last executing test programs: 6m52.749299368s ago: executing program 32 (id=28): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1, 0x0, 0x2, 0x4000}}, 0x20) 6m48.231497143s ago: executing program 33 (id=40): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) readv(r1, &(0x7f0000000040)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) 6m42.196153581s ago: executing program 34 (id=51): pread64(0xffffffffffffffff, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) 6m39.219024941s ago: executing program 35 (id=62): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x5fd, 0x4) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r0}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@ifindex, r2, 0x5, 0x2, r3}, 0x20) r4 = openat$incfs(0xffffffffffffff9c, 0x0, 0x501100, 0x111) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, 0x0) mount$9p_unix(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x892031, &(0x7f0000000280)={'trans=unix,', {[{@directio}, {@access_client}, {@loose}], [{@pcr={'pcr', 0x3d, 0x14}}, {@subj_role={'subj_role', 0x3d, './cgroup.cpu/syz1\x00'}}, {@uid_eq}, {@appraise_type}, {@dont_hash}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000540)=@nullb, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='vfat\x00', 0x2, &(0x7f0000000600)='$\x00') setfsgid(0xee00) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a800080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93337568b26948fc700870ec38edc9761fdc", 0xd8}], 0x1}, 0x4) faccessat(r3, &(0x7f0000000340)='./file0\x00', 0x180) 6m34.158920633s ago: executing program 36 (id=73): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x1a}) syz_open_dev$rtc(0x0, 0x80000001, 0x408000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, 0x0, 0x24000814) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r4, r3}) 6m13.098633214s ago: executing program 6 (id=92): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0xff8c) 6m12.175195152s ago: executing program 37 (id=83): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001500)={0x44, &(0x7f00000012c0)={0x20, 0x0, 0x4, "d9070b46"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000d40)={0x44, &(0x7f0000000a80)={0x0, 0x0, 0x4, "41e4e9c2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m57.686809886s ago: executing program 38 (id=92): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0xff8c) 5m55.097497507s ago: executing program 7 (id=117): socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioperm(0x0, 0x2, 0x7e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000100), 0x2, 0x0) sendfile(r4, r4, 0x0, 0x8000002) 5m53.469494222s ago: executing program 7 (id=118): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80, 0x80000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x0, &(0x7f0000000140)}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f00000001c0)=0x6) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, 0x0) r3 = socket$inet6(0xa, 0xa, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000540)) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000680)={'gretap0\x00', &(0x7f00000005c0)={'syztnl0\x00', r2, 0x10, 0x700, 0x3, 0x7, {{0x10, 0x4, 0x0, 0x7, 0x40, 0x65, 0x0, 0x2, 0x2f, 0x0, @multicast1, @private=0xa010100, {[@ssrr={0x89, 0x1f, 0xc8, [@private=0xa010101, @multicast1, @rand_addr=0x64010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x1b}, @loopback, @empty]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x3, 0x38}, @generic={0x94, 0x3, "1b"}]}}}}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e24, 0x8, @loopback, 0xfffeffff}}, 0xd003, 0x0, 0x2, 0x8, 0x8001}, &(0x7f0000000780)=0x98) syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00'}) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, &(0x7f0000000b00)) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000001900)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000018c0)={&(0x7f0000001680)={0x70, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}]}, @TIPC_NLA_NET={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 5m53.178428847s ago: executing program 7 (id=119): syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000140)={'wlan1\x00'}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x2641, 0x84) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x13f, 0x8}}, 0x20) 5m52.261201959s ago: executing program 7 (id=120): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000000)="619ff1e3c70400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5m52.233732264s ago: executing program 7 (id=121): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) 5m50.830243664s ago: executing program 7 (id=122): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_driver={0xffffffff, 0x1, 0x0}) r1 = syz_open_dev$loop(0x0, 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00', @random='\x00\x00\x00\x00\x00 '}) 5m35.149408047s ago: executing program 41 (id=122): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_driver={0xffffffff, 0x1, 0x0}) r1 = syz_open_dev$loop(0x0, 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, 0x0) r3 = socket$inet6(0xa, 