last executing test programs: 10m48.503626841s ago: executing program 3 (id=49): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, &(0x7f0000000800)={0x68, 0x4b, 0x20}, 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0xfffe, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x402, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000080)=0x2) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000080)="00012c615bc2") close(0xffffffffffffffff) 10m41.868594239s ago: executing program 3 (id=60): socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000027c0)={'ip6gre0\x00', 0x0}) r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000000)={0x1, 0xbc3, 0x3}) keyctl$update(0x2, 0x0, &(0x7f0000000380)="c8bd1d2418c573f8151ad173e2", 0xd) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) 10m37.385013595s ago: executing program 3 (id=65): mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102378, 0x18fea) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80008) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r4 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) preadv(0xffffffffffffffff, 0x0, 0x0, 0x898, 0x4000000) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x99) 10m36.274742011s ago: executing program 3 (id=66): getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000380)={&(0x7f0000000340)=[{0x4, 0x8000, 0x0, 0x0}], 0x1}) 10m31.799069823s ago: executing program 3 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) close(r4) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x3a) 10m27.739548973s ago: executing program 3 (id=73): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000007740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRESOCT=r3, @ANYRES8, @ANYRES64=r2, @ANYRES64, @ANYRESOCT=r3, @ANYRES64=0x0, @ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31200000000900010073797a310000000014000380"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x1, 0x587fa938, 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000074c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0xffffffffffffff12) sendto$inet6(r9, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) sendmsg$inet6(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000180)='h', 0x1}], 0x1}, 0x20044800) shutdown(r9, 0x1) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) sendmmsg(r8, 0x0, 0x0, 0x40) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x1d}, {0x6, 0x0, 0xfe}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 10m19.956341586s ago: executing program 1 (id=82): getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000380)={&(0x7f0000000340)=[{0x4, 0x8000, 0x0, 0x0}], 0x1}) 10m16.491407436s ago: executing program 1 (id=86): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) listen(r4, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000"], 0x84}}, 0x20000000) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) 10m15.620515276s ago: executing program 1 (id=87): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000084}, 0x40010) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x1ee6, &(0x7f0000000380)={0x0, 0x7295, 0x10100, 0x3, 0x22d, 0x0, r4}, 0x0, &(0x7f0000000100)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000000140)={0x10, 0x0, "6594844326f4a23ff094cd183f5a6a24"}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0xfc00) r6 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0xc4c85513, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x0, 'syz1\x00', 0x109a7}) 10m12.334950965s ago: executing program 32 (id=73): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000007740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRESOCT=r3, @ANYRES8, @ANYRES64=r2, @ANYRES64, @ANYRESOCT=r3, @ANYRES64=0x0, @ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31200000000900010073797a310000000014000380"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x1, 0x587fa938, 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000074c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0xffffffffffffff12) sendto$inet6(r9, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) sendmsg$inet6(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000180)='h', 0x1}], 0x1}, 0x20044800) shutdown(r9, 0x1) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) sendmmsg(r8, 0x0, 0x0, 0x40) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x1d}, {0x6, 0x0, 0xfe}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 10m8.124815388s ago: executing program 1 (id=95): mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102378, 0x18fea) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80008) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r4 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) preadv(0xffffffffffffffff, 0x0, 0x0, 0x898, 0x4000000) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x99) 10m7.055590141s ago: executing program 1 (id=97): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_usb_connect(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 9m54.59271469s ago: executing program 1 (id=112): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47) keyctl$clear(0x7, 0xfffffffffffffffc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYBLOB="83550500010000001c0012800b00010067656e65766500000c00028005000c00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(0xffffffffffffffff, &(0x7f0000001400)=""/4076, 0xfffffeea) 9m39.281790677s ago: executing program 33 (id=112): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47) keyctl$clear(0x7, 0xfffffffffffffffc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYBLOB="83550500010000001c0012800b00010067656e65766500000c00028005000c00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(0xffffffffffffffff, &(0x7f0000001400)=""/4076, 0xfffffeea) 3m9.542636209s ago: executing program 5 (id=696): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x101) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x9000) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r1, 0x0, 0xa0028000}, 0x38) 3m9.017913677s ago: executing program 5 (id=697): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffe, 0x2, 0x40, 0x7, 0xe9, 0xcc36}}}}]}, 0x4c}}, 0x0) 3m8.372022806s ago: executing program 5 (id=699): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='io_uring_cqring_wait\x00', r3}, 0x18) r4 = syz_io_uring_setup(0x6148, &(0x7f0000000340)={0x0, 0x13ea, 0x2, 0x2, 0x3c6}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_enter(r4, 0x2241, 0x1b86, 0x1, 0x0, 0x0) 3m7.028715809s ago: executing program 5 (id=702): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r0}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3m5.665529706s ago: executing program 5 (id=703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0xfdff) socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0}, 0x94) 3m3.633811166s ago: executing program 5 (id=708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x67) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) mkdir(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r5, 0x81, 0xf8, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d70") 2m57.88023226s ago: executing program 2 (id=719): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xbb, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac14141604089f034d2f87e5440c05ab845013f2325f1a39018603038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x5, 0x164, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007af28810d30bf4055b000000000109025201010000000009044000000e0100008c2406"], 0x0) 2m55.082501223s ago: executing program 2 (id=725): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m54.086031417s ago: executing program 2 (id=728): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x18) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="dc", 0x1}], 0x1) 2m53.706336217s ago: executing program 2 (id=729): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0xf, 0x80, 0x0, 0x3}) 2m53.271091298s ago: executing program 2 (id=730): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r0, 0x0, 0x0, 0x0, 0x20000000) 2m52.943983878s ago: executing program 2 (id=733): syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x21, 0x32, {0x32, 0x8, "1175764eb0382547b6b97cb987d1ca0e3ae22daacdcba3d89e3abe05792f2fa12aa790d0705e5092af851a6d1581d0f2"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000140)={0x40, 0x13, 0xa7, "dfdfec67812d2e90806b6561b2a191fa82c1aa776819e477274fbc4e7195e6b7611cac6752ac267b438d1529b3f547849a7f201335fd53683ac30e8132fc4d8a0b4edc921c0279842f501414d8fdc49690183a7852622d1021e6749e96f6126373010e5ead0efe69117d57ed2bc8667c5e6ba0aa6cece75e933dac2666be5b2ed22ea052211321f86c1eba87ebabebf17c1e8acbc40269f89f3b594e2ce33c9a3efe4e6d029cec"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000280)={0x20, 0x81, 0x3, "79c07f"}, &(0x7f00000003c0)={0x20, 0x82, 0x2, "1b94"}, &(0x7f0000000400)={0x20, 0x83, 0x1, '\x00'}, &(0x7f0000000440)={0x20, 0x84, 0x2, "f8d0"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "2310f0"}}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet(0x2, 0x1, 0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r5 = socket$igmp6(0xa, 0x3, 0x2) ptrace$peekuser(0x3, r2, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r6, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mknodat(r1, &(0x7f00000005c0)='./file0\x00', 0x1, 0x80000001) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) 2m46.367599273s ago: executing program 34 (id=708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x67) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) mkdir(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r5, 0x81, 0xf8, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d70") 2m36.639765163s ago: executing program 35 (id=733): syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x21, 0x32, {0x32, 0x8, "1175764eb0382547b6b97cb987d1ca0e3ae22daacdcba3d89e3abe05792f2fa12aa790d0705e5092af851a6d1581d0f2"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000140)={0x40, 0x13, 0xa7, "dfdfec67812d2e90806b6561b2a191fa82c1aa776819e477274fbc4e7195e6b7611cac6752ac267b438d1529b3f547849a7f201335fd53683ac30e8132fc4d8a0b4edc921c0279842f501414d8fdc49690183a7852622d1021e6749e96f6126373010e5ead0efe69117d57ed2bc8667c5e6ba0aa6cece75e933dac2666be5b2ed22ea052211321f86c1eba87ebabebf17c1e8acbc40269f89f3b594e2ce33c9a3efe4e6d029cec"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000280)={0x20, 0x81, 0x3, "79c07f"}, &(0x7f00000003c0)={0x20, 0x82, 0x2, "1b94"}, &(0x7f0000000400)={0x20, 0x83, 0x1, '\x00'}, &(0x7f0000000440)={0x20, 0x84, 0x2, "f8d0"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "2310f0"}}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet(0x2, 0x1, 0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r5 = socket$igmp6(0xa, 0x3, 0x2) ptrace$peekuser(0x3, r2, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r6, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mknodat(r1, &(0x7f00000005c0)='./file0\x00', 0x1, 0x80000001) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) 2m19.0963942s ago: executing program 7 (id=807): r0 = socket$inet(0x2, 0x4, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000100)={0x92, 0x0, [0x101, 0x6, 0x9, 0x1], 0x0}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000080)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x48}}, 0x0) 2m15.641057514s ago: executing program 7 (id=810): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f"], 0x0) 2m14.025860299s ago: executing program 7 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) gettid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r4, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x5}, 0x4) 2m9.983352142s ago: executing program 7 (id=815): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x4008804) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x94) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x31, 0x5, {0x5, 0x32, "f0662c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, 0x0) socket$inet6(0xa, 0x80002, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) 2m7.297853715s ago: executing program 7 (id=823): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscache']) utime(&(0x7f0000000200)='./file0\x00', 0x0) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r4, &(0x7f0000000440)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m4.254733902s ago: executing program 7 (id=829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x30925) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000027bde6bd0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) socket$unix(0x1, 0x5, 0x0) io_setup(0x6, &(0x7f0000004680)) 1m48.538142311s ago: executing program 36 (id=829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x30925) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000027bde6bd0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) socket$unix(0x1, 0x5, 0x0) io_setup(0x6, &(0x7f0000004680)) 15.937907427s ago: executing program 6 (id=997): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) 10.309917607s ago: executing program 0 (id=1003): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r5, 0x0, 0x48014) sendmsg$can_bcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x6, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "1d0b6382972f4b8f"}}, 0x48}}, 0x0) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) 8.838090434s ago: executing program 0 (id=1004): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xdf2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x71, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x20, 0x18, 0x7, {0x7, 0xd, "a18265cc32"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x14, "11adc2ad35bdca3b0a92fb49195937d10977988e"}, 0x0}) r3 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) 8.524101126s ago: executing program 6 (id=1006): r0 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000007c0)=ANY=[@ANYRES16=r1, @ANYRESOCT=r0, @ANYBLOB, @ANYRESDEC=r1], 0x29) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r3, r3, 0x0, 0x4800000009) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, 0x0) 7.110047838s ago: executing program 6 (id=1007): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, 0x0) 5.5155363s ago: executing program 0 (id=1009): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x0, &(0x7f00000003c0), 0x1, 0xb9a, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000ca00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}}, {{&(0x7f0000000c80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44011}}], 0x2, 0xc0c0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(r1, 0xf, &(0x7f0000000140)={0xfffffffffffffffe, 0x81}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000940), 0x0, 0x100) syz_open_procfs(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r5, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") syz_clone(0x42a00180, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) 5.345585705s ago: executing program 4 (id=1010): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) 5.018120998s ago: executing program 4 (id=1011): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x10f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xb1, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x101, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc5, 0x6, 0xf7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x8, 0x4, {0x4, 0x5, "00f4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.181074011s ago: executing program 6 (id=1012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffed9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) creat(&(0x7f00000001c0)='./bus\x00', 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0x4, 0x7f, 0x9}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000400)=[{0x0, 0x4, 0xc, 0x3}, {0x3, 0x4, 0x0, 0xc}, {0x1, 0x3, 0x8, 0x8}], 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @mcast2, 0x5}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37}, 0x20) 2.074911491s ago: executing program 0 (id=1013): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) bind$tipc(r1, 0x0, 0x0) 1.901978209s ago: executing program 4 (id=1014): userfaultfd(0x80001) 1.69441155s ago: executing program 4 (id=1015): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000926091b4b8f4c285"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2}, @TCA_FQ_CODEL_TARGET={0x8}]}}, @TCA_STAB={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008094}, 0x8840) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYRES64=r7, @ANYRES32=0x0, @ANYBLOB='\x00\x00', @ANYRESHEX=r5], 0xb4}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.650287211s ago: executing program 0 (id=1016): sigaltstack(&(0x7f00000015c0)={0x0, 0x80000002}, 0x0) 1.16302908s ago: executing program 0 (id=1017): bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe2$9p(&(0x7f0000000000), 0x84080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) pivot_root(0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x48) 615.618276ms ago: executing program 4 (id=1018): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) 354.61686ms ago: executing program 6 (id=1019): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x4e24, 0x8, @remote}}]}, 0x190) 254.135288ms ago: executing program 4 (id=1020): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 0s ago: executing program 6 (id=1021): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000940)="3f73662ad4eeb859cffa3637859d074255e7120fb298ea4e6f1d5b507c442829e700b7c56e8997f5eb9e0d25", 0x2c}, {&(0x7f0000000980)="6a368db73b3fee291029ccc1cf1f4bb035cfe1e6e7d243237727e97e9eeff8eef38eb0f1e3be97f39c531c9cb231812823ee29de4f188582f1687c34f8e703920d1878011903c377b8849edaa71ca7684c21bd742621d0084a41e4fce15680dfdfe754ff1fa921d97b24982abf1d8a389f50b03b", 0x74}, {&(0x7f0000000a00)="cdccb8b02d2c", 0x6}, {&(0x7f0000000a40)="be9cd7cf0adc06811925df408c1fd424abd15f1762adbcaa2540c5917723107d55f5e36dd537adc956e700b891b923a853de30ff78b81a1bcaebe317cbc09398541db57e8e017071b2b1b7ff1f96d40bd994a84c904c0b6608a9d6ee8055c2f430f19c3a5fdd0852af7ddca847b51cd77c792aafd3d6bf588cead335a669748959", 0x81}, {&(0x7f0000000b00)="7ad24f2ca765ac18102e7d57039aedfef77e92c14eec1a0107c80df76c057368f461f3d72f931b2b6c9ec94c3e124d233a6a6314281e8e504561939b50b967a09e14b3aaaf50628e3bff400ac29625c239bc636c0287c64d20167d00f57115cefadbfc57222b78b8fdfc32b37a6678588f64c41e3897fba23a2b3fd0a4198f60a967ee2edf0607135fed00ea0ab5305210e1b698abf9c9b3fce88896e88bfb508925c7a7565e8337187ef0229a31c41f4cecc37da823e5b913da11b919c95987001db3f1075e5b", 0xc7}, {0x0}], 0x6, &(0x7f0000005280)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r4, r3]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x78}, 0x1814) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x4, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2d, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x10000, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0xfffffffa, 0x20, 0x8000, 0x0, 0x80, 0x0, 0x5, 0x5, 0x8, 0x4, 0x1, 0x3], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x1000006, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x27b2, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x8, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0xd, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x8, 0x51bf, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x6, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0xfff]}, 0x45c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): T8048] veth0_vlan: entered promiscuous mode [ 495.985531][ T8048] veth1_vlan: entered promiscuous mode [ 497.661547][ T8539] hub 9-0:1.0: USB hub found [ 497.667128][ T8539] hub 9-0:1.0: 1 port detected [ 497.732118][ T8048] veth0_macvtap: entered promiscuous mode [ 498.630938][ T8549] netlink: 128 bytes leftover after parsing attributes in process `syz.0.447'. [ 500.330400][ T8560] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 503.645997][ T5892] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 503.677826][ T5892] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 503.828563][ T5892] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 503.860306][ T5892] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 503.880438][ T5892] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 505.047872][ T5882] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 505.253383][ T5882] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 505.265655][ T5882] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 505.398993][ T5882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 505.453796][ T5882] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 505.651690][ T8294] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 505.988990][ T5882] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 506.009899][ T5877] Bluetooth: hci5: command tx timeout [ 506.125092][ T8607] syz.5.457: attempt to access beyond end of device [ 506.125092][ T8607] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 506.138959][ T8607] befs: (nbd5): unable to read superblock [ 506.224415][ T8608] openvswitch: netlink: Message has 24 unknown bytes. [ 506.692178][ T5882] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 506.707010][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 506.718193][ T5882] usb 3-1: Product: syz [ 506.722415][ T5882] usb 3-1: Manufacturer: syz [ 506.852558][ T8294] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 506.937507][ T5882] cdc_wdm 3-1:1.0: skipping garbage [ 506.957295][ T5882] cdc_wdm 3-1:1.0: skipping garbage [ 506.978404][ T5882] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 507.010611][ T5882] cdc_wdm 3-1:1.0: Unknown control protocol [ 508.029100][ T5877] Bluetooth: hci5: command tx timeout [ 508.053116][ T5882] usb 3-1: USB disconnect, device number 11 [ 508.131043][ T8294] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 508.324892][ T8294] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 509.492164][ T8640] hub 9-0:1.0: USB hub found [ 509.499473][ T8640] hub 9-0:1.0: 1 port detected [ 510.107719][ T5877] Bluetooth: hci5: command tx timeout [ 510.807155][ T8650] syz.4.462: attempt to access beyond end of device [ 510.807155][ T8650] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 510.821627][ T8650] befs: (nbd4): unable to read superblock [ 510.854652][ T8650] openvswitch: netlink: Message has 24 unknown bytes. [ 510.887150][ T5886] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 511.777524][ T5886] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 511.828578][ T5886] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 511.872990][ T5886] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 511.896435][ T5886] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 511.969931][ T5886] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 512.039993][ T5886] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 512.118876][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 512.189483][ T5877] Bluetooth: hci5: command tx timeout [ 512.189486][ T5886] usb 1-1: Product: syz [ 512.202978][ T12] bridge_slave_1: left allmulticast mode [ 512.242358][ T12] bridge_slave_1: left promiscuous mode [ 512.323305][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.367613][ T5886] usb 1-1: Manufacturer: syz [ 512.375029][ T12] bridge_slave_0: left allmulticast mode [ 512.386969][ T12] bridge_slave_0: left promiscuous mode [ 512.392781][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.483471][ T5886] cdc_wdm 1-1:1.0: skipping garbage [ 512.500646][ T5886] cdc_wdm 1-1:1.0: skipping garbage [ 512.548058][ T5886] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 512.587058][ T5886] cdc_wdm 1-1:1.0: Unknown control protocol [ 513.139909][ T8667] usb usb8: usbfs: process 8667 (syz.0.461) did not claim interface 0 before use [ 513.365447][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 6 bytes [ 514.437177][ T5886] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 514.601794][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 514.619309][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 514.632563][ T5886] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 514.662741][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.722915][ T5886] usb 6-1: Product: syz [ 514.788431][ T5886] usb 6-1: Manufacturer: syz [ 514.793118][ T5886] usb 6-1: SerialNumber: syz [ 514.876732][ T5886] usb 6-1: config 0 descriptor?? [ 514.974533][ T5886] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 515.084914][ T5886] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 515.567361][ T5886] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 515.997024][ T5886] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 516.085753][ T5886] em28xx 6-1:0.0: board has no eeprom [ 516.187810][ T5886] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 516.195805][ T5886] em28xx 6-1:0.0: dvb set to bulk mode. [ 516.302120][ T5882] em28xx 6-1:0.0: Binding DVB extension [ 516.357775][ T5886] usb 6-1: USB disconnect, device number 9 [ 516.487823][ T5886] em28xx 6-1:0.0: Disconnecting em28xx [ 516.668027][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.788066][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.824370][ T5882] em28xx 6-1:0.0: Registering input extension [ 516.853130][ T5886] em28xx 6-1:0.0: Closing input extension [ 516.902170][ T12] bond0 (unregistering): Released all slaves [ 516.969558][ T5886] em28xx 6-1:0.0: Freeing device [ 517.104068][ T5882] usb 1-1: USB disconnect, device number 11 [ 517.182727][ T8571] chnl_net:caif_netlink_parms(): no params data found [ 518.357243][ T12] hsr_slave_0: left promiscuous mode [ 518.445290][ T12] hsr_slave_1: left promiscuous mode [ 518.534558][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.795139][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.854687][ T12] veth0_macvtap: left promiscuous mode [ 518.870103][ T12] veth1_vlan: left promiscuous mode [ 518.882562][ T12] veth0_vlan: left promiscuous mode [ 522.175636][ T12] team0 (unregistering): Port device team_slave_1 removed [ 522.271650][ T12] team0 (unregistering): Port device team_slave_0 removed [ 523.954782][ T8730] netlink: 60 bytes leftover after parsing attributes in process `syz.5.471'. [ 524.051792][ T8294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.509642][ T8571] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.537290][ T8571] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.595375][ T8571] bridge_slave_0: entered allmulticast mode [ 524.611990][ T8571] bridge_slave_0: entered promiscuous mode [ 524.838443][ T8571] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.893605][ T8571] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.658493][ T8571] bridge_slave_1: entered allmulticast mode [ 525.677536][ T8571] bridge_slave_1: entered promiscuous mode [ 526.563513][ T8571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.594224][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.600749][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.703152][ T8571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.902071][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.476'. [ 527.125948][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804ab84c00: rx timeout, send abort [ 527.164472][ T8571] team0: Port device team_slave_0 added [ 527.389496][ T8571] team0: Port device team_slave_1 added [ 527.706016][ T8571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.734060][ T8571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.837012][ T8571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.927285][ T8571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.946966][ T8571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.017004][ T8571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.208533][ T5892] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 528.266490][ T5892] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 528.285339][ T5892] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 528.294615][ T5892] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 528.304503][ T5892] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 528.407090][ T5924] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 528.581892][ T8792] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 528.719035][ T5924] usb 6-1: Using ep0 maxpacket: 16 [ 528.757962][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 528.807403][ T5924] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 528.844601][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.857766][ T8797] netlink: 128 bytes leftover after parsing attributes in process `syz.0.480'. [ 528.883027][ T5924] usb 6-1: Product: syz [ 528.888084][ T5924] usb 6-1: Manufacturer: syz [ 528.897531][ T5924] usb 6-1: SerialNumber: syz [ 528.943580][ T5924] usb 6-1: config 0 descriptor?? [ 528.989071][ T5924] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 529.005477][ T5924] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 529.283479][ T8571] hsr_slave_0: entered promiscuous mode [ 529.313786][ T8571] hsr_slave_1: entered promiscuous mode [ 529.338125][ T8571] debugfs: 'hsr0' already exists in 'hsr' [ 529.371720][ T8571] Cannot create hsr debugfs directory [ 529.611378][ T5924] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 529.940398][ T5882] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 530.191555][ T5924] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 530.233505][ T5924] em28xx 6-1:0.0: board has no eeprom [ 530.305635][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.483'. [ 530.342157][ T5924] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 530.351340][ T5877] Bluetooth: hci0: command tx timeout [ 530.360334][ T5882] usb 1-1: config 0 has no interfaces? [ 530.372492][ T5882] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 530.383434][ T5924] em28xx 6-1:0.0: dvb set to bulk mode. [ 530.390250][ T6028] em28xx 6-1:0.0: Binding DVB extension [ 530.421055][ T5924] usb 6-1: USB disconnect, device number 10 [ 530.563574][ T5924] em28xx 6-1:0.0: Disconnecting em28xx [ 530.576215][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.688400][ T5882] usb 1-1: Product: syz [ 530.715740][ T5882] usb 1-1: Manufacturer: syz [ 530.933342][ T5882] usb 1-1: SerialNumber: syz [ 530.996567][ T5882] usb 1-1: config 0 descriptor?? [ 531.433123][ T6028] em28xx 6-1:0.0: Registering input extension [ 531.479523][ T5924] em28xx 6-1:0.0: Closing input extension [ 531.704183][ T5924] em28xx 6-1:0.0: Freeing device [ 531.712664][ T8831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.828437][ T8831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.435323][ T5877] Bluetooth: hci0: command tx timeout [ 534.507222][ T5877] Bluetooth: hci0: command tx timeout [ 534.987566][ T974] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 535.244998][ T974] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 535.353320][ T974] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 535.445327][ T8857] hub 9-0:1.0: USB hub found [ 535.451327][ T8857] hub 9-0:1.0: 1 port detected [ 535.673619][ T974] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 535.698523][ T974] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 535.726853][ T24] usb 1-1: USB disconnect, device number 12 [ 535.743830][ T974] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 536.137132][ T974] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 536.168600][ T974] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 536.187483][ T974] usb 6-1: Product: syz [ 536.191852][ T974] usb 6-1: Manufacturer: syz [ 536.192218][ T3491] bridge_slave_1: left allmulticast mode [ 536.224211][ T974] cdc_wdm 6-1:1.0: skipping garbage [ 536.246440][ T974] cdc_wdm 6-1:1.0: skipping garbage [ 536.492726][ T3491] bridge_slave_1: left promiscuous mode [ 536.508501][ T974] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 536.635575][ T8867] Zero length message leads to an empty skb [ 537.334331][ T5877] Bluetooth: hci0: command tx timeout [ 537.356087][ T8871] usb usb8: usbfs: process 8871 (syz.5.486) did not claim interface 0 before use [ 537.417052][ T974] cdc_wdm 6-1:1.0: Unknown control protocol [ 537.431590][ T3491] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.463106][ T3491] bridge_slave_0: left allmulticast mode [ 537.477068][ T3491] bridge_slave_0: left promiscuous mode [ 537.489453][ T3491] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.839526][ T5882] usb 6-1: USB disconnect, device number 11 [ 540.427909][ T8890] syz.5.491: attempt to access beyond end of device [ 540.427909][ T8890] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 540.441281][ T8890] befs: (nbd5): unable to read superblock [ 540.537865][ T8891] openvswitch: netlink: Message has 24 unknown bytes. [ 541.934726][ T3491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.060058][ T3491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.132971][ T3491] bond0 (unregistering): Released all slaves [ 542.582329][ T8784] chnl_net:caif_netlink_parms(): no params data found [ 542.877453][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 542.972741][ T3491] hsr_slave_0: left promiscuous mode [ 543.011638][ T3491] hsr_slave_1: left promiscuous mode [ 543.107061][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 543.123346][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 543.143010][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.198994][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 