last executing test programs: 21.456758068s ago: executing program 3 (id=763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xfe8e, 0x12) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="554b00000000000000000800000014"], 0x28}}, 0x0) 15.901946688s ago: executing program 1 (id=774): open(0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, &(0x7f00000002c0)) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="d93db731205681d52d10713337237ab8f409e9d0286ac4f933a70765062bd617b586b12328", 0x25}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000500)={[&(0x7f00000001c0)='\x00', &(0x7f0000000340)='GPL\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='\xff\xff']}, &(0x7f0000000640)={[0x0, &(0x7f0000000580)='\x00']}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) 14.147534528s ago: executing program 1 (id=776): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000004c0)={'broute\x00', 0x0, 0x4, 0xe9, [0x3, 0x8, 0x3, 0x250e06c4, 0xedf6, 0xce8], 0x0, &(0x7f0000000180), &(0x7f0000000340)=""/233}, &(0x7f00000001c0)=0x78) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, 0x0, 0x400c0c4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{}, {0x3}, {0x0, 0x0, 0x0, 0xd05}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) dup(0xffffffffffffffff) openat$sequencer(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) 13.069308913s ago: executing program 2 (id=778): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x200}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 13.026201382s ago: executing program 1 (id=779): ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f00000001c0)=0xf4254) read$midi(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x510, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x10, 0xe0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xa, 0x7f, 0x8, {0x7, 0x25, 0x1, 0x80, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x1, 0x3, {0x7, 0x25, 0x1, 0x80, 0x2, 0xb4}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "430437089d641d5c4112505023b0a7b4"}]}}) 12.582977095s ago: executing program 2 (id=781): syz_emit_ethernet(0xbb, &(0x7f00000001c0)={@random="856b934629fa", @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x85, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22eb, 0x0, 0x0, [0x4d98]}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "c047c4b8d25dc7ce1030c1b7a5b9f80ac509cedbdbbbef820331f9c7c7cac5023e608bf41d578422a9a46756018189a801a443f8099cdb227f1bdf144b72d5"}, {0xdd86}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl(0xffffffffffffffff, 0x824e, &(0x7f000001b000)="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") sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_tables_matches\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf3000000000000015000200000000103d030100000000009500000000000000bc26080000000000bf67000000000000070300000fff070067020000030000001606000080ffffffbf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a8"], &(0x7f0000000100)='GPL\x00'}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) 12.55431927s ago: executing program 3 (id=782): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, 0x0, 0x0) dup(0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0x46, 0x80, 0x10000, 0x6, 0xc6, 0x8001, 0xb28e, 0x46, 0x6, 0x81, 0x6, 0x3, 0x8, 0x8008, 0x8000, 0xae, 0x101, 0x2, 0xfff, 0x4d, 0x1000000, 0x1000001, 0x15b}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0x6, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x4, 0xc, 0x487, 0x1, 0x0, 0xfffffffc}}, {0x4}}]}]}, 0x68}}, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) 10.751621715s ago: executing program 4 (id=784): socket$nl_generic(0x10, 0x3, 0x10) fchmodat(0xffffffffffffffff, 0x0, 0x32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000006862b6c243ffabae7e010401010000000000000000010000050a000200000000051b0000ba6359d63587dfb4142c5a20b236c2304af2681385458fd05d28eb159b77b893202e8deafa4b34157c20007de32dc326d56ac6d957ab48d38fa588c8c355ee660400ccc77733b0cf71c81d709d595c0bdd153f3c9c57d71e30ba38640a8858ace43eeb8cecb8834280"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) 9.779594176s ago: executing program 2 (id=786): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(r1, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x800) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) pread64(0xffffffffffffffff, 0x0, 0x0, 0xa) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000280)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) bind$ax25(r5, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) futimesat(0xffffffffffffffff, 0x0, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) 9.58780548s ago: executing program 3 (id=787): socket$inet(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) dup(r0) r1 = syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x20000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe5000/0x1000)=nil, r8, 0x1, 0x11, r7, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 8.637849876s ago: executing program 4 (id=789): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000004c0)={'broute\x00', 0x0, 0x4, 0xe9, [0x3, 0x8, 0x3, 0x250e06c4, 0xedf6, 0xce8], 0x0, &(0x7f0000000180), &(0x7f0000000340)=""/233}, &(0x7f00000001c0)=0x78) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, 0x0, 0x400c0c4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{}, {0x3}, {0x0, 0x0, 0x0, 0xd05}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) dup(0xffffffffffffffff) openat$sequencer(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) 7.312911058s ago: executing program 2 (id=790): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)=ANY=[], 0x0) 7.132155011s ago: executing program 2 (id=791): r0 = socket(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r3, 0x0) connect$unix(r6, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0401000010000700000000000000000064010100000000000000000000000000e00000020000000000000000000000000003000000000000000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fe8000000000000000000000000000bb0000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r9, 0x54a3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf254400000008000300", @ANYRES32=r10, @ANYBLOB="08006b32040000000a00180003030303030300003ad7760c377b6af2c1639c39efef6e7b73ebb0055190237f4c7c201d3343eec426e76451b473edb5945822a04c60846b0e0002f55de9c714c0a7a422f5e962e08bf85ce734cf46b4baf659cff3fa35a8b2dbb88ef4c72b7d24145737df6b5214ca8b3673675d40444695cd63d01e458f81851fbc82d9806cfdb48fab5a4784bb7f6c4e32a6c7cc891d5e4d59152a714850f9382116943f16e200971c82da62084c55dbfb14724c44b95fc23952acdff82cdee456843e66b9b76b3b92aa6714a049a1f0f2e8d45e125a1bb19297"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback, 0xfff7fffe}, {0xa, 0x4, 0x0, @loopback, 0x20000}, 0x0, {[0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x403]}}, 0x5c) 7.071870441s ago: executing program 0 (id=792): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xfe8e, 0x12) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="554b00000000000000000800000014"], 0x28}}, 0x0) 6.883807602s ago: executing program 4 (id=793): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) write$UHID_INPUT(r1, &(0x7f00000010c0)={0xc, {"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", 0x1000}}, 0x1006) socket$nl_netfilter(0x10, 0x3, 0xc) 6.559607038s ago: executing program 1 (id=794): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028000000"], 0x34}}, 0x0) 6.477574385s ago: executing program 1 (id=795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000002480), 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[], 0x0, 0x800009, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) r2 = socket(0x1e, 0x1, 0x0) sendfile(r2, r1, 0x0, 0x101) 6.310177133s ago: executing program 3 (id=796): syz_emit_ethernet(0xbb, &(0x7f00000001c0)={@random="856b934629fa", @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x85, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22eb, 0x0, 0x0, [0x4d98]}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "c047c4b8d25dc7ce1030c1b7a5b9f80ac509cedbdbbbef820331f9c7c7cac5023e608bf41d578422a9a46756018189a801a443f8099cdb227f1bdf144b72d5"}, {0xdd86}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl(0xffffffffffffffff, 0x824e, &(0x7f000001b000)="948660701fe81e8a5c6978026ddd587ad0acea2d877ffd26204126730f05bf9c5767d2dd1c2fba3bc23b5c12cf939b9fbcef6b1ace2e2a0befba0c637ba5f26648e5c0e66570b9c2fdaddf91203d3d088b15e5493dcc554aa69bcc7413ab9bc692616914e23c5f7959dd7601a5c863c3245f9f9a53939231faeea8b056dd772b344da09c77e543589663caaca1d554ed067c67b95f7f88608494b78e9695807ebb4f5b79d158d70440d1199b372ac1ae921d4ef4de0d048393bb94858d7e233676af93f68ce65d2ca962ffa7082c7e5100a17e49d3d1dd1ef293757e1f1f3b9f1eef933b66ca33ce763f6dca42e1b5a8e4cae31ff557c2ec90e73e9226983f36f8cf6c45af60df072da6a486b019bb72fc74c5016af63c1c596ece5940bc2b143b51b8036c324b2e18b2c382724767cb5c6b4be1901667fce02b7abf2992f76b3bdc6060ab71b446d26c12311118fcbe84ba17dfe0c36673f766a2e1fe0cd1149a63e7dabcb6842b7d56de2ff017776464d7c419e772b48e7f479c92efa2fbb77630639c7d39ffd42c669a35ef7a481905d8192800d68d5dfa7cb8c5198004cfe777c78a25827023beff2dec16e7e5ba2e22555a48ec6005e670d9744a82900f9aa1ebf4a8c4b1adbb04227b88230ae47e3b68665353b46e5d6b1aa4610136445acf7c5904c354e14feb5b3d48e42279ffaae3b192ebeddd72dd966f4bcc8a0d4d27c3edbcd07a42076ffc8a05fc4d1dbbdcc7578bad66438035d0f336c0996b3a6a004cbfcab5f5a85badaa57197f5378642db5197c1a3bac39ccf5366918979939df4dda98629ecb7133ab9220a470bd2d8e3bf112892510ae8cd16b26c89144e42a37c7fe4dc2dc706810bf5686a2c084916e5ab9dda56da3c9ee35afb4cfcb37b4e049a1ae76c9db596b258a42b8a7e24a32caa745ee8e38ca15dae1e190fec6bf7f98b9988b0ada0ed90357888fe5cdc104577acc17be8a734197b2ae771c98373796a865bae25d727e3cae45b56f393b3e883af6ac9b64b57958004e3e321fd8df4b97ac4ad12717bb7ab6ef3dc1c289dbd98d24d8750779f1d3c962ddc95b23b50a6aef2dae8c79ce990c7a1c2a9b1ca1fac0540efd9cf58a092933c4cd4fd3543ee8da10a67fddd920b5119a0cb8b3d41d9ce9a8881edaccc992b89d430ba093804d4a907a1a030fd6eb12fc627d59d4a59c85f3860a045943d1569c402a723e9bd01ab6cbb5343ceb2798c4060ae6952e031aa730abcaa8ccea6ac2f37887fda1a5e8f55730263c369c7a103a161945f7b09d8ea2449a83fe1df57e940742f6a37fed175ba16adc2ed79f654a16a59f43fe2c90f1adbb0ce6d56b22f3cca87dbbdba64a6d9dba63590e16134fe1b21eaa4a36e4017ff062213866bce5d2d6b877880e22123599a5f4a11954174b47d8b5d9f4a6c78aed303c7e85d7b5884caf5e49b1e2d7a3f390d9b88391001eb56ca26b6fd69e8700c4502a1c15bd1690c466ac6e0f131f177dad130db20035b527a8f256377bc0233edb57f96c6a8812b897717e3993e35c22b1ec0cb84727bd337f6d2abd6e11894fdb60f95f24256b15a51fde8d628294095591ef11790782feeb02149bec9ca96bfc8592d22e0756a55fe4f8c302de5521c24c3de227212ea179bbe0952f24255ca64e3414491963f3dd594f6900d5f02da3a28eb3ab234234082da5fec6e873d502f669e449754e6c9d91c1090159bd7a636c782ba7843a0237988114ee368cef120ddee24b03c2fbc058c100c05bea16ec63f00d9e3005a160bc779d5bdd4b7486d532181ad6cbe0914d64ff81d563f187c50e6aa4768da4292a61706d4be48a4388309f2a37554b140825523411053d7296df8b4ff95419fe5c580973c899707dfb523fd1d81501be543d285f927c9ef4ca94bb2ff464eb45bc4af3400dd52feb14c9d5136bddc79d6e9bd84ae7df225c567d23fb40c765d6f92ddc29580d9e328956bc614c5cc0e6c512ba1aca75c9210e1f9e8be2db7442498c81e2ddab1fb37bea81eec7b4aeeec44c5baf3233fc48b84b9692a3ee098f634dd573052f34fef93fcede1e62de0423e470b3fb245efc9abb6fee2f0a7d70b838f2b4cb028a65cd2f6ca32f81dca8208dd8441472c38b8d1d18f86448b9ac5ee763455bdee933e2e28514e127a9214ed4d23ec5b9794b263a7c2fbf750edebede55ac3ce149c7f3e701374cf44880d075ce0d27ae3e995a9c7f80dc5600954bec26d124732775d852c55e26b1cca10d7e6b3f0c6e8d119750698b18b0cadab3fb04b24cc3b81c7aa14a437ca3c235f79f2197349eaee86fa5c9f3c8d87f320c443a5f4bab304d786c3b398b052d12440941fc40d5bab1403b56f2167305b33dfd8d7b3e0850201b7b8a279d9a73e6c08220643fff5d0bbf3432a8abfa341c1881ba6d39810f5c41186fbcfdb893286ef0af57070e85c5ee0bb8d6601d4ee119bed10c5c6721e38f6dea7645d46a61697c3bd00aecc5d7a2b0568dd2d1fb9788b6bdfd6a711811c0a167315c572613fbc7e8393688818bc1968ea9571530d6c64c9bbbb19bbc6fb50a84f17e2c129f9fc8dfaf6ab744b63f1e8f86714f2ce001e463059a17c14b783ce78342d71758564cad81bc3a608b66e6f1f663c7128918aada498b80f46244b06a3f56f842183fb27cda153e4b7d2ae546c0d120cded96670c6c7bbfe137180fd0014914ec87585f794c65881ec62c03bc348ea5038a6b4e7c0a95b153b6047f0c2f07183259f1655