last executing test programs: 18m34.152626154s ago: executing program 32 (id=1227): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x9}}, 0xfffffffc}, 0x80, 0x0, 0x0, 0x0, 0x54}, 0x640ce0c0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000200)="66b9800000c00f32b800008ec00f30b1b8e2d96e008ed00f09b83b0f8ed8baf80c66b8de57748d66efa43afc0808b7eef2abba427700000f06d9ed", 0x3b}], 0x1, 0x3b, 0x0, 0x0) r8 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r8, 0x801c581f, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x3, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r11, 0x4020aeb2, &(0x7f0000000800)={0xe80d3efc914b2848, 0x0, @ioapic={0x8000000, 0xe0000, 0x14a, 0x3, 0x0, [{0x2, 0x3, 0x1, '\x00', 0x7}, {0xd, 0x7, 0x96, '\x00', 0x3}, {0xfe, 0xf2, 0x3, '\x00', 0xaf}, {0x17, 0xf8, 0x4, '\x00', 0xf4}, {0x6, 0xd, 0x4, '\x00', 0x9}, {0x5b, 0xc, 0xb, '\x00', 0x8}, {0xb0, 0x1, 0x3, '\x00', 0x81}, {0x7, 0x1, 0x93, '\x00', 0xfd}, {0xfd, 0x1, 0x5}, {0x75, 0x81, 0xd, '\x00', 0x7}, {0x0, 0x5, 0x8, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0x9}, {0x2, 0x26, 0x7b, '\x00', 0xb}, {0xb, 0x6, 0x3}, {0x5, 0x10, 0x22, '\x00', 0xc}, {0x58, 0x1, 0x8, '\x00', 0x82}, {0x5, 0x2, 0xa6, '\x00', 0x9}, {0x1, 0xd, 0x9, '\x00', 0xfb}, {0x8, 0x45, 0x8, '\x00', 0x1}, {0x5, 0x8, 0x1, '\x00', 0x3}, {0xc, 0x7, 0x40, '\x00', 0xf}, {0x2, 0xa1, 0x4}, {0xf9, 0x70, 0xe, '\x00', 0x1c}, {0x76, 0x1, 0xff, '\x00', 0x10}]}}) socket$inet6(0xa, 0x5, 0x0) 17m38.301723504s ago: executing program 33 (id=1311): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) sched_getattr(r0, &(0x7f0000000080)={0x38}, 0x38, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r4 = dup(r3) read(r4, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f046}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r5 = epoll_create(0x3ff) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)={0xa0000010}) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f0000000180)=0x401, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 16m25.841183483s ago: executing program 34 (id=1399): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x132) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) listen(r6, 0xffff7ffc) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x2b) socket$netlink(0x10, 0x3, 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) epoll_create1(0x80000) 12m44.911882529s ago: executing program 1 (id=1607): socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r2, 0x2000, 0x0) r3 = syz_usbip_server_init(0x5) writev(r3, &(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001300050027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000001060400140003007665746830000000000000000089f6001400168053"], 0x48}}, 0x48000) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 12m36.981864268s ago: executing program 1 (id=1612): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x27c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x268, 0x1, [@m_ct={0x138, 0x5, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5, 0x1, 0x10000000, 0x4000000, 0x4}}, @TCA_CT_ZONE={0x6, 0x4, 0xb}, @TCA_CT_ACTION={0x6}]}, {0xe5, 0x6, "6e3f15e7647b8646eb3ef693bd2dc36f6e3c2441a42802bd71547259a58abcb39bebdc7f3926edae36d2ed8c914e745280327b2a39df9708146414709d4b4a9c314237d1e937e52ca2cb329db6137cf7528af323067ba55f738e68f73286321fad8fd83249f3f9f35a7119648a07aebcb23c33ea4f152ebf0f92511f456641b1071d71784e63a0b9bb947d001fd217231dfa7c483ea6917824fc7a54297cd24a4f068ee496759a2ec819b41ed67b1b04cca17d26353c7143078e5c34b275487b3f349ae24a2d35321d5fb8854c1ec93cd9db0a0807769b3a92b453d9cb8953155f"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_xt={0x84, 0xb, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xa8, 0x16, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1, 0x20000000, 0x4, 0xcb8a}, 0x4}}]}, {0x59, 0x6, "a611650f26be9cd7202da28cac16d8d11fdb771f20ce375a34e3dba9f39705a673d73efe471bb4fd0d2fbed092b7ee194fceec6f36a9fd75fe5dedc20749c4f127768202979a913d3c140ae84f54b33f261beb283c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x27c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x296, 0x0, 0x2}]}) 12m35.275598224s ago: executing program 1 (id=1615): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x132) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f00000004c0), &(0x7f0000000000), 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) epoll_create1(0x80000) 12m34.08231736s ago: executing program 1 (id=1619): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x400) dup(r5) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x3, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x2}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180a0000000000000000000000000000850000006600000095"], &(0x7f0000000000)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000001c0)) 12m28.762561432s ago: executing program 1 (id=1621): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f00000013c0), 0xc0, 0x40001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=ANY=[], 0x0, 0x20) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x804) 12m26.851627193s ago: executing program 1 (id=1623): socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r1, 0x2000, 0x0) r2 = syz_usbip_server_init(0x5) writev(r2, &(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001300050027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000001060400140003007665746830000000000000000089f6001400168053"], 0x48}}, 0x48000) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 12m11.707160128s ago: executing program 35 (id=1623): socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r1, 0x2000, 0x0) r2 = syz_usbip_server_init(0x5) writev(r2, &(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001300050027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000001060400140003007665746830000000000000000089f6001400168053"], 0x48}}, 0x48000) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 10m47.900247177s ago: executing program 0 (id=1780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xffff000000000000, 0x0, 0x10000082}, 0x80) 10m47.839242494s ago: executing program 0 (id=1781): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {}, [], {0x4, 0x1}}, 0x24, 0x2) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) 10m47.771977518s ago: executing program 0 (id=1782): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x16, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000740)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRES32], 0x1, 0x343, &(0x7f0000000bc0)="$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") syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) 10m47.722736729s ago: executing program 0 (id=1783): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0xfffe}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x4000) 10m47.634072116s ago: executing program 0 (id=1784): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) 10m47.604094352s ago: executing program 0 (id=1785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}, @TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000440)="80", 0x1, 0x8040, &(0x7f0000000200)={0x11, 0x5b93a685a5925349, r3, 0x1, 0xd4, 0x6, @broadcast}, 0x14) 10m32.14145693s ago: executing program 36 (id=1785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}, @TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000440)="80", 0x1, 0x8040, &(0x7f0000000200)={0x11, 0x5b93a685a5925349, r3, 0x1, 0xd4, 0x6, @broadcast}, 0x14) 9m3.550040423s ago: executing program 5 (id=1845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$eJzs3U1vG1UXAODTvM1H85I6C4QECHFVNrCxkvAHGqFWQkQChRoVFkhTMgEr0zjyWEGuEHTHlt9RsWSHhPgDWcCeHbtsWHZRdVDsuPloCIvUHgrPI0X3xPce+4zHM7qb0dm//d3drc2yuZn1Yup6iqmImHoYsTiIhi4djlODeCaOux9vNW7/9tqHH3/y3ura2o31lG6u3np7JaV09fWfvvzq+2s/9/7/0Q9Xf5yNvcVP9/9Y+X3vpb2X9x/f+qJdpnaZtju9lKU7nU4vu1PkaaNdbjVT+qDIszJP7e0y756Y3yw6Ozv9lG1vLMzvdPOyTNl2P23l/dTrpF63n7LPs/Z2ajabaWE++DutB+vr2eownjtn3fVJFcQYdLur2cE1PPvUTOtBLQUBALW66P5/5pnu/6fD/n+Sju//+bc62P/PHF6/J9n/AwAAAAAAAAAAAADA8+BhVTWqqmqMxmr0kPDh/zWXx5g9df5P/dVdH+N17MG9uYji293Wbms4DudXN6MdReSxFI14dHBbGBnGN99du7GUBhZj4e43g/xrv0S0/ncyfzkasXh2/vIwPz3Jj4NxOuaP569EI148O3/lzPyZePONY/nNaMSvn0UnitgY3N6O8r9eTumd99dO5c8O1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw39BMI6/GsO/9biviSuwe9u9vHi1YPNkff5j/pL/+UjTi0dn9+ZfO7M9/OV65XO+xAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBI2b+3lRVF3p1UMOr5P3hlZhT8ddal4fL7p6auxARrLop86lm94eOqqsZV6txkT+VFgumI885gdfgrufhnvRAR56yZjYj6v41/YlDXHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqc9T0u+5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqFPZv7eVFUXeHWNQ9zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8T/4MAAD//yeQEY0=") r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x3ffff) write(r5, &(0x7f0000000200)="c7", 0x1) sendfile(r5, r4, 0x0, 0x7fff) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) connect$inet(r8, 0x0, 0x0) sendmmsg$inet(r8, &(0x7f0000004d00), 0x0, 0xf1c) sendfile(r3, r7, 0x0, 0x20000023896) 9m0.728093528s ago: executing program 5 (id=1846): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f0000000300)=[{0x84, 0x74, 0x0, 0x0, @time={0xe, 0x425}, {0xfd}, {0x1}, @raw32={[0x2, 0x6, 0x7fffffe]}}, {0x6, 0x7, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xce, 0x2}, @control={0x0, 0xf4, 0x1}}, {0xf7, 0xf1, 0x0, 0x1, @tick, {0x70, 0x3c}, {0x1}, @ext={0x0, 0x0}}, {0x0, 0x40, 0x8, 0x5, @tick, {0x8, 0xfb}, {0x3, 0x3}, @raw32={[0x1, 0x8, 0x800]}}], 0x70) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) 9m0.41101645s ago: executing program 5 (id=1847): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@local, @in=@multicast2, 0x0, 0xfffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff}}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1}}]}, 0xcc}}, 0x0) 9m0.358640764s ago: executing program 5 (id=1848): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x28, 0x0, 0xd, 0xfffff034}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, 0x0, 0x20000881) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r1, 0x0, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 8m57.937239775s ago: executing program 5 (id=1849): getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84010}, 0x40000) 8m57.685390117s ago: executing program 5 (id=1850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbb4, 0x5, 0x5, 0x6e0, 0x5}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x20000018}, 0x80, &(0x7f00000043c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1020000ff84125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 8m42.49871344s ago: executing program 37 (id=1850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbb4, 0x5, 0x5, 0x6e0, 0x5}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x20000018}, 0x80, &(0x7f00000043c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1020000ff84125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 6m38.903625427s ago: executing program 6 (id=2053): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x401, 0xfffffffe, 0x204, {0x0, 0x0, 0x0, 0x0, 0x10227}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x8a}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044004}, 0x840) 6m36.750931041s ago: executing program 6 (id=2065): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 6m36.574335163s ago: executing program 6 (id=2067): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x11, 0x148, 0x160, 0x0, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0xff000000, 'geneve1\x00', 'dvmrp0\x00', {}, {0xff}, 0x2e, 0x3, 0x2}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x9}}, @common=@unspec=@rateest={{0x68}, {'vcan0\x00', 'vxcan1\x00', 0x24, 0x3, 0xc00, 0x1, 0x952e, 0x2, {0x64c}, {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x2, 0x1, 0x2, 0x3, 0x3], 0x1, 0x4}, {0xffffffffffffffff, [0x4, 0x7, 0x0, 0x7, 0x1, 0x4], 0x2, 0x7}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x74) 6m36.442396828s ago: executing program 6 (id=2068): openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, &(0x7f0000000040)={0xa, 0x2, 0xfdfffffa, @empty, 0x43bc}, 0x1c) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) 6m36.182774975s ago: executing program 6 (id=2069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000800) 6m35.719742855s ago: executing program 6 (id=2071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) ioprio_get$pid(0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=@newqdisc={0x170, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x7ff, 0x9, 0x201, 0xfa, 0x3, 0x7fff, 0x3, 0x7, 0xcc, 0x8, 0x0, 0xa, 0x4, 0x7423, 0x7fff}}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000000)="d9", 0x1, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r4, 0x1, 0x9, 0x6, @local}, 0x14) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000033c0)={0x0, 0x0, &(0x7f00000032c0)}, 0x1) 6m33.878552454s ago: executing program 9 (id=2075): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x11, 0x148, 0x160, 0x0, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0xff000000, 'geneve1\x00', 'dvmrp0\x00', {}, {0xff}, 0x2e, 0x3, 0x2}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x9}}, @common=@unspec=@rateest={{0x68}, {'vcan0\x00', 'vxcan1\x00', 0x24, 0x3, 0xc00, 0x1, 0x952e, 0x2, {0x64c}, {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x2, 0x1, 0x2, 0x3, 0x3], 0x1, 0x4}, {0xffffffffffffffff, [0x4, 0x7, 0x0, 0x7, 0x1, 0x4], 0x2, 0x7}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x74) 6m33.808429553s ago: executing program 9 (id=2076): openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, &(0x7f0000000040)={0xa, 0x2, 0xfdfffffa, @empty, 0x43bc}, 0x1c) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) 6m33.654031985s ago: executing program 9 (id=2077): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x90, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x61, 0x6, "946024968e1a1712fb0889442b6f8a0b358323a82d9d2050744d45be81f49a0fa06ee6d97eb1fcd4bb7391bf432ec3b851f9ede9c3b7d9deba726f8bea4e3c1ae84590d04e52b25dd097e755f75a5b3a82996770501ba3f61be6a8fa87"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0xf4, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xcc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff4a16}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x11c, 0x3, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0xa5, 0xc, "bcb58aa868678ad4d484b54923b84fb5697e86b84c761c4c07ef145e32645d9bff4d6290172503542afe35a9c3ecae01e42a2eb5280ac48aab9e673e1fb7f9236371891d0471d6ca3fa9e0c961674b9f458b78db879e863859213f0082022a66a63261eac4f8c433eb43cf0dd3e4ec780f7233aef8c17835a221db40d8ffb9b0ac42506fda4543cc4d6259bc6cbe4e96cb43d236340c271a8aa617dffe2f48935d"}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x60f44ca7}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f3809d8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x75391ab4}]}, @NFTA_CHAIN_COUNTERS={0x4}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x344}, 0x1, 0x0, 0x0, 0x80}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 6m33.339072978s ago: executing program 9 (id=2078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="940000000b0601040000000000000000010000000500010007000000050001000700000008000940000000050900020073797a3100000000080009400000000854000780"], 0x94}, 0x1, 0x0, 0x0, 0x8001}, 0x40) 6m33.099165253s ago: executing program 9 (id=2079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b0400000000ff000000020000004000048018000180080001006f7366000c0002800800014000000004"], 0x94}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) 6m32.908443207s ago: executing program 9 (id=2080): r0 = socket(0x1, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000118feffff7ffedbdf2500000006", @ANYRES32=r2, @ANYBLOB, @ANYRES32], 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) 6m20.210662491s ago: executing program 38 (id=2071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) ioprio_get$pid(0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=@newqdisc={0x170, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "27da77e374f2a245d8aa576f13d7d52ab0c4d7a38164092b3c1b550cc0a4e8d12deadbcd27cb9cac3fb6166b8f94f896288fbef55df21a4456c19a0efc47e64618e432fbad8dd8fd50804d66c2d323b91864fb55aa3e04619ad65c8b6b86710369e41256230968e306f0909afcc84b37e486e919121c787708025141402cf96d076bece752468c8f93804100671d6869f37b226e7fa110082d2a297a3d8862be449fcccebac67bf0e78042f28b26f7d6f584d0b10e92e287cf19311dab9be0d6fa06801c5b4140eb13c9b937cb5e425c6c7461e297f146450da62a3c716f9ed6cc0a0e231bc9a87a640f211c50b9ee1793f076b3ad171e8705ec3d9ca5219087"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x7ff, 0x9, 0x201, 0xfa, 0x3, 0x7fff, 0x3, 0x7, 0xcc, 0x8, 0x0, 0xa, 0x4, 0x7423, 0x7fff}}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000000)="d9", 0x1, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r4, 0x1, 0x9, 0x6, @local}, 0x14) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000033c0)={0x0, 0x0, &(0x7f00000032c0)}, 0x1) 6m17.185941776s ago: executing program 39 (id=2080): r0 = socket(0x1, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000118feffff7ffedbdf2500000006", @ANYRES32=r2, @ANYBLOB, @ANYRES32], 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) 16.464496327s ago: executing program 2 (id=2397): socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r1, 0x2000, 0x0) r2 = syz_usbip_server_init(0x5) writev(r2, &(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001300050027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000001060400140003007665746830000000000000000089f6001400168053"], 0x48}}, 0x48000) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 16.008027951s ago: executing program 3 (id=2398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setresuid(0x0, 0xee01, 0x0) r4 = msgget$private(0x0, 0x480) msgsnd(r4, &(0x7f0000000980)={0x1, "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"}, 0x2000, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x8}, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffffa, 0x1000, 0x100000000, 0x8000, 0x3, 0x98}) 13.365728632s ago: executing program 2 (id=2399): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x24, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r5, &(0x7f0000001240)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000180)="e6e0", 0x2}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x50}}], 0x2, 0x4004810) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0xc00700, &(0x7f0000000040)={[{@jqfmt_vfsv1}]}, 0x2, 0x46b, &(0x7f00000007c0)="$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") 11.265267433s ago: executing program 2 (id=2400): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x27c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x268, 0x1, [@m_ct={0x130, 0x5, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5, 0x1, 0x10000000, 0x4000000, 0x4}}, @TCA_CT_ZONE={0x6, 0x4, 0xb}, @TCA_CT_ACTION={0x6}]}, {0xde, 0x6, "6e3f15e7647b8646eb3ef693bd2dc36f6e3c2441a42802bd71547259a58abcb39bebdc7f3926edae36d2ed8c914e745280327b2a39df9708146414709d4b4a9c314237d1e937e52ca2cb329db6137cf7528af323067ba55f738e68f73286321fad8fd83249f3f9f35a7119648a07aebcb23c33ea4f152ebf0f92511f456641b1071d71784e63a0b9bb947d001fd217231dfa7c483ea6917824fc7a54297cd24a4f068ee496759a2ec819b41ed67b1b04cca17d26353c7143078e5c34b275487b3f349ae24a2d35321d5fb8854c1ec93cd9db0a0807769b3a92b4"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_xt={0x84, 0xb, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xb0, 0x16, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1, 0x20000000, 0x4, 0xcb8a}, 0x4}}]}, {0x61, 0x6, "a611650f26be9cd7202da28cac16d8d11fdb771f20ce375a34e3dba9f39705a673d73efe471bb4fd0d2fbed092b7ee194fceec6f36a9fd75fe5dedc20749c4f127768202979a913d3c140ae84f54b33f261beb283c20852cc5b0027f9a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x27c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x296, 0x0, 0x2}]}) 10.66331532s ago: executing program 3 (id=2402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) ptrace(0x10, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd25, 0x25dfdffd, {0x0, 0x0, 0x0, 0x0, {0x6}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x80, 0x800, 0x5, 0xf8a, 0x75, 0x7fffffff, 0x4, 0x7fffffff, 0x1, 0xfffffffb, 0x4, 0x6, 0x4, 0x8, 0x2, 0x0, 0x1, 0x8, 0x7ff, 0xdb, 0x72f4, 0x6, 0x7, 0xd6, 0x0, 0x7, 0x3, 0x2, 0x5a18, 0x2a, 0x5, 0xa, 0x5, 0x6, 0x6, 0x1, 0x0, 0x5, 0xd, 0x6, 0xe60, 0x3a, 0x14, 0x31, 0xc4e2, 0xbf3, 0xfffffff7, 0x2, 0x8, 0x50, 0xfffffff2, 0x8, 0x8, 0x80000001, 0xfffffff7, 0x671b, 0x0, 0x1, 0x9, 0x36, 0xd, 0x7a, 0x0, 0x9, 0x8, 0x8, 0x4, 0x10, 0x722b, 0x3f38b6fd, 0x7, 0x4, 0xcb8, 0x713e, 0x8, 0x9, 0x5, 0x10, 0xe9de, 0xf6, 0xd, 0xc, 0x7800000, 0xc1, 0x6f, 0x5, 0x8, 0x2, 0x4, 0xace1, 0x4, 0x6, 0x2, 0x4, 0xff, 0x87, 0x99cf, 0xf, 0x306, 0x6505, 0x4, 0x98, 0x3, 0x6, 0x1, 0x5ba, 0x7, 0x0, 0x7ff, 0x7ff, 0x6, 0x7fffffff, 0x8, 0x3c00000, 0x101, 0xf98, 0x5, 0xc46c, 0x8, 0x7, 0x3b, 0x9, 0xffffffff, 0x81, 0x2, 0x5, 0x1, 0x1000, 0x200, 0xc51, 0x6ee2, 0xe81, 0x8901, 0x2, 0x80000004, 0x3, 0x7, 0x7b9, 0xfa, 0x40, 0xe, 0x6, 0x9, 0x7fffffff, 0x7fffffff, 0x4ff5a575, 0xc6b7, 0x1, 0xffff8001, 0x40, 0xff, 0x7, 0x5, 0x6e7, 0x3, 0x1, 0xa434, 0xffff, 0x6, 0x6, 0x6, 0x9, 0x4, 0xfffffff7, 0x10001, 0xfffffffa, 0x0, 0x3, 0x3, 0xffffffff, 0x5, 0x357a, 0x1, 0x1, 0x4, 0x4, 0x6, 0x7f, 0x7, 0x8, 0x3, 0x10001, 0xcbf, 0x7, 0x5, 0xf6, 0x8, 0x4, 0x9f8, 0x9, 0x6, 0x1, 0x9, 0x8, 0xff, 0x1ff, 0x2b, 0x5, 0x8, 0x9, 0xff, 0x2, 0x2, 0xfffffff8, 0x5, 0xc3, 0x40, 0x7, 0x80000001, 0x4000000, 0x3, 0xffffffff, 0x800, 0x8, 0x4, 0xb, 0x4, 0x8, 0x1, 0x7f, 0x6, 0x1, 0x10000, 0xacd6, 0xfffffff7, 0x200, 0x10001, 0x8, 0xfffffffa, 0x2, 0x2, 0x4, 0x9, 0x6, 0xffff108b, 0xfffffead, 0x0, 0x0, 0x1ff, 0x4, 0x3, 0x8, 0x0, 0xa6d, 0x5c5, 0x2, 0x9, 0x82, 0x3, 0xffffff7d, 0x8001, 0xffffff2d, 0x2, 0x1000, 0x80000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x200, 0xc8, 0x0, {0xa, 0x2, 0x3, 0x1, 0x4, 0x3}, {0x6, 0x1, 0x1, 0xbbc0, 0x9, 0x1}, 0x96f, 0x7f, 0xa}}]}]}}]}, 0x478}}, 0x20004811) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.517374328s ago: executing program 4 (id=2403): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) setfsgid(0x0) r1 = io_uring_setup(0x3642, &(0x7f0000000400)={0x0, 0xeb8a, 0x1000, 0xffffffff, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000700)=[{0x0}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)=ANY=[@ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000001dc0)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x3a) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4004001) setxattr(&(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000040)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x2) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7fc, {0x1, 0x3, 0xea, 0x57e, 0x8, 0x6, {0x4, 0x4000000, 0xfffffffffffffff8, 0x8, 0x3, 0x7d, 0xfffffffe, 0x5b, 0x1, 0x8000, 0x4, r4, r5, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f00000001c0)={0xb3f, 0x0, r8}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r9 = openat$panthor(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GPU_INFO(r9, 0xc0106440, &(0x7f0000000280)={0x0, 0x7fffffff, &(0x7f0000000200)}) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) migrate_pages(0x0, 0x8, 0x0, &(0x7f00000003c0)=0x3) 8.055471612s ago: executing program 4 (id=2404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x9) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x202000, 0x0) mq_notify(r1, &(0x7f0000000280)={0x0, 0x10, 0x2, @thr={&(0x7f00000000c0)="ed1ca5664fd1e8095e8933d0d3a44d4be731f85da7d94ea7c8eaff183993d103adc6bfcdc9b179031b1c0110cc580ac522058e4f", &(0x7f0000000180)="1059b74b27361e44bde21f15d5fac5993d509b75ab47f3aff0f19d55a54b89db823ad559d6bd2475a0cc9bdee4d748502ba2641aa5573ef06dd7b18029ad361cdc6f6443e20d699eef6b8c17cde9d33e1fc38834c35fcdb80215425e5902bb0ff318e8dce6fae5a8f8becdc5fabc64964f940461f2d03ddbdb422e1c6dfab305adf8ed6a41237be2f23c5d286576ba22438349959ee45d2c66673f8d4def2257f76fd6e8f2905a34f5dced3dde"}}) 7.031085362s ago: executing program 4 (id=2405): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="3400000010004b0428bd8f00009ee2029254e5d0", @ANYRES32=0x0, @ANYBLOB="0000000080480500140012800b0001006272696467650000"], 0x34}}, 0x4) 6.523528835s ago: executing program 3 (id=2406): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x204800, &(0x7f0000000000)=ANY=[@ANYBLOB='map=off,unhide\x00check=strict,block=0x0000000000000800,utf8,check=strictAgid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f636f6d70726573732c6d61703d61636f726e2c636865636b3d72656c617865742c6d61703d6f66662c6d6170396e6f726d616c2c73686f77611ba626a1fe0e"], 0x0, 0x6d8, &(0x7f00000002c0)="$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") r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b16000b000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c000280080001400000000008000340000000140800024000"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 6.406374609s ago: executing program 4 (id=2407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x3b, &(0x7f0000000000)=ANY=[]) r3 = socket$nl_route(0x10, 0x3, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) poll(&(0x7f0000000000)=[{r5}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0c00990000000000190000000c00990007000000560000000c009900030000003f0000000c00238005001e000100000004002380080001007c00000008000100070000000c009900110d0000430000000c009900050000007c0000000c00238006000a00040000003c0023800500130001000000060018000200000008001c0006000000050006005500000006001600040000000500130001000000050005000100"], 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x2004c840) syz_genetlink_get_family_id$gtp(0x0, r4) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x1fc, &(0x7f0000000680)=ANY=[@ANYBLOB]) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x881) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(r6, &(0x7f0000006b40)={0x2020}, 0x2020) write$UHID_DESTROY(r6, &(0x7f0000000180), 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000a80)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000980)="b0f160788ce5545e0af8ee86ff3a0e15bbcd54ce0474e91e3f4a11d9834e31b51b52b2d478ac3374df3e06bae2abd08729c76f393eb6e291453424559d61580efdd824ecd130f98d31107a43514a6f6d5799995fe3a46fff7a21ed2f5323a3398aa1c02f7eba054026128fa958cfc19e3fa30c9d3d25d8190dbf304bb927cb53d985aa76c9e5c5419c87bda7fb87361829a54f1bb733bf417d1428a84a555c383ed370ec1902582bbff1f3bf8e04391971552d77e1fa51a7ea2777bf3e29895c2286ebc0d1fa2c", 0xc7, r3}, 0x64) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0810e2cfbada4a8a58e2284c06e600", @ANYBLOB="0c000b000400002003000060"], 0x2a8}}, 0x0) 5.416148073s ago: executing program 3 (id=2408): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffd, 0x4}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x10004000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 5.323602654s ago: executing program 2 (id=2409): keyctl$search(0xa, 0x0, &(0x7f0000004400)='id_legacy\x00', &(0x7f0000004440)={'syz', 0x2}, 0xfffffffffffffffa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xfffff5d4}}, './file0\x00'}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000040)={0x2, [0x0, 0x0]}) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0x7, 0xd8f9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x4010, r4, 0x8963d000) clock_gettime(0x0, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0xcb3f, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0xa206, 0x101, 0xafc2, 0x5, 0x1}, 0x0, 0x0) 1.896508322s ago: executing program 4 (id=2410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c00028005000100000000000600034000010000080007"], 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x40}}, 0x0) 1.895388132s ago: executing program 2 (id=2411): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mprotect(&(0x7f00006b3000/0x1000)=nil, 0x1000, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) socket$xdp(0x2c, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922", 0x4b}, {0x0}], 0x2}, 0x0) 1.835778506s ago: executing program 3 (id=2412): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x8040, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000500)={0x7, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380), &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fffb000000000000000000008500000027000000850000005000000095"], &(0x7f0000000680)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="151b00ba8d13cdea2aac8a25ec05", 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_MSG_GETSETELEM(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="600000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e0001006970366772657461700000009200028006001000000000001400060000000000000000000000ffff000000000a000100aa"], 0x60}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000000)="01", 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) 1.617003627s ago: executing program 4 (id=2413): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x1d, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0, 0x0, 0x0, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x20040000}, 0x2c000010) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000140)=[0x0, 0x7fff], 0x2) 260.97795ms ago: executing program 3 (id=2414): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}], 0x2}}], 0x1, 0x2, 0x0) recvfrom$unix(r2, &(0x7f0000000480)=""/238, 0xee, 0x10120, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=2415): prctl$PR_SET_VMA(0x50, 0x21, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) fsopen(&(0x7f0000000280)='ufs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x25ca03) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x88282, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000480)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x4000000012, 0x80000003}, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', &(0x7f0000000040)={0x4800, 0x0, 0xb}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x7, 0x7ffc0001}]}) kernel console output (not intermixed with test programs): renamed from eth0 [ 1582.828460][T15592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1582.900133][T15592] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1582.959617][T15592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1582.984586][T15597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1582.997275][T15592] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1583.029964][T15592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1583.097957][T15592] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1583.145504][T15592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1583.459207][T15597] 8021q: adding VLAN 0 to HW filter on device team0 [ 1583.569750][T15282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.578440][T15282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1583.772184][T15587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1583.774989][T15645] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1583.899682][T15645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1583.905919][ T7910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.906503][ T7910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1584.029898][T15645] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1584.114714][T15645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1584.381391][T15645] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1584.448340][T15645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1584.508631][T15645] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1584.555022][T15645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1584.893538][T15587] 8021q: adding VLAN 0 to HW filter on device team0 [ 1585.120868][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.121112][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1585.220062][T15282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.227617][T15282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1585.689916][T15592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1585.907909][T15592] 8021q: adding VLAN 0 to HW filter on device team0 [ 1586.159738][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.163657][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1586.387211][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1586.387374][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1586.550445][T10709] bridge_slave_1: left allmulticast mode [ 1586.550471][T10709] bridge_slave_1: left promiscuous mode [ 1586.550679][T10709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.721890][T10709] bridge_slave_0: left allmulticast mode [ 1586.721929][T10709] bridge_slave_0: left promiscuous mode [ 1586.722217][T10709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.371087][T10709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1587.451277][T10709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1587.512797][T10709] bond0 (unregistering): Released all slaves [ 1587.587205][T15645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1588.336338][T10709] hsr_slave_0: left promiscuous mode [ 1588.370409][T10709] hsr_slave_1: left promiscuous mode [ 1588.371746][T10709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1588.412225][T10709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1589.064404][T11210] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1589.200612][T11210] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1589.203878][T11210] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1589.237981][T11210] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1589.238894][T11210] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1589.464650][T10709] team0 (unregistering): Port device team_slave_1 removed [ 1589.542612][T10709] team0 (unregistering): Port device team_slave_0 removed [ 1589.859752][T15645] 8021q: adding VLAN 0 to HW filter on device team0 [ 1590.144374][T15597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1590.183189][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.183375][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1590.385389][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.385988][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1590.500691][T15913] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1590.597529][T15913] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1590.787513][T15913] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1590.842056][T15913] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1590.847394][T15913] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1590.964681][T15913] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1591.015904][T15913] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1591.134135][T15913] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1591.568280][T13130] Bluetooth: hci3: command tx timeout [ 1592.317225][T11210] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1592.362327][T11210] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1592.381752][T11210] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1592.483801][T11210] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1592.498005][T11210] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1593.672465][T13130] Bluetooth: hci3: command tx timeout [ 1594.838510][T13130] Bluetooth: hci0: command tx timeout [ 1595.658389][T11210] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1595.718838][T11210] Bluetooth: hci3: command tx timeout [ 1595.721532][T11210] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1595.746402][T11210] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1595.749957][T11210] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1595.762210][T11210] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1596.913485][T13130] Bluetooth: hci0: command tx timeout [ 1597.294554][T16129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.294842][T16129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.295032][T16129] bridge_slave_0: entered allmulticast mode [ 1597.303005][T16129] bridge_slave_0: entered promiscuous mode [ 1597.342068][T16129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1597.342461][T16129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.342727][T16129] bridge_slave_1: entered allmulticast mode [ 1597.372915][T16129] bridge_slave_1: entered promiscuous mode [ 1597.574080][T15913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1597.607549][T15645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1597.790510][T13130] Bluetooth: hci3: command tx timeout [ 1597.800011][T16129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1597.894330][T16129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1598.030541][T13130] Bluetooth: hci4: command tx timeout [ 1598.390649][T10709] bridge_slave_1: left allmulticast mode [ 1598.390680][T10709] bridge_slave_1: left promiscuous mode [ 1598.390914][T10709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.514095][T10709] bridge_slave_0: left allmulticast mode [ 1598.514134][T10709] bridge_slave_0: left promiscuous mode [ 1598.514411][T10709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.990532][T13130] Bluetooth: hci0: command tx timeout [ 1599.431211][T10709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1599.491491][T10709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1599.532800][T10709] bond0 (unregistering): Released all slaves [ 1599.567659][T16129] team0: Port device team_slave_0 added [ 1599.725375][T16129] team0: Port device team_slave_1 added [ 1599.891942][T15913] 8021q: adding VLAN 0 to HW filter on device team0 [ 1600.083018][T16129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1600.083038][T16129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1600.083069][T16129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1600.102233][T16129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1600.102251][T16129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1600.102294][T16129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1600.171148][T13130] Bluetooth: hci4: command tx timeout [ 1600.173967][ T1517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.174147][ T1517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1600.530476][T10709] hsr_slave_0: left promiscuous mode [ 1600.570409][T10709] hsr_slave_1: left promiscuous mode [ 1600.571644][T10709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1600.592996][T10709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1601.074094][T13130] Bluetooth: hci0: command tx timeout [ 1601.151026][T10709] team0 (unregistering): Port device team_slave_1 removed [ 1601.191225][T10709] team0 (unregistering): Port device team_slave_0 removed [ 1601.466662][T11665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1601.466833][T11665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1601.539132][ T5253] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1601.657574][T11210] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1601.739395][T11210] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1601.756388][T11210] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1601.757688][T11210] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1601.758927][T11210] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1601.982916][T16129] hsr_slave_0: entered promiscuous mode [ 1601.985043][T16129] hsr_slave_1: entered promiscuous mode [ 1601.986782][T16129] debugfs: 'hsr0' already exists in 'hsr' [ 1601.986808][T16129] Cannot create hsr debugfs directory [ 1602.206806][T11210] Bluetooth: hci4: command tx timeout [ 1602.376227][T16174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1602.376563][T16174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.376807][T16174] bridge_slave_0: entered allmulticast mode [ 1602.410342][T16174] bridge_slave_0: entered promiscuous mode [ 1602.568715][T16174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.569761][T16174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.570084][T16174] bridge_slave_1: entered allmulticast mode [ 1602.578025][T16174] bridge_slave_1: entered promiscuous mode [ 1603.182729][ T5253] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1603.278065][T16174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1603.467634][T16174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1603.745313][T16174] team0: Port device team_slave_0 added [ 1603.806100][T16174] team0: Port device team_slave_1 added [ 1603.870619][T11210] Bluetooth: hci5: command tx timeout [ 1604.167528][T16174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1604.167544][T16174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1604.167564][T16174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1604.218296][ T5253] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1604.279863][T11210] Bluetooth: hci4: command tx timeout [ 1604.302863][T16174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1604.302876][T16174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1604.302899][T16174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1605.091248][T16224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.091675][T16224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.091963][T16224] bridge_slave_0: entered allmulticast mode [ 1605.122538][T16224] bridge_slave_0: entered promiscuous mode [ 1605.555451][T16224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.557153][T16224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.557362][T16224] bridge_slave_1: entered allmulticast mode [ 1605.571540][T16224] bridge_slave_1: entered promiscuous mode [ 1605.953592][T11210] Bluetooth: hci5: command tx timeout [ 1606.244527][T16174] hsr_slave_0: entered promiscuous mode [ 1606.246841][T16174] hsr_slave_1: entered promiscuous mode [ 1606.248649][T16174] debugfs: 'hsr0' already exists in 'hsr' [ 1606.248674][T16174] Cannot create hsr debugfs directory [ 1606.325041][T16224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1606.589835][T16224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1607.092849][T16224] team0: Port device team_slave_0 added [ 1607.185755][T16224] team0: Port device team_slave_1 added [ 1607.638584][T16224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1607.638603][T16224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1607.638631][T16224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1607.827440][T16224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1607.827472][T16224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1607.827494][T16224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1608.030463][T11210] Bluetooth: hci5: command tx timeout [ 1608.774701][T15913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1608.875774][T16224] hsr_slave_0: entered promiscuous mode [ 1608.877952][T16224] hsr_slave_1: entered promiscuous mode [ 1608.879704][T16224] debugfs: 'hsr0' already exists in 'hsr' [ 1608.879730][T16224] Cannot create hsr debugfs directory [ 1609.418310][ T5253] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1610.047352][T16129] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1610.084860][T16129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1610.111832][T11210] Bluetooth: hci5: command tx timeout [ 1610.113692][T16310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.114591][T16310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.114851][T16310] bridge_slave_0: entered allmulticast mode [ 1610.118353][T16310] bridge_slave_0: entered promiscuous mode [ 1610.166593][T16129] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1610.186628][T16129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1610.441635][T16310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.441952][T16310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.442233][T16310] bridge_slave_1: entered allmulticast mode [ 1610.445869][T16310] bridge_slave_1: entered promiscuous mode [ 1610.808616][T16129] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1610.824491][T16129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1610.904598][T16129] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1610.944347][T16129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1611.198833][T16310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1611.489521][T16310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1611.848082][T16310] team0: Port device team_slave_0 added [ 1612.125070][T16310] team0: Port device team_slave_1 added [ 1612.298744][T16310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1612.298762][T16310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1612.298787][T16310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1612.636039][T16310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1612.636058][T16310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1612.636089][T16310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1612.792051][T15913] veth0_vlan: entered promiscuous mode [ 1612.955849][ T5253] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1613.050125][T16310] hsr_slave_0: entered promiscuous mode [ 1613.059047][T16310] hsr_slave_1: entered promiscuous mode [ 1613.064981][T16310] debugfs: 'hsr0' already exists in 'hsr' [ 1613.065014][T16310] Cannot create hsr debugfs directory [ 1613.091325][T15913] veth1_vlan: entered promiscuous mode [ 1613.770652][T10709] bridge_slave_1: left allmulticast mode [ 1613.770690][T10709] bridge_slave_1: left promiscuous mode [ 1613.770973][T10709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.872071][T10709] bridge_slave_0: left allmulticast mode [ 1613.872246][T10709] bridge_slave_0: left promiscuous mode [ 1613.873066][T10709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.090687][T10709] bridge_slave_1: left allmulticast mode [ 1614.090735][T10709] bridge_slave_1: left promiscuous mode [ 1614.090995][T10709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.191659][T10709] bridge_slave_0: left allmulticast mode [ 1614.191686][T10709] bridge_slave_0: left promiscuous mode [ 1614.191882][T10709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.410603][T10709] bridge_slave_1: left allmulticast mode [ 1614.410632][T10709] bridge_slave_1: left promiscuous mode [ 1614.410890][T10709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.511508][T10709] bridge_slave_0: left allmulticast mode [ 1614.511538][T10709] bridge_slave_0: left promiscuous mode [ 1614.511745][T10709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.833742][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1614.833862][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1615.714137][T10709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1615.771229][T10709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1615.835687][T10709] bond0 (unregistering): Released all slaves [ 1616.454600][T10709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1616.511316][T10709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1616.553131][T10709] bond0 (unregistering): Released all slaves [ 1617.231843][T10709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1617.294020][T10709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1617.353436][T10709] bond0 (unregistering): Released all slaves [ 1618.328475][T15913] veth0_macvtap: entered promiscuous mode [ 1618.586943][T15913] veth1_macvtap: entered promiscuous mode [ 1618.605944][T16129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1618.673014][T16129] 8021q: adding VLAN 0 to HW filter on device team0 [ 1618.699848][T15913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1618.711787][ T7910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1618.712020][ T7910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1618.753317][T15913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1618.761524][ T7910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1618.761765][ T7910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1619.050452][T10709] hsr_slave_0: left promiscuous mode [ 1619.090395][T10709] hsr_slave_1: left promiscuous mode [ 1619.091650][T10709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1619.113170][T10709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1619.271558][T10709] hsr_slave_0: left promiscuous mode [ 1619.310672][T10709] hsr_slave_1: left promiscuous mode [ 1619.313728][T10709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1619.333735][T10709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1619.490469][T10709] hsr_slave_0: left promiscuous mode [ 1619.530465][T10709] hsr_slave_1: left promiscuous mode [ 1619.531717][T10709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1619.571518][T10709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1620.242290][T10709] team0 (unregistering): Port device team_slave_1 removed [ 1620.293757][T10709] team0 (unregistering): Port device team_slave_0 removed [ 1620.781120][T10709] team0 (unregistering): Port device team_slave_1 removed [ 1620.831224][T10709] team0 (unregistering): Port device team_slave_0 removed [ 1621.293241][T10709] team0 (unregistering): Port device team_slave_1 removed [ 1621.351898][T10709] team0 (unregistering): Port device team_slave_0 removed [ 1621.587395][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.591135][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.610790][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.667789][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.007502][T10073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1623.007523][T10073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1623.704831][T10073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1623.704854][T10073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1625.445769][T16174] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1625.480034][T16174] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1625.553750][T16174] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1625.685578][T16174] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1625.689076][T16174] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1625.915894][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2085'. [ 1625.936831][T16174] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1626.049800][T16174] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1626.264894][T16174] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1627.123976][T16129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1630.499336][T16129] veth0_vlan: entered promiscuous mode [ 1631.132602][T16129] veth1_vlan: entered promiscuous mode [ 1631.599806][T16174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1631.647357][T16129] veth0_macvtap: entered promiscuous mode [ 1631.778121][T16129] veth1_macvtap: entered promiscuous mode [ 1632.054002][T16174] 8021q: adding VLAN 0 to HW filter on device team0 [ 1632.182221][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.182421][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1632.317006][T16129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1633.625600][T11665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.625729][T11665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1633.825392][T16129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1633.981094][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.093672][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.099446][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.121150][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.799192][T16224] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1634.915207][T16224] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1634.991826][T16224] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1635.078540][T16224] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1635.172042][ T5253] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1635.203230][T16224] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1635.306871][T16224] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1636.397597][T16224] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1636.439407][T16224] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1637.086560][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1637.086585][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1637.612074][T16310] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1637.656111][T16310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1637.689459][T16310] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1637.757456][T16310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1637.882574][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1637.882595][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1637.888425][T16310] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1637.937611][T16310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1638.207118][T16310] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1638.774002][T16310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1639.853151][T16174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1640.335102][T16224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1640.629307][T16310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1640.679372][ T5253] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1640.716446][T16224] 8021q: adding VLAN 0 to HW filter on device team0 [ 1640.855768][ T1517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.856027][ T1517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1640.944094][ T1517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.944288][ T1517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1640.971059][T16310] 8021q: adding VLAN 0 to HW filter on device team0 [ 1641.020714][T10073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.020972][T10073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1641.100623][ T1517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.100784][ T1517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1641.667524][T16174] veth0_vlan: entered promiscuous mode [ 1641.832481][T16174] veth1_vlan: entered promiscuous mode [ 1642.542343][T16174] veth0_macvtap: entered promiscuous mode [ 1642.652966][T16174] veth1_macvtap: entered promiscuous