.000A: probe with driver ntrig failed with error -22 [ 1191.883582][T12185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1191.941089][ T8775] usb 7-1: USB disconnect, device number 18 [ 1192.141935][T12185] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.237111][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.244752][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.317107][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.324763][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.613090][T10517] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1194.799231][T10517] usb 7-1: device descriptor read/64, error -71 [ 1195.049681][T12185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1195.090814][T10517] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1195.275022][T10517] usb 7-1: device descriptor read/64, error -71 [ 1195.410897][T10517] usb usb7-port1: attempt power cycle [ 1195.426322][T12304] loop7: detected capacity change from 0 to 128 [ 1195.522851][T12304] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1195.557991][T12185] veth0_vlan: entered promiscuous mode [ 1195.620600][T12304] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1195.741557][T12304] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1195.764593][T12185] veth1_vlan: entered promiscuous mode [ 1195.839070][T10517] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1195.908080][T10517] usb 7-1: device descriptor read/8, error -71 [ 1196.026769][T12185] veth0_macvtap: entered promiscuous mode [ 1196.136649][T12185] veth1_macvtap: entered promiscuous mode [ 1196.169737][T10517] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1196.191514][T11696] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1196.235585][T10517] usb 7-1: device descriptor read/8, error -71 [ 1196.381229][T12185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1196.382180][T10517] usb usb7-port1: unable to enumerate USB device [ 1196.483674][T12185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1196.605368][T12185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.614571][T12185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.628944][T12185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.637952][T12185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.979779][T10638] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1197.176781][T10638] usb 8-1: Using ep0 maxpacket: 16 [ 1197.242434][T10638] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.254305][T10638] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.266016][T10638] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1197.279240][T10638] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1197.288660][T10638] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.481420][T10638] usb 8-1: config 0 descriptor?? [ 1197.969812][T10638] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 1197.977396][T10638] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 1198.083712][T10638] ===================================================== [ 1198.092743][T10638] BUG: KMSAN: kernel-usb-infoleak in usb_submit_urb+0x5a1/0x2630 [ 1198.102373][T10638] usb_submit_urb+0x5a1/0x2630 [ 1198.107364][T10638] usb_start_wait_urb+0xc2/0x320 [ 1198.113334][T10638] usb_control_msg+0x27c/0x5b0 [ 1198.118316][T10638] usbhid_raw_request+0x4ab/0x690 [ 1198.123727][T10638] __hid_request+0x2c0/0x500 [ 