c20f8dcfd1ab5d6aa7e8b88e02f30b3c22e396eeb71d595489d857398a2b8f1cca24c5cdd66da6414b083638f8d564a190865a5410e1baa6c0432210414f3d4d99b81268830032df9cc52b917b3eeea5f187c29a041c1249f1e4280bfbfe3e465ef3066b9d15d56340a2065e78a60d03aed696a877aca8f74ac0b361a53bb360096df1098572b24f8b3fcfb9ccbd8917daab2f51c12e6acc2bf074df74d6eda2978785da34e6990354bccfb837540ba920860a56e436decfad21d0de8605eebe99f0205cc1a9dc0df2ab465d700f6945eb9bc5f053e652c1c92b519a09e626475341bba583bd3988fac5849aa38747f309dc08dfdf719f162e2e65a461109d68e897823c3eb066d0a25e0d1f3e555f617a9e3b0f977bcff1926224dbed7ce514af6cde8575a179e88117505a6a5e7f251174e7ca956d2159e9fb5b175d49797475add1f578149729c837838d54111804f17a3d246a3ab8d559666c59fd7350f4f9e17d9346075f3cc4b19769dd8419e519e7140c3faeacd1231c3b38e567a102842fcee2f75868366d5ca591733118c435dfd01f327c4159b3e88665d06481362879777ccbfc33d3a949003e57f032bd793e9916f63f0d0c292a3f20f7f3d28f4c891e1312fd9fb9552e84de3aeadf9a69b3abf74812521b25e56c70477c9d644c9710116455cf5b28ee1e2faa182c66a0f4cdd05d078ba1bd2846fa200852101ecd8201864dd0ae8c6aaf8e35ebbe31f190a6c85079b71ad611d22ea3297d2d02de72f2e245c02bfeb47f03b543edbbec6b6ae20706ae7a0d225628cfe04603fb79f6c43d55a8f492c44b93be02213a1dc0b31d65b0156a1a39bab92c6a76da048f4a0ecfb7a560ce01e46f5d08bf83d890c034b09f5be9152beb11955ca0e419efa4fa69d5ffe7d96945341e5a094188de83dfd4b20f28899f7ce6d0a07ea27c5838631f755bde1eef79f194cf0a72cdfb037b98de4625b7d1550c3c964691b08faa262ccba24dbe2f78a7d6f4f78155e32195cfcbf4ea8a18802a19fe5ad9086abd2169fa61ed5ae59f393dc094680f6be8e13fdf11eb4badbd82f697bac3ee26def2c6e61ad06e7ce07e5e2bb172a619246648550d8dd05d392584149a483221ed68723c87b9b62c6f523e1c7f68c8c8dec6d945079957504e78e9db9b410da800eeaf308f993f81ccf9b017d34feff449d645cc7bc722f878bca44b7b19d19ffcf1cddc90b7b81758e90e7bdbf1784f8ee18a9fa947d2f2edd1ec422d6ef0a72645e62a87dcf0757655701481b258f1ba3a579b3fd9e33480927d87de8eff6ad3fbf47bdbc7600d1cc0f7f8b5702cb97ca2add85aa5447b497764f5b3f4543b8e5972e81b0ad75f4b2290568b6078d48bd9d4d99cc569f9686e0f77f77bb114d628ee27f262372fba036b32b290b8e879ffadbb4425c5d15b6f9dbf06bce176e8a4ed73a2cb344bec1583294533f2873dc521d3f233fa9dadd86230ab0e0bb42c3763d80e62ac653b741053bf03fbde19358ac457bd9f12acb6cedb70bbffe8da432ca8903077757ff89116423c35cb786df63ae24cc1768bed020237e21d61f5c014167af821c286be98628d6caa78685d6b84e776d99a45fc128ba8dedfeb3271275abba7fc41f69315da0e09ca5b992d4c8494850f469e4635b6187d3c5fc5e790008fd2ae3ec84ea4aec1fc4fa27839bc09d5e6011ac6393b7ed2c9ff76c84c5a434918a738ea967024799c9524703ef8cec12036c270d08f313a95402dcee5bfc4c1763eaf2d76b818c9704a34f4aadafd507bf1a4069ab3e9e53ef8f14b9964f99963053fd2e03ea821c4a7e4f2718323996a9c895818bbd9bb05b39cbd6a90d411a053734574dd69b200f13d59ebf368b2987b3c9f55627b3cc76eb90f833ffcb1a2933e4bda8753337027d8ca1a123e83dbde350866804bda306314be3f44111b40c9b1f4da18c384ddfb41d84e2521a44b555af80ad332aabf9e97e0ea99e33e9da338ec840881e461a7aeb21bb63ee41") sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_tables_matches\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf3000000000000015000200000000103d030100000000009500000000000000bc26080000000000bf67000000000000070300000fff070067020000030000001606000080ffffffbf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2"], &(0x7f0000000100)='GPL\x00'}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) 5.371857022s ago: executing program 3 (id=797): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x40044160, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) close_range(r6, r6, 0x0) r7 = dup(r0) read$FUSE(r7, &(0x7f0000003c40)={0x2020}, 0xffffff0a) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 5.328655336s ago: executing program 2 (id=798): bpf$TOKEN_CREATE(0x24, 0x0, 0x6542b004040f1add) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8948, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x80000) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f00000000c0)={0x5e}, 0x8) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, 0x0, 0x0) connect$vsock_stream(r6, &(0x7f0000000800)={0x28, 0x0, 0xffffffff, @local}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) ioctl$F2FS_IOC_RESIZE_FS(r7, 0x4008f510, &(0x7f0000000100)=0x4) 4.881240252s ago: executing program 0 (id=799): socket$nl_generic(0x10, 0x3, 0x10) fchmodat(0xffffffffffffffff, 0x0, 0x32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000006862b6c243ffabae7e010401010000000000000000010000050a000200000000051b0000ba6359d63587dfb4142c5a20b236c2304af2681385458fd05d28eb159b77b893202e8deafa4b34157c20007de32dc326d56ac6d957ab48d38fa588c8c355ee660400ccc77733b0cf71c81d709d595c0bdd153f3c9c57d71e30ba38640a8858ace43eeb8cecb8834280"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) 4.680998406s ago: executing program 4 (id=800): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(r1, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x800) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) pread64(0xffffffffffffffff, 0x0, 0x0, 0xa) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000280)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) bind$ax25(r5, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) futimesat(0xffffffffffffffff, 0x0, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) 3.603804821s ago: executing program 0 (id=801): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)=ANY=[], 0x0) 3.337270154s ago: executing program 4 (id=802): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00002a0000/0x4000)=nil) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) msgsnd(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r3, @ANYRES16=r3], 0x8, 0x800) lsetxattr(0x0, &(0x7f0000000300)=@known='user.incfs.id\x00', &(0x7f0000000340)='squashfs\x00', 0x9, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0xb) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0004000600142603600e120800060000000401a80008002000000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000000000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d405fe4f0e59a6c5870e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x40044) 3.071493689s ago: executing program 0 (id=803): getpgid(0xffffffffffffffff) unshare(0x26020280) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) 2.304095493s ago: executing program 4 (id=804): ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f00000001c0)=0xf4254) read$midi(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x510, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x10, 0xe0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xa, 0x7f, 0x8, {0x7, 0x25, 0x1, 0x80, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x1, 0x3, {0x7, 0x25, 0x1, 0x80, 0x2, 0xb4}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "430437089d641d5c4112505023b0a7b4"}]}}) 2.279193902s ago: executing program 0 (id=805): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x4, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x2, 0x7fff, 0xa3a2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 2.033230252s ago: executing program 0 (id=806): socket$inet(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) dup(r0) r1 = syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x20000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe5000/0x1000)=nil, r8, 0x1, 0x11, r7, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 863.927762ms ago: executing program 3 (id=807): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x40044160, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) close_range(r6, r6, 0x0) dup(r0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 0s ago: executing program 1 (id=808): r0 = socket(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r3, 0x0) connect$unix(r6, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0401000010000700000000000000000064010100000000000000000000000000e00000020000000000000000000000000003000000000000000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fe8000000000000000000000000000bb0000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r9, 0x54a3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf254400000008000300", @ANYRES32=r10, @ANYBLOB="08006b32040000000a00180003030303030300003ad7760c377b6af2c1639c39efef6e7b73ebb0055190237f4c7c201d3343eec426e76451b473edb5945822a04c60846b0e0002f55de9c714c0a7a422f5e962e08bf85ce734cf46b4baf659cff3fa35a8b2dbb88ef4c72b7d24145737df6b5214ca8b3673675d40444695cd63d01e458f81851fbc82d9806cfdb48fab5a4784bb7f6c4e32a6c7cc891d5e4d59152a714850f9382116943f16e200971c82da62084c55dbfb14724c44b95fc23952acdff82cdee456843e66b9b76b3b92aa6714a049a1f0f2e8d45e125a1bb19297"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback, 0xfff7fffe}, {0xa, 0x4, 0x0, @loopback, 0x20000}, 0x0, {[0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x403]}}, 0x5c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. [ 84.610719][ T5819] cgroup: Unknown subsys name 'net' [ 84.746656][ T5819] cgroup: Unknown subsys name 'cpuset' [ 84.755941][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.395664][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.985895][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.994776][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.003541][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.014318][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.023631][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.031827][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.040442][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.048291][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.058633][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.067093][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.075086][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.083179][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.092561][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.100416][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.142025][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.162753][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.173407][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.182721][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.190697][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.198231][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.199078][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.207759][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.220893][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.229000][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.247657][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.641455][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 91.930418][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.938015][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.945662][ T5833] bridge_slave_0: entered allmulticast mode [ 91.953398][ T5833] bridge_slave_0: entered promiscuous mode [ 92.035699][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.043455][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.050920][ T5833] bridge_slave_1: entered allmulticast mode [ 92.060235][ T5833] bridge_slave_1: entered promiscuous mode [ 92.233951][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.287342][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.309284][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 92.324831][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 92.340222][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 92.373197][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 92.488016][ T5833] team0: Port device team_slave_0 added [ 92.581801][ T5833] team0: Port device team_slave_1 added [ 92.705527][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.712831][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.739430][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.830990][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.838241][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.864758][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.909799][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.917610][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.924991][ T5837] bridge_slave_0: entered allmulticast mode [ 92.932659][ T5837] bridge_slave_0: entered promiscuous