mode [ 1642.848535][T16174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1642.942089][T16174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1643.232447][ T5253] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1643.233509][T16722] syz_tun: entered allmulticast mode [ 1644.520289][ T3094] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.540131][ T3094] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.540501][ T3094] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.548869][ T3094] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.094135][T16717] syz_tun: left allmulticast mode [ 1645.569238][T16731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2111'. [ 1647.549907][ T7910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1647.549945][ T7910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1648.027994][ T9502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1648.028018][ T9502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1648.075399][T16766] loop3: detected capacity change from 0 to 512 [ 1648.132856][T16766] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1648.154537][T16766] EXT4-fs (loop3): 1 truncate cleaned up [ 1648.221115][T16766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1648.508552][T16310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1648.649788][T16224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1648.859334][T16129] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1649.137050][T16129] Flush: task=syz-executor[16129] dev=loop3 state=2 [ 1649.268602][T16129] Teardown: task=syz-executor[16129] dev=loop3 state=2 [ 1653.433158][T16816] loop2: detected capacity change from 0 to 512 [ 1653.483499][T16816] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1653.543590][T16816] EXT4-fs (loop2): 1 truncate cleaned up [ 1653.597320][T16816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1654.777954][T15913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1654.883531][T15913] Flush: task=syz-executor[15913] dev=loop2 state=2 [ 1654.996414][T15913] Teardown: task=syz-executor[15913] dev=loop2 state=2 [ 1655.309378][T16224] veth0_vlan: entered promiscuous mode [ 1655.319888][T16310] veth0_vlan: entered promiscuous mode [ 1655.577082][T16310] veth1_vlan: entered promiscuous mode [ 1656.097261][T16310] veth0_macvtap: entered promiscuous mode [ 1656.156704][T16310] veth1_macvtap: entered promiscuous mode [ 1656.565322][T16310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1656.601930][T16310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1656.885553][T10073] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.886125][T10073] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.886805][T10073] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.886852][T10073] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.563466][T13130] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1659.583093][T13130] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1659.637988][T13130] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1659.675601][T13130] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1659.678733][T13130] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1660.521097][T16891] loop3: detected capacity change from 0 to 512 [ 1660.764292][T16891] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1660.795007][T16891] EXT4-fs (loop3): 1 truncate cleaned up [ 1660.798387][T16891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1661.055879][T16129] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1661.204318][T16129] Flush: task=syz-executor[16129] dev=loop3 state=2 [ 1661.260323][T14251] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1661.314922][T16129] Teardown: task=syz-executor[16129] dev=loop3 state=2 [ 1661.442889][T14251] usb 3-1: Using ep0 maxpacket: 16 [ 1661.446254][T14251] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 1661.448874][T14251] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1661.448899][T14251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.448918][T14251] usb 3-1: Product: syz [ 1661.448932][T14251] usb 3-1: Manufacturer: syz [ 1661.448947][T14251] usb 3-1: SerialNumber: syz [ 1661.501840][T14251] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1661.501921][T14251] r8152-cfgselector 3-1: config 0 descriptor?? [ 1662.031465][T14251] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1662.032071][T14251] r8152-cfgselector 3-1: No union descriptors [ 1662.124433][T11210] Bluetooth: hci1: command tx timeout [ 1662.164665][T14251] r8152-cfgselector 3-1: USB disconnect, device number 68 [ 1663.816922][T13160] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1664.100998][T13160] usb 4-1: too many configurations: 35, using maximum allowed: 8 [ 1664.104954][T13160] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1664.104991][T13160] usb 4-1: can't read configurations, error -61 [ 1664.205794][T13130] Bluetooth: hci1: command tx timeout [ 1664.231037][T13160] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1664.282938][T16933] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1664.370664][T16933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1664.529556][T16933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1664.538193][T16933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1664.545890][T16933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1664.630708][T13160] usb 4-1: too many configurations: 35, using maximum allowed: 8 [ 1664.793593][T13160] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1664.793635][T13160] usb 4-1: can't read configurations, error -61 [ 1664.794083][T13160] usb usb4-port1: attempt power cycle [ 1665.260412][T13160] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1666.448993][T13160] usb 4-1: device descriptor read/8, error -71 [ 1666.652615][T11210] Bluetooth: hci1: command tx timeout [ 1666.811752][T16954] loop4: detected capacity change from 0 to 512 [ 1666.819535][T16954] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1666.853932][T16954] EXT4-fs (loop4): 1 truncate cleaned up [ 1666.871544][T16954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1666.955655][T11210] Bluetooth: hci4: command tx timeout [ 1667.117556][T16174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1667.269163][T16174] Flush: task=syz-executor[16174] dev=loop4 state=2 [ 1667.350952][T16174] Teardown: task=syz-executor[16174] dev=loop4 state=2 [ 1667.757795][ T5705] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1667.910467][ T5705] usb 5-1: Using ep0 maxpacket: 16 [ 1667.930339][ T5705] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 1667.981870][ T5705] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1667.981904][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.981927][ T5705] usb 5-1: Product: syz [ 1667.981944][ T5705] usb 5-1: Manufacturer: syz [ 1667.981960][ T5705] usb 5-1: SerialNumber: syz [ 1668.028686][ T5705] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1668.028711][ T5705] r8152-cfgselector 5-1: config 0 descriptor?? [ 1668.314062][ T5705] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1668.314528][ T5705] r8152-cfgselector 5-1: No union descriptors [ 1668.519994][ T5786] r8152-cfgselector 5-1: USB disconnect, device number 75 [ 1668.597643][ T5705] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1668.670410][T11210] Bluetooth: hci1: command tx timeout [ 1669.510104][T11210] Bluetooth: hci4: command tx timeout [ 1669.759329][ T5705] usb 4-1: too many configurations: 35, using maximum allowed: 8 [ 1669.785964][ T5705] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1669.786006][ T5705] usb 4-1: can't read configurations, error -61 [ 1669.990477][ T5705] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1670.061328][T16994] loop4: detected capacity change from 0 to 512 [ 1670.141190][ T5705] usb 4-1: too many configurations: 35, using maximum allowed: 8 [ 1670.169616][T16994] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1670.198469][ T5705] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1670.198508][ T5705] usb 4-1: can't read configurations, error -61 [ 1670.198907][ T5705] usb usb4-port1: attempt power cycle [ 1670.302716][T16994] EXT4-fs (loop4): 1 truncate cleaned up [ 1670.305667][T16994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1670.656966][T16174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1670.723520][ T5705] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1670.758283][ T5705] usb 4-1: too many configurations: 35, using maximum allowed: 8 [ 1670.788036][ T5705] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1670.788070][ T5705] usb 4-1: can't read configurations, error -61 [ 1670.818067][T16990] loop2: detected capacity change from 0 to 128 [ 1670.844642][T16990] Flush: task=syz.2.2155[16990] dev=loop2 state=2 [ 1670.850972][T16174] Flush: task=syz-executor[16174] dev=loop4 state=2 [ 1670.970575][T16990] Teardown: task=syz.2.2155[16990] dev=loop2 state=2 [ 1670.996227][T16174] Teardown: task=syz-executor[16174] dev=loop4 state=2 [ 1671.034087][ T5705] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1671.059387][ T5705] usb 4-1: too many configurations: 35, using maximum allowed: 8 [ 1671.090493][ T5705] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1671.090531][ T5705] usb 4-1: can't read configurations, error -61 [ 1671.093292][ T5705] usb usb4-port1: unable to enumerate USB device [ 1671.196324][T17002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2157'. [ 1671.569954][T11210] Bluetooth: hci4: command tx timeout [ 1673.157880][T16873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.158323][T16873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.158650][T16873] bridge_slave_0: entered allmulticast mode [ 1673.172400][T16873] bridge_slave_0: entered promiscuous mode [ 1673.205488][T16873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.205857][T16873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.206178][T16873] bridge_slave_1: entered allmulticast mode [ 1673.219781][T16873] bridge_slave_1: entered promiscuous mode [ 1673.630595][T11210] Bluetooth: hci4: command tx timeout [ 1673.689087][T16873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1673.963213][T16873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1675.805631][T17029] loop4: detected capacity change from 0 to 128 [ 1675.807269][T17029] Flush: task=syz.4.2166[17029] dev=loop4 state=2 [ 1675.975809][T17029] Teardown: task=syz.4.2166[17029] dev=loop4 state=2 [ 1676.168572][ T9502] bridge_slave_1: left allmulticast mode [ 1676.168611][ T9502] bridge_slave_1: left promiscuous mode [ 1676.168896][ T9502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.220372][ T5786] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1676.274277][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1676.274366][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1676.355414][ T9502] bridge_slave_0: left allmulticast mode [ 1676.355452][ T9502] bridge_slave_0: left promiscuous mode [ 1676.355737][ T9502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.383854][ T5786] usb 4-1: too many configurations: 35, using maximum allowed: 8 [ 1676.386158][ T5786] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1676.386194][ T5786] usb 4-1: can't read configurations, error -61 [ 1676.590453][ T5786] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1676.753201][ T5786] usb 4-1: too many configurations: 35, using maximum allowed: 8 [ 1676.764533][ T5786] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1676.764568][ T5786] usb 4-1: can't read configurations, error -61 [ 1676.765464][ T5786] usb usb4-port1: attempt power cycle [ 1677.093617][T17050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2172'. [ 1677.093649][T17050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2172'. [ 1677.093810][T17050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2172'. [ 1677.140461][ T5786] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1677.162261][ T5786] usb 4-1: too many configurations: 35, using maximum allowed: 8 [ 1677.163909][T17050] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2172'. [ 1677.168092][ T5786] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1677.168123][ T5786] usb 4-1: can't read configurations, error -61 [ 1677.350544][ T5786] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1677.372454][ T5786] usb 4-1: too many configurations: 35, using maximum allowed: 8 [ 1677.375665][ T5786] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1677.375698][ T5786] usb 4-1: can't read configurations, error -61 [ 1677.442707][ T5786] usb usb4-port1: unable to enumerate USB device [ 1677.952119][ T9502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1678.011344][ T9502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1678.053667][ T9502] bond0 (unregistering): Released all slaves [ 1678.095760][T16873] team0: Port device team_slave_0 added [ 1678.119623][T16873] team0: Port device team_slave_1 added [ 1678.362697][T17057] loop2: detected capacity change from 0 to 1024 [ 1678.528034][T17057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1678.551880][T16873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1678.551896][T16873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1678.551946][T16873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1678.628108][T16873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1678.628128][T16873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1678.628162][T16873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1678.979810][T16873] hsr_slave_0: entered promiscuous mode [ 1679.012521][T16873] hsr_slave_1: entered promiscuous mode [ 1679.014429][T16873] debugfs: 'hsr0' already exists in 'hsr' [ 1679.014456][T16873] Cannot create hsr debugfs directory [ 1679.307557][ T9502] hsr_slave_0: left promiscuous mode [ 1679.328546][T15913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1679.359616][ T9502] hsr_slave_1: left promiscuous mode [ 1679.374102][ T9502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1679.474583][ T9502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1679.498248][T15913] Flush: task=syz-executor[15913] dev=loop2 state=2 [ 1679.583504][T15913] Teardown: task=syz-executor[15913] dev=loop2 state=2 [ 1679.598058][ T9502] veth0_vlan: left promiscuous mode [ 1682.740299][ T5705] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1682.820874][ T9502] team0 (unregistering): Port device team_slave_1 removed [ 1682.850678][T13160] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1682.881645][ T9502] team0 (unregistering): Port device team_slave_0 removed [ 1682.910324][ T5705] usb 4-1: Using ep0 maxpacket: 32 [ 1682.913880][ T5705] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1682.913900][ T5705] usb 4-1: config 0 has no interface number 0 [ 1682.944897][ T5705] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1682.944931][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.944953][ T5705] usb 4-1: Product: syz [ 1682.944968][ T5705] usb 4-1: Manufacturer: syz [ 1682.944992][ T5705] usb 4-1: SerialNumber: syz [ 1682.970027][ T5705] usb 4-1: config 0 descriptor?? [ 1683.021632][T13160] usb 5-1: Using ep0 maxpacket: 32 [ 1683.031235][T13160] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1683.032646][T13160] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 1683.032672][T13160] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 1683.032692][T13160] usb 5-1: config 14 has no interface number 0 [ 1683.032758][T13160] usb 5-1: config 14 has no interface number 1 [ 1683.032827][T13160] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1683.032845][T13160] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1683.032864][T13160] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1683.032924][T13160] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1683.032946][T13160] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1683.032967][T13160] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1683.032988][T13160] usb 5-1: config 14 interface 57 has no altsetting 0 [ 1683.033002][T13160] usb 5-1: config 14 interface 228 has no altsetting 0 [ 1683.035595][T13160] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1683.035622][T13160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.035722][T13160] usb 5-1: Product: syz [ 1683.035734][T13160] usb 5-1: Manufacturer: syz [ 1683.035745][T13160] usb 5-1: SerialNumber: syz [ 1683.444727][ T5705] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1683.444817][ T5705] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1683.647454][ T5705] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1683.647790][ T5705] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 1683.716372][T13160] legousbtower 5-1:14.57: interrupt endpoints not found [ 1683.729685][ T5253] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1684.204564][T17112] overlayfs: overlapping lowerdir path [ 1685.113063][T13160] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1685.197938][T13160] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1685.531578][ T38] usb 4-1: USB disconnect, device number 81 [ 1685.560352][T13931] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1685.761926][T13931] usb 3-1: too many configurations: 35, using maximum allowed: 8 [ 1685.764104][T13931] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1685.764137][T13931] usb 3-1: can't read configurations, error -61 [ 1685.813827][T17115] usb 5-1: LEGO USB Tower reset control request failed [ 1685.890374][T13931] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1685.961311][T16932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.961631][T16932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.961899][T16932] bridge_slave_0: entered allmulticast mode [ 1685.966268][T16932] bridge_slave_0: entered promiscuous mode [ 1686.053287][T13931] usb 3-1: too many configurations: 35, using maximum allowed: 8 [ 1686.055357][T13160] usb 5-1: USB disconnect, device number 