0xa, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000540)) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000680)={'gretap0\x00', &(0x7f00000005c0)={'syztnl0\x00', r2, 0x10, 0x700, 0x3, 0x7, {{0x10, 0x4, 0x0, 0x7, 0x40, 0x65, 0x0, 0x2, 0x2f, 0x0, @multicast1, @private=0xa010100, {[@ssrr={0x89, 0x1f, 0xc8, [@private=0xa010101, @multicast1, @rand_addr=0x64010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x1b}, @loopback, @empty]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x3, 0x38}, @generic={0x94, 0x3, "1b"}]}}}}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e24, 0x8, @loopback, 0xfffeffff}}, 0xd003, 0x0, 0x2, 0x8, 0x8001}, &(0x7f0000000780)=0x98) syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00'}) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, &(0x7f0000000b00)) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000001900)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000018c0)={&(0x7f0000001680)={0x70, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}]}, @TIPC_NLA_NET={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 5m30.003055247s ago: executing program 0 (id=128): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40051}, 0x1cbca62459484d96) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1000, 0xb, 0x20002f7}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, 0x0) unshare(0x4040600) socket(0x2000000015, 0x80005, 0x0) fcntl$lock(0xffffffffffffffff, 0xd, &(0x7f0000000040)={0x0, 0x1, 0xc, 0x2, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x11, 0x2, 0x300) syz_emit_ethernet(0x192, &(0x7f0000000680)=ANY=[], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 5m29.878332435s ago: executing program 0 (id=129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 5m27.43383463s ago: executing program 0 (id=130): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) 5m25.712739161s ago: executing program 0 (id=131): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) socket$inet6_icmp(0xa, 0x2, 0x3a) socket(0x1d, 0x2, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8}, {0x7, 0x1}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) r3 = syz_open_dev$sndctrl(&(0x7f0000006e80), 0x7a, 0x181080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x8006d89, 0x400, 0x2, 0x200115}, &(0x7f0000000400), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f00000006c0)={0xfffffffffffffffb, 0xffffffffffffffff, 0x2, {0x27fffffffffffff, 0x4}, 0x54}, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0x86) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000006ec0)=""/22) 5m9.932192936s ago: executing program 42 (id=131): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) socket$inet6_icmp(0xa, 0x2, 0x3a) socket(0x1d, 0x2, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8}, {0x7, 0x1}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) r3 = syz_open_dev$sndctrl(&(0x7f0000006e80), 0x7a, 0x181080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x8006d89, 0x400, 0x2, 0x200115}, &(0x7f0000000400), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f00000006c0)={0xfffffffffffffffb, 0xffffffffffffffff, 0x2, {0x27fffffffffffff, 0x4}, 0x54}, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0x86) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000006ec0)=""/22) 4m50.197870555s ago: executing program 2 (id=186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000cbd000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0xaaaac33, 0x42, 0x0, 0x4f) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m48.811293744s ago: executing program 2 (id=188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a010e0000000000000000020000000900020073797a32000000000900010073797a30000000000c0006"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) 4m48.355265294s ago: executing program 2 (id=189): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000080)) 4m47.925237072s ago: executing program 2 (id=190): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x6, 0x0}, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002340)=r3, 0x4) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000002300), 0x2, 0x3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0xfffd, 0x0) 4m46.840405055s ago: executing program 2 (id=191): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="840100001900010000000000fbdbdf251d0109004d001280cf45600ee71d67ff39013408262cfeb1f3106733c096050600ee102b3f22ca6791cfc4a3ad25ae884a292d12ab267e995baf99e346bee0c691ceb5f49beb5f98dd56ac0f373958d73a0000001e0106"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3e, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)={0x14, 0x0, 0x70d, 0x70bd26, 0x2ddfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) mmap(&(0x7f00007e4000/0x1000)=nil, 0x1000, 0x3000003, 0x2010, r3, 0x946ea000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000640)='./file0\x00') 4m39.273158191s ago: executing program 2 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioperm(0x0, 0x2, 0x7e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000100), 0x2, 0x0) sendfile(r4, r4, 0x0, 0x8000002) 4m23.931497069s ago: executing program 43 