mode [ 92.939937][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.947244][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.954761][ T5835] bridge_slave_0: entered allmulticast mode [ 92.962167][ T5835] bridge_slave_0: entered promiscuous mode [ 92.971616][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.978937][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.986281][ T5835] bridge_slave_1: entered allmulticast mode [ 92.993885][ T5835] bridge_slave_1: entered promiscuous mode [ 93.014300][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.021478][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.028848][ T5830] bridge_slave_0: entered allmulticast mode [ 93.036837][ T5830] bridge_slave_0: entered promiscuous mode [ 93.044625][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.051851][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.059987][ T5837] bridge_slave_1: entered allmulticast mode [ 93.067641][ T5837] bridge_slave_1: entered promiscuous mode [ 93.103661][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.110854][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.118534][ T5836] bridge_slave_0: entered allmulticast mode [ 93.126439][ T5836] bridge_slave_0: entered promiscuous mode [ 93.133429][ T5843] Bluetooth: hci1: command tx timeout [ 93.140628][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.148377][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.155653][ T5836] bridge_slave_1: entered allmulticast mode [ 93.164688][ T5836] bridge_slave_1: entered promiscuous mode [ 93.171543][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.178752][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.186399][ T5830] bridge_slave_1: entered allmulticast mode [ 93.194071][ T5830] bridge_slave_1: entered promiscuous mode [ 93.212095][ T5843] Bluetooth: hci0: command tx timeout [ 93.292898][ T5838] Bluetooth: hci4: command tx timeout [ 93.292904][ T5842] Bluetooth: hci2: command tx timeout [ 93.304204][ T5843] Bluetooth: hci3: command tx timeout [ 93.315393][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.328188][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.357300][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.370429][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.385879][ T5833] hsr_slave_0: entered promiscuous mode [ 93.393432][ T5833] hsr_slave_1: entered promiscuous mode [ 93.402649][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.415409][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.426964][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.455396][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.522423][ T5836] team0: Port device team_slave_0 added [ 93.585271][ T5836] team0: Port device team_slave_1 added [ 93.600836][ T5830] team0: Port device team_slave_0 added [ 93.609587][ T5837] team0: Port device team_slave_0 added [ 93.619447][ T5837] team0: Port device team_slave_1 added [ 93.627669][ T5835] team0: Port device team_slave_0 added [ 93.636656][ T5835] team0: Port device team_slave_1 added [ 93.673867][ T5830] team0: Port device team_slave_1 added [ 93.795408][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.803162][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.829371][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.841539][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.851657][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.881873][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.895339][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.902682][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.929509][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.942721][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.949752][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.977376][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.011805][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.019028][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.045260][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.074463][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.081680][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.107938][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.119811][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.127270][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.153327][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.166284][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.173471][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.199960][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.300975][ T5830] hsr_slave_0: entered promiscuous mode [ 94.307979][ T5830] hsr_slave_1: entered promiscuous mode [ 94.314542][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.322413][ T5830] Cannot create hsr debugfs directory [ 94.488424][ T5835] hsr_slave_0: entered promiscuous mode [ 94.495494][ T5835] hsr_slave_1: entered promiscuous mode [ 94.501717][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.509387][ T5835] Cannot create hsr debugfs directory [ 94.527560][ T5837] hsr_slave_0: entered promiscuous mode [ 94.534442][ T5837] hsr_slave_1: entered promiscuous mode [ 94.540774][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.548575][ T5837] Cannot create hsr debugfs directory [ 94.649653][ T5836] hsr_slave_0: entered promiscuous mode [ 94.656674][ T5836] hsr_slave_1: entered promiscuous mode [ 94.664045][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.671647][ T5836] Cannot create hsr debugfs directory [ 94.977216][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.035866][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.100630][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.146421][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.212202][ T5843] Bluetooth: hci1: command tx timeout [ 95.255728][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.275211][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.290330][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.302425][ T5843] Bluetooth: hci0: command tx timeout [ 95.307854][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.373218][ T5843] Bluetooth: hci4: command tx timeout [ 95.373472][ T5842] Bluetooth: hci2: command tx timeout [ 95.385109][ T5838] Bluetooth: hci3: command tx timeout [ 95.395812][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.418851][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.432512][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.446794][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.587318][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.613446][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.629074][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.640565][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.791399][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.821053][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.829699][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.840750][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.870706][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.923245][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.967087][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.974626][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.016471][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.023734][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.096468][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.117024][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.197545][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.217172][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.234755][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.244516][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.278422][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.285809][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.298883][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.309894][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.339815][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.365090][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.372405][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.471814][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.525998][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.533260][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.569955][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.580588][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.587867][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.619210][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.723352][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.768901][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.776159][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.919088][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.926808][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.021457][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.268305][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.288864][ T5833] veth0_vlan: entered promiscuous mode [ 97.299446][ T10] cfg80211: failed to load regulatory.db [ 97.300928][ T5838] Bluetooth: hci1: command tx timeout [ 97.372293][ T5838] Bluetooth: hci0: command tx timeout [ 97.446462][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.452368][ T5838] Bluetooth: hci2: command tx timeout [ 97.459090][ T5838] Bluetooth: hci4: command tx timeout [ 97.466109][ T5842] Bluetooth: hci3: command tx timeout [ 97.475426][ T5833] veth1_vlan: entered promiscuous mode [ 97.609951][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.631739][ T5833] veth0_macvtap: entered promiscuous mode [ 97.688867][ T5833] veth1_macvtap: entered promiscuous mode [ 97.718243][ T5837] veth0_vlan: entered promiscuous mode [ 97.728662][ T5830] veth0_vlan: entered promiscuous mode [ 97.766639][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.780777][ T5830] veth1_vlan: entered promiscuous mode [ 97.798201][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.809251][ T5837] veth1_vlan: entered promiscuous mode [ 97.828209][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.928857][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.959049][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.974593][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.015954][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.035182][ T5836] veth0_vlan: entered promiscuous mode [ 98.053991][ T5830] veth0_macvtap: entered promiscuous mode [ 98.079305][ T5837] veth0_macvtap: entered promiscuous mode [ 98.100466][ T5837] veth1_macvtap: entered promiscuous mode [ 98.138333][ T5830] veth1_macvtap: entered promiscuous mode [ 98.147810][ T5836] veth1_vlan: entered promiscuous mode [ 98.195608][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.253928][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.266134][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.279069][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.305956][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.318905][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.338121][ T2966] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.347881][ T2966] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.397495][ T2966] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.407060][ T2966] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.431138][ T5836] veth0_macvtap: entered promiscuous mode [ 98.445142][ T2966] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.462478][ T5836] veth1_macvtap: entered promiscuous mode [ 98.470478][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.474175][ T5835] veth0_vlan: entered promiscuous mode [ 98.485137][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.485713][ T2966] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.501805][ T2966] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.537934][ T2966] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.591359][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.615771][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.657496][ T2990] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.663143][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.666630][ T2990] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.697633][ T5835] veth1_vlan: entered promiscuous mode [ 98.747849][ T2990] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.801012][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.815599][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.931568][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.939665][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.954216][ T2990] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.005759][ T5835] veth0_macvtap: entered promiscuous mode [ 99.029123][ T5835] veth1_macvtap: entered promiscuous mode [ 99.067196][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.373505][ T5843] Bluetooth: hci1: command tx timeout [ 99.452354][ T5843] Bluetooth: hci0: command tx timeout [ 99.532923][ T5838] Bluetooth: hci3: command tx timeout [ 99.538895][ T5842] Bluetooth: hci2: command tx timeout [ 99.545295][ T5843] Bluetooth: hci4: command tx timeout [ 99.703630][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.738595][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.890842][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.917419][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.937686][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.946582][ T3014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.965790][ T5957] macsec0: entered promiscuous mode [ 99.973016][ T3014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.977322][ T5957] macsec0: entered allmulticast mode [ 99.993032][ T5957] veth1_macvtap: entered allmulticast mode [ 100.102237][ T3014] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.118915][ T3014] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.155946][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.167242][ T3014] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.190354][ T3014] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.200303][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.386298][ T1208] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.446620][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.464173][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.593732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.603632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.649296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.085187][ T1208] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 101.160542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.262994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.594330][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.661679][ T1208] usb 2-1: Product: syz [ 101.697344][ T1208] usb 2-1: Manufacturer: syz [ 101.735260][ T1208] usb 2-1: SerialNumber: syz [ 101.936527][ T1208] usb 2-1: config 0 descriptor?? [ 102.196954][ T1208] usb-storage 2-1:0.0: USB Mass Storage device detected [ 102.287172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.307634][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.323703][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.333102][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 102.799985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 102.849912][ T5959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.007893][ T5959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.052584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.753606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.842627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.192068][ T1208] usb 4-1: new high-speed USB device number 2 using dummy_hcd syzkaller syzkaller login: [ 104.462163][ T1208] usb 4-1: Using ep0 maxpacket: 8 [ 104.485532][ T1208] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 104.497706][ T1208] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.538399][ T1208] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.584971][ T5914] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 104.846209][ T1208] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.205019][ T1208] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.218325][ T5914] usb 5-1: not running at top speed; connect to a high speed hub [ 105.254581][ T5914] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 105.274352][ T1208] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.286710][ T5914] usb 5-1: config 1 has no interface number 1 [ 105.309968][ T24] usb 2-1: USB disconnect, device number 2 [ 105.325834][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.342058][ T5914] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 105.711746][ T5914] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.743961][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.755687][ T1208] usb 4-1: usb_control_msg returned -32 [ 106.141704][ T1208] usbtmc 4-1:16.0: can't read capabilities [ 106.427788][ T5914] usb 5-1: Product: syz [ 106.460033][ T5914] usb 5-1: Manufacturer: syz [ 106.488181][ T5914] usb 5-1: SerialNumber: syz [ 107.634858][ T5914] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 108.340871][ T5892] usb 4-1: USB disconnect, device number 2 [ 108.457699][ T5914] usb 5-1: USB disconnect, device number 2 [ 108.522019][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.642382][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 109.653690][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 109.665775][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 109.677947][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.013981][ T10] usb 2-1: can't set config #27, error -71 [ 110.034672][ T5899] udevd[5899]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.081585][ T10] usb 2-1: USB disconnect, device number 3 [ 110.382773][ T6053] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.527463][ T6055] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 110.534918][ T6055] overlayfs: failed to set xattr on upper [ 110.540819][ T6055] overlayfs: ...falling back to redirect_dir=nofollow. [ 110.547856][ T6055] overlayfs: ...falling back to index=off. [ 110.553885][ T6055] overlayfs: ...falling back to uuid=null. [ 110.559794][ T6055] overlayfs: maximum fs stacking depth exceeded [ 111.883519][ T6067] block device autoloading is deprecated and will be removed. [ 113.672033][ T30] audit: type=1326 audit(1751333054.463:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.3.33" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe484f8e929 code=0x0 [ 114.195143][ T6088] 9pnet_virtio: no channels available for device syz [ 114.223460][ T6088] warning: `syz.0.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 121.762280][ T6145] block nbd3: not configured, cannot reconfigure [ 126.279067][ T6190] block nbd4: not configured, cannot reconfigure [ 127.923595][ T1208] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.071745][ T6213] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 128.099539][ T6213] CIFS mount error: No usable UNC path provided in device string! [ 128.099539][ T6213] [ 128.111090][ T6213] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 128.734491][ T1208] usb 1-1: Using ep0 maxpacket: 8 [ 128.745344][ T1208] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 128.835338][ T1208] usb 1-1: config 0 has no interface number 0 [ 128.852006][ T1208] usb 1-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 128.871675][ T1208] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 128.882768][ T1208] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x9 has an invalid bInterval 70, changing to 7 [ 128.894694][ T1208] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 128.906329][ T1208] usb 1-1: config 0 interface 8 altsetting 0 has a duplicate endpoint with address 0x8C, skipping [ 128.917854][ T1208] usb 1-1: config 0 interface 8 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 128.959373][ T1208] usb 1-1: New USB device found, idVendor=0411, idProduct=00e6, bcdDevice=ff.bd [ 129.237533][ T1208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.489909][ T1208] usb 1-1: config 0 descriptor?? [ 129.624776][ T6205] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 129.892614][ T1208] usb 1-1: string descriptor 0 read error: -71 [ 129.914331][ T1208] usb 1-1: USB disconnect, device number 2 [ 133.715491][ T6246] lo speed is unknown, defaulting to 1000 [ 133.986824][ T6246] lo speed is unknown, defaulting to 1000 [ 134.129345][ T6246] lo speed is unknown, defaulting to 1000 [ 134.747129][ T6246] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 135.781704][ T6246] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 136.150799][ T6270] syz.3.89 uses obsolete (PF_INET,SOCK_PACKET) [ 136.168809][ T6246] lo speed is unknown, defaulting to 1000 [ 136.244456][ T6246] lo speed is unknown, defaulting to 1000 [ 136.443726][ T6246] lo speed is unknown, defaulting to 1000 [ 136.451522][ T6246] lo speed is unknown, defaulting to 1000 [ 137.306763][ T6246] lo speed is unknown, defaulting to 1000 [ 138.260164][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.269133][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.860088][ T24] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 144.565390][ T24] usb 2-1: device descriptor read/all, error -71 [ 146.738946][ T6366] syzkaller1: entered promiscuous mode [ 146.922453][ T6366] syzkaller1: entered allmulticast mode [ 147.902040][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 148.172761][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 148.927067][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 148.940924][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 149.128499][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.139264][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.156912][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.195039][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.933579][ T24] usb 3-1: can't set config #16, error -71 [ 149.960890][ T24] usb 3-1: USB disconnect, device number 2 [ 151.221516][ T6403] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 157.069032][ T6441] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.212056][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 157.222064][ T1208] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 157.698179][ T1208] usb 1-1: Using ep0 maxpacket: 8 [ 157.709038][ T1208] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 157.720604][ T1208] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 158.526556][ T1208] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.551985][ T1208] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.109043][ T1208] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.122598][ T1208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.422394][ T1208] usb 1-1: GET_CAPABILITIES returned 0 [ 159.428829][ T1208] usbtmc 1-1:16.0: can't read capabilities [ 160.192480][ T1208] usb 1-1: USB disconnect, device number 3 [ 171.575542][ T6570] netlink: 'syz.1.170': attribute type 4 has an invalid length. [ 171.763633][ T3082] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 172.782262][ T3082] usb 1-1: Using ep0 maxpacket: 8 [ 172.793975][ T3082] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 172.805056][ T3082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.843059][ T3082] usb 1-1: Product: syz [ 172.847354][ T3082] usb 1-1: Manufacturer: syz [ 172.852374][ T3082] usb 1-1: SerialNumber: syz [ 172.873196][ T3082] usb 1-1: config 0 descriptor?? [ 172.884018][ T3082] gspca_main: se401-2.14.0 probing 047d:5003 [ 173.019601][ T5864] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 173.037212][ T5864] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 173.070892][ T5864] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 173.377325][ T5864] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 173.541657][ T5864] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 173.593891][ T5864] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 173.622807][ T5864] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 173.636461][ T5864] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 173.651372][ T5864] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 173.671187][ T5864] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 173.701752][ T5864] hid-generic 0002:0004:0009.0001: hidraw0: HID v0.04 Device [syz0] on syz0 [ 174.000477][ T6591] fido_id[6591]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 174.335073][ T3082] gspca_se401: write req failed req 0x57 val 0x00 error -110 [ 174.342730][ T3082] se401 1-1:0.0: probe with driver se401 failed with error -110 [ 175.250060][ T5864] usb 1-1: USB disconnect, device number 4 [ 176.500510][ T6610] loop2: detected capacity change from 0 to 64 [ 176.513222][ T6610] ======================================================= [ 176.513222][ T6610] WARNING: The mand mount option has been deprecated and [ 176.513222][ T6610] and is ignored by this kernel. Remove the mand [ 176.513222][ T6610] option from the mount to silence this warning. [ 176.513222][ T6610] ======================================================= [ 177.157270][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 179.353823][ T6625] netlink: 'syz.2.182': attribute type 4 has an invalid length. [ 180.347646][ T6630] lo speed is unknown, defaulting to 1000 [ 182.981275][ T6658] loop2: detected capacity change from 0 to 64 [ 183.274930][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 191.481906][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'. [ 191.652315][ T6723] bridge_slave_1: left allmulticast mode [ 191.659089][ T6723] bridge_slave_1: left promiscuous mode [ 191.668692][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.906397][ T6723] bridge_slave_0: left allmulticast mode [ 191.919536][ T6723] bridge_slave_0: left promiscuous mode [ 191.928176][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.772113][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 198.138234][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.215'. [ 198.163105][ T6767] lo speed is unknown, defaulting to 1000 [ 199.904797][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.911451][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.797618][ T6831] fuse: Bad value for 'fd' [ 212.273329][ T6872] lo speed is unknown, defaulting to 1000 [ 215.293999][ T6904] block nbd1: not configured, cannot reconfigure [ 217.212343][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 217.218422][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 217.225019][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 217.231061][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 217.237628][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 218.031370][ T6919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.225894][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 218.662572][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 218.679780][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 218.690960][ T10] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 218.782676][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'. [ 218.849332][ T6940] lo speed is unknown, defaulting to 1000 [ 219.203188][ T6941] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 219.609397][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.853266][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.866226][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.883417][ T10] usb 3-1: Product: syz [ 219.897170][ T10] usb 3-1: Manufacturer: syz [ 219.918733][ T10] usb 3-1: SerialNumber: syz [ 220.066654][ T10] usb 3-1: can't set config #1, error -71 [ 220.083702][ T10] usb 3-1: USB disconnect, device number 3 [ 221.446470][ T6960] block nbd2: not configured, cannot reconfigure [ 224.356104][ T6976] lo speed is unknown, defaulting to 1000 [ 225.648598][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.271'. [ 227.003310][ T5958] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 228.160782][ T7012] lo speed is unknown, defaulting to 1000 [ 228.283179][ T5958] usb 3-1: not running at top speed; connect to a high speed hub [ 228.342538][ T5958] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 228.550422][ T7019] overlayfs: failed to resolve './file1': -2 [ 228.589886][ T7013] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 228.628950][ T5958] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 229.193073][ T5958] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.296342][ T5958] usb 3-1: string descriptor 0 read error: -71 [ 229.592422][ T5958] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 229.627492][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.647126][ T7035] blktrace: Concurrent blktraces are not allowed on sg0 [ 229.664746][ T5958] usb 3-1: can't set config #1, error -71 [ 229.700479][ T5958] usb 3-1: USB disconnect, device number 4 [ 229.875243][ T7032] lo speed is unknown, defaulting to 1000 [ 230.803193][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.285'. [ 233.239650][ T7065] lo speed is unknown, defaulting to 1000 [ 234.752711][ T7080] overlayfs: failed to resolve './file1': -2 [ 235.101954][ T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 235.292999][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 236.165431][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 236.185068][ T10] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 236.285437][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.301986][ T10] usb 1-1: string descriptor 0 read error: -71 [ 236.308553][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.330167][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.410555][ T10] usb 1-1: can't set config #1, error -71 [ 236.534314][ T10] usb 1-1: USB disconnect, device number 5 [ 236.645806][ T7092] blktrace: Concurrent blktraces are not allowed on sg0 [ 236.895684][ T7088] lo speed is unknown, defaulting to 1000 [ 237.019612][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 238.042258][ T30] audit: type=1800 audit(1751333178.833:3): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.301" name="bus" dev="overlay" ino=380 res=0 errno=0 [ 239.240547][ T7117] lo speed is unknown, defaulting to 1000 [ 241.552941][ T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 242.394943][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 242.520488][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 242.529578][ T10] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 242.553235][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.598911][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.615801][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.653080][ T10] usb 3-1: Product: syz [ 242.657697][ T10] usb 3-1: Manufacturer: syz [ 242.673307][ T10] usb 3-1: SerialNumber: syz [ 243.091961][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 244.737847][ T10] usb 3-1: 0:2 : does not exist [ 244.821599][ T10] usb 3-1: USB disconnect, device number 5 [ 245.886352][ T7182] blktrace: Concurrent blktraces are not allowed on sg0 [ 245.909474][ T7183] netlink: 32 bytes leftover after parsing attributes in process `syz.2.320'. [ 245.930779][ T6044] udevd[6044]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.249567][ T7175] lo speed is unknown, defaulting to 1000 [ 246.735785][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 249.186705][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 249.465718][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 249.483015][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 249.492358][ T10] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 249.503856][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.541212][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 249.579011][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.650884][ T10] usb 3-1: Product: syz [ 249.676842][ T10] usb 3-1: Manufacturer: syz [ 249.700894][ T10] usb 3-1: SerialNumber: syz [ 251.474759][ T10] usb 3-1: 0:2 : does not exist [ 251.671663][ T10] usb 3-1: USB disconnect, device number 6 [ 252.662510][ T6044] udevd[6044]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.400200][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'. [ 258.002299][ T5923] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 258.245325][ T5923] usb 2-1: not running at top speed; connect to a high speed hub [ 258.295014][ T5923] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 258.338637][ T5923] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 259.457751][ T5923] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.543259][ T5923] usb 2-1: string descriptor 0 read error: -71 [ 259.549619][ T5923] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.571582][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.649068][ T5923] usb 2-1: can't set config #1, error -71 [ 259.773077][ T7284] fuse: Bad value for 'fd' [ 259.831663][ T5923] usb 2-1: USB disconnect, device number 6 [ 259.964922][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'. [ 261.171986][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.324897][ T5958] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 268.492476][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.363'. [ 268.722197][ T5958] usb 3-1: device not accepting address 7, error -71 [ 270.445863][ T7360] block nbd2: not configured, cannot reconfigure [ 272.289284][ T7376] netlink: 32 bytes leftover after parsing attributes in process `syz.3.374'. [ 273.752991][ T5864] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 274.604746][ T5864] usb 4-1: not running at top speed; connect to a high speed hub [ 274.646410][ T5864] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 275.429129][ T5864] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 275.561947][ T5864] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.580293][ T5864] usb 4-1: string descriptor 0 read error: -71 [ 275.596951][ T5864] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.642003][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.923858][ T5864] usb 4-1: can't set config #1, error -71 [ 275.963915][ T5864] usb 4-1: USB disconnect, device number 3 [ 277.500945][ T7423] netlink: 32 bytes leftover after parsing attributes in process `syz.1.387'. [ 280.554640][ T7443] syz.0.392 (7443) used greatest stack depth: 16904 bytes left [ 280.987600][ T7450] mmap: syz.0.395 (7450) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 281.121926][ T3082] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 281.991278][ T3082] usb 5-1: not running at top speed; connect to a high speed hub [ 282.003812][ T3082] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 282.033494][ T3082] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 282.052469][ T3082] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 282.074284][ T3082] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 282.098875][ T3082] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.118798][ T3082] usb 5-1: Product: syz [ 282.126872][ T3082] usb 5-1: Manufacturer: syz [ 282.136127][ T3082] usb 5-1: SerialNumber: syz [ 282.182010][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 283.282354][ T3082] usb 5-1: can't set config #1, error -71 [ 283.320146][ T3082] usb 5-1: USB disconnect, device number 3 [ 283.341641][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 283.368192][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 283.395684][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 283.433917][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 283.457685][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 283.950657][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.985955][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 284.033472][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.417636][ T10] usb 1-1: usb_control_msg returned -32 [ 284.433256][ T10] usbtmc 1-1:16.0: can't read capabilities [ 284.800212][ T7475] usbtmc 1-1:16.0: control status returned 0 [ 285.010243][ T5958] usb 1-1: USB disconnect, device number 6 [ 287.399719][ T7490] netlink: 32 bytes leftover after parsing attributes in process `syz.2.406'. [ 288.805241][ T24] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 289.855198][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 