1198.128705][T10638] hidinput_connect+0x3bf5/0x5cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1198.133956][T10638] hid_connect+0x6b4/0x3440 [ 1198.141612][T10638] hid_hw_start+0xfc/0x1e0 [ 1198.146236][T10638] ms_probe+0x2e5/0x890 [ 1198.154318][T10638] hid_device_probe+0x536/0xab0 [ 1198.160653][T10638] really_probe+0x4d1/0xd90 [ 1198.165384][T10638] __driver_probe_device+0x268/0x380 [ 1198.171879][T10638] driver_probe_device+0x70/0x8b0 [ 1198.177128][T10638] __device_attach_driver+0x4ee/0x950 [ 1198.182793][T10638] bus_for_each_drv+0x3e3/0x680 [ 1198.187827][T10638] __device_attach+0x3c8/0x5c0 [ 1198.193357][T10638] device_initial_probe+0x33/0x40 [ 1198.200322][T10638] bus_probe_device+0x3ba/0x5e0 [ 1198.205379][T10638] device_add+0x12a9/0x1c10 [ 1198.210515][T10638] hid_add_device+0x5ed/0x7b0 [ 1198.215393][T10638] usbhid_probe+0x1fec/0x2660 [ 1198.221315][T10638] usb_probe_interface+0xd04/0x1310 [ 1198.226697][T10638] really_probe+0x4d1/0xd90 [ 1198.232000][T10638] __driver_probe_device+0x268/0x380 [ 1198.237503][T10638] driver_probe_device+0x70/0x8b0 [ 1198.242823][T10638] __device_attach_driver+0x4ee/0x950 [ 1198.248493][T10638] bus_for_each_drv+0x3e3/0x680 [ 1198.251426][T12329] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1104'. [ 1198.253465][T10638] __device_attach+0x3c8/0x5c0 [ 1198.269052][T10638] device_initial_probe+0x33/0x40 [ 1198.274298][T10638] bus_probe_device+0x3ba/0x5e0 [ 1198.279666][T10638] device_add+0x12a9/0x1c10 [ 1198.284375][T10638] usb_set_configuration+0x3493/0x3b70 [ 1198.290167][T10638] usb_generic_driver_probe+0xfc/0x290 [ 1198.295855][T10638] usb_probe_device+0x38a/0x690 [ 1198.301023][T10638] really_probe+0x4d1/0xd90 [ 1198.305737][T10638] __driver_probe_device+0x268/0x380 [ 1198.311933][T10638] driver_probe_device+0x70/0x8b0 [ 1198.317187][T10638] __device_attach_driver+0x4ee/0x950 [ 1198.322939][T10638] bus_for_each_drv+0x3e3/0x680 [ 1198.327983][T10638] __device_attach+0x3c8/0x5c0 [ 1198.333133][T10638] device_initial_probe+0x33/0x40 [ 1198.338369][T10638] bus_probe_device+0x3ba/0x5e0 [ 1198.343686][T10638] device_add+0x12a9/0x1c10 [ 1198.348391][T10638] usb_new_device+0x104b/0x20c0 [ 1198.353575][T10638] hub_event+0x5588/0x7580 [ 1198.358219][T10638] process_scheduled_works+0xb8e/0x1d80 [ 1198.365313][T10638] worker_thread+0xedf/0x1590 [ 1198.370682][T10638] kthread+0xd5c/0xf00 [ 1198.374936][T10638] ret_from_fork+0x1e0/0x310 [ 1198.380716][T10638] ret_from_fork_asm+0x1a/0x30 [ 1198.385709][T10638] [ 1198.388138][T10638] Uninit was created at: [ 1198.393350][T10638] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 1198.400218][T10638] kstrdup+0x8a/0x2a0 [ 1198.404416][T10638] kstrdup_const+0x5e/0x90 [ 1198.409165][T10638] __kernfs_new_node+0x6e/0xa70 [ 1198.414207][T10638] kernfs_new_node+0x1f0/0x370 [ 1198.419251][T10638] kernfs_create_dir_ns+0x9a/0x2b0 [ 1198.424567][T10638] sysfs_create_dir_ns+0x19c/0x540 [ 1198.429999][T10638] kobject_add_internal+0xeed/0x1840 [ 1198.435496][T10638] kobject_init_and_add+0x371/0x4e0 [ 1198.441036][T10638] netdev_queue_update_kobjects+0x358/0xbf0 [ 1198.447154][T10638] netdev_register_kobject+0x3be/0x4f0 [ 1198.452985][T10638] register_netdevice+0x1b41/0x25d0 [ 1198.458614][T10638] team_newlink+0x116/0x150 [ 1198.464731][T10638] rtnl_newlink_create+0x41c/0x1250 [ 1198.470566][T10638] rtnl_newlink+0x2f13/0x3a90 [ 1198.475438][T10638] rtnetlink_rcv_msg+0x106c/0x14b0 [ 1198.480887][T10638] netlink_rcv_skb+0x54a/0x680 [ 1198.485830][T10638] rtnetlink_rcv+0x35/0x40 [ 1198.490572][T10638] netlink_unicast+0xed5/0x1290 [ 1198.495595][T10638] netlink_sendmsg+0x10b3/0x1250 [ 1198.501382][T10638] __sock_sendmsg+0x333/0x3d0 [ 1198.506310][T10638] __sys_sendto+0x593/0x720 [ 1198.511105][T10638] __ia32_compat_sys_socketcall+0xa89/0x1af0 [ 1198.517304][T10638] ia32_sys_call+0x41be/0x42c0 [ 1198.522467][T10638] __do_fast_syscall_32+0xb0/0x150 [ 1198.527771][T10638] do_fast_syscall_32+0x38/0x80 [ 1198.532877][T10638] do_SYSENTER_32+0x1f/0x30 [ 1198.537584][T10638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1198.547912][T10638] [ 1198.551880][T10638] Bytes 12-14 of 65535 are uninitialized [ 1198.557652][T10638] Memory access of size 65535 starts at ffff88804d1507a1 [ 1198.564931][T10638] [ 1198.568647][T10638] CPU: 1 UID: 0 PID: 10638 Comm: kworker/1:4 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(undef) [ 1198.581656][T10638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1198.591974][T10638] Workqueue: usb_hub_wq hub_event [ 1198.599109][T10638] ===================================================== [ 1198.606186][T10638] Disabling lock debugging due to kernel taint [ 1198.612622][T10638] Kernel panic - not syncing: kmsan.panic set ... [ 1198.619214][T10638] CPU: 1 UID: 0 PID: 10638 Comm: kworker/1:4 Tainted: G B 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(undef) [ 1198.633247][T10638] Tainted: [B]=BAD_PAGE [ 1198.637517][T10638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1198.647727][T10638] Workqueue: usb_hub_wq hub_event [ 1198.652989][T10638] Call Trace: [ 1198.656411][T10638] [ 1198.659451][T10638] __dump_stack+0x26/0x30 [ 1198.663978][T10638] dump_stack_lvl+0x53/0x270 [ 1198.668779][T10638] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1198.674829][T10638] dump_stack+0x1e/0x25 [ 1198.679177][T10638] panic+0x4bd/0xd50 [ 1198.683324][T10638] kmsan_report+0x31c/0x320 [ 1198.688047][T10638] ? kmsan_internal_check_memory+0x16c/0x230 [ 1198.694234][T10638] ? kmsan_handle_urb+0x2c/0x40 [ 1198.699286][T10638] ? usb_submit_urb+0x5a1/0x2630 [ 1198.704420][T10638] ? usb_start_wait_urb+0xc2/0x320 [ 1198.709726][T10638] ? usb_control_msg+0x27c/0x5b0 [ 1198.714852][T10638] ? usbhid_raw_request+0x4ab/0x690 [ 1198.720252][T10638] ? __hid_request+0x2c0/0x500 [ 1198.725196][T10638] ? hidinput_connect+0x3bf5/0x5cc0 [ 1198.730603][T10638] ? hid_connect+0x6b4/0x3440 [ 1198.735452][T10638] ? hid_hw_start+0xfc/0x1e0 [ 1198.740216][T10638] ? ms_probe+0x2e5/0x890 [ 1198.744739][T10638] ? hid_device_probe+0x536/0xab0 [ 1198.749949][T10638] ? really_probe+0x4d1/0xd90 [ 1198.754831][T10638] ? __driver_probe_device+0x268/0x380 [ 1198.760492][T10638] ? driver_probe_device+0x70/0x8b0 [ 1198.765911][T10638] ? __device_attach_driver+0x4ee/0x950 [ 1198.771698][T10638] ? bus_for_each_drv+0x3e3/0x680 [ 1198.776907][T10638] ? __device_attach+0x3c8/0x5c0 [ 1198.782048][T10638] ? device_initial_probe+0x33/0x40 [ 1198.787459][T10638] ? bus_probe_device+0x3ba/0x5e0 [ 1198.792663][T10638] ? device_add+0x12a9/0x1c10 [ 1198.797529][T10638] ? hid_add_device+0x5ed/0x7b0 [ 1198.802566][T10638] ? usbhid_probe+0x1fec/0x2660 [ 1198.807611][T10638] ? usb_probe_interface+0xd04/0x1310 [ 1198.813162][T10638] ? really_probe+0x4d1/0xd90 [ 1198.818043][T10638] ? __driver_probe_device+0x268/0x380 [ 1198.823710][T10638] ? driver_probe_device+0x70/0x8b0 [ 1198.829111][T10638] ? __device_attach_driver+0x4ee/0x950 [ 1198.834868][T10638] ? bus_for_each_drv+0x3e3/0x680 [ 1198.840066][T10638] ? __device_attach+0x3c8/0x5c0 [ 1198.845200][T10638] ? device_initial_probe+0x33/0x40 [ 1198.850600][T10638] ? bus_probe_device+0x3ba/0x5e0 [ 1198.855800][T10638] ? device_add+0x12a9/0x1c10 [ 1198.860662][T10638] ? usb_set_configuration+0x3493/0x3b70 [ 1198.866510][T10638] ? usb_generic_driver_probe+0xfc/0x290 [ 1198.872352][T10638] ? usb_probe_device+0x38a/0x690 [ 1198.877534][T10638] ? really_probe+0x4d1/0xd90 [ 1198.882417][T10638] ? __driver_probe_device+0x268/0x380 [ 1198.888084][T10638] ? driver_probe_device+0x70/0x8b0 [ 1198.893491][T10638] ? __device_attach_driver+0x4ee/0x950 [ 1198.899243][T10638] ? bus_for_each_drv+0x3e3/0x680 [ 1198.904438][T10638] ? __device_attach+0x3c8/0x5c0 [ 1198.909566][T10638] ? device_initial_probe+0x33/0x40 [ 1198.914961][T10638] ? bus_probe_device+0x3ba/0x5e0 [ 1198.920166][T10638] ? device_add+0x12a9/0x1c10 [ 1198.925023][T10638] ? usb_new_device+0x104b/0x20c0 [ 1198.930239][T10638] ? hub_event+0x5588/0x7580 [ 1198.935023][T10638] ? process_scheduled_works+0xb8e/0x1d80 [ 1198.940958][T10638] ? worker_thread+0xedf/0x1590 [ 1198.946022][T10638] ? kthread+0xd5c/0xf00 [ 1198.950429][T10638] ? ret_from_fork+0x1e0/0x310 [ 1198.955352][T10638] ? ret_from_fork_asm+0x1a/0x30 [ 1198.960489][T10638] ? bus_for_each_drv+0x3e3/0x680 [ 1198.965690][T10638] ? __device_attach+0x3c8/0x5c0 [ 1198.970820][T10638] ? device_initial_probe+0x33/0x40 [ 1198.976227][T10638] ? kmsan_get_metadata+0xfb/0x160 [ 1198.981565][T10638] ? kmsan_metadata_is_contiguous+0xdf/0x1e0 [ 1198.987753][T10638] kmsan_internal_check_memory+0x16c/0x230 [ 1198.993769][T10638] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1198.999796][T10638] kmsan_handle_urb+0x2c/0x40 [ 1199.004664][T10638] usb_submit_urb+0x5a1/0x2630 [ 1199.009625][T10638] ? stack_depot_save_flags+0x35/0x7b0 [ 1199.015265][T10638] ? kmsan_get_metadata+0xfb/0x160 [ 1199.020598][T10638] ? kmsan_get_metadata+0x30/0x160 [ 1199.025925][T10638] usb_start_wait_urb+0xc2/0x320 [ 1199.031089][T10638] usb_control_msg+0x27c/0x5b0 [ 1199.036074][T10638] usbhid_raw_request+0x4ab/0x690 [ 1199.041339][T10638] __hid_request+0x2c0/0x500 [ 1199.046116][T10638] ? __pfx_usbhid_raw_request+0x10/0x10 [ 1199.051885][T10638] hidinput_connect+0x3bf5/0x5cc0 [ 1199.057115][T10638] ? driver_probe_device+0x70/0x8b0 [ 1199.062520][T10638] ? __device_attach_driver+0x4ee/0x950 [ 1199.068272][T10638] ? bus_for_each_drv+0x3e3/0x680 [ 1199.073468][T10638] ? __device_attach+0x3c8/0x5c0 [ 1199.078609][T10638] ? bus_probe_device+0x3ba/0x5e0 [ 1199.083817][T10638] ? device_add+0x12a9/0x1c10 [ 1199.088680][T10638] ? usb_new_device+0x104b/0x20c0 [ 1199.093898][T10638] ? hub_event+0x5588/0x7580 [ 1199.098687][T10638] ? process_scheduled_works+0xb8e/0x1d80 [ 1199.104616][T10638] ? worker_thread+0xedf/0x1590 [ 1199.109666][T10638] ? kthread+0xd5c/0xf00 [ 1199.114063][T10638] ? ret_from_fork+0x1e0/0x310 [ 1199.118987][T10638] ? ret_from_fork_asm+0x1a/0x30 [ 1199.124134][T10638] ? kmsan_get_metadata+0xfb/0x160 [ 1199.129461][T10638] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1199.135554][T10638] hid_connect+0x6b4/0x3440 [ 1199.140314][T10638] hid_hw_start+0xfc/0x1e0 [ 1199.144918][T10638] ms_probe+0x2e5/0x890 [ 1199.149277][T10638] ? kmsan_get_metadata+0xfb/0x160 [ 1199.154603][T10638] ? __pfx_ms_probe+0x10/0x10 [ 1199.159480][T10638] hid_device_probe+0x536/0xab0 [ 