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioperm(0x0, 0x2, 0x7e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000100), 0x2, 0x0) sendfile(r4, r4, 0x0, 0x8000002) 2m44.276478064s ago: executing program 6 (id=224): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="840100001900010000000000fbdbdf251d0109004d001280cf45600ee71d67ff39013408262cfeb1f3106733c096050600ee102b3f22ca6791cfc4a3ad25ae884a292d12ab267e995baf99e346bee0c691ceb5f49beb5f98dd56ac0f373958d73a0000001e0106"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r4) r6 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3e, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@private1}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)={0x14, r5, 0x70d, 0x70bd26, 0x2ddfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) 2m37.835530997s ago: executing program 6 (id=715): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20007, 0x4) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004882) r4 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) symlink(0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x24040084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000001480)=ANY=[@ANYBLOB="1800020001000000000000000018000095000000000000004ffa4499c193bb7f3eebda4d1d783e"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 2m35.937183622s ago: executing program 6 (id=717): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000b32000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40) timer_create(0x0, 0x0, 0x0) timer_delete(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) madvise(&(0x7f0000735000/0x1000)=nil, 0x1000, 0x65) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x7, 0x4, 0x0, 0x6, 0x1c, 0x65, 0x0, 0x4, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0x3c, 0x3, 0x2}, @ssrr={0x89, 0x3, 0xb5}]}}}}}) msgctl$MSG_INFO(0x0, 0xc, 0x0) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000580), 0x0, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x21, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x25a1, 0x40}}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) 2m26.449331096s ago: executing program 6 (id=763): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) 2m21.975809877s ago: executing program 6 (id=782): bind$rds(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000350000000801000001000000800000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) setitimer(0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000004}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) r5 = openat$cgroup_ro(r4, 0x0, 0x275a, 0x0) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f0000000240)={0x101, 0x4, 0x8, @remote, 'macvlan1\x00'}) syz_emit_vhci(&(0x7f0000001480)=ANY=[@ANYBLOB="02c9"], 0x11) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008000000"], 0x30}}, 0x0) 2m20.799481777s ago: executing program 4 (id=789): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) 2m20.529674384s ago: executing program 4 (id=791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) shutdown(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="040efe05200c06095f86f3b16dac68be49625fc61b74b9c0166f84a86cd9f46cd44b70f0280ecd626abb217303007055a12a540beee0fde73dc3995de5138eaa4bb40fe6a1cc"], 0x7) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) syz_open_dev$video(&(0x7f0000000000), 0x1, 0x20602) accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) 2m16.852954993s ago: executing program 4 (id=807): socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2m16.569961105s ago: executing program 4 (id=811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x74, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x3e, 0x3a, 0xff, @empty, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 2m16.300787469s ago: executing program 4 (id=815): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) 2m14.755339672s ago: executing program 4 (id=820): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) shutdown(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="040efe05200c06095f86f3b16dac68be49625fc61b74b9c0166f84a86cd9f46cd44b70f0280ecd626abb217303007055a12a540beee0fde73dc3995de5138eaa4bb40fe6a1cc"], 0x7) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) syz_open_dev$video(&(0x7f0000000000), 0x1, 0x20602) accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) 2m6.735144541s ago: executing program 44 (id=782): bind$rds(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000350000000801000001000000800000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) setitimer(0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000004}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) r5 = openat$cgroup_ro(r4, 0x0, 0x275a, 0x0) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f0000000240)={0x101, 0x4, 0x8, @remote, 'macvlan1\x00'}) syz_emit_vhci(&(0x7f0000001480)=ANY=[@ANYBLOB="02c9"], 0x11) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008000000"], 0x30}}, 0x0) 1m59.540502668s ago: executing program 45 (id=820): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) shutdown(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="040efe05200c06095f86f3b16dac68be49625fc61b74b9c0166f84a86cd9f46cd44b70f0280ecd626abb217303007055a12a540beee0fde73dc3995de5138eaa4bb40fe6a1cc"], 