76 [ 1686.055459][T13931] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1686.055490][T13931] usb 3-1: can't read configurations, error -61 [ 1686.055816][T13931] usb usb3-port1: attempt power cycle [ 1686.107203][T16932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.109505][T16932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.109799][T16932] bridge_slave_1: entered allmulticast mode [ 1686.164331][T16932] bridge_slave_1: entered promiscuous mode [ 1686.168456][T13160] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 1686.459872][T16932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1686.470361][T13931] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1686.493564][T13931] usb 3-1: too many configurations: 35, using maximum allowed: 8 [ 1686.495549][T13931] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1686.495580][T13931] usb 3-1: can't read configurations, error -61 [ 1686.509394][T16932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1686.685234][T16932] team0: Port device team_slave_0 added [ 1686.700308][T13931] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1686.729042][T16932] team0: Port device team_slave_1 added [ 1686.842706][T13931] usb 3-1: too many configurations: 35, using maximum allowed: 8 [ 1686.957725][T13931] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1686.957764][T13931] usb 3-1: can't read configurations, error -61 [ 1686.958220][T13931] usb usb3-port1: unable to enumerate USB device [ 1686.999816][T16932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1686.999833][T16932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1686.999874][T16932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1688.801886][T16932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1688.801904][T16932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1688.801935][T16932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1689.522346][T17160] loop2: detected capacity change from 0 to 512 [ 1689.549913][T17160] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1689.585516][T17160] EXT4-fs (loop2): 1 truncate cleaned up [ 1689.613665][T17160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1690.547412][T15913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1690.643242][T15913] Flush: task=syz-executor[15913] dev=loop2 state=2 [ 1690.796083][T15913] Teardown: task=syz-executor[15913] dev=loop2 state=2 [ 1691.687197][T14251] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1691.831390][T14251] usb 5-1: Using ep0 maxpacket: 32 [ 1692.003454][T14251] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1692.019331][T14251] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 1692.019360][T14251] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 1692.019382][T14251] usb 5-1: config 14 has no interface number 0 [ 1692.019400][T14251] usb 5-1: config 14 has no interface number 1 [ 1692.019469][T14251] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1692.019493][T14251] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1692.019518][T14251] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1692.019545][T14251] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1692.019574][T14251] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1692.019601][T14251] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1692.019627][T14251] usb 5-1: config 14 interface 57 has no altsetting 0 [ 1692.019646][T14251] usb 5-1: config 14 interface 228 has no altsetting 0 [ 1692.329585][T14251] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1692.329615][T14251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.329636][T14251] usb 5-1: Product: syz [ 1692.329650][T14251] usb 5-1: Manufacturer: syz [ 1692.329664][T14251] usb 5-1: SerialNumber: syz [ 1692.883723][T14251] legousbtower 5-1:14.57: interrupt endpoints not found [ 1693.050428][T13160] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1693.159633][T16932] hsr_slave_0: entered promiscuous mode [ 1693.165199][T16932] hsr_slave_1: entered promiscuous mode [ 1693.178867][T16932] debugfs: 'hsr0' already exists in 'hsr' [ 1693.178894][T16932] Cannot create hsr debugfs directory [ 1693.230763][T13160] usb 4-1: too many configurations: 35, using maximum allowed: 8 [ 1693.253757][T13160] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1693.253794][T13160] usb 4-1: can't read configurations, error -61 [ 1693.284889][T14251] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1693.312863][T14251] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1693.408456][T13160] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1693.559033][T13160] usb 4-1: too many configurations: 35, using maximum allowed: 8 [ 1693.569995][T13160] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1693.570042][T13160] usb 4-1: can't read configurations, error -61 [ 1693.573094][T13160] usb usb4-port1: attempt power cycle [ 1693.890781][T17200] usb 5-1: LEGO USB Tower reset control request failed [ 1693.974052][T13160] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1694.012130][T17204] loop2: detected capacity change from 0 to 512 [ 1694.012440][T13160] usb 4-1: too many configurations: 35, using maximum allowed: 8 [ 1694.014757][T17204] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1694.050549][T13160] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1694.050588][T13160] usb 4-1: can't read configurations, error -61 [ 1694.120608][T16933] Bluetooth: hci2: command 0x0406 tx timeout [ 1694.162483][T17204] EXT4-fs (loop2): 1 truncate cleaned up [ 1694.165171][T17204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1694.168802][ T38] usb 5-1: USB disconnect, device number 77 [ 1694.202622][T13160] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1694.251072][ T38] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 1694.251702][T13160] usb 4-1: too many configurations: 35, using maximum allowed: 8 [ 1694.268470][T13160] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1694.268503][T13160] usb 4-1: can't read configurations, error -61 [ 1694.307324][T13160] usb usb4-port1: unable to enumerate USB device [ 1694.747805][ T9502] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.826343][T15913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1694.904383][T15913] Flush: task=syz-executor[15913] dev=loop2 state=2 [ 1695.006665][T15913] Teardown: task=syz-executor[15913] dev=loop2 state=2 [ 1695.472242][ T5253] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1695.936077][ T9502] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.260469][T14251] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1698.107794][T14251] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1698.107825][T14251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.107844][T14251] usb 4-1: Product: syz [ 1698.107858][T14251] usb 4-1: Manufacturer: syz [ 1698.107872][T14251] usb 4-1: SerialNumber: syz [ 1698.541657][T14251] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1698.541714][T14251] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1698.969242][ T9502] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1699.504122][T17242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2212'. [ 1699.504218][T17242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2212'. [ 1699.504309][T17242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2212'. [ 1699.583465][T14251] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1699.583509][T14251] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1699.584283][T14251] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1699.629738][T17242] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2212'. [ 1699.701456][T14251] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1700.126455][ T9502] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.635872][ T38] usb 4-1: USB disconnect, device number 86 [ 1700.900648][T13926] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1701.128312][T13926] usb 3-1: too many configurations: 35, using maximum allowed: 8 [ 1701.240599][ T38] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1701.522327][T13926] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1701.523286][T13926] usb 3-1: can't read configurations, error -61 [ 1701.790294][T13926] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1701.810586][ T38] usb 4-1: Using ep0 maxpacket: 32 [ 1701.812895][ T38] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1701.812922][ T38] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.812944][ T38] usb 4-1: config 0 has no interface number 0 [ 1701.812991][ T38] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1701.813017][ T38] usb 4-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1701.817140][ T38] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1701.817159][ T38] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.817173][ T38] usb 4-1: Product: syz [ 1701.817183][ T38] usb 4-1: Manufacturer: syz [ 1701.817194][ T38] usb 4-1: SerialNumber: syz [ 1701.921834][ T38] usb 4-1: config 0 descriptor?? [ 1701.941102][T13926] usb 3-1: too many configurations: 35, using maximum allowed: 8 [ 1701.942617][T13926] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1701.942640][T13926] usb 3-1: can't read configurations, error -61 [ 1701.942929][T13926] usb usb3-port1: attempt power cycle [ 1701.947206][ T38] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1701.947375][ T38] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 1702.290307][T13926] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1702.313018][T13926] usb 3-1: too many configurations: 35, using maximum allowed: 8 [ 1702.323165][T13926] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1702.323203][T13926] usb 3-1: can't read configurations, error -61 [ 1702.475852][T13926] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1702.493917][T13926] usb 3-1: too many configurations: 35, using maximum allowed: 8 [ 1702.497578][T13926] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1702.497602][T13926] usb 3-1: can't read configurations, error -61 [ 1702.497945][T13926] usb usb3-port1: unable to enumerate USB device [ 1702.900744][ T9502] bridge_slave_1: left allmulticast mode [ 1702.900771][ T9502] bridge_slave_1: left promiscuous mode [ 1702.900977][ T9502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.021383][ T9502] bridge_slave_0: left allmulticast mode [ 1703.021413][ T9502] bridge_slave_0: left promiscuous mode [ 1703.021641][ T9502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.872394][ T38] usb 4-1: USB disconnect, device number 87 [ 1706.841098][ T9502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1706.921092][ T9502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1706.964226][ T9502] bond0 (unregistering): Released all slaves [ 1706.980946][T17298] syz_tun: entered allmulticast mode [ 1706.981764][T17298] syz_tun: left allmulticast mode [ 1707.160794][ T5825] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1707.315343][ T5825] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1707.315374][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.315394][ T5825] usb 4-1: Product: syz [ 1707.315408][ T5825] usb 4-1: Manufacturer: syz [ 1707.315422][ T5825] usb 4-1: SerialNumber: syz [ 1708.714520][ T5825] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1708.714590][ T5825] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1709.688259][T13931] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1709.865480][T13931] usb 5-1: too many configurations: 35, using maximum allowed: 8 [ 1709.876799][T13931] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1709.876834][T13931] usb 5-1: can't read configurations, error -61 [ 1710.035683][T13931] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1711.597928][T13931] usb 5-1: device descriptor read/all, error -71 [ 1711.598412][T13931] usb usb5-port1: attempt power cycle [ 1711.679325][ T5825] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1711.679932][ T5825] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1711.683389][ T5825] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1711.683531][ T5825] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1711.751646][ T5825] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1711.934596][ T5825] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1713.933157][ T5825] usb 4-1: USB disconnect, device number 88 [ 1714.359634][T11210] Bluetooth: hci3: command 0x0406 tx timeout [ 1717.745216][ T5253] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1719.475971][ T9502] hsr_slave_0: left promiscuous mode [ 1719.519105][ T9502] hsr_slave_1: left promiscuous mode [ 1719.524979][ T9502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1719.525010][ T9502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1719.583605][ T9502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1719.583636][ T9502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1719.612055][ T38] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1719.632902][T11210] Bluetooth: hci0: command 0x0406 tx timeout [ 1719.712510][T13931] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1719.781966][ T38] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1719.782017][ T38] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.782032][ T38] usb 4-1: Product: syz [ 1719.782042][ T38] usb 4-1: Manufacturer: syz [ 1719.782053][ T38] usb 4-1: SerialNumber: syz [ 1720.202148][T13931] usb 5-1: too many configurations: 35, using maximum allowed: 8 [ 1720.225694][T13931] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1720.225729][T13931] usb 5-1: can't read configurations, error -61 [ 1720.238380][ T9502] veth1_macvtap: left promiscuous mode [ 1720.238455][ T9502] veth0_macvtap: left promiscuous mode [ 1720.242344][ T9502] veth1_vlan: left promiscuous mode [ 1720.242503][ T9502] veth0_vlan: left promiscuous mode [ 1720.351604][T13931] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1720.679339][T11210] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1720.735168][T11210] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1720.745371][T13931] usb 5-1: too many configurations: 35, using maximum allowed: 8 [ 1720.760470][T11210] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1720.861093][ T38] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1720.861369][ T38] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1720.861578][T13931] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1720.861608][T13931] usb 5-1: can't read configurations, error -61 [ 1720.906324][T13931] usb usb5-port1: attempt power cycle [ 1720.908240][T11210] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1720.909656][T11210] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1721.290836][ T9502] team0 (unregistering): Port device team_slave_1 removed [ 1721.325647][T13931] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1721.341156][ T9502] team0 (unregistering): Port device team_slave_0 removed [ 1721.512353][T13931] usb 5-1: too many configurations: 35, using maximum allowed: 8 [ 1721.514159][T13931] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1721.514193][T13931] usb 5-1: can't read configurations, error -61 [ 1721.537497][T17389] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1721.537536][T17389] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1721.537557][T17389] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1721.697694][T13931] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1721.727366][T13931] usb 5-1: too many configurations: 35, using maximum allowed: 8 [ 1721.729195][T13931] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1721.729228][T13931] usb 5-1: can't read configurations, error -61 [ 1721.868710][T13931] usb usb5-port1: unable to enumerate USB device [ 1722.136151][ T38] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1722.136975][ T38] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1722.183371][T17398] loop2: detected capacity change from 0 to 32768 [ 1722.239796][T17398] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1722.344438][T17398] XFS (loop2): Ending clean mount [ 1722.714954][ T38] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1722.715016][ T38] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1722.715996][ T38] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1723.052959][T16933] Bluetooth: hci5: command tx timeout [ 1725.070689][T16933] Bluetooth: hci5: command tx timeout [ 1725.405538][ T38] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1725.802632][T17414] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 1725.802677][T17414] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1725.803457][T17414] vhci_hcd vhci_hcd.0: Device attached [ 1726.798271][T13932] usb 42-1: SetAddress Request (2) to port 0 [ 1726.798622][T13932] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1727.124821][T17424] vhci_hcd: connection closed [ 1727.169490][T16933] Bluetooth: hci5: command tx timeout [ 1727.371134][T17426] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1727.371522][ T3094] vhci_hcd vhci_hcd.4: stop threads [ 1727.371577][ T3094] vhci_hcd vhci_hcd.4: release socket [ 1727.371794][ T3094] vhci_hcd vhci_hcd.4: disconnect device [ 1727.727316][ T38] usb 4-1: USB disconnect, device number 89 [ 1729.227053][T11210] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1729.249838][T11234] Bluetooth: hci5: command tx timeout [ 1729.296236][T11210] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1729.346814][T11210] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1729.353537][T11210] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1729.356525][T11210] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1729.954497][T15913] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1732.106254][T11210] Bluetooth: hci6: command tx timeout [ 1732.465844][T17460] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 1732.465905][T17460] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1732.466394][T17460] vhci_hcd