543.437055][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.445236][ T10] usb 1-1: Product: syz [ 543.477035][ T10] usb 1-1: Manufacturer: syz [ 543.481699][ T10] usb 1-1: SerialNumber: syz [ 543.598363][ T8908] openvswitch: netlink: Message has 24 unknown bytes. [ 544.467482][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.488452][ T10] usb 1-1: config 0 descriptor?? [ 544.539306][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 544.609018][ T10] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 545.148893][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 546.126227][ T10] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 546.154664][ T10] em28xx 1-1:0.0: board has no eeprom [ 546.306818][ T10] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 546.314859][ T10] em28xx 1-1:0.0: dvb set to bulk mode. [ 546.332321][ T5882] em28xx 1-1:0.0: Binding DVB extension [ 546.449623][ T10] usb 1-1: USB disconnect, device number 13 [ 546.508965][ T10] em28xx 1-1:0.0: Disconnecting em28xx [ 546.664912][ T5882] em28xx 1-1:0.0: Registering input extension [ 546.696747][ T10] em28xx 1-1:0.0: Closing input extension [ 546.793008][ T10] em28xx 1-1:0.0: Freeing device [ 547.340123][ T3491] team0 (unregistering): Port device team_slave_1 removed [ 547.460607][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 547.473274][ T3491] team0 (unregistering): Port device team_slave_0 removed [ 547.617246][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 547.627473][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.639282][ T24] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 547.929510][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.959532][ T24] usb 1-1: config 0 descriptor?? [ 548.191362][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 548.227294][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 548.284910][ T24] usb 1-1: USB disconnect, device number 14 [ 549.167112][ T8948] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 549.902073][ T8955] syz.2.503: attempt to access beyond end of device [ 549.902073][ T8955] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 549.915720][ T8955] befs: (nbd2): unable to read superblock [ 549.950517][ T8955] openvswitch: netlink: Message has 24 unknown bytes. [ 550.911322][ T8784] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.919492][ T8784] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.927437][ T8784] bridge_slave_0: entered allmulticast mode [ 550.946318][ T8784] bridge_slave_0: entered promiscuous mode [ 551.037222][ T8784] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.067623][ T8784] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.095833][ T8784] bridge_slave_1: entered allmulticast mode [ 551.169050][ T8784] bridge_slave_1: entered promiscuous mode [ 551.674597][ T8784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.772478][ T8974] syz.0.507: attempt to access beyond end of device [ 551.772478][ T8974] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 551.786627][ T8974] befs: (nbd0): unable to read superblock [ 551.872531][ T8975] openvswitch: netlink: Message has 24 unknown bytes. [ 552.760130][ T8784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.914336][ T8986] netlink: 208 bytes leftover after parsing attributes in process `syz.0.509'. [ 553.754257][ T8571] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 554.048658][ T8784] team0: Port device team_slave_0 added [ 554.166798][ T8784] team0: Port device team_slave_1 added [ 554.248742][ T8571] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 554.312586][ T8571] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 554.667647][ T8571] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 554.885153][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.929611][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.051636][ T8784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.090177][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.124732][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.227205][ T8784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.071799][ T8784] hsr_slave_0: entered promiscuous mode [ 556.124412][ T8784] hsr_slave_1: entered promiscuous mode [ 556.399087][ T8784] debugfs: 'hsr0' already exists in 'hsr' [ 556.405175][ T8784] Cannot create hsr debugfs directory [ 556.417000][ T5882] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 556.650877][ T5882] usb 1-1: config 0 has no interfaces? [ 556.818288][ T5882] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 556.869348][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.057047][ T5882] usb 1-1: Product: syz [ 557.061337][ T5882] usb 1-1: Manufacturer: syz [ 557.065977][ T5882] usb 1-1: SerialNumber: syz [ 557.841074][ T9032] hub 9-0:1.0: USB hub found [ 557.847350][ T9032] hub 9-0:1.0: 1 port detected [ 557.971876][ T5882] usb 1-1: config 0 descriptor?? [ 559.268082][ T8571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.307832][ T9008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.318661][ T9008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.423219][ T8571] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.970387][ T8784] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 561.183290][ T8784] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 561.327007][ T8784] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 561.432679][ T8784] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 562.771158][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.518'. [ 562.862466][ T5892] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 562.876042][ T5892] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 562.884703][ T5892] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 562.900903][ T5892] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 562.909338][ T5892] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 563.260563][ T42] usb 1-1: USB disconnect, device number 15 [ 565.023244][ T5892] Bluetooth: hci5: command tx timeout [ 566.376383][ T8784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.067455][ T5892] Bluetooth: hci5: command tx timeout [ 567.620594][ T8784] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.970125][ T8335] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.977470][ T8335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.138176][ T8335] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.145464][ T8335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.620908][ T9069] chnl_net:caif_netlink_parms(): no params data found [ 569.027514][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.526'. [ 569.268764][ T5892] Bluetooth: hci5: command tx timeout [ 569.797949][ T59] bridge_slave_1: left allmulticast mode [ 569.818611][ T59] bridge_slave_1: left promiscuous mode [ 569.898166][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.987288][ T42] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 570.150153][ T42] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 570.183612][ T42] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 570.184765][ T59] bridge_slave_0: left allmulticast mode [ 570.228320][ T9151] hub 9-0:1.0: USB hub found [ 570.233842][ T9151] hub 9-0:1.0: 1 port detected [ 570.258931][ T42] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 570.295594][ T59] bridge_slave_0: left promiscuous mode [ 570.309141][ T42] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 570.333763][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.418388][ T42] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 570.466539][ T42] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 570.486678][ T42] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 570.507709][ T42] usb 3-1: Product: syz [ 570.521396][ T42] usb 3-1: Manufacturer: syz [ 570.755612][ T42] cdc_wdm 3-1:1.0: skipping garbage [ 570.792065][ T42] cdc_wdm 3-1:1.0: skipping garbage [ 571.049122][ T42] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 571.055183][ T42] cdc_wdm 3-1:1.0: Unknown control protocol [ 571.857635][ T5892] Bluetooth: hci5: command tx timeout [ 572.081123][ T9163] usb usb8: usbfs: process 9163 (syz.2.529) did not claim interface 0 before use [ 572.256681][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 6 bytes [ 574.014719][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.137138][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.172735][ T59] bond0 (unregistering): Released all slaves [ 575.094182][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 575.598142][ T59] hsr_slave_0: left promiscuous mode [ 575.634372][ T59] hsr_slave_1: left promiscuous mode [ 575.662158][ T24] usb 3-1: USB disconnect, device number 12 [ 575.713048][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.887399][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.004539][ T59] team0 (unregistering): Port device team_slave_1 removed [ 580.337404][ T59] team0 (unregistering): Port device team_slave_0 removed [ 580.525459][ T9248] hub 9-0:1.0: USB hub found [ 580.531692][ T9248] hub 9-0:1.0: 1 port detected [ 581.844320][ T30] audit: type=1326 audit(1754900613.989:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9249 comm="syz.2.539" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd85438ebe9 code=0x0 [ 582.701059][ T9069] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.714619][ T9069] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.737827][ T9069] bridge_slave_0: entered allmulticast mode [ 582.759436][ T9069] bridge_slave_0: entered promiscuous mode [ 582.778015][ T9069] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.785218][ T9069] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.800047][ T9069] bridge_slave_1: entered allmulticast mode [ 582.812813][ T9069] bridge_slave_1: entered promiscuous mode [ 582.845280][ T9207] netlink: 40 bytes leftover after parsing attributes in process `syz.5.535'. [ 583.056670][ T9257] hub 9-0:1.0: USB hub found [ 583.066234][ T9257] hub 9-0:1.0: 1 port detected [ 583.522327][ T9069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.763709][ T9069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.861533][ T9069] team0: Port device team_slave_0 added [ 585.013909][ T9069] team0: Port device team_slave_1 added [ 585.622096][ T9069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.654316][ T9069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.680518][ C0] vkms_vblank_simulate: vblank timer overrun [ 585.907021][ T9069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.616084][ T9069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.634727][ T9069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.839289][ T9069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.981022][ T8784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.817232][ T9069] hsr_slave_0: entered promiscuous mode [ 587.826406][ T9069] hsr_slave_1: entered promiscuous mode [ 587.888378][ T9069] debugfs: 'hsr0' already exists in 'hsr' [ 587.894184][ T9069] Cannot create hsr debugfs directory [ 588.049763][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 588.049862][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 588.494110][ T9309] overlayfs: missing 'lowerdir' [ 589.608673][ T9312] hub 9-0:1.0: USB hub found [ 589.614364][ T9312] hub 9-0:1.0: 1 port detected [ 591.720331][ T5892] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 591.729461][ T5892] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 591.747720][ T5892] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 591.797455][ T5892] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 591.823193][ T5892] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 592.722102][ T9336] 8021q: adding VLAN 0 to HW filter on device bond1 [ 593.070118][ T9340] bond1: entered promiscuous mode [ 593.167290][ T42] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 593.367039][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 593.403778][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 593.447944][ T42] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 593.507183][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.766842][ T42] usb 5-1: Product: syz [ 593.781221][ T42] usb 5-1: Manufacturer: syz [ 593.785825][ T42] usb 5-1: SerialNumber: syz [ 593.811730][ T42] usb 5-1: config 0 descriptor?? [ 593.942276][ T9352] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 594.597147][ T5892] Bluetooth: hci0: command tx timeout [ 594.648452][ T42] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 594.698179][ T42] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 595.106701][ T42] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 595.121084][ T9357] hub 9-0:1.0: USB hub found [ 595.181040][ T9357] hub 9-0:1.0: 1 port detected [ 595.575425][ T42] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 595.678933][ T42] em28xx 5-1:0.0: board has no eeprom [ 595.918572][ T42] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 595.926575][ T42] em28xx 5-1:0.0: dvb set to bulk mode. [ 595.969374][ T5924] em28xx 5-1:0.0: Binding DVB extension [ 596.029145][ T42] usb 5-1: USB disconnect, device number 10 [ 596.063249][ T42] em28xx 5-1:0.0: Disconnecting em28xx [ 596.246129][ T5924] em28xx 5-1:0.0: Registering input extension [ 596.287348][ T42] em28xx 5-1:0.0: Closing input extension [ 596.327754][ T8320] bridge_slave_1: left allmulticast mode [ 596.333926][ T8320] bridge_slave_1: left promiscuous mode [ 596.368910][ T42] em28xx 5-1:0.0: Freeing device [ 596.389635][ T8320] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.500563][ T8320] bridge_slave_0: left allmulticast mode [ 596.529699][ T8320] bridge_slave_0: left promiscuous mode [ 596.566685][ T8320] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.667825][ T5892] Bluetooth: hci0: command tx timeout [ 598.337821][ T8320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.353020][ T8320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.365471][ T8320] bond0 (unregistering): Released all slaves [ 598.753708][ T5892] Bluetooth: hci0: command tx timeout [ 598.910566][ T9403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.562'. [ 599.030786][ T8320] hsr_slave_0: left promiscuous mode [ 599.056099][ T8320] hsr_slave_1: left promiscuous mode [ 599.168733][ T8320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.296321][ T8320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.672556][ T8320] team0 (unregistering): Port device team_slave_1 removed [ 600.756113][ T8320] team0 (unregistering): Port device team_slave_0 removed [ 600.838034][ T5892] Bluetooth: hci0: command tx timeout [ 603.775581][ T9329] chnl_net:caif_netlink_parms(): no params data found [ 604.995403][ T9069] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 605.141581][ T974] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 605.180347][ T9069] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 605.310740][ T974] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 605.319816][ T974] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 605.336678][ T974] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 605.351821][ T974] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 605.371197][ T974] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 605.412062][ T974] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 605.421456][ T974] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 605.434909][ T974] usb 6-1: Product: syz [ 606.213268][ T974] usb 6-1: Manufacturer: syz [ 606.272031][ T974] cdc_wdm 6-1:1.0: skipping garbage [ 606.278594][ T974] cdc_wdm 6-1:1.0: skipping garbage [ 606.287862][ T974] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 606.294504][ T974] cdc_wdm 6-1:1.0: Unknown control protocol [ 606.747757][ T9458] usb usb8: usbfs: process 9458 (syz.5.572) did not claim interface 0 before use [ 606.843981][ T9069] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 606.970100][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 6 bytes [ 607.184697][ T9069] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 608.905312][ T9329] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.932685][ T9329] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.947713][ T9329] bridge_slave_0: entered allmulticast mode [ 608.969178][ T9329] bridge_slave_0: entered promiscuous mode [ 609.027789][ T9329] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.034999][ T9329] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.077516][ T9329] bridge_slave_1: entered allmulticast mode [ 609.111059][ T9329] bridge_slave_1: entered promiscuous mode [ 609.591126][ T9329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.756629][ T9329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.853758][ T974] usb 6-1: USB disconnect, device number 12 [ 610.160767][ T9329] team0: Port device team_slave_0 added [ 610.200919][ T9329] team0: Port device team_slave_1 added [ 610.542049][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.567089][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.657108][ T9329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.703638][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.733146][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.785552][ T9329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.143979][ T9329] hsr_slave_0: entered promiscuous mode [ 611.164514][ T9329] hsr_slave_1: entered promiscuous mode [ 611.177599][ T9329] debugfs: 'hsr0' already exists in 'hsr' [ 611.202123][ T9329] Cannot create hsr debugfs directory [ 611.958380][ T9069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.588857][ T9069] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.659736][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.667026][ T6141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.008726][ T8322] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.016000][ T8322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.086434][ T9329] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 616.155031][ T9329] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 616.253848][ T9329] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 616.318449][ T9329] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 617.065526][ T9069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.136744][ T9329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.303750][ T9329] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.397314][ T8327] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.404627][ T8327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.694224][ T8327] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.701535][ T8327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.143251][ T5924] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 621.678736][ T9655] kthread_run failed with err -4 [ 623.676993][ T30] audit: type=1326 audit(1754900655.799:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.4.641" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf0ef8ebe9 code=0x0 [ 623.924488][ T9329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.368568][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 624.590465][ T10] usb 1-1: config index 0 descriptor too short (expected 24929, got 441) [ 624.609770][ T10] usb 1-1: config 97 has too many interfaces: 97, using maximum allowed: 32 [ 624.648782][ T10] usb 1-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 624.679588][ T10] usb 1-1: config 97 has 0 interfaces, different from the descriptor's value: 97 [ 624.732582][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 624.771010][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.816476][ T5877] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 624.839122][ T5877] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 624.849195][ T5877] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 624.860505][ T5877] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 624.872066][ T5877] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 625.056726][ T9704] overlayfs: missing 'lowerdir' [ 625.579328][ T10] usb 1-1: string descriptor 0 read error: -71 [ 625.648940][ T10] usb 1-1: USB disconnect, device number 16 [ 626.075898][ T9720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 626.566087][ T5924] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 626.677128][ T9710] loop5: detected capacity change from 0 to 2048 [ 626.701464][ T9710] EXT4-fs: Ignoring removed nobh option [ 626.730209][ T9710] EXT4-fs: inline encryption not supported [ 626.754860][ T9710] EXT4-fs: Ignoring removed mblk_io_submit option [ 626.766575][ T9329] veth0_vlan: entered promiscuous mode [ 626.993607][ T5892] Bluetooth: hci5: command tx timeout [ 627.087614][ T5924] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 627.161433][ T5924] usb 1-1: config 0 interface 0 has no altsetting 0 [ 628.039329][ T5924] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 628.066963][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.117692][ T9710] EXT4-fs warning (device loop5): ext4_multi_mount_protect:397: Unable to create kmmpd thread for loop5. [ 628.158685][ T5924] usb 1-1: config 0 descriptor?? [ 628.178966][ T9733] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 628.225810][ T8322] bridge_slave_1: left allmulticast mode [ 628.264426][ T8322] bridge_slave_1: left promiscuous mode [ 628.294871][ T8322] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.372359][ T8322] bridge_slave_0: left allmulticast mode [ 628.406124][ T8322] bridge_slave_0: left promiscuous mode [ 628.441642][ T8322] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.716217][ T5924] ryos 0003:1E7D:3232.0001: unknown main item tag 0x2 [ 628.787588][ T5924] ryos 0003:1E7D:3232.0001: hidraw0: USB HID v0.03 Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0 [ 628.935034][ T5924] usb 1-1: USB disconnect, device number 17 [ 629.088192][ T5892] Bluetooth: hci5: command tx timeout [ 629.435212][ T9761] fido_id[9761]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 629.525785][ T9770] loop5: detected capacity change from 0 to 512 [ 629.555608][ T9770] ======================================================= [ 629.555608][ T9770] WARNING: The mand mount option has been deprecated and [ 629.555608][ T9770] and is ignored by this kernel. Remove the mand [ 629.555608][ T9770] option from the mount to silence this warning. [ 629.555608][ T9770] ======================================================= [ 629.555824][ T9770] EXT4-fs: Ignoring removed oldalloc option [ 629.747900][ T9770] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 629.794457][ T9770] EXT4-fs (loop5): orphan cleanup on readonly fs [ 629.839600][ T9770] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 629.839897][ T9770] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 629.840001][ T9770] EXT4-fs error (device loop5): ext4_acquire_dquot:6931: comm syz.5.661: Failed to acquire dquot type 1 [ 629.930668][ T9770] EXT4-fs (loop5): 1 truncate cleaned up [ 629.991626][ T9770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 630.359016][ T30] audit: type=1326 audit(1754900662.509:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0ef8ebe9 code=0x7ffc0000 [ 630.381435][ T5924] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 630.476186][ T30] audit: type=1326 audit(1754900662.509:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0ef8ebe9 code=0x7ffc0000 [ 630.515393][ T30] audit: type=1326 audit(1754900662.559:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fdf0ef8ebe9 code=0x7ffc0000 [ 630.581232][ T5924] usb 6-1: Using ep0 maxpacket: 16 [ 630.597454][ T30] audit: type=1326 audit(1754900662.559:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0ef8ebe9 code=0x7ffc0000 [ 630.610984][ T5924] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.678867][ T30] audit: type=1326 audit(1754900662.559:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0ef8ebe9 code=0x7ffc0000 [ 630.711231][ T5924] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.759679][ T9778] block device autoloading is deprecated and will be removed. [ 630.770273][ T5924] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 630.798504][ T5924] usb 6-1: config 0 interface 0 has no altsetting 0 [ 630.805216][ T5924] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 630.819263][ T9778] syz.0.664: attempt to access beyond end of device [ 630.819263][ T9778] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 630.829720][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.861324][ T9778] FAT-fs (loop1): unable to read boot sector [ 630.887299][ T5924] usb 6-1: config 0 descriptor?? [ 631.147398][ T5892] Bluetooth: hci5: command tx timeout [ 631.609310][ T5924] hid (null): unknown global tag 0x9d [ 631.614804][ T5924] hid (null): unknown global tag 0xe [ 631.626362][ T5924] hid (null): unknown global tag 0xe [ 631.632256][ T5924] hid (null): unknown global tag 0xc [ 631.638533][ T5924] hid (null): unknown global tag 0xd [ 631.643891][ T5924] hid (null): unknown global tag 0x65 [ 631.676033][ T5924] usb 6-1: USB disconnect, device number 13 [ 631.903273][ T8322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.943598][ T8322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.975110][ T8322] bond0 (unregistering): Released all slaves [ 632.016118][ T9329] veth1_vlan: entered promiscuous mode [ 632.324945][ T5869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.414720][ T9698] chnl_net:caif_netlink_parms(): no params data found [ 632.617535][ T8322] hsr_slave_0: left promiscuous mode [ 632.640125][ T8322] hsr_slave_1: left promiscuous mode [ 632.663844][ T8322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.713063][ T8322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.238053][ T5892] Bluetooth: hci5: command tx timeout [ 633.892871][ T8322] team0 (unregistering): Port device team_slave_1 removed [ 634.886022][ T8322] team0 (unregistering): Port device team_slave_0 removed [ 638.779631][ T9698] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.797738][ T9698] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.839967][ T9698] bridge_slave_0: entered allmulticast mode [ 638.860664][ T9698] bridge_slave_0: entered promiscuous mode [ 638.895689][ T9329] veth0_macvtap: entered promiscuous mode [ 638.936111][ T9698] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.961565][ T9698] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.974704][ T9698] bridge_slave_1: entered allmulticast mode [ 638.983972][ T9698] bridge_slave_1: entered promiscuous mode [ 639.013669][ T9329] veth1_macvtap: entered promiscuous mode [ 639.313659][ T9698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.373964][ T9698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.424174][ T9329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.472576][ T9329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.836701][ T9861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.684'. [ 639.870854][ T9861] tipc: Invalid UDP bearer configuration [ 639.870954][ T9861] tipc: Enabling of bearer rejected, failed to enable media [ 639.931651][ T9698] team0: Port device team_slave_0 added [ 639.975410][ T9698] team0: Port device team_slave_1 added [ 640.038225][ T3491] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.094821][ T3491] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.601481][ T9890] loop5: detected capacity change from 0 to 16 [ 642.829496][ T3491] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.860000][ T9890] erofs (device loop5): bogus i_mode (6) @ nid 36 [ 642.926807][ T3491] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.158164][ T9698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.213766][ T9698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.476988][ T9698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.610489][ T9698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.676943][ T9698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.865313][ T9698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.328584][ T9698] hsr_slave_0: entered promiscuous mode [ 644.356638][ T9698] hsr_slave_1: entered promiscuous mode [ 644.387039][ T30] audit: type=1326 audit(1754900676.519:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9897 comm="syz.4.693" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf0ef8ebe9 code=0x0 [ 644.407502][ T9698] debugfs: 'hsr0' already exists in 'hsr' [ 644.414727][ T9698] Cannot create hsr debugfs directory [ 645.117390][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.125281][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.789757][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'. [ 646.271979][ T30] audit: type=1800 audit(1754900678.419:27): pid=9919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.698" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 646.272640][ T9919] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 646.304344][ T9919] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 646.314674][ T9919] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 646.347379][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.407477][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.003587][ T9937] Driver unsupported XDP return value 0 on prog (id 145) dev N/A, expect packet loss! [ 649.481948][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.482089][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 652.218005][ T5924] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 652.914112][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.943449][ T9974] netlink: 96 bytes leftover after parsing attributes in process `syz.2.711'. [ 652.965002][ T5924] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 653.002160][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.208216][ T5924] usb 6-1: config 0 descriptor?? [ 653.759903][ T9698] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 654.112287][ T9987] loop4: detected capacity change from 0 to 4096 [ 654.394106][ T9698] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 654.706294][ T9994] evm: overlay not supported [ 655.478166][ T9698] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 655.495519][ T9987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.562127][ T9698] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 656.188622][ T5871] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.363887][T10019] loop6: detected capacity change from 0 to 256 [ 656.437390][ T9698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.538743][ T5886] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 656.584085][ T9698] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.635556][T10019] vfat: Unknown parameter 'shortYame' [ 656.750952][ T8320] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.758295][ T8320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.766527][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 656.829206][ T8320] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.836528][ T8320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.590590][ T5886] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 657.627255][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.766926][ T5886] usb 3-1: config 0 has no interface number 0 [ 657.773153][ T5886] usb 3-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 657.783253][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.885819][ T5886] usb 3-1: config 0 descriptor?? [ 658.022889][ T5886] usb 3-1: Found UVC 0.00 device (0bd3:05f4) [ 658.098965][ T5886] usb 3-1: No valid video chain found. [ 658.155099][ T5886] usb 3-1: USB disconnect, device number 14 [ 658.379670][ T5924] usbhid 6-1:0.0: can't add hid device: -32 [ 658.396322][ T5924] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 659.285366][ T9698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.177980][ T9698] veth0_vlan: entered promiscuous mode [ 662.376766][ T9698] veth1_vlan: entered promiscuous mode [ 662.951899][ T9698] veth0_macvtap: entered promiscuous mode [ 663.059113][ T9698] veth1_macvtap: entered promiscuous mode [ 663.316739][ T9698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.442075][ T9698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.624787][ T78] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.697014][ T78] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.713008][ T78] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.748224][ T78] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.264478][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.335543][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.343524][ T10] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 664.571735][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.587289][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.627255][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.646750][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 664.696644][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 664.760504][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.817026][ T10] usb 7-1: Product: syz [ 664.852807][ T10] usb 7-1: Manufacturer: syz [ 664.885377][ T10] usb 7-1: SerialNumber: syz [ 665.170377][ T10] usb 7-1: 0:2 : does not exist [ 665.246800][ T10] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 668.282212][ T10] usb 7-1: USB disconnect, device number 2 [ 