0x7) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) syz_open_dev$video(&(0x7f0000000000), 0x1, 0x20602) accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) 51.129700485s ago: executing program 5 (id=1214): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)='*', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)}], 0x1}}], 0x2, 0x4000000) 50.730786959s ago: executing program 5 (id=1216): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0xf01c, 0x141000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1', [], 0xa, "521299a432289bd6a32f695c2f61ba693bea"}, 0x1d) write$UHID_INPUT(r1, &(0x7f0000000580)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) 50.433288308s ago: executing program 5 (id=1217): socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_open_dev$dmmidi(&(0x7f00000000c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0245720, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd8a02, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000240)="04", 0x1}], 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffe) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) close(0x3) 44.285068104s ago: executing program 8 (id=1232): socket$kcm(0xa, 0x922000000003, 0x11) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @remote}, {0x1, @broadcast}, 0x2c, {0x2, 0x4e20, @empty}, 'lo\x00'}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sysinfo(&(0x7f0000000080)=""/98) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={'\x00', 0x1ff, 0x0, 0x9, 0x2, 0x20000}) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4c0c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) accept4$unix(r5, 0x0, 0x0, 0x0) 43.411673231s ago: executing program 8 (id=1236): socket$packet(0x11, 0x3, 0x300) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) r2 = getpid() r3 = syz_clone(0x24001500, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r5, &(0x7f0000000280)={0xffffffffffffffff, r4, 0x7}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl(r7, 0xfffff000, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 41.706985286s ago: executing program 5 (id=1239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000280)) 40.693471779s ago: executing program 8 (id=1240): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, [], "8029335287b7a081"}}}}}}}, 0x0) pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x88880) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r2, r1, 0xff, 0x0) fanotify_init(0x0, 0x0) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) 40.5102916s ago: executing program 5 (id=1241): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) 39.059719352s ago: executing program 5 (id=1244): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002140)=ANY=[@ANYBLOB], 0x2c}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3) sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000009c0), 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) 39.059384818s ago: executing program 8 (id=1245): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905"], 0x0) 37.173598827s ago: executing program 8 (id=1253): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) 36.244753037s ago: executing program 8 (id=1254): socket$kcm(0xa, 0x922000000003, 0x11) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @remote}, {0x1, @broadcast}, 0x2c, {0x2, 0x4e20, @empty}, 'lo\x00'}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) r3 = fsmount(r2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 22.337582241s ago: executing program 46 (id=1244): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002140)=ANY=[@ANYBLOB], 0x2c}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3) sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000009c0), 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) 20.601146091s ago: executing program 47 (id=1254): socket$kcm(0xa, 0x922000000003, 0x11) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @remote}, {0x1, @broadcast}, 0x2c, {0x2, 0x4e20, @empty}, 'lo\x00'}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) r3 = fsmount(r2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 7.619084141s ago: executing program 1 (id=1322): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) 7.323158798s ago: executing program 1 (id=1323): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x804) 7.189814856s ago: executing program 1 (id=1324): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000280)) 7.051990704s ago: executing program 1 (id=1325): syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4a, 0x0, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000180), 0x0) symlink(0x0, &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getpeername$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000280)) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000540)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0xee00, 0x0) pipe2$9p(&(0x7f0000000100), 0x800) r5 