289.890897][ T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 289.930737][ T24] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 289.979102][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.007197][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 290.022079][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.047922][ T24] usb 3-1: Product: syz [ 290.061841][ T24] usb 3-1: Manufacturer: syz [ 290.075096][ T24] usb 3-1: SerialNumber: syz [ 290.361982][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 290.532021][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 290.546736][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 290.840103][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.872836][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 290.887086][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 291.141780][ T10] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 291.165035][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.181976][ T10] usb 2-1: Product: syz [ 291.186366][ T10] usb 2-1: Manufacturer: syz [ 291.191123][ T10] usb 2-1: SerialNumber: syz [ 291.231579][ T10] usb 2-1: config 0 descriptor?? [ 291.254193][ T7522] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 291.474976][ T24] usb 3-1: 0:2 : does not exist [ 291.477775][ T10] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 291.537542][ T24] usb 3-1: USB disconnect, device number 9 [ 291.567892][ T10] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 291.730572][ C0] powermate: config urb returned -71 [ 291.736311][ C0] powermate: config urb returned -71 [ 291.741719][ C0] powermate: config urb returned -71 [ 291.751996][ C0] powermate: config urb returned -71 [ 291.796439][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.862791][ T10] usb 2-1: USB disconnect, device number 7 [ 291.871921][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 292.659312][ T7534] netlink: 32 bytes leftover after parsing attributes in process `syz.2.420'. [ 293.371947][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 294.032276][ T7545] sctp: failed to load transform for md5: -4 [ 294.116755][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 294.152274][ T10] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 294.181914][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.237473][ T10] usb 1-1: config 0 has no interface number 0 [ 294.413814][ T10] usb 1-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 295.135205][ T10] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 295.146119][ T10] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x9 has an invalid bInterval 70, changing to 7 [ 295.157072][ T10] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 295.168632][ T10] usb 1-1: config 0 interface 8 altsetting 0 has a duplicate endpoint with address 0x8C, skipping [ 295.179368][ T10] usb 1-1: New USB device found, idVendor=0411, idProduct=00e6, bcdDevice=ff.bd [ 295.196084][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.404296][ T10] usb 1-1: config 0 descriptor?? [ 295.432676][ T7552] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 295.649250][ T10] usb 1-1: string descriptor 0 read error: -71 [ 295.704283][ T3082] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 295.723011][ T10] usb 1-1: USB disconnect, device number 7 [ 295.756276][ T7574] fuse: Bad value for 'fd' [ 296.275833][ T3082] usb 3-1: not running at top speed; connect to a high speed hub [ 296.293796][ T3082] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 296.304086][ T3082] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 296.318329][ T3082] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.349883][ T3082] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 296.378355][ T3082] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.404738][ T3082] usb 3-1: Product: syz [ 296.425318][ T3082] usb 3-1: Manufacturer: syz [ 296.455276][ T3082] usb 3-1: SerialNumber: syz [ 298.057175][ T3082] usb 3-1: 0:2 : does not exist [ 298.578287][ T3082] usb 3-1: USB disconnect, device number 10 [ 298.937101][ T6044] udevd[6044]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.963330][ T7605] loop0: detected capacity change from 0 to 64 [ 301.830923][ T7611] overlayfs: failed to resolve './file1': -2 [ 302.642622][ T7614] fuse: Bad value for 'fd' [ 304.462875][ T6884] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 305.697481][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 305.770388][ T6884] usb 4-1: not running at top speed; connect to a high speed hub [ 305.774699][ T7639] syz.4.453: attempt to access beyond end of device [ 305.774699][ T7639] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 305.794232][ T7639] gfs2: error -5 reading superblock [ 305.935033][ T6884] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 305.954853][ T6884] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 305.965483][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 305.981545][ T24] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 305.990044][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.011782][ T6884] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.053373][ T24] usb 1-1: config 0 has no interface number 0 [ 306.093754][ T6884] usb 4-1: string descriptor 0 read error: -71 [ 306.105828][ T24] usb 1-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 306.135375][ T6884] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 306.475462][ T24] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 306.483396][ T7639] qnx4: no qnx4 filesystem (no root dir). [ 306.541893][ T6884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.662368][ T6884] usb 4-1: can't set config #1, error -71 [ 306.679731][ T24] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x9 has an invalid bInterval 70, changing to 7 [ 306.702483][ T6884] usb 4-1: USB disconnect, device number 4 [ 306.911961][ T24] usb 1-1: config 0 interface 8 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 7 [ 306.964165][ T24] usb 1-1: New USB device found, idVendor=0411, idProduct=00e6, bcdDevice=ff.bd [ 306.995311][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.269650][ T7652] loop1: detected capacity change from 0 to 64 [ 308.971120][ T24] usb 1-1: config 0 descriptor?? [ 310.378492][ T24] usb 1-1: can't set config #0, error -71 [ 311.221246][ T24] usb 1-1: USB disconnect, device number 8 [ 311.392377][ T7652] hfs: unable to open extent tree [ 311.397577][ T7652] hfs: can't find a HFS filesystem on dev loop1 [ 312.230741][ T7664] overlayfs: failed to resolve './file0': -2 [ 313.512103][ T30] audit: type=1800 audit(1751333254.283:4): pid=7672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.462" name="bus" dev="overlay" ino=456 res=0 errno=0 [ 315.305419][ T7696] loop1: detected capacity change from 0 to 64 [ 316.458689][ T7688] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.975874][ T7709] overlayfs: failed to resolve './file0': -2 [ 319.960039][ T30] audit: type=1800 audit(1751333260.743:5): pid=7714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.476" name="bus" dev="overlay" ino=508 res=0 errno=0 syzkaller syzkaller login: [ 322.602519][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.673039][ T7748] loop3: detected capacity change from 0 to 64 [ 323.342284][ T7750] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.546978][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.487'. [ 324.558489][ T7760] bridge_slave_1: left allmulticast mode [ 324.565015][ T7760] bridge_slave_1: left promiscuous mode [ 324.579944][ T7760] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.007279][ T7760] bridge_slave_0: left allmulticast mode [ 325.013139][ T7760] bridge_slave_0: left promiscuous mode [ 325.020938][ T7760] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.116559][ T7768] overlayfs: failed to resolve './file0': -2 [ 326.561995][ T6884] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 326.921894][ T6884] usb 2-1: Using ep0 maxpacket: 32 [ 326.939028][ T6884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 147, changing to 11 [ 326.995345][ T6884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42046, setting to 1024 [ 327.502014][ T6884] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 327.511128][ T6884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.793235][ T6884] usb 2-1: config 0 descriptor?? [ 327.823681][ T7779] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 327.849319][ T6884] hub 2-1:0.0: USB hub found [ 328.049238][ T6884] hub 2-1:0.0: 1 port detected [ 328.579794][ T6884] usb 2-1: USB disconnect, device number 8 [ 330.241892][ T3082] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 330.309150][ T7799] loop6: detected capacity change from 0 to 524287999 [ 330.422018][ T3082] usb 5-1: Using ep0 maxpacket: 16 [ 330.472146][ T3082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.537415][ T3082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.745476][ T3082] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 330.832728][ T7808] loop1: detected capacity change from 0 to 64 [ 330.924052][ T3082] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 331.093351][ T3082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.531333][ T3082] usb 5-1: config 0 descriptor?? [ 332.712391][ T3082] usbhid 5-1:0.0: can't add hid device: -71 [ 332.758961][ T3082] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 333.026726][ T3082] usb 5-1: USB disconnect, device number 4 [ 334.785319][ T3082] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 335.423919][ T7840] netlink: 'syz.2.511': attribute type 1 has an invalid length. [ 335.492750][ T7840] bond1: entered promiscuous mode [ 335.509344][ T7840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.602029][ T3082] usb 4-1: Using ep0 maxpacket: 8 [ 335.717035][ T7843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.725859][ T3082] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 335.735830][ T7843] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 335.746271][ T3082] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.503050][ T7843] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 336.510968][ T3082] usb 4-1: config 0 has no interface number 0 [ 336.520387][ T3082] usb 4-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 336.550246][ T3082] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 336.562533][ T3082] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x9 has an invalid bInterval 70, changing to 7 [ 336.574442][ T3082] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 336.590091][ T3082] usb 4-1: config 0 interface 8 altsetting 0 has a duplicate endpoint with address 0x8C, skipping [ 336.688323][ T3082] usb 4-1: New USB device found, idVendor=0411, idProduct=00e6, bcdDevice=ff.bd [ 336.698062][ T3082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.712276][ T3082] usb 4-1: config 0 descriptor?? [ 336.720632][ T7837] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 336.948361][ T3082] usb 4-1: string descriptor 0 read error: -71 [ 337.008348][ T3082] usb 4-1: USB disconnect, device number 5 [ 337.580123][ T7858] loop2: detected capacity change from 0 to 64 [ 340.817698][ T30] audit: type=1800 audit(1751333281.613:6): pid=7882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.521" name="bus" dev="overlay" ino=522 res=0 errno=0 [ 347.720114][ T7919] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 347.728721][ T7919] overlayfs: failed to set xattr on upper [ 347.734722][ T7919] overlayfs: ...falling back to redirect_dir=nofollow. [ 347.748662][ T7919] overlayfs: ...falling back to index=off. [ 347.754840][ T7919] overlayfs: ...falling back to uuid=null. [ 347.760925][ T7919] overlayfs: maximum fs stacking depth exceeded [ 350.594721][ T7938] lo speed is unknown, defaulting to 1000 [ 350.761275][ T7939] blktrace: Concurrent blktraces are not allowed on sg0 [ 357.395089][ T7985] netlink: 'syz.1.548': attribute type 4 has an invalid length. [ 358.531944][ T5864] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 359.299410][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 359.328148][ T5864] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 359.344190][ T5864] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.394654][ T5864] usb 1-1: config 0 has no interface number 0 [ 359.427663][ T5864] usb 1-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 359.624738][ T5864] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 360.300452][ T5864] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x9 has an invalid bInterval 70, changing to 7 [ 360.311757][ T5864] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 360.323565][ T5864] usb 1-1: config 0 interface 8 altsetting 0 has a duplicate endpoint with address 0x8C, skipping [ 360.340540][ T5864] usb 1-1: New USB device found, idVendor=0411, idProduct=00e6, bcdDevice=ff.bd [ 360.449189][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.623043][ T5864] usb 1-1: config 0 descriptor?? [ 360.630393][ T7989] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 361.713031][ T5864] usb 1-1: string descriptor 0 read error: -71 [ 361.813895][ T5864] usb 1-1: USB disconnect, device number 9 [ 366.842016][ T5923] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 367.012242][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 367.173525][ T5923] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 367.192186][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.892775][ T5923] usb 3-1: config 0 has no interface number 0 [ 367.919431][ T5923] usb 3-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 367.984378][ T5923] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 368.041585][ T5923] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x9 has an invalid bInterval 70, changing to 7 [ 368.071490][ T5923] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 368.087791][ T5923] usb 3-1: config 0 interface 8 altsetting 0 has a duplicate endpoint with address 0x8C, skipping [ 368.099334][ T5923] usb 3-1: New USB device found, idVendor=0411, idProduct=00e6, bcdDevice=ff.bd [ 368.108972][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.134262][ T5923] usb 3-1: config 0 descriptor?? [ 368.706384][ T8052] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 368.961192][ T5923] usb 3-1: string descriptor 0 read error: -71 [ 369.008627][ T5923] usb 3-1: USB disconnect, device number 11 [ 369.132122][ T5839] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 369.461878][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 369.468766][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.480088][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.489956][ T5839] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 369.503111][ T5839] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 369.518034][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.169756][ T5839] usb 4-1: config 0 descriptor?? [ 371.279535][ T5839] hid_parser_main: 7 callbacks suppressed [ 371.279560][ T5839] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 371.293632][ T5839] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 371.300631][ T5839] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 371.857201][ T8097] netlink: 'syz.3.579': attribute type 2 has an invalid length. [ 371.865004][ T8097] netlink: 244 bytes leftover after parsing attributes in process `syz.3.579'. [ 371.938560][ T5839] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 371.946689][ T5839] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 372.067685][ T5839] input: HID 0955:7214 Haptics as /devices/virtual/input/input6 [ 373.381272][ T5839] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 373.406537][ T5839] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 373.486610][ T5958] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 373.535115][ T5839] usb 4-1: USB disconnect, device number 6 [ 373.573636][ T5958] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 373.699567][ T5958] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 373.769675][ T5958] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 376.006600][ T8141] fuse: Bad value for 'fd' [ 379.061820][ C1] hrtimer: interrupt took 63982 ns [ 380.399538][ T5958] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 380.689125][ T5958] usb 3-1: Using ep0 maxpacket: 16 [ 380.706656][ T8182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.748916][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.796716][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.844807][ T5958] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 380.906960][ T5958] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 380.959666][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.017313][ T5958] usb 3-1: config 0 descriptor?? [ 381.491486][ T5958] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 381.517003][ T5958] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 381.550080][ T5958] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 381.567249][ T5958] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 381.583093][ T5958] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 381.825391][ T5958] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 381.863279][ T5958] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 382.044105][ T8196] netlink: 'syz.2.606': attribute type 2 has an invalid length. [ 382.052223][ T8196] netlink: 244 bytes leftover after parsing attributes in process `syz.2.606'. [ 382.651952][ T5958] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 383.261217][ T8203] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 383.268403][ T8203] overlayfs: failed to set xattr on upper [ 383.274881][ T8203] overlayfs: ...falling back to redirect_dir=nofollow. [ 383.281828][ T8203] overlayfs: ...falling back to index=off. [ 383.287681][ T8203] overlayfs: ...falling back to uuid=null. [ 383.293552][ T8203] overlayfs: maximum fs stacking depth exceeded [ 383.870739][ T1208] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 383.915691][ T1208] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 383.992082][ T1208] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 384.011908][ T1208] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 384.025699][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.032710][ T24] usb 3-1: reset high-speed USB device number 12 using dummy_hcd [ 385.546529][ T5958] usb 3-1: USB disconnect, device number 12 [ 385.861596][ T8236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.800468][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 388.683706][ T8259] fuse: Bad value for 'fd' [ 390.661901][ T5864] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 390.852443][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 390.870894][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.915442][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.965247][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 390.999751][ T5864] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 391.804167][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.816990][ T5864] usb 5-1: config 0 descriptor?? [ 392.381132][ T5864] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 392.446412][ T5864] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 392.465578][ T5864] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 392.473070][ T5864] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 392.480186][ T5864] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 392.740642][ T5864] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 393.116363][ T8307] netlink: 'syz.4.631': attribute type 2 has an invalid length. [ 393.124404][ T8307] netlink: 244 bytes leftover after parsing attributes in process `syz.4.631'. [ 393.582512][ T5864] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 393.591027][ T5864] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 394.654921][ T24] usb 5-1: USB disconnect, device number 5 [ 394.739037][ T3082] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 394.739117][ T3082] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 394.739160][ T3082] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 394.739199][ T3082] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 399.465385][ T30] audit: type=1800 audit(1751333340.243:7): pid=8356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.654" name="bus" dev="overlay" ino=686 res=0 errno=0 [ 418.155592][ T8492] lo speed is unknown, defaulting to 1000 [ 424.247655][ T8537] lo speed is unknown, defaulting to 1000 [ 426.394304][ T8547] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 426.404497][ T8547] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 426.416337][ T8547] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 436.541428][ T8621] lo speed is unknown, defaulting to 1000 [ 437.714316][ T8639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.850156][ T8677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.738'. [ 445.786100][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.241653][ T8720] loop6: detected capacity change from 0 to 524287999 [ 449.393124][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 453.081839][ T30] audit: type=1800 audit(1751333393.853:8): pid=8769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.762" name="bus" dev="overlay" ino=868 res=0 errno=0 [ 457.092128][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 458.483053][ T8813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 470.718331][ T8921] syz.0.803: attempt to access beyond end of device [ 470.718331][ T8921] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 470.945680][ T8921] gfs2: error -5 reading superblock [ 473.051899][ T5864] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 473.221420][ T5864] usb 5-1: not running at top speed; connect to a high speed hub [ 473.260708][ T5864] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 473.309836][ T5864] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 473.363147][ T5864] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.378816][ T5864] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 473.416093][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.428494][ T5864] usb 5-1: Product: syz [ 473.435796][ T5864] usb 5-1: Manufacturer: syz [ 473.456306][ T5864] usb 5-1: SerialNumber: syz [ 473.612007][ T31] INFO: task kworker/1:4:5914 blocked for more than 143 seconds. [ 473.619787][ T31] Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 [ 473.669683][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.710297][ T31] task:kworker/1:4 state:D stack:20056 pid:5914 tgid:5914 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 473.760893][ T31] Workqueue: events_power_efficient hub_init_func2 [ 473.783864][ T31] Call Trace: [ 473.980007][ T31] [ 473.992688][ T31] __schedule+0x16f5/0x4d00 [ 474.017517][ T31] ? schedule+0x165/0x360 [ 474.025153][ T31] ? __pfx___schedule+0x10/0x10 [ 474.031101][ T31] ? schedule+0x91/0x360 [ 474.036686][ T31] schedule+0x165/0x360 [ 474.041943][ T31] schedule_preempt_disabled+0x13/0x30 [ 474.047653][ T31] __mutex_lock+0x724/0xe80 [ 474.052735][ T31] ? __mutex_lock+0x51b/0xe80 [ 474.057600][ T31] ? hub_activate+0xb7/0x1ea0 [ 474.174447][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 474.191792][ T31] ? do_raw_spin_lock+0x121/0x290 [ 474.215974][ T31] ? __lock_acquire+0xab9/0xd20 [ 474.234440][ T31] hub_activate+0xb7/0x1ea0 [ 474.252689][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 474.268018][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 474.282086][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 474.297158][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 474.324168][ T31] process_scheduled_works+0xae1/0x17b0 [ 474.343066][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 474.349240][ T31] worker_thread+0x8a0/0xda0 [ 474.380855][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 474.402442][ T31] ? __kthread_parkme+0x7b/0x200 [ 474.417495][ T31] kthread+0x70e/0x8a0 [ 474.425406][ T31] ? __pfx_worker_thread+0x10/0x10 [ 474.431195][ T31] ? __pfx_kthread+0x10/0x10 [ 474.438237][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 474.444339][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.450259][ T31] ? __pfx_kthread+0x10/0x10 [ 474.455543][ T31] ret_from_fork+0x3fc/0x770 [ 474.460905][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 474.466736][ T31] ? __switch_to_asm+0x39/0x70 [ 474.472280][ T31] ? __switch_to_asm+0x33/0x70 [ 474.477683][ T31] ? __pfx_kthread+0x10/0x10 [ 474.483066][ T31] ret_from_fork_asm+0x1a/0x30 [ 474.488460][ T31] [ 474.500480][ T31] INFO: task kworker/1:6:6884 blocked for more than 144 seconds. [ 474.509541][ T31] Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 [ 474.530270][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.539774][ T31] task:kworker/1:6 state:D stack:22792 pid:6884 tgid:6884 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 474.555850][ T31] Workqueue: usb_hub_wq hub_event [ 474.561448][ T31] Call Trace: [ 474.586586][ T31] [ 474.594085][ T31] __schedule+0x16f5/0x4d00 [ 474.606359][ T31] ? schedule+0x165/0x360 [ 474.626670][ T31] ? __pfx___schedule+0x10/0x10 [ 474.636261][ T31] ? schedule+0x91/0x360 [ 474.641070][ T31] schedule+0x165/0x360 [ 474.721172][ T31] schedule_timeout+0x9a/0x270 [ 474.737013][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 474.752239][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 474.758040][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.767916][ T31] ? wait_for_completion+0x267/0x5d0 [ 474.778046][ T31] wait_for_completion+0x2bf/0x5d0 [ 474.788177][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 474.798323][ T31] ? __flush_work+0xd2/0xbc0 [ 474.810587][ T31] ? __flush_work+0xd2/0xbc0 [ 474.827186][ T5864] usb 5-1: 0:2 : does not exist [ 474.832219][ T31] __flush_work+0x9b9/0xbc0 [ 474.852337][ T31] ? __flush_work+0xd2/0xbc0 [ 474.856999][ T31] ? __pfx___flush_work+0x10/0x10 [ 474.872780][ T5864] usb 5-1: USB disconnect, device number 6 [ 474.888911][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 474.908685][ T31] ? __pfx___timer_delete_sync+0x10/0x10 [ 474.932681][ T31] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 474.950445][ T31] ? flush_delayed_work+0x11d/0x190 [ 474.958784][ T31] flush_delayed_work+0x13e/0x190 [ 474.959334][ T6044] udevd[6044]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.969395][ T31] ? __pfx_flush_delayed_work+0x10/0x10 [ 475.001859][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.010672][ T31] ? usb_hcd_flush_endpoint+0x3e9/0x400 [ 475.027261][ T31] hub_quiesce+0x1f0/0x330 [ 475.037607][ T31] hub_disconnect+0xc8/0x470 [ 475.051862][ T31] usb_unbind_interface+0x26b/0x910 [ 475.069919][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 475.089375][ T31] device_release_driver_internal+0x4d6/0x7c0 [ 475.107557][ T31] bus_remove_device+0x34d/0x410 [ 475.116129][ T31] device_del+0x511/0x8e0 [ 475.120588][ T31] ? kfree+0x18e/0x440 [ 475.131179][ T31] ? __pfx_device_del+0x10/0x10 [ 475.136876][ T31] ? kobject_put+0x446/0x480 [ 475.141722][ T31] usb_disable_device+0x3e9/0x8a0 [ 475.147625][ T31] usb_disconnect+0x330/0x950 [ 475.153945][ T31] hub_event+0x1cdb/0x4a00 [ 475.158536][ T31] ? do_raw_spin_lock+0x121/0x290 [ 475.169369][ T31] ? register_lock_class+0x51/0x320 [ 475.175066][ T31] ? __pfx_hub_event+0x10/0x10 [ 475.179940][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 475.189915][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 475.195552][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 475.201461][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 475.211259][ T31] process_scheduled_works+0xae1/0x17b0 [ 475.217513][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 475.231231][ T31] worker_thread+0x8a0/0xda0 [ 475.237899][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 475.245297][ T31] ? __kthread_parkme+0x7b/0x200 [ 475.250373][ T31] kthread+0x70e/0x8a0 [ 475.255060][ T31] ? __pfx_worker_thread+0x10/0x10 [ 475.260307][ T31] ? __pfx_kthread+0x10/0x10 [ 475.266434][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 475.273779][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.279203][ T31] ? __pfx_kthread+0x10/0x10 [ 475.284286][ T31] ret_from_fork+0x3fc/0x770 [ 475.288990][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 475.297980][ T31] ? __switch_to_asm+0x39/0x70 [ 475.303182][ T31] ? __switch_to_asm+0x33/0x70 [ 475.308167][ T31] ? __pfx_kthread+0x10/0x10 [ 475.313212][ T31] ret_from_fork_asm+0x1a/0x30 [ 475.318091][ T31] [ 475.321525][ T31] [ 475.321525][ T31] Showing all locks held in the system: [ 475.333171][ T31] 2 locks held by kworker/u8:1/13: [ 475.338405][ T31] #0: ffff8880b8639f58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 475.349551][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 475.401090][ T31] 1 lock held by khungtaskd/31: [ 475.406645][ T31] #0: ffffffff8e13bee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 475.420806][ T31] 3 locks held by kworker/1:4/5914: [ 475.426413][ T31] #0: ffff88801a482148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 475.446777][ T31] #1: ffffc900044f7bc0 ((work_completion)(&(&hub->init_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 475.484689][ T31] #2: ffff88807dbeb198 (&dev->mutex){....}-{4:4}, at: hub_activate+0xb7/0x1ea0 [ 475.495515][ T31] 5 locks held by kworker/1:6/6884: [ 475.501104][ T31] #0: ffff88801dae8d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 475.514561][ T31] #1: ffffc9001a9a7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 475.530379][ T31] #2: ffff888027b13198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 475.547395][ T31] #3: ffff88807dbeb198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 475.556781][ T31] #4: ffff88804959f160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 475.571406][ T31] 2 locks held by getty/7728: [ 475.576340][ T31] #0: ffff88814d9420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 475.589990][ T31] #1: ffffc9000bda32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 475.600330][ T31] 1 lock held by syz.0.806/8929: [ 475.616344][ T31] #0: ffffffff8e1418c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 475.630473][ T31] [ 475.642436][ T31] ============================================= [ 475.642436][ T31] [ 475.651007][ T31] NMI backtrace for cpu 1 [ 475.651034][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 475.651058][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 475.651070][ T31] Call Trace: [ 475.651078][ T31] [ 475.651087][ T31] dump_stack_lvl+0x189/0x250 [ 475.651120][ T31] ? __wake_up_klogd+0xd9/0x110 [ 475.651144][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.651175][ T31] ? __pfx__printk+0x10/0x10 [ 475.651211][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 475.651242][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 475.651265][ T31] ? _printk+0xcf/0x120 [ 475.651292][ T31] ? __pfx__printk+0x10/0x10 [ 475.651317][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 475.651345][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 475.651375][ T31] watchdog+0xfee/0x1030 [ 475.651401][ T31] ? watchdog+0x1de/0x1030 [ 475.651438][ T31] kthread+0x70e/0x8a0 [ 475.651462][ T31] ? __pfx_watchdog+0x10/0x10 [ 475.651484][ T31] ? __pfx_kthread+0x10/0x10 [ 475.651505][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 475.651533][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.651561][ T31] ? __pfx_kthread+0x10/0x10 [ 475.651582][ T31] ret_from_fork+0x3fc/0x770 [ 475.651611][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 475.651645][ T31] ? __switch_to_asm+0x39/0x70 [ 475.651664][ T31] ? __switch_to_asm+0x33/0x70 [ 475.651682][ T31] ? __pfx_kthread+0x10/0x10 [ 475.651703][ T31] ret_from_fork_asm+0x1a/0x30 [ 475.651743][ T31] [ 475.803790][ T31] Sending NMI from CPU 1 to CPUs 0: [ 475.809032][ C0] NMI backtrace for cpu 0 [ 475.809046][ C0] CPU: 0 UID: 0 PID: 2990 Comm: kworker/u8:7 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 475.809067][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 475.809079][ C0] Workqueue: events_unbound toggle_allocation_gate [ 475.809119][ C0] RIP: 0010:__text_poke+0xc9/0xa10 [ 475.809138][ C0] Code: 00 45 89 e7 41 81 e7 ff 0f 00 00 48 89 5c 24 50 49 8d 34 1f bf 00 10 00 00 48 89 74 24 18 e8 ae b4 58 00 48 c7 c0 40 72 a6 92 <48> c1 e8 03 42 0f b6 04 28 84 c0 0f 85 87 08 00 00 8b 1d 60 56 3f [ 475.809152][ C0] RSP: 0018:ffffc9000b95f6e0 EFLAGS: 00000293 [ 475.809172][ C0] RAX: ffffffff92a67240 RBX: 0000000000000004 RCX: ffff88802ef29e00 [ 475.809184][ C0] RDX: 0000000000000000 RSI: 00000000000005f1 RDI: 0000000000001000 [ 475.809194][ C0] RBP: ffffc9000b95f830 R08: 000000000000441f R09: 0000000000000006 [ 475.809205][ C0] R10: dffffc0000000000 R11: fffff5200172bf16 R12: ffffffff8218f5ed [ 475.809218][ C0] R13: dffffc0000000000 R14: 1ffff9200172beec R15: 00000000000005ed [ 475.809230][ C0] FS: 0000000000000000(0000) GS:ffff888125c1d000(0000) knlGS:0000000000000000 [ 475.809244][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.809255][ C0] CR2: 00007fe485180ab8 CR3: 000000000df36000 CR4: 00000000003526f0 [ 475.809270][ C0] Call Trace: [ 475.809276][ C0] [ 475.809289][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 475.809306][ C0] ? kmem_cache_alloc_node_noprof+0x8d/0x3c0 [ 475.809332][ C0] ? __pfx___text_poke+0x10/0x10 [ 475.809349][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 475.809377][ C0] smp_text_poke_batch_finish+0x8af/0x1100 [ 475.809399][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 475.809420][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 475.809447][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 475.809479][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 475.809507][ C0] static_key_enable+0x1a/0x20 [ 475.809531][ C0] toggle_allocation_gate+0xad/0x240 [ 475.809556][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 475.809581][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 475.809607][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 475.809628][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 475.809649][ C0] process_scheduled_works+0xae1/0x17b0 [ 475.809686][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 475.809716][ C0] worker_thread+0x8a0/0xda0 [ 475.809752][ C0] kthread+0x70e/0x8a0 [ 475.809768][ C0] ? __pfx_worker_thread+0x10/0x10 [ 475.809790][ C0] ? __pfx_kthread+0x10/0x10 [ 475.809805][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 475.809828][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.809851][ C0] ? __pfx_kthread+0x10/0x10 [ 475.809866][ C0] ret_from_fork+0x3fc/0x770 [ 475.809888][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 475.809912][ C0] ? __switch_to_asm+0x39/0x70 [ 475.809927][ C0] ? __switch_to_asm+0x33/0x70 [ 475.809960][ C0] ? __pfx_kthread+0x10/0x10 [ 475.809976][ C0] ret_from_fork_asm+0x1a/0x30 [ 475.810001][ C0] [ 475.846395][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 475.846422][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 475.846450][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 475.846464][ T31] Call Trace: [ 475.846476][ T31] [ 475.846487][ T31] dump_stack_lvl+0x99/0x250 [ 475.846528][ T31] ? __asan_memcpy+0x40/0x70 [ 475.846561][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.846596][ T31] ? __pfx__printk+0x10/0x10 [ 475.846638][ T31] panic+0x2db/0x790 [ 475.846680][ T31] ? __pfx_panic+0x10/0x10 [ 475.846714][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 475.846760][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 475.846792][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 475.846834][ T31] watchdog+0x102d/0x1030 [ 475.846865][ T31] ? watchdog+0x1de/0x1030 [ 475.846901][ T31] kthread+0x70e/0x8a0 [ 475.846929][ T31] ? __pfx_watchdog+0x10/0x10 [ 475.846954][ T31] ? __pfx_kthread+0x10/0x10 [ 475.846980][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 475.847013][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.847047][ T31] ? __pfx_kthread+0x10/0x10 [ 475.847072][ T31] ret_from_fork+0x3fc/0x770 [ 475.847107][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 475.847146][ T31] ? __switch_to_asm+0x39/0x70 [ 475.847177][ T31] ? __switch_to_asm+0x33/0x70 [ 475.847200][ T31] ? __pfx_kthread+0x10/0x10 [ 475.847225][ T31] ret_from_fork_asm+0x1a/0x30 [ 475.847266][ T31] [ 476.253510][ T31] Kernel Offset: disabled [ 476.257830][ T31] Rebooting in 86400 seconds..