vhci_hcd.0: Device attached [ 1732.513148][T13932] usb 42-1: device descriptor read/8, error -110 [ 1732.987784][T17461] vhci_hcd: connection closed [ 1733.102822][ T83] vhci_hcd vhci_hcd.3: stop threads [ 1733.102890][ T83] vhci_hcd vhci_hcd.3: release socket [ 1733.103024][ T83] vhci_hcd vhci_hcd.3: disconnect device [ 1733.924194][T17463] syz_tun: entered allmulticast mode [ 1734.121339][T13932] usb usb42-port1: attempt power cycle [ 1734.262256][T11210] Bluetooth: hci6: command tx timeout [ 1734.687092][T17459] syz_tun: left allmulticast mode [ 1735.025177][T13932] usb usb42-port1: unable to enumerate USB device [ 1735.188409][T15913] Flush: task=syz-executor[15913] dev=loop2 state=2 [ 1735.408453][T15913] Teardown: task=syz-executor[15913] dev=loop2 state=2 [ 1736.277665][T11210] Bluetooth: hci6: command tx timeout [ 1736.818459][T17488] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 1736.818489][T17488] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1736.819073][T17488] vhci_hcd vhci_hcd.0: Device attached [ 1737.335327][T17489] vhci_hcd: connection closed [ 1737.530608][ T1517] vhci_hcd vhci_hcd.2: stop threads [ 1737.530640][ T1517] vhci_hcd vhci_hcd.2: release socket [ 1737.530730][ T1517] vhci_hcd vhci_hcd.2: disconnect device [ 1737.808886][T14251] usb 38-1: enqueue for inactive port 0 [ 1737.851142][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1737.859343][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1738.352979][T11210] Bluetooth: hci6: command tx timeout [ 1739.190414][T14251] usb usb38-port1: attempt power cycle [ 1739.872394][ T5786] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1740.311905][T14251] usb usb38-port1: unable to enumerate USB device [ 1740.615596][ T5786] usb 5-1: too many configurations: 35, using maximum allowed: 8 [ 1740.617827][ T5786] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1740.617862][ T5786] usb 5-1: can't read configurations, error -61 [ 1740.934146][ T5786] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1741.173660][ T5786] usb 5-1: too many configurations: 35, using maximum allowed: 8 [ 1741.178682][ T5786] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1741.178728][ T5786] usb 5-1: can't read configurations, error -61 [ 1741.183457][ T5786] usb usb5-port1: attempt power cycle [ 1741.615716][ T5786] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1741.643843][ T5786] usb 5-1: too many configurations: 35, using maximum allowed: 8 [ 1741.645404][ T5786] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1741.645434][ T5786] usb 5-1: can't read configurations, error -61 [ 1741.780412][ T5786] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1741.812772][ T5786] usb 5-1: too many configurations: 35, using maximum allowed: 8 [ 1741.815250][ T5786] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1741.815289][ T5786] usb 5-1: can't read configurations, error -61 [ 1741.815699][ T5786] usb usb5-port1: unable to enumerate USB device [ 1742.190716][ T9502] bridge_slave_1: left allmulticast mode [ 1742.190770][ T9502] bridge_slave_1: left promiscuous mode [ 1742.191070][ T9502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.602073][T17521] nfs4: Unknown parameter 'tc' [ 1742.620972][T13931] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1743.529939][T13931] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1743.529970][T13931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.529991][T13931] usb 3-1: Product: syz [ 1743.530005][T13931] usb 3-1: Manufacturer: syz [ 1743.530020][T13931] usb 3-1: SerialNumber: syz [ 1744.526918][ T9502] bridge_slave_0: left allmulticast mode [ 1744.526956][ T9502] bridge_slave_0: left promiscuous mode [ 1744.527225][ T9502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.272166][T13931] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1746.272210][T13931] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1746.272599][T13931] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1746.272638][T13931] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1746.273372][T13931] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1746.370062][T13931] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1746.490700][T13931] usb 3-1: USB disconnect, device number 77 [ 1748.019537][T17545] overlayfs: overlapping lowerdir path [ 1749.256294][ T9502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1749.385149][ T9502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1749.484076][ T9502] bond0 (unregistering): Released all slaves [ 1750.633121][T17557] overlayfs: overlapping lowerdir path [ 1752.276439][ T9502] hsr_slave_0: left promiscuous mode [ 1752.310352][ T9502] hsr_slave_1: left promiscuous mode [ 1752.314157][ T9502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1752.369185][ T9502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1753.491562][T17576] loop2: detected capacity change from 0 to 512 [ 1754.240223][T17576] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1754.322862][T17576] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.2261: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1754.322904][T17576] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1754.324207][T17576] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2261: couldn't read orphan inode 15 (err -117) [ 1754.324231][T17576] loop2: lost filesystem error report for type 5 error -117 [ 1754.330226][T17576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1756.756533][T15913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1757.008565][ T9502] team0 (unregistering): Port device team_slave_1 removed [ 1757.194238][ T9502] team0 (unregistering): Port device team_slave_0 removed [ 1759.962980][T15913] Flush: task=syz-executor[15913] dev=loop2 state=2 [ 1760.194243][T15913] Teardown: task=syz-executor[15913] dev=loop2 state=2 [ 1760.641830][ T822] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1760.738568][T17614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2264'. [ 1760.838623][ T822] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1760.838658][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.838680][ T822] usb 3-1: Product: syz [ 1760.838696][ T822] usb 3-1: Manufacturer: syz [ 1760.838712][ T822] usb 3-1: SerialNumber: syz [ 1761.293211][ T822] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1761.293279][ T822] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1762.601947][ T822] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): timeout on completion of LiteReset [ 1762.601974][ T822] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1762.602991][ T822] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1762.687337][ T822] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -110 [ 1763.854675][T17390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1763.856245][T17390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1763.856542][T17390] bridge_slave_0: entered allmulticast mode [ 1763.882006][T17390] bridge_slave_0: entered promiscuous mode [ 1763.928678][ T5825] usb 3-1: USB disconnect, device number 78 [ 1764.185074][T17436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.187007][T17436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.187319][T17436] bridge_slave_0: entered allmulticast mode [ 1764.220469][T17436] bridge_slave_0: entered promiscuous mode [ 1764.414349][T17390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.415028][T17390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.415825][T17390] bridge_slave_1: entered allmulticast mode [ 1764.544313][T17390] bridge_slave_1: entered promiscuous mode [ 1764.612161][T17436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.612959][T17436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.641515][T17436] bridge_slave_1: entered allmulticast mode [ 1764.760386][T17436] bridge_slave_1: entered promiscuous mode [ 1765.455493][T17651] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1765.455577][T17651] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1765.473310][T17651] vhci_hcd vhci_hcd.0: Device attached [ 1766.713018][T17653] vhci_hcd: connection closed [ 1766.736604][T10709] vhci_hcd vhci_hcd.4: stop threads [ 1766.736635][T10709] vhci_hcd vhci_hcd.4: release socket [ 1766.736715][T10709] vhci_hcd vhci_hcd.4: disconnect device [ 1766.990901][T13160] usb 42-1: enqueue for inactive port 0 [ 1767.824308][T13160] usb usb42-port1: attempt power cycle [ 1768.362572][T17390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1768.430032][T17436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1768.632101][T13160] usb usb42-port1: unable to enumerate USB device [ 1768.958186][T17390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1768.987969][T17436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1769.553495][T17390] team0: Port device team_slave_0 added [ 1769.653643][T17436] team0: Port device team_slave_0 added [ 1769.794657][T17390] team0: Port device team_slave_1 added [ 1769.833097][T17436] team0: Port device team_slave_1 added [ 1770.229911][T17390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1770.229931][T17390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1770.229970][T17390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1770.297512][T17436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1770.297534][T17436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1770.297566][T17436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1770.345926][T17390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1770.345943][T17390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1770.345975][T17390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1770.348962][T17436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1770.348976][T17436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1770.349006][T17436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1770.665633][T17390] hsr_slave_0: entered promiscuous mode [ 1770.667893][T17390] hsr_slave_1: entered promiscuous mode [ 1770.687385][T17390] debugfs: 'hsr0' already exists in 'hsr' [ 1770.687414][T17390] Cannot create hsr debugfs directory [ 1770.791317][T17436] hsr_slave_0: entered promiscuous mode [ 1770.813790][T17436] hsr_slave_1: entered promiscuous mode [ 1770.821063][T17436] debugfs: 'hsr0' already exists in 'hsr' [ 1770.821136][T17436] Cannot create hsr debugfs directory [ 1772.440409][ T9030] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1772.654146][ T9030] usb 4-1: Using ep0 maxpacket: 8 [ 1772.674679][ T9030] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1772.674710][ T9030] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.674733][ T9030] usb 4-1: config 179 has no interface number 0 [ 1772.674783][ T9030] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1772.674813][ T9030] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1772.674843][ T9030] usb 4-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1772.674873][ T9030] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1772.674907][ T9030] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1772.674932][ T9030] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.536479][T17696] autofs: Unknown parameter 'fd0x0000000000000000' [ 1774.591607][T13931] hid_parser_main: 4 callbacks suppressed [ 1774.591625][T13931] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 1774.591645][T13931] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 1774.591663][T13931] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 1774.591680][T13931] hid-generic 0006:0004:0009.0014: unknown main item tag 0x1 [ 1774.591698][T13931] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 1774.591746][T13931] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 1774.591770][T13931] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 1774.591788][T13931] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 1774.591805][T13931] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 1774.591822][T13931] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 1774.591867][T13931] hid-generic 0006:0004:0009.0014: item fetching failed at offset 16/17 [ 1774.592341][T13931] hid-generic 0006:0004:0009.0014: probe with driver hid-generic failed with error -22 [ 1774.624457][T17696] random: crng reseeded on system resumption [ 1775.810512][T13160] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1775.967514][T13160] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1775.967547][T13160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.967567][T13160] usb 3-1: Product: syz [ 1775.967583][T13160] usb 3-1: Manufacturer: syz [ 1775.967598][T13160] usb 3-1: SerialNumber: syz [ 1775.970536][T14965] usb 4-1: USB disconnect, device number 90 [ 1776.015257][T16723] bridge_slave_1: left allmulticast mode [ 1776.015296][T16723] bridge_slave_1: left promiscuous mode [ 1776.015596][T16723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1776.239044][T17714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2278'. [ 1776.239148][T17714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2278'. [ 1776.300367][T16723] bridge_slave_0: left allmulticast mode [ 1776.300400][T16723] bridge_slave_0: left promiscuous mode [ 1776.300660][T16723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1776.507681][T13160] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1776.507747][T13160] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1777.303015][T16723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1777.424138][T16723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1777.486023][T16723] bond0 (unregistering): Released all slaves [ 1777.800446][T13160] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1777.806901][T13160] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1778.049649][ T5253] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1778.209773][T13160] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1778.209842][T13160] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1778.211157][T13160] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1778.245643][T13160] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1778.279147][T13160] usb 3-1: USB disconnect, device number 79 [ 1778.760264][T16723] hsr_slave_0: left promiscuous mode [ 1778.803157][T16723] hsr_slave_1: left promiscuous mode [ 1778.809457][T16723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1778.843958][T16723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1781.432463][T16723] team0 (unregistering): Port device team_slave_1 removed [ 1781.491017][T16723] team0 (unregistering): Port device team_slave_0 removed [ 1781.921875][T17757] loop2: detected capacity change from 0 to 512 [ 1782.971301][T17757] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1783.030235][T13160] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1783.081298][T17762] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1783.081350][T17762] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1783.081371][T17762] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1783.123467][T17757] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1783.123726][T17757] Quota error (device loop2): write_blk: dquota write failed [ 1783.123744][T17757] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 1783.123859][T17757] Quota error (device loop2): write_blk: dquota write failed [ 1783.123987][T17757] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 1783.124057][T17757] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.2287: Failed to acquire dquot type 1 [ 1783.124087][T17757] loop2: lost filesystem error report for type 5 error -28 [ 1783.132797][T17757] EXT4-fs (loop2): 1 truncate cleaned up [ 1783.158692][T17757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1783.216884][T13160] usb 4-1: Using ep0 maxpacket: 32 [ 1783.237413][T13160] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1783.299468][T13160] usb 4-1: config 14 has an invalid interface number: 57 but max is 0 [ 1783.299552][T13160] usb 4-1: config 14 has no interface number 0 [ 1783.299678][T13160] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1783.376002][T16933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1783.473611][T13160] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1783.473645][T13160] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.473668][T13160] usb 4-1: Product: syz [ 1783.473684][T13160] usb 4-1: Manufacturer: syz [ 1783.473700][T13160] usb 4-1: SerialNumber: syz [ 1783.480721][T16933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1783.487787][T16933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1783.548862][T16933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1783.572346][T17757] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1783.645440][T16933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1783.818105][T17757] Flush: task=syz.2.2287[17757] dev=loop2 state=2 [ 1784.163941][T13160] legousbtower 4-1:14.57: interrupt endpoints not found [ 1784.460353][T17757] Teardown: task=syz.2.2287[17757] dev=loop2 state=2 [ 1785.927552][T13932] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1786.153583][T13932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1786.153628][T13932] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1786.153694][T13932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1786.227056][T11210] Bluetooth: hci1: command tx timeout [ 1786.599974][T13932] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1786.600008][T13932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.600030][T13932] usb 3-1: Product: syz [ 1786.600052][T13932] usb 3-1: Manufacturer: syz [ 1786.600069][T13932] usb 3-1: SerialNumber: syz [ 1786.666492][T13932] usb 3-1: config 0 descriptor?? [ 1786.687903][T17796] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1786.716344][T13931] usb 4-1: USB disconnect, device number 91 [ 1786.746909][T13932] usb 3-1: ucan: probing device on interface #0 [ 1786.746963][T13932] usb 3-1: ucan: invalid endpoint configuration [ 