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8004, &(0x7f00000001c0)=ANY=[]) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000080)=0x8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, 0x0, 0x0) syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0xb2e8, 0x10000, 0x1, 0x2b}, &(0x7f0000000000), &(0x7f0000000140)) 3.875729017s ago: executing program 1 (id=1336): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) 2.621320694s ago: executing program 9 (id=1339): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="af", 0x1}], 0x1}}], 0x2, 0x4000000) 2.565183302s ago: executing program 1 (id=1340): socket$kcm(0xa, 0x922000000003, 0x11) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @remote}, {0x1, @broadcast}, 0x2c, {0x2, 0x4e20, @empty}, 'lo\x00'}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) 2.513720285s ago: executing program 9 (id=1342): mount(0x0, 0x0, 0x0, 0x8000, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x100f8, 0x0, 0x601, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 2.149527014s ago: executing program 9 (id=1344): syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4a, 0x0, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000180), 0x0) symlink(0x0, &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getpeername$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000280)) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000540)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0xee00, 0x0) pipe2$9p(&(0x7f0000000100), 0x800) r5 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8004, &(0x7f00000001c0)=ANY=[]) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000080)=0x8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, 0x0, 0x0) syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0xb2e8, 0x10000, 0x1, 0x2b}, &(0x7f0000000000), &(0x7f0000000140)) 2.04071062s ago: executing program 3 (id=1345): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000380), 0x0, 0x800) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0xc38d) 1.893363058s ago: executing program 3 (id=1346): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 1.405165368s ago: executing program 9 (id=1347): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000380)=ANY=[@ANYRES16=r2], 0x21, 0x0) syz_io_uring_setup(0x4a1, 0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x800, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240), 0x0}, 0x20) 1.153384461s ago: executing program 9 (id=1348): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) 503.07108ms ago: executing program 3 (id=1349): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ef5b84663e4ea2fe75c3fe", 0xb) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r3, 0x84, 0x80, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 178.079126ms ago: executing program 3 (id=1350): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="af", 0x1}], 0x1}}], 0x2, 0x4000000) 113.075682ms ago: executing program 3 (id=1351): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 111.61928ms ago: executing program 9 (id=1352): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 3 (id=1353): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, [], "8029335287b7a081"}}}}}}}, 0x0) pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x88880) tee(0xffffffffffffffff, r1, 0xff, 0x0) fanotify_init(0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) kernel console output (not intermixed with test programs): nterface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.045924][ T6881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.147049][ T7063] QAT: failed to copy from user. [ 244.478786][ T6881] hsr_slave_0: entered promiscuous mode [ 244.479844][ T6881] hsr_slave_1: entered promiscuous mode [ 244.500956][ T6881] debugfs: 'hsr0' already exists in 'hsr' [ 244.500978][ T6881] Cannot create hsr debugfs directory [ 244.704277][ T6786] hsr_slave_0: left promiscuous mode [ 244.751556][ T6786] hsr_slave_1: left promiscuous mode [ 244.760469][ T6786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.760489][ T6786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.791563][ T6786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.791593][ T6786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.937840][ T6786] veth1_macvtap: left promiscuous mode [ 244.937966][ T6786] veth0_macvtap: left promiscuous mode [ 245.038725][ T6786] veth1_vlan: left promiscuous mode [ 245.129083][ T6786] veth0_vlan: left promiscuous mode [ 249.305945][ T7113] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 250.275717][ T6786] team0 (unregistering): Port device team_slave_1 removed [ 250.332989][ T6786] team0 (unregistering): Port device team_slave_0 removed [ 252.839322][ T7137] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 256.531395][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.531473][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.696317][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.211'. [ 259.953639][ T7185] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 265.235962][ T5803] block nbd0: Receive control failed (result -32) [ 265.389230][ T7206] nbd0: detected capacity change from 0 to 127 [ 