668.662423][ T9423] udevd[9423]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 670.013584][T10141] loop6: detected capacity change from 0 to 256 [ 671.043038][ T5877] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 671.056384][ T5877] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 671.067452][ T5877] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 671.080893][ T5877] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 671.090947][ T5877] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 671.557041][ T5924] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 671.804118][ T5924] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 671.834110][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.880351][ T5924] usb 5-1: config 0 descriptor?? [ 672.396618][ T5924] ryos 0003:1E7D:3232.0003: unknown main item tag 0x0 [ 672.444011][ T5924] ryos 0003:1E7D:3232.0003: unknown main item tag 0x0 [ 672.484890][ T5924] ryos 0003:1E7D:3232.0003: unknown main item tag 0x0 [ 672.552958][T10177] loop6: detected capacity change from 0 to 256 [ 672.614459][T10177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.623225][T10177] batadv_slave_0: entered allmulticast mode [ 672.634535][T10177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.642066][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 672.718422][T10177] bridge0: port 3(batadv_slave_0) entered blocking state [ 672.725722][T10177] bridge0: port 3(batadv_slave_0) entered disabled state [ 672.735878][T10177] batadv_slave_0: entered promiscuous mode [ 672.781556][T10154] chnl_net:caif_netlink_parms(): no params data found [ 672.827821][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 672.852125][ T10] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 672.931521][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 672.985818][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 673.056998][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.165974][ T10] usb 1-1: config 0 descriptor?? [ 673.228853][ T5892] Bluetooth: hci6: command tx timeout [ 673.472626][ T5924] ryos 0003:1E7D:3232.0003: unknown main item tag 0x0 [ 674.451133][ T5924] ryos 0003:1E7D:3232.0003: hidraw0: USB HID v0.01 Device [HID 1e7d:3232] on usb-dummy_hcd.4-1/input0 [ 674.544912][ T10] lg-g15 0003:046D:C22D.0004: hidraw1: USB HID v0.06 Device [HID 046d:c22d] on usb-dummy_hcd.0-1/input0 [ 674.829483][ T10] usb 1-1: USB disconnect, device number 18 [ 675.111803][ T5924] usb 5-1: USB disconnect, device number 11 [ 675.307769][ T5877] Bluetooth: hci6: command tx timeout [ 675.399557][T10191] fido_id[10191]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 675.593436][T10154] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.638744][T10154] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.646283][T10154] bridge_slave_0: entered allmulticast mode [ 675.660804][ T5924] usb 6-1: USB disconnect, device number 14 [ 675.764098][T10154] bridge_slave_0: entered promiscuous mode [ 677.387672][ T5877] Bluetooth: hci6: command tx timeout [ 677.653903][ T6141] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.739825][T10154] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.779672][T10154] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.797279][ T5924] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 677.800335][T10154] bridge_slave_1: entered allmulticast mode [ 677.865150][T10154] bridge_slave_1: entered promiscuous mode [ 677.971058][ T5924] usb 7-1: Using ep0 maxpacket: 32 [ 677.983983][ T5924] usb 7-1: config 4 has an invalid interface number: 128 but max is 0 [ 677.997392][ T5924] usb 7-1: config 4 has no interface number 0 [ 678.016054][ T5924] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.067785][ T5924] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.106126][ T5924] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 678.169839][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.250816][ T5924] hub 7-1:4.128: USB hub found [ 678.341662][ T6141] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.472005][ T5924] hub 7-1:4.128: config failed, can't read hub descriptor (err -90) [ 678.623550][T10154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.790760][ T5924] usb 7-1: USB disconnect, device number 3 [ 678.919831][ T6141] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.031049][T10154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.179443][ T5892] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 679.412559][ T5892] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 679.429205][ T5892] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 679.874521][ T5892] Bluetooth: hci6: command tx timeout [ 679.951041][ T5892] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 679.959699][ T5892] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 680.413132][ T6141] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.523696][T10154] team0: Port device team_slave_0 added [ 680.594053][T10154] team0: Port device team_slave_1 added [ 680.971381][T10154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.007180][T10154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.036123][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 681.105957][T10154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.242369][ T10] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.267172][ T10] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.324684][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 681.358011][ T10] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 681.381195][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.578567][T10154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.579408][ T10] usb 7-1: config 0 descriptor?? [ 681.585571][T10154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.585627][T10154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.047032][T10241] Bluetooth: hci1: command tx timeout [ 683.176754][ T10] usb 7-1: string descriptor 0 read error: -71 [ 683.211882][ T10] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #200: -71 [ 683.247174][ T10] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 683.326521][ T10] uclogic 0003:256C:006D.0005: failed probing pen v2 parameters: -71 [ 683.372795][ T10] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 683.405565][T10154] hsr_slave_0: entered promiscuous mode [ 683.431355][ T10] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 683.459246][T10154] hsr_slave_1: entered promiscuous mode [ 683.498975][ T10] usb 7-1: USB disconnect, device number 4 [ 683.537902][T10154] debugfs: 'hsr0' already exists in 'hsr' [ 683.543710][T10154] Cannot create hsr debugfs directory [ 684.016473][T10289] netlink: 84 bytes leftover after parsing attributes in process `syz.6.779'. [ 684.107273][T10241] Bluetooth: hci1: command tx timeout [ 684.157341][ T6141] bridge_slave_1: left allmulticast mode [ 684.212048][ T6141] bridge_slave_1: left promiscuous mode [ 684.227291][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.371719][ T6141] bridge_slave_0: left allmulticast mode [ 684.407062][ T6141] bridge_slave_0: left promiscuous mode [ 684.413105][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.131700][ T59] Bluetooth: hci4: Frame reassembly failed (-84) [ 685.325895][ T5724] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 685.498345][ T5724] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 685.506462][ T5724] usb 1-1: config 0 has no interface number 0 [ 685.523171][ T5724] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.554490][ T5724] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 685.586940][ T5724] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 685.657194][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.704281][ T5724] usb 1-1: config 0 descriptor?? [ 686.242907][ T9331] Bluetooth: hci1: command tx timeout [ 686.715251][ T5724] hid (null): report_id 35660 is invalid [ 686.874145][ T5724] input: HID 28bd:0042 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0042.0006/input/input16 [ 687.048412][ T5724] uclogic 0003:28BD:0042.0006: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.0-1/input1 [ 687.147466][ T5724] usb 1-1: USB disconnect, device number 19 [ 687.185904][T10241] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 687.234293][T10305] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 687.317272][ T9331] Bluetooth: hci0: command 0x0401 tx timeout [ 687.474378][T10328] loop6: detected capacity change from 0 to 16 [ 687.558499][T10328] erofs (device loop6): mounted with root inode @ nid 36. [ 688.310486][T10326] fido_id[10326]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 688.325962][ T9331] Bluetooth: hci1: command tx timeout [ 690.468126][ T6141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.555832][ T6141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.596286][ T6141] bond0 (unregistering): Released all slaves [ 692.898497][T10355] netlink: 20 bytes leftover after parsing attributes in process `syz.6.800'. [ 692.931542][T10355] netlink: 20 bytes leftover after parsing attributes in process `syz.6.800'. [ 695.512183][T10380] netlink: 'syz.7.807': attribute type 3 has an invalid length. [ 695.694931][ T6141] hsr_slave_0: left promiscuous mode [ 695.719642][ T6141] hsr_slave_1: left promiscuous mode [ 695.744850][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.772773][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.797570][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.815261][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.875679][ T6141] veth1_macvtap: left promiscuous mode [ 695.894281][ T6141] veth0_macvtap: left promiscuous mode [ 696.416369][T10375] loop6: detected capacity change from 0 to 40427 [ 696.480959][T10375] F2FS-fs: heap/no_heap options were deprecated [ 696.539505][T10375] F2FS-fs (loop6): Image doesn't support compression [ 696.665026][T10375] F2FS-fs (loop6): invalid crc value [ 697.042044][T10375] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 697.070312][T10375] F2FS-fs (loop6): Start checkpoint disabled! [ 697.589962][T10394] capability: warning: `syz.0.809' uses deprecated v2 capabilities in a way that may be insecure [ 698.584609][ T42] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 698.761954][ T42] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 698.775961][ T42] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 698.796159][ T42] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 698.855845][ T42] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 698.881140][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.025454][ T42] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 699.088842][ T42] usb 8-1: invalid MIDI out EP 0 [ 699.421506][ T9423] udevd[9423]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 699.561811][ T42] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 699.659910][ T42] usb 8-1: USB disconnect, device number 2 [ 699.677781][ T6141] team0 (unregistering): Port device team_slave_1 removed [ 699.823926][ T6141] team0 (unregistering): Port device team_slave_0 removed [ 704.437284][ T42] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 704.607106][ T42] usb 8-1: Using ep0 maxpacket: 32 [ 704.643263][T10423] netlink: 'syz.0.817': attribute type 13 has an invalid length. [ 704.649107][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.684024][ T42] usb 8-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 704.710152][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.773274][ T42] usb 8-1: config 0 descriptor?? [ 705.134925][T10423] gretap0: refused to change device tx_queue_len [ 705.143444][T10423] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 705.228854][ T42] magicmouse 0003:05AC:0265.0007: item fetching failed at offset 2/5 [ 705.241356][ T42] magicmouse 0003:05AC:0265.0007: magicmouse hid parse failed [ 705.253835][ T42] magicmouse 0003:05AC:0265.0007: probe with driver magicmouse failed with error -22 [ 705.524433][T10236] chnl_net:caif_netlink_parms(): no params data found [ 705.792887][T10154] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 706.170320][T10154] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 706.328142][T10154] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 706.578268][ T24] usb 8-1: USB disconnect, device number 3 [ 707.587836][T10154] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 709.350075][T10464] process 'syz.7.823' launched '/dev/fd/6' with NULL argv: empty string added [ 709.538842][T10236] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.575417][T10236] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.613828][T10236] bridge_slave_0: entered allmulticast mode [ 709.644042][T10236] bridge_slave_0: entered promiscuous mode [ 710.618605][T10236] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.625861][T10236] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.633607][T10236] bridge_slave_1: entered allmulticast mode [ 710.642482][T10236] bridge_slave_1: entered promiscuous mode [ 710.913119][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 710.922455][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 711.536253][T10154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.149056][T10492] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 712.162781][T10492] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 713.194681][T10236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.256819][T10236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.506818][T10154] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.218720][ T6141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.572325][T10236] team0: Port device team_slave_0 added [ 715.220244][T10236] team0: Port device team_slave_1 added [ 715.391506][ T4581] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.398864][ T4581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.459954][ T4581] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.467269][ T4581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.539566][T10517] bridge: RTM_NEWNEIGH with invalid ether address [ 715.665132][T10523] loop4: detected capacity change from 0 to 128 [ 715.700295][ T6141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.754226][T10523] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 715.804201][T10523] ext4 filesystem being mounted at /188/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 716.317471][ T42] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 717.249700][ T5871] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 717.292054][ T6141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.338017][T10236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.339048][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.355445][T10236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.386413][T10236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.417671][ T42] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 717.457245][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.534905][ T42] usb 7-1: config 0 descriptor?? [ 717.572501][ T6141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.695339][T10236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.746239][T10236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.895030][T10236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.697722][ T9331] Bluetooth: hci0: command 0x0401 tx timeout [ 718.705470][ T42] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 718.742571][ T42] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0008/input/input17 [ 719.208286][ T42] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 719.303624][ T42] usb 7-1: USB disconnect, device number 5 [ 719.433647][T10236] hsr_slave_0: entered promiscuous mode [ 719.498975][T10236] hsr_slave_1: entered promiscuous mode [ 720.731849][T10563] serio: Serial port ttyS3 [ 721.682444][T10553] fido_id[10553]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 722.887156][ T5924] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 723.028080][ T6141] bridge_slave_1: left allmulticast mode [ 723.037276][ T6141] bridge_slave_1: left promiscuous mode [ 723.067483][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.315225][ T5924] usb 7-1: Using ep0 maxpacket: 32 [ 723.342336][ T5924] usb 7-1: config index 0 descriptor too short (expected 52440, got 36) [ 723.351195][ T5924] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.362863][ T6141] bridge_slave_0: left allmulticast mode [ 723.378365][ T5924] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 723.391719][ T5924] usb 7-1: config 0 interface 0 has no altsetting 0 [ 723.398920][ T5924] usb 7-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 