1199.164549][T10638] ? __pfx_hid_device_probe+0x10/0x10 [ 1199.170114][T10638] really_probe+0x4d1/0xd90 [ 1199.174842][T10638] __driver_probe_device+0x268/0x380 [ 1199.180347][T10638] driver_probe_device+0x70/0x8b0 [ 1199.185599][T10638] ? kmsan_get_metadata+0xfb/0x160 [ 1199.190935][T10638] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1199.196990][T10638] __device_attach_driver+0x4ee/0x950 [ 1199.202604][T10638] bus_for_each_drv+0x3e3/0x680 [ 1199.207624][T10638] ? __pfx___device_attach_driver+0x10/0x10 [ 1199.213752][T10638] __device_attach+0x3c8/0x5c0 [ 1199.218731][T10638] device_initial_probe+0x33/0x40 [ 1199.223952][T10638] bus_probe_device+0x3ba/0x5e0 [ 1199.228998][T10638] device_add+0x12a9/0x1c10 [ 1199.233721][T10638] hid_add_device+0x5ed/0x7b0 [ 1199.238604][T10638] usbhid_probe+0x1fec/0x2660 [ 1199.243480][T10638] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1199.249778][T10638] ? __pfx_usbhid_probe+0x10/0x10 [ 1199.254999][T10638] usb_probe_interface+0xd04/0x1310 [ 1199.260397][T10638] ? __pfx_usb_probe_interface+0x10/0x10 [ 1199.266192][T10638] really_probe+0x4d1/0xd90 [ 1199.270916][T10638] __driver_probe_device+0x268/0x380 [ 1199.276420][T10638] driver_probe_device+0x70/0x8b0 [ 1199.281654][T10638] ? kmsan_get_metadata+0xfb/0x160 [ 1199.286971][T10638] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1199.293016][T10638] __device_attach_driver+0x4ee/0x950 [ 1199.298626][T10638] bus_for_each_drv+0x3e3/0x680 [ 1199.303646][T10638] ? __pfx___device_attach_driver+0x10/0x10 [ 1199.309776][T10638] __device_attach+0x3c8/0x5c0 [ 1199.314752][T10638] device_initial_probe+0x33/0x40 [ 1199.319978][T10638] bus_probe_device+0x3ba/0x5e0 [ 1199.325021][T10638] device_add+0x12a9/0x1c10 [ 1199.329742][T10638] usb_set_configuration+0x3493/0x3b70 [ 1199.335504][T10638] usb_generic_driver_probe+0xfc/0x290 [ 1199.341177][T10638] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1199.347454][T10638] usb_probe_device+0x38a/0x690 [ 1199.352480][T10638] ? __pfx_usb_probe_device+0x10/0x10 [ 1199.358011][T10638] really_probe+0x4d1/0xd90 [ 1199.362739][T10638] __driver_probe_device+0x268/0x380 [ 1199.368238][T10638] driver_probe_device+0x70/0x8b0 [ 1199.373475][T10638] ? kmsan_get_metadata+0xfb/0x160 [ 1199.378789][T10638] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1199.384813][T10638] __device_attach_driver+0x4ee/0x950 [ 1199.390423][T10638] bus_for_each_drv+0x3e3/0x680 [ 1199.395447][T10638] ? __pfx___device_attach_driver+0x10/0x10 [ 1199.401572][T10638] __device_attach+0x3c8/0x5c0 [ 1199.406547][T10638] device_initial_probe+0x33/0x40 [ 1199.411771][T10638] bus_probe_device+0x3ba/0x5e0 [ 1199.416811][T10638] device_add+0x12a9/0x1c10 [ 1199.421525][T10638] usb_new_device+0x104b/0x20c0 [ 1199.426596][T10638] hub_event+0x5588/0x7580 [ 1199.431266][T10638] ? pwq_dec_nr_in_flight+0x1678/0x1d80 [ 1199.437055][T10638] ? __pfx_hub_event+0x10/0x10 [ 1199.442028][T10638] process_scheduled_works+0xb8e/0x1d80 [ 1199.447840][T10638] worker_thread+0xedf/0x1590 [ 1199.452754][T10638] kthread+0xd5c/0xf00 [ 1199.456977][T10638] ? __pfx_worker_thread+0x10/0x10 [ 1199.462316][T10638] ? __pfx_kthread+0x10/0x10 [ 1199.467146][T10638] ret_from_fork+0x1e0/0x310 [ 1199.471938][T10638] ? __pfx_kthread+0x10/0x10 [ 1199.476709][T10638] ret_from_fork_asm+0x1a/0x30 [ 1199.481705][T10638] [ 1199.485091][T10638] Kernel Offset: disabled [ 1199.489478][T10638] Rebooting in 86400 seconds..