265.459906][ T7164] block nbd0: Dead connection, failed to find a fallback [ 265.459935][ T7164] block nbd0: shutting down sockets [ 265.459951][ T7164] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.460090][ T7164] Buffer I/O error on dev nbd0, logical block 0, async page read [ 265.460287][ T7164] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.460313][ T7164] Buffer I/O error on dev nbd0, logical block 1, async page read [ 265.460369][ T7164] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.460393][ T7164] Buffer I/O error on dev nbd0, logical block 2, async page read [ 265.460444][ T7164] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.460468][ T7164] Buffer I/O error on dev nbd0, logical block 3, async page read [ 265.460537][ T7164] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.460560][ T7164] Buffer I/O error on dev nbd0, logical block 0, async page read [ 265.460614][ T7164] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.460637][ T7164] Buffer I/O error on dev nbd0, logical block 1, async page read [ 265.460690][ T7164] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.460713][ T7164] Buffer I/O error on dev nbd0, logical block 2, async page read [ 265.460764][ T7164] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.460787][ T7164] Buffer I/O error on dev nbd0, logical block 3, async page read [ 265.460848][ T7164] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.460872][ T7164] Buffer I/O error on dev nbd0, logical block 0, async page read [ 265.460924][ T7164] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.460948][ T7164] Buffer I/O error on dev nbd0, logical block 1, async page read [ 265.502084][ T7164] ldm_validate_partition_table(): Disk read failed. [ 265.502515][ T7164] Dev nbd0: unable to read RDB block 0 [ 265.503398][ T7164] nbd0: unable to read partition table [ 265.607905][ T7164] ldm_validate_partition_table(): Disk read failed. [ 265.608535][ T7164] Dev nbd0: unable to read RDB block 0 [ 265.609514][ T7164] nbd0: unable to read partition table [ 265.850027][ T6881] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 266.337657][ T6881] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 266.411303][ T6881] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 266.493580][ T6881] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 268.366713][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.222'. [ 270.823144][ T7263] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.227' sets config #-1 [ 270.845909][ T7263] loop7: detected capacity change from 0 to 16384 [ 271.214436][ T6881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.740188][ T7266] loop7: detected capacity change from 16384 to 0 [ 272.740478][ C0] blk_print_req_error: 138 callbacks suppressed [ 272.740496][ C0] I/O error, dev loop7, sector 1408 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 272.783433][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.791442][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.793096][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.799434][ T5799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.800248][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 273.126413][ T6881] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.127027][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.127114][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.217050][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.217133][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.873096][ T5799] Bluetooth: hci4: command tx timeout [ 274.956276][ T5799] block nbd1: Receive control failed (result -32) [ 275.080131][ T7283] nbd1: detected capacity change from 0 to 127 [ 275.087187][ T7265] block nbd1: Dead connection, failed to find a fallback [ 275.087212][ T7265] block nbd1: shutting down sockets [ 275.087226][ T7265] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 275.087251][ T7265] buffer_io_error: 138 callbacks suppressed [ 275.087261][ T7265] Buffer I/O error on dev nbd1, logical block 0, async page read [ 275.087318][ T7265] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 275.087340][ T7265] Buffer I/O error on dev nbd1, logical block 1, async page read [ 275.087387][ T7265] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 275.087408][ T7265] Buffer I/O error on dev nbd1, logical block 2, async page read [ 275.087454][ T7265] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 275.087475][ T7265] Buffer I/O error on dev nbd1, logical block 3, async page read [ 275.087531][ T7265] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 275.087552][ T7265] Buffer I/O error on dev nbd1, logical block 0, async page read [ 275.087598][ T7265] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 275.087619][ T7265] Buffer I/O error on dev nbd1, logical block 1, async page read [ 275.087665][ T7265] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 275.087686][ T7265] Buffer I/O error on dev nbd1, logical block 2, async page read [ 275.087731][ T7265] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 275.087752][ T7265] Buffer I/O error on