1786.746979][T13932] usb 3-1: ucan: probe failed; try to update the device firmware [ 1787.588646][T13926] usb 3-1: USB disconnect, device number 80 [ 1788.012632][T17820] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2294'. [ 1788.511166][T11210] Bluetooth: hci1: command tx timeout [ 1790.601159][T11210] Bluetooth: hci1: command tx timeout [ 1791.738137][T16933] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1791.805140][T16933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1791.970735][T16933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1791.972089][T16933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1791.973047][T16933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1792.993445][T16933] Bluetooth: hci1: command tx timeout [ 1795.158457][T16933] Bluetooth: hci4: command tx timeout [ 1795.178225][T17857] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1795.178263][T17857] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1795.178356][T17857] vhci_hcd vhci_hcd.0: Device attached [ 1795.569785][T17859] vhci_hcd: connection closed [ 1795.852097][T10709] vhci_hcd vhci_hcd.4: stop threads [ 1795.852173][T10709] vhci_hcd vhci_hcd.4: release socket [ 1796.598491][T10709] vhci_hcd vhci_hcd.4: disconnect device [ 1796.951644][T14251] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1797.120202][T14251] usb 4-1: Using ep0 maxpacket: 32 [ 1797.123116][T14251] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1797.124649][T14251] usb 4-1: config 14 has an invalid interface number: 57 but max is 0 [ 1797.124674][T14251] usb 4-1: config 14 has no interface number 0 [ 1797.124719][T14251] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1797.127374][T14251] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1797.127400][T14251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.127420][T14251] usb 4-1: Product: syz [ 1797.127434][T14251] usb 4-1: Manufacturer: syz [ 1797.127448][T14251] usb 4-1: SerialNumber: syz [ 1797.360880][T16933] Bluetooth: hci4: command tx timeout [ 1797.859685][T14251] legousbtower 4-1:14.57: interrupt endpoints not found [ 1798.952420][T15282] bridge_slave_1: left allmulticast mode [ 1798.952458][T15282] bridge_slave_1: left promiscuous mode [ 1798.952783][T15282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.172404][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1799.179217][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1799.313663][T14251] usb 4-1: USB disconnect, device number 92 [ 1799.392406][T16933] Bluetooth: hci4: command tx timeout [ 1799.845575][T17885] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1799.845630][T17885] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1799.846057][T17885] vhci_hcd vhci_hcd.0: Device attached [ 1800.016044][T15282] bridge_slave_0: left allmulticast mode [ 1800.016135][T15282] bridge_slave_0: left promiscuous mode [ 1800.256471][T15282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.349312][T17886] vhci_hcd: connection closed [ 1800.364652][ T57] vhci_hcd vhci_hcd.2: stop threads [ 1800.364714][ T57] vhci_hcd vhci_hcd.2: release socket [ 1800.365040][ T57] vhci_hcd vhci_hcd.2: disconnect device [ 1801.221584][T13932] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1801.470586][T16933] Bluetooth: hci4: command tx timeout [ 1801.752629][T13932] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1801.752663][T13932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.788431][T13932] usb 4-1: Product: syz [ 1801.788462][T13932] usb 4-1: Manufacturer: syz [ 1801.788481][T13932] usb 4-1: SerialNumber: syz [ 1802.669312][T13932] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1802.669362][T13932] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1803.414526][T15282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1803.553612][T15282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1803.646765][T15282] bond0 (unregistering): Released all slaves [ 1803.957201][T13932] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1803.980155][T13932] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1804.505377][T13932] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1804.505436][T13932] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1804.506363][T13932] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1804.633844][T13932] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1804.669371][T13932] usb 4-1: USB disconnect, device number 93 [ 1804.980872][T17768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.981198][T17768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.981473][T17768] bridge_slave_0: entered allmulticast mode [ 1805.059312][T17768] bridge_slave_0: entered promiscuous mode [ 1805.290911][T17768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.291251][T17768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1805.291552][T17768] bridge_slave_1: entered allmulticast mode [ 1805.301096][T17768] bridge_slave_1: entered promiscuous mode [ 1807.548515][T15282] hsr_slave_0: left promiscuous mode [ 1807.593155][T15282] hsr_slave_1: left promiscuous mode [ 1807.614138][T15282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1807.668148][T15282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1810.709703][T17930] loop4: detected capacity change from 0 to 256 [ 1811.517416][T17930] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d) [ 1813.801112][T15282] team0 (unregistering): Port device team_slave_1 removed [ 1813.851097][T15282] team0 (unregistering): Port device team_slave_0 removed [ 1814.035705][T16174] Flush: task=syz-executor[16174] dev=loop4 state=2 [ 1814.107436][T17927] syz_tun: entered allmulticast mode [ 1814.196061][T17768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1814.270466][T16174] Teardown: task=syz-executor[16174] dev=loop4 state=2 [ 1814.277723][T17768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1814.552063][T17952] overlayfs: overlapping lowerdir path [ 1815.589859][T17931] syz_tun: left allmulticast mode [ 1815.722857][T17768] team0: Port device team_slave_0 added [ 1815.743741][T17768] team0: Port device team_slave_1 added [ 1817.414365][T17768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1817.414383][T17768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1817.414415][T17768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1817.558321][T17768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1817.558339][T17768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1817.558369][T17768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1817.844458][T17768] hsr_slave_0: entered promiscuous mode [ 1817.846673][T17768] hsr_slave_1: entered promiscuous mode [ 1817.848507][T17768] debugfs: 'hsr0' already exists in 'hsr' [ 1817.848534][T17768] Cannot create hsr debugfs directory [ 1821.409672][T15282] bridge_slave_1: left allmulticast mode [ 1821.409709][T15282] bridge_slave_1: left promiscuous mode [ 1821.409990][T15282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.575320][T15282] bridge_slave_0: left allmulticast mode [ 1821.575360][T15282] bridge_slave_0: left promiscuous mode [ 1821.575645][T15282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1824.321608][T15282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1824.461126][T15282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1824.546185][T15282] bond0 (unregistering): Released all slaves [ 1824.781315][T17992] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1824.781356][T17992] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1824.781433][T17992] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1825.691003][T18022] random: crng reseeded on system resumption [ 1825.712156][T15282] hsr_slave_0: left promiscuous mode [ 1825.752269][T15282] hsr_slave_1: left promiscuous mode [ 1825.773441][T15282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1825.819230][T15282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1826.488342][T18029] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2330'. [ 1826.639915][T15282] team0 (unregistering): Port device team_slave_1 removed [ 1826.713659][T18026] orangefs_mount: mount request failed with -4 [ 1826.734906][T15282] team0 (unregistering): Port device team_slave_0 removed [ 1826.766262][T18031] No control pipe specified [ 1826.795435][T18031] random: crng reseeded on system resumption [ 1827.339324][T17829] bridge0: port 1(bridge_slave_0) entered blocking state [ 1827.339560][T17829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1827.339825][T17829] bridge_slave_0: entered allmulticast mode [ 1827.384893][T17829] bridge_slave_0: entered promiscuous mode [ 1827.519606][T17829] bridge0: port 2(bridge_slave_1) entered blocking state [ 1827.519921][T17829] bridge0: port 2(bridge_slave_1) entered disabled state [ 1827.524273][T17829] bridge_slave_1: entered allmulticast mode [ 1827.566974][T17829] bridge_slave_1: entered promiscuous mode [ 1828.084227][T17829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1828.133144][T17829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1832.140383][ T38] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1832.290701][ T38] usb 3-1: Using ep0 maxpacket: 8 [ 1832.293490][ T38] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1832.293519][ T38] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1832.293542][ T38] usb 3-1: config 179 has no interface number 0 [ 1832.293592][ T38] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1832.293621][ T38] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1832.293652][ T38] usb 3-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1832.293682][ T38] usb 3-1: config 179 interface 65 has no altsetting 0 [ 1832.293717][ T38] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1832.293752][ T38] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.932972][ T38] hid_parser_main: 4 callbacks suppressed [ 1832.933001][ T38] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0 [ 1832.933036][ T38] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0 [ 1832.933066][ T38] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0 [ 1832.933097][ T38] hid-generic 0006:0004:0009.0015: unknown main item tag 0x1 [ 1832.933128][ T38] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0 [ 1832.933158][ T38] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0 [ 1832.933189][ T38] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0 [ 1832.933219][ T38] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0 [ 1832.933251][ T38] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0 [ 1832.933282][ T38] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0 [ 1832.933358][ T38] hid-generic 0006:0004:0009.0015: item fetching failed at offset 16/17 [ 1832.935664][ T38] hid-generic 0006:0004:0009.0015: probe with driver hid-generic failed with error -22 [ 1834.009543][T18080] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1834.009579][T18080] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1834.009594][T18080] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1834.101058][T17829] team0: Port device team_slave_0 added [ 1834.334760][T17829] team0: Port device team_slave_1 added [ 1835.868659][T14251] usb 3-1: USB disconnect, device number 81 [ 1837.400277][T14251] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1837.608714][T17829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1837.608731][T17829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1837.608760][T17829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1837.660756][T14251] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1837.660788][T14251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.660809][T14251] usb 3-1: Product: syz [ 1837.660823][T14251] usb 3-1: Manufacturer: syz [ 1837.660837][T14251] usb 3-1: SerialNumber: syz [ 1837.669300][T17829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1837.669311][T17829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1837.669331][T17829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1838.198437][T14251] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1838.198480][T14251] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1838.568398][T17829] hsr_slave_0: entered promiscuous mode [ 1838.580278][T17829] hsr_slave_1: entered promiscuous mode [ 1838.582419][T17829] debugfs: 'hsr0' already exists in 'hsr' [ 1838.582446][T17829] Cannot create hsr debugfs directory [ 1838.582667][T17768] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1838.831414][T17768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1838.850702][T17768] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1840.217179][T17768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1840.334820][T17768] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1840.813259][T14251] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1840.819019][T14251] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1840.856149][T17768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1841.318386][T14251] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1841.319302][T14251] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1841.361777][T14251] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1841.448027][T18140] raw_sendmsg: syz.3.2347 forgot to set AF_INET. Fix it! [ 1842.211895][T17768] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1842.329464][T14251] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1842.482721][T17768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1842.570790][T14251] usb 3-1: USB disconnect, device number 82 [ 1842.668271][T18140] ceph: No mds server is up or the cluster is laggy [ 1842.899784][T13926] libceph: connect (1)[c::]:6789 error -101 [ 1842.980374][T13926] libceph: mon0 (1)[c::]:6789 connect error [ 1844.762267][T11210] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1844.813569][T11210] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1844.845455][T11210] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1844.878955][T11210] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1844.904055][T11210] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1845.261977][T17829] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1845.314513][T17829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1845.359370][T18176] loop2: detected capacity change from 0 to 4096 [ 1845.384522][T18176] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 1846.919955][T18176] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1846.930250][T18176] ntfs3(loop2): Failed to load $Extend (-22). [ 1846.930274][T18176] ntfs3(loop2): Failed to initialize $Extend. [ 1846.938478][T18175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2352'. [ 1847.035272][T18176] ntfs3(loop2): ino=5, "/" indx_read_ra [ 1847.164936][T11210] Bluetooth: hci1: command tx timeout [ 1847.585251][T18186] ntfs3(loop2): ino=5, "/" indx_read_ra [ 1847.673042][T18184] ntfs3(loop2): ino=5, "/" indx_read_ra [ 1847.829347][T18187] ntfs3(loop2): ino=5, "/" indx_read_ra [ 1847.829624][T18176] ntfs3(loop2): ino=5, "/" indx_read_ra [ 1847.849982][T17829] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1847.874632][T18176] comedi comedi3: aio_iiro_16: I/O port conflict (0x100,8) [ 1847.893472][T17829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1847.915480][T18175] ip6gre1: entered promiscuous mode [ 1847.915503][T18175] ip6gre1: entered allmulticast mode [ 1847.935709][T18185] netlink: 'syz.4.2352': attribute type 6 has an invalid length. [ 1847.935724][T18185] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2352'. [ 1848.069464][T17829] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1848.237331][T17829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1848.338766][T15913] Flush: task=syz-executor[15913] dev=loop2 state=2 [ 1848.420780][T15913] Teardown: task=syz-executor[15913] dev=loop2 state=2 [ 1849.850674][T11210] Bluetooth: hci1: command tx timeout [ 1851.479017][T18201] loop4: detected capacity change from 0 to 32768 [ 1851.870845][T11210] Bluetooth: hci1: command tx timeout [ 1851.939092][T18201] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1852.167026][T18201] XFS (loop4): Ending clean mount [ 1852.538574][T14965] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1852.694358][T16933] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1852.790208][T14965] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1852.790243][T14965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.790264][T14965] usb 4-1: Product: syz [ 1852.790279][T14965] usb 4-1: Manufacturer: syz [ 1852.790294][T14965] usb 4-1: SerialNumber: syz [ 1852.900333][T16933] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1852.954749][T16933] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1852.956146][T16933] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1852.978313][T16933] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1853.184656][T18226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2360'. [ 1853.184691][T18226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2360'. [ 1853.371113][T14965] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1853.371169][T14965] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1853.964485][T16933] Bluetooth: hci1: command tx timeout [ 1854.027188][T16174] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1854.525874][T16174] Flush: task=syz-executor[16174] dev=loop4 state=2 [ 1854.612220][T14965] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1854.613086][T14965] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1854.700716][T16174] Teardown: task=syz-executor[16174] dev=loop4 state=2 [ 1855.159414][T14965] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1855.159469][T14965] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1855.168248][T14965] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1855.327831][T14965] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1855.349427][T14965] usb 4-1: USB disconnect, device number 94 [ 1855.791556][T16933] Bluetooth: hci5: command tx timeout [ 1858.470619][T16933] Bluetooth: hci5: command tx timeout [ 1858.546011][T18248] ceph: No mds server is up or the cluster is laggy [ 1858.548614][T13926] libceph: connect (1)[c::]:6789 error -101 [ 1858.548779][T13926] libceph: mon0 (1)[c::]:6789 connect error [ 1860.510868][T16933] Bluetooth: hci5: command tx timeout [ 1860.597456][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1860.597583][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1862.591129][T16933] Bluetooth: hci5: command tx timeout [ 1863.028030][T18273] loop2: detected capacity change from 0 to 32768 [ 1863.028191][T18275] loop4: detected capacity change from 0 to 512 [ 1863.099979][T18273] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1863.176973][T18273] XFS (loop2): Ending clean mount [ 1863.211868][T18275] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1863.851048][T18275] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1863.851457][T18275] Quota error (device loop4): write_blk: dquota write failed [ 1863.851476][T18275] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 1863.877368][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1863.877415][ C0] EXT4-fs (loop4): initial error at time 1784318035: ext4_mb_generate_buddy:1317 [ 1863.877440][ C0] EXT4-fs (loop4): last error at time 1784318035: ext4_mb_generate_buddy:1317 [ 1863.909074][T18275] Quota error (device loop4): write_blk: dquota write failed [ 1863.909496][T18275] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1863.909640][T18275] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.2369: Failed to acquire dquot type 1 [ 1863.909665][T18275] loop4: lost filesystem error report for type 5 error -28 [ 1864.002936][T18275] EXT4-fs (loop4): 1 truncate cleaned up [ 1864.013045][T18275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1864.100985][T11665] bridge_slave_1: left allmulticast mode [ 1864.101023][T11665] bridge_slave_1: left promiscuous mode [ 1864.101314][T11665] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.123172][T18275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1864.336647][T11665] bridge_slave_0: left allmulticast mode [ 1864.336673][T11665] bridge_slave_0: left promiscuous mode [ 1864.336889][T11665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1864.401636][T18275] Flush: task=syz.4.2369[18275] dev=loop4 state=2 [ 1864.472262][T18275] Teardown: task=syz.4.2369[18275] dev=loop4 state=2 [ 1866.361699][T11665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1866.480940][T11665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1866.567320][T11665] bond0 (unregistering): Released all slaves [ 1867.886287][T15913] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1868.058878][T18165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1868.059232][T18165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1868.059544][T18165] bridge_slave_0: entered allmulticast mode [ 1868.076513][T18165] bridge_slave_0: entered promiscuous mode [ 1868.639255][T18165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1868.639613][T18165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1868.640053][T18165] bridge_slave_1: entered allmulticast mode [ 1868.644542][T18165] bridge_slave_1: entered promiscuous mode [ 1869.847936][T18165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1870.365346][T18318] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2375'. [ 1870.491508][T15913] Flush: task=syz-executor[15913] dev=loop2 state=2 [ 1870.542191][T18321] random: crng reseeded on system resumption [ 1870.677845][T11665] hsr_slave_0: left promiscuous mode [ 1870.701420][T15913] Teardown: task=syz-executor[15913] dev=loop2 state=2 [ 1870.743865][T11665] hsr_slave_1: left promiscuous mode [ 1870.749264][T11665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1870.781126][T11665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1872.880825][T11665] team0 (unregistering): Port device team_slave_1 removed [ 1872.942077][T11665] team0 (unregistering): Port device team_slave_0 removed [ 1873.122513][T18335] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1873.122564][T18335] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1873.122579][T18335] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1873.275416][T18165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1875.154234][T18165] team0: Port device team_slave_0 added [ 1875.174974][T18165] team0: Port device team_slave_1 added [ 1876.634699][T18165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1876.634712][T18165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1876.634732][T18165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1876.638721][T18165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1876.638732][T18165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1876.638752][T18165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1877.573718][T18361] loop4: detected capacity change from 0 to 32768 [ 1878.610566][ T5253] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1878.697352][T18361] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1878.796705][T18361] XFS (loop4): Ending clean mount [ 1879.506882][T18373] random: crng reseeded on system resumption [ 1879.814855][T18165] hsr_slave_0: entered promiscuous mode [ 1879.824216][T18165] hsr_slave_1: entered promiscuous mode [ 1879.829113][T18165] debugfs: 'hsr0' already exists in 'hsr' [ 1879.829141][T18165] Cannot create hsr debugfs directory [ 1881.635811][T18395] ceph: No mds server is up or the cluster is laggy [ 1881.646471][T14251] libceph: connect (1)[c::]:6789 error -101 [ 1881.646903][T14251] libceph: mon0 (1)[c::]:6789 connect error [ 1881.879114][T18208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1881.879463][T18208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1881.879731][T18208] bridge_slave_0: entered allmulticast mode [ 1881.982650][T18208] bridge_slave_0: entered promiscuous mode [ 1882.169416][T18208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1882.169724][T18208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1882.170006][T18208] bridge_slave_1: entered allmulticast mode [ 1882.173724][T18208] bridge_slave_1: entered promiscuous mode [ 1883.757082][T18208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1883.912529][T18208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1886.110154][ T5253] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1886.131769][T18208] team0: Port device team_slave_0 added [ 1886.317940][T18208] team0: Port device team_slave_1 added [ 1886.787118][T18208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1886.787136][T18208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1886.787163][T18208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1886.859177][T18208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1886.859195][T18208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1886.859224][T18208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1886.927030][T18434] fuse: Bad value for 'fd' [ 1887.603867][T16174] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1889.778222][T18208] hsr_slave_0: entered promiscuous mode [ 1889.786333][T18208] hsr_slave_1: entered promiscuous mode [ 1889.788583][T18208] debugfs: 'hsr0' already exists in 'hsr' [ 1889.788602][T18208] Cannot create hsr debugfs directory [ 1891.244387][T16174] Flush: task=syz-executor[16174] dev=loop4 state=2 [ 1891.993776][T16174] Teardown: task=syz-executor[16174] dev=loop4 state=2 [ 1892.594472][T18458] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1892.594494][T18458] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1892.594595][T18458] vhci_hcd vhci_hcd.0: Device attached [ 1893.672377][T18462] vhci_hcd: connection closed [ 1893.920822][T18050] vhci_hcd vhci_hcd.2: stop threads [ 1893.920843][T18050] vhci_hcd vhci_hcd.2: release socket [ 1893.966658][T18050] vhci_hcd vhci_hcd.2: disconnect device [ 1894.032510][T13926] usb 38-1: enqueue for inactive port 0 [ 1894.524518][T13926] usb usb38-port1: attempt power cycle [ 1895.959665][T18467] loop2: detected capacity change from 0 to 512 [ 1896.185012][T18467] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1896.387550][T18467] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.2399: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1896.387590][T18467] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1896.400110][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1896.400134][ C0] EXT4-fs (loop2): initial error at time 1784318067: ext4_iget_extra_inode:5180: inode 15 [ 1896.400163][ C0] EXT4-fs (loop2): last error at time 1784318067: ext4_iget_extra_inode:5180: inode 15 [ 1896.450689][T18467] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2399: couldn't read orphan inode 15 (err -117) [ 1896.450715][T18467] loop2: lost filesystem error report for type 5 error -117 [ 1896.500582][T18467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1896.867994][T13926] usb usb38-port1: unable to enumerate USB device [ 1897.123185][T15913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1899.058146][T18484] fuse: Unknown parameter '0xffffffffffffffff' [ 1900.913471][T18493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2405'. [ 1901.266054][T15913] Flush: task=syz-executor[15913] dev=loop2 state=2 [ 1901.381014][T15913] Teardown: task=syz-executor[15913] dev=loop2 state=2 [ 1901.512376][T18497] loop3: detected capacity change from 0 to 164 [ 1901.545205][T18497] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1901.545253][T18497] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1901.546241][T18497] Flush: task=syz.3.2406[18497] dev=loop3 state=2 [ 1901.770495][T18497] Teardown: task=syz.3.2406[18497] dev=loop3 state=2 [ 1901.861870][ T38] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1901.951871][T18497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2406'. [ 1902.020350][ T38] usb 5-1: Using ep0 maxpacket: 8 [ 1902.024046][ T38] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1902.024089][ T38] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1902.024110][ T38] usb 5-1: config 179 has no interface number 0 [ 1902.024158][ T38] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1902.024187][ T38] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1902.024216][ T38] usb 5-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1902.024273][ T38] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1902.024309][ T38] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1902.024332][ T38] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.985823][T13926] hid_parser_main: 4 callbacks suppressed [ 1903.985848][T13926] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 1903.985875][T13926] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 1903.985917][T13926] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 1903.985942][T13926] hid-generic 0006:0004:0009.0016: unknown main item tag 0x1 [ 1903.985968][T13926] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 1903.985994][T13926] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 1903.986019][T13926] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 1903.986045][T13926] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 1903.986070][T13926] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 1903.986095][T13926] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 1903.986158][T13926] hid-generic 0006:0004:0009.0016: item fetching failed at offset 16/17 [ 1903.986770][T13926] hid-generic 0006:0004:0009.0016: probe with driver hid-generic failed with error -22 [ 1904.220195][T18518] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1904.220236][T18518] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1904.220257][T18518] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1905.465084][T13926] usb 5-1: USB disconnect, device number 89 [ 1906.119372][T18536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2412'. [ 1906.119400][T18536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2412'. [ 1906.119478][T18536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2412'. [ 1906.302353][T18545] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2412'. [ 1906.592154][T11210] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1906.705995][T11210] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1906.856319][T11210] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1906.859898][T11210] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1906.887258][T11210] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1907.516215][T11665] bridge_slave_1: left allmulticast mode [ 1907.516251][T11665] bridge_slave_1: left promiscuous mode [ 1907.516505][T11665] bridge0: port 2(bridge_slave_1) entered disabled state [ 1907.716359][T11665] bridge_slave_0: left allmulticast mode [ 1907.716386][T11665] bridge_slave_0: left promiscuous mode [ 1907.716595][T11665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1908.607010][T18551] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2413'. [ 1909.640258][T16933] Bluetooth: hci4: command tx timeout [ 2015.470036][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2015.470062][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16174/1:b..l P18525/1:b..l [ 2015.470113][ C0] rcu: (detected by 0, t=10502 jiffies, g=153921, q=401 ncpus=2) [ 2015.470133][ C0] task:dhcpcd-run-hook state:R running task stack:22552 pid:18525 tgid:18525 ppid:5253 task_flags:0x400000 flags:0x00080000 [ 2015.470197][ C0] Call Trace: [ 2015.470205][ C0] [ 2015.470227][ C0] __schedule+0x1709/0x5530 [ 2015.470291][ C0] ? __pfx___schedule+0x10/0x10 [ 2015.470334][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 2015.470374][ C0] preempt_schedule_irq+0x4d/0xa0 [ 2015.470403][ C0] irqentry_exit+0x14f/0x8f0 [ 2015.470433][ C0] ? trace_irq_disable+0x3b/0x140 [ 2015.470560][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2015.470601][ C0] RIP: 0010:is_bpf_text_address+0x41/0x2b0 [ 2015.470656][ C0] Code: 94 ef ff e8 51 e6 d4 ff 48 8d 05 00 00 00 00 48 c7 c7 80 38 1c 8e 31 f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9 48 89 44 24 08 <50> e8 c9 ec ca ff 48 83 c4 08 e8 f0 99 70 09 89 c5 31 ff 89 c6 e8 [ 2015.470679][ C0] RSP: 0018:ffffc900065778f0 EFLAGS: 00000246 [ 2015.470696][ C0] RAX: ffffffff81d5ef96 RBX: 00007f2ad35f6407 RCX: 0000000000000002 [ 2015.470710][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e1c3880 [ 2015.470725][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2015.470737][ C0] R10: 0000000000000000 R11: ffffffff8e1c3880 R12: ffff88801e690000 [ 2015.470751][ C0] R13: 0000000000000000 R14: 00007f2ad35f6407 R15: 1ffff92000caef3a [ 2015.470773][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 2015.470808][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 2015.470837][ C0] kernel_text_address+0xa5/0xe0 [ 2015.470862][ C0] __kernel_text_address+0xd/0x30 [ 2015.470883][ C0] unwind_get_return_address+0x4d/0x90 [ 2015.470934][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2015.470978][ C0] arch_stack_walk+0xfb/0x150 [ 2015.471041][ C0] stack_trace_save+0xa9/0x100 [ 2015.471062][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2015.471088][ C0] ? __lock_acquire+0x6df/0x2e40 [ 2015.471120][ C0] kasan_save_track+0x3e/0x80 [ 2015.471173][ C0] ? kasan_save_track+0x3e/0x80 [ 2015.471191][ C0] ? kasan_save_free_info+0x40/0x50 [ 2015.471242][ C0] ? __kasan_slab_free+0x5c/0x80 [ 2015.471261][ C0] ? kmem_cache_free+0x187/0x6c0 [ 2015.471305][ C0] ? do_sys_openat2+0x14e/0x200 [ 2015.471327][ C0] ? __x64_sys_openat+0x138/0x170 [ 2015.471348][ C0] ? do_syscall_64+0x17b/0x530 [ 2015.471377][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2015.471439][ C0] ? do_sys_openat2+0x14e/0x200 [ 2015.471460][ C0] kasan_save_free_info+0x40/0x50 [ 2015.471487][ C0] __kasan_slab_free+0x5c/0x80 [ 2015.471509][ C0] kmem_cache_free+0x187/0x6c0 [ 2015.471531][ C0] ? do_sys_openat2+0x14e/0x200 [ 2015.471557][ C0] do_sys_openat2+0x14e/0x200 [ 2015.471583][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 2015.471619][ C0] __x64_sys_openat+0x138/0x170 [ 2015.471647][ C0] do_syscall_64+0x17b/0x530 [ 2015.471676][ C0] ? irqentry_exit+0x10f/0x8f0 [ 2015.471704][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2015.471726][ C0] ? clear_bhb_loop+0x40/0x90 [ 2015.471750][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2015.471771][ C0] RIP: 0033:0x7f2ad35f6407 [ 2015.471788][ C0] RSP: 002b:00007ffd6a382b30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2015.471807][ C0] RAX: ffffffffffffffda RBX: 00007f2ad34a6c80 RCX: 00007f2ad35f6407 [ 2015.471826][ C0] RDX: 0000000000080000 RSI: 000055eb71542fc8 RDI: ffffffffffffff9c [ 2015.471840][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2015.471852][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000055eb71542fc8 [ 2015.471865][ C0] R13: 000055eb7153a910 R14: 0000000000000000 R15: 0000000000000000 [ 2015.471894][ C0] [ 2015.471902][ C0] task:syz-executor state:R running task stack:21120 pid:16174 tgid:16174 ppid:16169 task_flags:0x400140 flags:0x00080000 [ 2015.471961][ C0] Call Trace: [ 2015.471967][ C0] [ 2015.471979][ C0] __schedule+0x1709/0x5530 [ 2015.472029][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 2015.472048][ C0] ? __pfx___schedule+0x10/0x10 [ 2015.472090][ C0] preempt_schedule_irq+0x4d/0xa0 [ 2015.472119][ C0] irqentry_exit+0x14f/0x8f0 [ 2015.472147][ C0] ? trace_irq_disable+0x3b/0x140 [ 2015.472174][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2015.472195][ C0] RIP: 0010:rcu_read_lock_held+0xa/0x50 [ 2015.472256][ C0] Code: cc 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 e8 86 5c 9d 09 <85> c0 74 26 31 db e8 db f3 00 00 84 c0 74 20 e8 d2 39 01 00 84 c0 [ 2015.472273][ C0] RSP: 0018:ffffc90004d47580 EFLAGS: 00000246 [ 2015.472289][ C0] RAX: 0000000000000001 RBX: ffffc90004d476b8 RCX: ffff888086503e80 [ 2015.472303][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2015.472315][ C0] RBP: ffffea00019dbb00 R08: 0000000000000000 R09: 0000000000000000