724.007010][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.104303][ T5924] usb 7-1: config 0 descriptor?? [ 724.164676][ T6141] bridge_slave_0: left promiscuous mode [ 724.171228][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.368364][T10602] overlayfs: failed to resolve './file0': -2 [ 724.590553][ T5924] wacom 0003:056A:0094.0009: Using device in hidraw-only mode [ 724.660537][ T5924] wacom 0003:056A:0094.0009: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.6-1/input0 [ 724.767160][ T8292] usb 7-1: USB disconnect, device number 6 [ 725.192975][T10605] fido_id[10605]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 725.876018][T10599] loop4: detected capacity change from 0 to 16 [ 725.926156][T10599] erofs (device loop4): invalid lz4 cfgs, size=4 [ 726.187196][T10597] netlink: 112 bytes leftover after parsing attributes in process `syz.4.854'. [ 726.263296][ T30] audit: type=1326 audit(1754900758.409:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0ef8ebe9 code=0x7ffc0000 [ 726.357558][ T30] audit: type=1326 audit(1754900758.409:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0ef8ebe9 code=0x7ffc0000 [ 726.442868][ T30] audit: type=1326 audit(1754900758.449:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf0ef8ebe9 code=0x7ffc0000 [ 726.512861][ T30] audit: type=1326 audit(1754900758.449:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0ef8ebe9 code=0x7ffc0000 [ 726.605232][ T30] audit: type=1326 audit(1754900758.449:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0ef8ebe9 code=0x7ffc0000 [ 726.696813][ T30] audit: type=1326 audit(1754900758.459:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf0ef8ebe9 code=0x7ffc0000 [ 726.796965][ T30] audit: type=1326 audit(1754900758.459:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0ef8ebe9 code=0x7ffc0000 [ 726.843957][ T9331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 726.858004][ T9331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 726.867056][ T9331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 726.875494][ T30] audit: type=1326 audit(1754900758.459:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0ef8ebe9 code=0x7ffc0000 [ 726.978181][ T9331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 726.993508][ T9331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 727.434873][T10618] loop6: detected capacity change from 0 to 8192 [ 727.536430][T10415] loop6: p4 [ 727.547978][T10415] loop6: p4 size 33575424 extends beyond EOD, truncated [ 728.898648][T10618] loop6: p4 [ 728.917557][T10618] loop6: p4 size 33575424 extends beyond EOD, truncated [ 729.119139][T10241] Bluetooth: hci4: command tx timeout [ 731.147598][T10241] Bluetooth: hci4: command tx timeout [ 731.196678][ T6141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.241817][ T6141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.271744][ T6141] bond0 (unregistering): Released all slaves [ 731.364503][ T9331] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 731.399364][ T9331] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 731.417252][ T9331] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 731.443710][ T9331] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 731.454576][ T9331] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 732.023081][ T5228] loop6: p4 [ 732.026691][ T5228] loop6: p4 size 33575424 extends beyond EOD, truncated [ 732.108382][ T6141] tipc: Left network mode [ 732.176881][ T5228] loop6: p4 [ 732.197246][ T5228] loop6: p4 size 33575424 extends beyond EOD, truncated [ 733.228014][T10241] Bluetooth: hci4: command tx timeout [ 733.548948][T10241] Bluetooth: hci5: command tx timeout [ 733.821170][T10415] udevd[10415]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 733.875134][T10415] udevd[10415]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 733.955583][T10653] netlink: 'syz.0.866': attribute type 3 has an invalid length. [ 733.966620][T10653] netlink: 'syz.0.866': attribute type 3 has an invalid length. [ 733.974689][T10653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.866'. [ 734.426583][ T6141] hsr_slave_0: left promiscuous mode [ 734.449388][ T6141] hsr_slave_1: left promiscuous mode [ 734.463419][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.489957][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.518846][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.534853][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.572183][ T6141] veth1_macvtap: left promiscuous mode [ 734.588014][ T6141] veth0_macvtap: left promiscuous mode [ 735.307267][T10241] Bluetooth: hci4: command tx timeout [ 735.460219][ T6141] team0 (unregistering): Port device team_slave_1 removed [ 735.506342][ T6141] team0 (unregistering): Port device team_slave_0 removed [ 735.629189][T10241] Bluetooth: hci5: command tx timeout [ 736.535209][T10236] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 736.692343][T10236] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 736.732572][T10236] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 736.863569][T10236] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 737.342992][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 737.492552][T10236] kthread_run failed with err -4 [ 737.529225][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.556956][ T24] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 737.566079][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.595556][ T24] usb 1-1: config 0 descriptor?? [ 737.717461][T10241] Bluetooth: hci5: command tx timeout [ 738.529459][ T24] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 738.602272][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000A/input/input18 [ 738.937909][T10629] chnl_net:caif_netlink_parms(): no params data found [ 739.068418][ T24] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 739.257082][ T42] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 739.285993][ T24] usb 1-1: USB disconnect, device number 20 [ 739.333886][T10614] chnl_net:caif_netlink_parms(): no params data found [ 739.791883][T10241] Bluetooth: hci5: command tx timeout [ 740.173355][ T9331] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 740.198862][ T9331] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 740.215941][ T9331] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 740.233929][ T9331] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 740.243275][ T9331] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 740.569312][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.592848][ T42] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 740.619963][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.418433][ T42] usb 7-1: config 0 descriptor?? [ 741.515575][T10720] fido_id[10720]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 741.867703][ T42] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 741.918316][ T42] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.000B/input/input19 [ 741.943150][ T8292] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 742.118613][ T42] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 742.167942][ T8292] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 742.176728][ T8292] usb 5-1: config 0 has no interface number 0 [ 742.200364][ T8292] usb 5-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 742.228542][ T8292] usb 5-1: config 0 interface 214 has no altsetting 0 [ 742.258157][ T42] usb 7-1: USB disconnect, device number 7 [ 742.262288][ T8292] usb 5-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 742.327403][ T8292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.347215][ T9331] Bluetooth: hci6: command tx timeout [ 742.354955][ T8292] usb 5-1: Product: syz [ 742.373100][ T8292] usb 5-1: Manufacturer: syz [ 742.401306][ T8292] usb 5-1: SerialNumber: syz [ 742.442238][T10731] fido_id[10731]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 742.470249][ T8292] usb 5-1: config 0 descriptor?? [ 742.481923][T10726] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 742.566072][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 742.726185][T10629] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.739161][T10629] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.758664][T10726] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 742.789988][T10629] bridge_slave_0: entered allmulticast mode [ 742.807181][T10629] bridge_slave_0: entered promiscuous mode [ 742.963224][T10737] loop6: detected capacity change from 0 to 128 [ 742.971848][T10629] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.982696][T10629] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.993548][T10629] bridge_slave_1: entered allmulticast mode [ 743.014868][T10629] bridge_slave_1: entered promiscuous mode [ 744.296770][T10629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.338138][T10629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.477560][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 744.507735][ T9331] Bluetooth: hci6: command tx timeout [ 744.513747][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 744.670785][ T5882] hid-generic 0000:0000:0008.000C: unknown main item tag 0x0 [ 744.711129][ T5882] hid-generic 0000:0000:0008.000C: unknown main item tag 0x0 [ 744.746903][ T5882] hid-generic 0000:0000:0008.000C: unknown main item tag 0x0 [ 744.749916][T10751] 9pnet_fd: Insufficient options for proto=fd [ 744.781542][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 744.793533][T10749] loop6: detected capacity change from 0 to 256 [ 744.808824][ T5882] hid-generic 0000:0000:0008.000C: unknown main item tag 0x0 [ 744.816237][ T5882] hid-generic 0000:0000:0008.000C: unknown main item tag 0x0 [ 744.836612][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 744.856994][ T5882] hid-generic 0000:0000:0008.000C: unknown main item tag 0x0 [ 744.881433][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 744.893953][ T5882] hid-generic 0000:0000:0008.000C: unknown main item tag 0x0 [ 744.919322][ T5882] hid-generic 0000:0000:0008.000C: unknown main item tag 0x0 [ 744.934442][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 744.956516][ T5882] hid-generic 0000:0000:0008.000C: unknown main item tag 0x0 [ 744.975926][ T5882] hid-generic 0000:0000:0008.000C: unknown main item tag 0x0 [ 744.990494][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 745.019934][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 745.041365][ T5882] hid-generic 0000:0000:0008.000C: hidraw0: HID vc.87 Device [syz0] on syz1 [ 745.051558][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 745.109314][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 745.157823][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 745.189845][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 745.227224][T10614] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.252327][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 745.263986][T10614] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.289656][T10614] bridge_slave_0: entered allmulticast mode [ 745.306097][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 745.340157][T10614] bridge_slave_0: entered promiscuous mode [ 745.362563][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 745.379322][T10614] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.407833][T10614] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.416421][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 745.437935][T10614] bridge_slave_1: entered allmulticast mode [ 745.455246][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 745.472695][T10759] fido_id[10759]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 745.485624][T10614] bridge_slave_1: entered promiscuous mode [ 745.516003][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 745.571963][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 745.588349][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 745.607839][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 745.659137][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 745.683752][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 745.747587][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 745.771915][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 745.807175][ T8292] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 745.931233][T10629] team0: Port device team_slave_0 added [ 745.974228][T10629] team0: Port device team_slave_1 added [ 746.094593][ T8292] ax88179_178a 5-1:0.214 eth17: register 'ax88179_178a' at usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, fe:fc:f4:ff:2b:b0 [ 746.175136][ T8292] usb 5-1: USB disconnect, device number 12 [ 746.245224][ T8292] ax88179_178a 5-1:0.214 eth17: unregister 'ax88179_178a' usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 746.273232][T10614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.531290][T10781] loop4: detected capacity change from 0 to 256 [ 746.587325][ T9331] Bluetooth: hci6: command tx timeout [ 746.700675][T10781] exFAT-fs (loop4): error, The cluster chain has a loop [ 746.709338][T10614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.727392][T10781] exFAT-fs (loop4): Filesystem has been set read-only [ 746.734302][T10781] exFAT-fs (loop4): failed to count the number of clusters in root [ 746.857088][T10781] exFAT-fs (loop4): failed to recognize exfat type [ 747.091499][T10629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.206949][T10629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.326274][T10629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.248042][T10629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.255132][T10629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.287891][T10629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.543308][T10614] team0: Port device team_slave_0 added [ 748.707351][ T9331] Bluetooth: hci6: command tx timeout [ 749.815485][ T8277] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.897647][T10614] team0: Port device team_slave_1 added [ 750.048449][T10629] hsr_slave_0: entered promiscuous mode [ 750.055857][T10629] hsr_slave_1: entered promiscuous mode [ 750.083406][T10629] debugfs: 'hsr0' already exists in 'hsr' [ 750.103675][T10629] Cannot create hsr debugfs directory [ 750.204338][T10614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.226904][T10614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.282848][T10614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.623437][ T8277] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.854421][T10614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.892678][T10614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.058506][T10614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.184283][ T8277] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.439606][ T8277] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.604583][T10714] chnl_net:caif_netlink_parms(): no params data found [ 754.845948][T10817] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 754.855696][T10817] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 754.865648][T10817] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 754.896052][ T30] audit: type=1800 audit(1754900786.989:36): pid=10817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.896" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 755.858741][T10614] hsr_slave_0: entered promiscuous mode [ 755.902438][T10614] hsr_slave_1: entered promiscuous mode [ 755.935153][T10614] debugfs: 'hsr0' already exists in 'hsr' [ 755.971133][T10614] Cannot create hsr debugfs directory [ 757.276111][ T5982] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 757.380158][T10714] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.397370][T10714] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.418150][T10714] bridge_slave_0: entered allmulticast mode [ 757.438102][T10714] bridge_slave_0: entered promiscuous mode [ 757.450189][T10714] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.467983][T10714] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.474491][ T5982] usb 7-1: Using ep0 maxpacket: 16 [ 757.475507][T10714] bridge_slave_1: entered allmulticast mode [ 757.510384][ T5982] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 757.526742][T10714] bridge_slave_1: entered promiscuous mode [ 757.533284][ T5982] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 757.587259][ T5982] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 757.596401][ T5982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.639838][ T5982] usb 7-1: config 0 descriptor?? [ 757.959528][T10714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.993719][T10714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.075580][ T5982] hid_parser_main: 34 callbacks suppressed [ 758.075616][ T5982] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 758.131444][ T5982] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 758.158085][ T5982] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 758.186551][ T5982] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 758.214702][ T5982] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 758.277768][ T5982] playstation 0003:054C:0DF2.000D: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 758.346771][ T8277] bridge_slave_1: left allmulticast mode [ 758.362219][ T8277] bridge_slave_1: left promiscuous mode [ 758.388385][ T5982] playstation 0003:054C:0DF2.000D: Invalid reportID received, expected 9 got 247 [ 758.390638][ T8277] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.428864][ T5982] playstation 0003:054C:0DF2.000D: Failed to retrieve DualSense pairing info: -22 [ 758.478350][ T8277] bridge_slave_0: left allmulticast mode [ 758.484073][ T8277] bridge_slave_0: left promiscuous mode [ 758.487692][ T5982] playstation 0003:054C:0DF2.000D: Failed to get MAC address from DualSense [ 758.509734][ T8277] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.529397][ T5982] playstation 0003:054C:0DF2.000D: Failed to create dualsense. [ 758.542679][T10853] loop4: detected capacity change from 0 to 40427 [ 758.564607][ T5982] playstation 0003:054C:0DF2.000D: probe with driver playstation failed with error -22 [ 758.575010][ T8277] bridge_slave_1: left allmulticast mode [ 758.603395][T10853] F2FS-fs (loop4): Image doesn't support compression [ 758.614586][ T8277] bridge_slave_1: left promiscuous mode [ 758.635620][ T5982] usb 7-1: USB disconnect, device number 8 [ 758.647953][T10853] F2FS-fs (loop4): build fault injection rate: 690 [ 758.648239][ T8277] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.738883][T10853] F2FS-fs (loop4): invalid crc value [ 758.762129][ T8277] bridge_slave_0: left allmulticast mode [ 758.790622][ T8277] bridge_slave_0: left promiscuous mode [ 758.827580][ T8277] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.124877][T10853] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 759.164594][T10853] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 760.478113][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.6.907'. [ 760.507259][ T8277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.534064][ T8277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.547440][ T5982] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 760.562148][ T8277] bond0 (unregistering): Released all slaves [ 760.961800][ T5982] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 761.057872][T10891] loop4: detected capacity change from 0 to 128 [ 761.083477][T10891] ext4: Unknown parameter 'nouser_xattr' [ 761.295170][ T5982] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 761.528283][ T5982] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 761.553091][ T5982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 761.593370][ T5982] usb 1-1: SerialNumber: syz [ 761.852935][ T5982] usb 1-1: 0:2 : does not exist [ 761.977946][ T5982] usb 1-1: USB disconnect, device number 21 [ 762.080957][T10415] udevd[10415]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 762.236672][ T8277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.273501][ T8277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.296449][ T8277] bond0 (unregistering): Released all slaves [ 762.428196][T10714] team0: Port device team_slave_0 added [ 763.459625][T10714] team0: Port device team_slave_1 added [ 763.788674][T10906] binder_alloc: 10905: binder_alloc_buf, no vma [ 764.092562][T10714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.127133][T10714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.215681][T10714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.683242][T10714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.696882][T10714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.823963][T10714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.004886][ T8277] hsr_slave_0: left promiscuous mode [ 765.036339][ T8277] hsr_slave_1: left promiscuous mode [ 765.063636][ T8277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.067479][ T42] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 765.177283][ T8277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.252956][ T8277] hsr_slave_0: left promiscuous mode [ 765.253301][ T42] usb 5-1: config index 0 descriptor too short (expected 24929, got 441) [ 765.269902][ T8277] hsr_slave_1: left promiscuous mode [ 765.280735][ T42] usb 5-1: config 97 has too many interfaces: 97, using maximum allowed: 32 [ 765.291739][ T8277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.301416][ T42] usb 5-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 765.312750][ T8277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.327043][ T42] usb 5-1: config 97 has 0 interfaces, different from the descriptor's value: 97 [ 765.339878][ T8277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.349299][ T42] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 765.367181][ T8277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.378129][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.507146][ T8277] veth1_macvtap: left promiscuous mode [ 765.512765][ T8277] veth0_macvtap: left promiscuous mode [ 765.529725][ T8277] veth1_vlan: left promiscuous mode [ 765.535186][ T8277] veth0_vlan: left promiscuous mode [ 766.597697][T10926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.756166][T10926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.404054][ T42] usb 5-1: string descriptor 0 read error: -71 [ 768.414041][ T42] usb 5-1: USB disconnect, device number 13 [ 768.529317][ T8277] team0 (unregistering): Port device team_slave_1 removed [ 768.674499][ T8277] team0 (unregistering): Port device team_slave_0 removed [ 770.005843][T10983] loop4: detected capacity change from 0 to 128 [ 770.559191][T10983] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 770.641987][T10983] ext4 filesystem being mounted at /219/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 772.264742][ T5871] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 772.354047][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 772.371705][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 773.369198][ T8277] team0 (unregistering): Port device team_slave_1 removed [ 773.466582][ T8277] team0 (unregistering): Port device team_slave_0 removed [ 774.325788][T10946] veth1_macvtap: left promiscuous mode [ 774.332652][T10946] macsec0: entered promiscuous mode [ 774.923267][T10714] hsr_slave_0: entered promiscuous mode [ 774.938829][T10714] hsr_slave_1: entered promiscuous mode [ 775.899992][T10714] debugfs: 'hsr0' already exists in 'hsr' [ 775.905891][T10714] Cannot create hsr debugfs directory [ 776.733866][T11036] loop4: detected capacity change from 0 to 512 [ 779.151163][T11036] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 779.154442][T11036] EXT4-fs: failed to create workqueue [ 779.169694][T11036] EXT4-fs (loop4): mount failed [ 779.784338][ T8292] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 779.962782][ T8292] usb 1-1: Using ep0 maxpacket: 32 [ 780.021095][ T8292] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 780.073851][ T8292] usb 1-1: config 4 has no interface number 0 [ 780.117340][ T8292] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.195020][ T8292] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.284904][ T8292] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 780.357038][ T8292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.476321][ T8292] hub 1-1:4.128: USB hub found [ 780.766992][ T8292] hub 1-1:4.128: 2 ports detected [ 780.795300][ T8292] hub 1-1:4.128: Using single TT (err -22) [ 780.946501][ T24] hid-generic FFFB:0000:0054.000E: unknown main item tag 0x0 [ 780.954224][ T8292] hub 1-1:4.128: hub_hub_status failed (err = -71) [ 780.954432][ T8292] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 781.413295][ T24] hid-generic FFFB:0000:0054.000E: unknown main item tag 0x0 [ 781.441710][ T24] hid-generic FFFB:0000:0054.000E: unknown main item tag 0x0 [ 781.453283][ T24] hid-generic FFFB:0000:0054.000E: unknown main item tag 0x0 [ 781.470268][ T24] hid-generic FFFB:0000:0054.000E: unknown main item tag 0x0 [ 781.483264][ T24] hid-generic FFFB:0000:0054.000E: unknown main item tag 0x0 [ 781.508045][ T24] hid-generic FFFB:0000:0054.000E: unknown main item tag 0x0 [ 781.524812][ T24] hid-generic FFFB:0000:0054.000E: unknown main item tag 0x0 [ 781.534343][ T24] hid-generic FFFB:0000:0054.000E: unknown main item tag 0x0 [ 781.563454][ T24] hid-generic FFFB:0000:0054.000E: unknown main item tag 0x0 [ 781.603713][ T24] hid-generic FFFB:0000:0054.000E: hidraw0: HID v80.01 Device [syz1] on syz1 [ 781.798228][ T8292] usb 1-1: USB disconnect, device number 22 [ 782.044220][T11055] fido_id[11055]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 782.094233][T10629] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 784.036494][T10629] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 784.075460][T10629] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 784.164340][T10629] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 785.147523][T11088] loop4: detected capacity change from 0 to 4096 [ 785.292630][T11088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.359166][ T5871] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.006749][ T42] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 788.662984][ T42] usb 7-1: config index 0 descriptor too short (expected 24929, got 441) [ 788.698180][ T42] usb 7-1: config 97 has too many interfaces: 97, using maximum allowed: 32 [ 788.758178][ T42] usb 7-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 788.827205][ T42] usb 7-1: config 97 has 0 interfaces, different from the descriptor's value: 97 [ 788.928091][ T42] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 788.977215][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.307441][T11102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.337168][T11102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.704569][ T42] usb 7-1: string descriptor 0 read error: -71 [ 789.736765][ T42] usb 7-1: USB disconnect, device number 9 [ 789.880087][T10241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 789.895666][T10241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 790.052799][T10241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 790.071563][T10241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 790.080105][T10241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 790.187054][ T42] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 790.377118][ T42] usb 7-1: Using ep0 maxpacket: 16 [ 790.385217][ T42] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 790.411419][ T42] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 790.431822][ T42] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 790.444973][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.453840][ T42] usb 7-1: Product: syz [ 790.465559][ T42] usb 7-1: Manufacturer: syz [ 790.471722][ T42] usb 7-1: SerialNumber: syz [ 790.747471][ T42] usb 7-1: 0:2 : does not exist [ 790.752758][ T42] usb 7-1: unit 5 not found! [ 790.857418][ T42] usb 7-1: USB disconnect, device number 10 [ 791.044240][T10415] udevd[10415]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 791.070987][ T8322] bridge_slave_1: left allmulticast mode [ 791.095173][ T8322] bridge_slave_1: left promiscuous mode [ 791.109479][ T8322] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.444978][ T8322] bridge_slave_0: left allmulticast mode [ 792.237453][ T9331] Bluetooth: hci1: command tx timeout [ 792.268812][ T8322] bridge_slave_0: left promiscuous mode [ 792.274881][ T8322] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.568240][T11142] loop6: detected capacity change from 0 to 4096 [ 793.029777][T11142] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.830188][T11148] netlink: 16 bytes leftover after parsing attributes in process `syz.0.960'. [ 794.750766][T10241] Bluetooth: hci1: command tx timeout [ 797.141661][T10241] Bluetooth: hci1: command tx timeout [ 797.403223][ T9329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.412477][ T24] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 797.640490][ T8322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.679073][ T8322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.694016][ T9331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 797.707174][ T9331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 797.717522][ T9331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 797.717924][ T8322] bond0 (unregistering): Released all slaves [ 797.732870][ T9331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 797.747352][ T9331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 798.463460][ T8322] hsr_slave_0: left promiscuous mode [ 798.512773][ T8322] hsr_slave_1: left promiscuous mode [ 798.524006][ T8322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.559220][ T8322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.337342][T10241] Bluetooth: hci1: command tx timeout [ 799.486258][ T9331] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 799.504927][ T9331] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 799.522239][ T9331] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 799.531108][ T9331] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 799.539142][ T9331] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 799.789872][ T9331] Bluetooth: hci4: command tx timeout [ 799.888117][ T8322] team0 (unregistering): Port device team_slave_1 removed [ 800.097857][ T8322] team0 (unregistering): Port device team_slave_0 removed [ 801.629288][ T9331] Bluetooth: hci5: command tx timeout [ 801.867330][ T9331] Bluetooth: hci4: command tx timeout [ 802.297026][T11120] chnl_net:caif_netlink_parms(): no params data found [ 802.388459][T11094] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 802.577059][T11094] usb 5-1: Using ep0 maxpacket: 16 [ 802.586985][T11094] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.608598][ T24] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 802.610299][T11094] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 802.648774][T11094] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.662833][T11094] usb 5-1: config 0 descriptor?? [ 802.684327][T11094] usb 5-1: Found UVC 0.00 device (10c4:ea90) [ 802.692280][T11094] usb 5-1: No valid video chain found. [ 802.786286][ T24] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 802.836065][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 802.862873][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.00 [ 802.876507][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.920701][ T974] usb 5-1: USB disconnect, device number 15 [ 802.950593][ T24] usb 1-1: config 0 descriptor?? [ 802.995898][T11202] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 803.066229][T11120] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.075835][T11120] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.084815][T11120] bridge_slave_0: entered allmulticast mode [ 803.093913][T11120] bridge_slave_0: entered promiscuous mode [ 803.103836][T11120] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.111530][T11120] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.119106][T11120] bridge_slave_1: entered allmulticast mode [ 803.127790][T11120] bridge_slave_1: entered promiscuous mode [ 803.442738][T11120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.496665][T11120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.707302][ T9331] Bluetooth: hci5: command tx timeout [ 803.824694][T11155] chnl_net:caif_netlink_parms(): no params data found [ 803.911255][ T974] usb 1-1: USB disconnect, device number 23 [ 803.947871][ T9331] Bluetooth: hci4: command tx timeout [ 804.632186][T11222] loop6: detected capacity change from 0 to 128 [ 804.662935][T11222] ext4: Unknown parameter 'nouser_xattr' [ 806.226975][ T9331] Bluetooth: hci5: command tx timeout [ 806.232542][ T9331] Bluetooth: hci4: command tx timeout [ 806.762194][T11120] team0: Port device team_slave_0 added [ 806.814331][T11120] team0: Port device team_slave_1 added [ 807.452194][T11171] chnl_net:caif_netlink_parms(): no params data found [ 808.389183][ T9331] Bluetooth: hci5: command tx timeout [ 810.930222][T11120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.247981][T11120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.275024][T11120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.347448][T11254] serio: Serial port ptm0 [ 811.448203][T11120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.481098][T11120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.588934][T11120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.700427][T11262] loop4: detected capacity change from 0 to 128 [ 811.716563][T11262] EXT4-fs (loop4): Test dummy encryption mode enabled [ 811.721928][T11155] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.743992][T11155] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.766554][T11155] bridge_slave_0: entered allmulticast mode [ 811.795018][T11262] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 811.797018][T11155] bridge_slave_0: entered promiscuous mode [ 811.836979][T11262] ext4 filesystem being mounted at /242/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 811.918908][T11262] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 811.985303][T11155] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.015179][T11155] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.037385][T11155] bridge_slave_1: entered allmulticast mode [ 812.062480][T11155] bridge_slave_1: entered promiscuous mode [ 812.084399][ T5871] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 812.288506][T11155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.379639][T11256] loop6: detected capacity change from 0 to 40427 [ 812.399377][T11256] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 812.409266][T11256] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 812.451627][T11171] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.485600][T11171] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.495802][T11256] F2FS-fs (loop6): invalid crc value [ 812.509705][T11171] bridge_slave_0: entered allmulticast mode [ 812.529832][T11171] bridge_slave_0: entered promiscuous mode [ 812.825345][T11256] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 812.898325][T11155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.902377][T11256] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 812.915350][T11256] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 812.990598][T11280] loop4: detected capacity change from 0 to 4096 [ 813.008999][T11171] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.047007][T11171] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.088975][T11171] bridge_slave_1: entered allmulticast mode [ 813.108484][T11280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.148498][T11171] bridge_slave_1: entered promiscuous mode [ 813.295870][T11120] hsr_slave_0: entered promiscuous mode [ 813.320592][T11120] hsr_slave_1: entered promiscuous mode [ 815.892789][T11155] team0: Port device team_slave_0 added [ 815.956392][T11155] team0: Port device team_slave_1 added [ 816.002298][T11171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.645634][T11171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.829094][T11155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.846540][T11155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 816.914774][T11155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.940872][T11155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.948166][T11155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 816.974451][T11155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.187991][T11286] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.569640][T11171] team0: Port device team_slave_0 added [ 818.459381][T11171] team0: Port device team_slave_1 added [ 818.555114][T11120] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 818.622480][T11155] hsr_slave_0: entered promiscuous mode [ 818.671633][T11155] hsr_slave_1: entered promiscuous mode [ 818.689902][T11155] debugfs: 'hsr0' already exists in 'hsr' [ 818.695743][T11155] Cannot create hsr debugfs directory [ 818.805501][T11120] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 818.912448][T11171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.930854][T11171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.970437][T11171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.012223][T11120] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 819.110404][T11171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.126964][T11171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.164725][T11171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.475797][T11120] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 820.717294][T11171] hsr_slave_0: entered promiscuous mode [ 820.738038][T11171] hsr_slave_1: entered promiscuous mode [ 820.774971][T11171] debugfs: 'hsr0' already exists in 'hsr' [ 820.786227][T11171] Cannot create hsr debugfs directory [ 825.577235][ T42] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 827.592649][ T8322] bridge_slave_1: left allmulticast mode [ 827.614912][ T8322] bridge_slave_1: left promiscuous mode [ 827.632735][ T8322] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.666625][ T8322] bridge_slave_0: left allmulticast mode [ 827.688400][ T8322] bridge_slave_0: left promiscuous mode [ 827.714998][ T8322] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.768199][ T8322] bridge_slave_1: left allmulticast mode [ 827.796480][ T8322] bridge_slave_1: left promiscuous mode [ 827.812312][ T8322] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.853448][ T8322] bridge_slave_0: left allmulticast mode [ 827.877212][ T8322] bridge_slave_0: left promiscuous mode [ 827.898175][ T8322] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.957468][ T8322] bridge_slave_1: left allmulticast mode [ 827.973773][ T8322] bridge_slave_1: left promiscuous mode [ 827.994408][ T8322] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.028904][ T8322] bridge_slave_0: left allmulticast mode [ 828.034662][ T8322] bridge_slave_0: left promiscuous mode [ 828.072208][ T8322] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.326905][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 828.357569][ T42] usb 1-1: device descriptor read/all, error -71 [ 828.733041][ T8322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.822041][ T8322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.874927][ T8322] bond0 (unregistering): Released all slaves [ 831.451980][T11363] loop6: detected capacity change from 0 to 512 [ 831.686121][T11363] EXT4-fs error (device loop6): ext4_iget_extra_inode:5103: inode #15: comm syz.6.1012: corrupted in-inode xattr: invalid ea_ino [ 831.706768][T11363] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.1012: couldn't read orphan inode 15 (err -117) [ 831.742119][T11363] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 832.128474][ T8322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 832.207764][ T8322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.272153][ T8322] bond0 (unregistering): Released all slaves [ 833.382341][ T8322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.442522][ T8322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 833.487593][ T8322] bond0 (unregistering): Released all slaves [ 833.593302][ T9329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.793888][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 833.804490][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 833.869766][T11382] [ 833.872473][T11382] ============================= [ 833.877613][T11382] WARNING: suspicious RCU usage [ 833.882490][T11382] 6.17.0-rc1-syzkaller #0 Not tainted [ 833.888206][T11382] ----------------------------- [ 833.893939][T11382] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 833.903504][T11382] [ 833.903504][T11382] other info that might help us debug this: [ 833.903504][T11382] [ 833.913939][T11382] [ 833.913939][T11382] rcu_scheduler_active = 2, debug_locks = 1 [ 833.922214][T11382] 1 lock held by syz.4.1020/11382: [ 833.927669][T11382] #0: ffffffff8e5c0860 (rcu_read_lock_trace){....}-{0:0}, at: bpf_prog_test_run_syscall+0x344/0x780 [ 833.939331][T11382] [ 833.939331][T11382] stack backtrace: [ 833.945472][T11382] CPU: 1 UID: 0 PID: 11382 Comm: syz.4.1020 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 833.945527][T11382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 833.945613][T11382] Call Trace: [ 833.945693][T11382] [ 833.945710][T11382] dump_stack_lvl+0x16c/0x1f0 [ 833.945956][T11382] lockdep_rcu_suspicious+0x166/0x260 [ 833.946132][T11382] get_callchain_entry+0x278/0x3f0 [ 833.946321][T11382] get_perf_callchain+0xdb/0x760 [ 833.946375][T11382] ? __entry_text_end+0x1020b6/0x1020b9 [ 833.946527][T11382] ? __pfx_get_perf_callchain+0x10/0x10 [ 833.946837][T11382] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.946919][T11382] __bpf_get_stack+0x4f5/0xa10 [ 833.947060][T11382] ? __pfx___bpf_get_stack+0x10/0x10 [ 833.947123][T11382] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.947177][T11382] bpf_get_stack+0x32/0x40 [ 833.947227][T11382] bpf_get_stack_raw_tp+0x1dd/0x280 [ 833.947346][T11382] bpf_prog_2ae546726a474a42+0x46/0x4e [ 833.947419][T11382] bpf_prog_test_run_syscall+0x5b3/0x780 [ 833.947480][T11382] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 833.947530][T11382] ? fput+0x9b/0xd0 [ 833.947665][T11382] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.947727][T11382] ? __bpf_prog_get+0x97/0x2a0 [ 833.947785][T11382] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 833.947836][T11382] __sys_bpf+0x1050/0x4de0 [ 833.947884][T11382] ? __pfx___sys_bpf+0x10/0x10 [ 833.947926][T11382] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.947981][T11382] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.948025][T11382] ? do_futex+0x122/0x350 [ 833.948164][T11382] ? __pfx_do_futex+0x10/0x10 [ 833.948241][T11382] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 833.948426][T11382] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.948471][T11382] ? xfd_validate_state+0x61/0x180 [ 833.948567][T11382] __x64_sys_bpf+0x78/0xc0 [ 833.948610][T11382] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.948653][T11382] ? lockdep_hardirqs_on+0x7c/0x110 [ 833.948728][T11382] do_syscall_64+0xcd/0x4c0 [ 833.948784][T11382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.948824][T11382] RIP: 0033:0x7fdf0ef8ebe9 [ 833.948856][T11382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.948898][T11382] RSP: 002b:00007fdf0fdda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 833.949003][T11382] RAX: ffffffffffffffda RBX: 00007fdf0f1b5fa0 RCX: 00007fdf0ef8ebe9 [ 833.949030][T11382] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 833.949054][T11382] RBP: 00007fdf0f011e19 R08: 0000000000000000 R09: 0000000000000000 [ 833.949078][T11382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.949100][T11382] R13: 00007fdf0f1b6038 R14: 00007fdf0f1b5fa0 R15: 00007ffc7338fbe8 [ 833.949153][T11382] [ 834.502003][ T8322] hsr_slave_0: left promiscuous mode [ 834.533670][ T8322] hsr_slave_1: left promiscuous mode [ 834.550646][ T8322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.565833][ T8322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.619064][ T8322] hsr_slave_0: left promiscuous mode [ 834.647267][ T8322] hsr_slave_1: left promiscuous mode [ 834.654213][ T8322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.678714][ T8322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.695683][ T8322] hsr_slave_0: left promiscuous mode [ 834.707454][ T8322] hsr_slave_1: left promiscuous mode [ 834.720433][ T8322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.753438][ T8322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.070587][ T8322] team0 (unregistering): Port device team_slave_1 removed [ 835.133445][ T8322] team0 (unregistering): Port device team_slave_0 removed [ 835.795275][ T8322] team0 (unregistering): Port device team_slave_1 removed [ 835.845491][ T8322] team0 (unregistering): Port device team_slave_0 removed [ 836.445468][ T8322] team0 (unregistering): Port device team_slave_1 removed [ 836.483596][ T8322] team0 (unregistering): Port device team_slave_0 removed [ 837.002438][T11120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.114037][T11120] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.161317][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.168623][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.264530][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.271824][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.465932][T11120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 837.893204][T11155] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 837.947825][T11155] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 838.030175][T11155] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 838.059569][T11155] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 838.215748][T11171] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 838.239271][T11171] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 838.252739][T11171] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 838.265146][T11171] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 838.285604][T11120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.494738][T11120] veth0_vlan: entered promiscuous mode [ 838.521948][T11120] veth1_vlan: entered promiscuous mode [ 838.565960][T11155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.625582][T11155] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.644280][T11171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.677411][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.684693][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.713721][ T8327] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.721013][ T8327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.744774][T11120] veth0_macvtap: entered promiscuous mode [ 838.769444][T11120] veth1_macvtap: entered promiscuous mode [ 838.787087][T11171] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.862912][ T8322] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.870218][ T8322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.905392][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.912644][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.941754][T11120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.989990][T11120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 839.029450][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.039714][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.096142][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.125507][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.409378][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.442816][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.573025][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.589286][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.642872][T11155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.945417][T11171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 840.705750][T11155] veth0_vlan: entered promiscuous mode [ 840.763190][T11155] veth1_vlan: entered promiscuous mode [ 840.862442][T11171] veth0_vlan: entered promiscuous mode [ 840.923019][T11155] veth0_macvtap: entered promiscuous mode [ 840.950875][T11171] veth1_vlan: entered promiscuous mode [ 840.977877][T11155] veth1_macvtap: entered promiscuous mode [ 841.046052][T11155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.074203][T11171] veth0_macvtap: entered promiscuous mode [ 841.096356][T11155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.124258][T11171] veth1_macvtap: entered promiscuous mode [ 841.143364][ T14] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.167186][ T14] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.200543][ T14] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.210923][ T14] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.277953][T11171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.334225][T11171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.397713][ T36] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.415684][ T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.458928][ T14] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.481194][ T14] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.509177][ T4581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.553323][ T4581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.641873][ T8322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.676274][ T8322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.809343][ T8322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.838906][ T8322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.944753][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.954405][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50