dev nbd1, logical block 3, async page read [ 275.087806][ T7265] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 275.087826][ T7265] Buffer I/O error on dev nbd1, logical block 0, async page read [ 275.087875][ T7265] Buffer I/O error on dev nbd1, logical block 1, async page read [ 275.088770][ T7265] ldm_validate_partition_table(): Disk read failed. [ 275.089393][ T7265] Dev nbd1: unable to read RDB block 0 [ 275.090247][ T7265] nbd1: unable to read partition table [ 275.159658][ T7265] ldm_validate_partition_table(): Disk read failed. [ 275.160372][ T7265] Dev nbd1: unable to read RDB block 0 [ 275.161316][ T7265] nbd1: unable to read partition table [ 275.693533][ T7299] random: crng reseeded on system resumption [ 278.377175][ T5799] Bluetooth: hci4: command tx timeout [ 279.374339][ T5805] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 279.694221][ T5805] usb 2-1: Using ep0 maxpacket: 8 [ 279.700070][ T5805] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 279.718935][ T5805] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 279.718970][ T5805] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 279.718992][ T5805] usb 2-1: Product: syz [ 279.719007][ T5805] usb 2-1: Manufacturer: syz [ 279.719022][ T5805] usb 2-1: SerialNumber: syz [ 280.392659][ T5803] Bluetooth: hci4: command tx timeout [ 280.671935][ T5805] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 280.672060][ T5805] visor 2-1:1.0: probe with driver visor failed with error -110 [ 281.020999][ T7334] netlink: 'syz.3.238': attribute type 3 has an invalid length. [ 281.754514][ T6538] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.187941][ T7354] random: crng reseeded on system resumption [ 283.030665][ T5803] Bluetooth: hci4: command tx timeout [ 283.089050][ T5853] usb 2-1: USB disconnect, device number 7 [ 287.088700][ T6538] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.195119][ T5799] block nbd2: Receive control failed (result -32) [ 287.737963][ T7373] nbd2: detected capacity change from 0 to 127 [ 288.301406][ T7380] block nbd2: Dead connection, failed to find a fallback [ 288.301436][ T7380] block nbd2: shutting down sockets [ 288.301450][ T7380] blk_print_req_error: 139 callbacks suppressed [ 288.301464][ T7380] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 288.301492][ T7380] buffer_io_error: 138 callbacks suppressed [ 288.301503][ T7380] Buffer I/O error on dev nbd2, logical block 0, async page read [ 288.301569][ T7380] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 288.301593][ T7380] Buffer I/O error on dev nbd2, logical block 1, async page read [ 288.301649][ T7380] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 288.308955][ T7380] Buffer I/O error on dev nbd2, logical block 2, async page read [ 288.309062][ T7380] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 288.309089][ T7380] Buffer I/O error on dev nbd2, logical block 3, async page read [ 288.309160][ T7380] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 288.309186][ T7380] Buffer I/O error on dev nbd2, logical block 0, async page read [ 288.309241][ T7380] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 288.309266][ T7380] Buffer I/O error on dev nbd2, logical block 1, async page read [ 288.309320][ T7380] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 288.309344][ T7380] Buffer I/O error on dev nbd2, logical block 2, async page read [ 288.309399][ T7380] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 288.309423][ T7380] Buffer I/O error on dev nbd2, logical block 3, async page read [ 288.309485][ T7380] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 288.309509][ T7380] Buffer I/O error on dev nbd2, logical block 0, async page read [ 288.309563][ T7380] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 288.309587][ T7380] Buffer I/O error on dev nbd2, logical block 1, async page read [ 288.310623][ T7380] ldm_validate_partition_table(): Disk read failed. [ 288.311346][ T7380] Dev nbd2: unable to read RDB block 0 [ 288.518509][ T7380] nbd2: unable to read partition table [ 288.538213][ T7380] ldm_validate_partition_table(): Disk read failed. [ 288.538855][ T7380] Dev nbd2: unable to read RDB block 0 [ 288.539634][ T7380] nbd2: unable to read partition table [ 288.850698][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 288.861169][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 288.865167][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 288.882860][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 288.883716][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 289.274334][ T6538] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.408314][ T7274] chnl_net:caif_netlink_parms(): no params data found [ 290.964513][ T5799] Bluetooth: hci2: command tx timeout [ 291.334910][ T7398] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 291.335165][ T7398] block device autoloading is deprecated and will be removed. [ 291.951048][ T6538] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.221823][ T5853] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 292.294756][ T7421] random: crng reseeded on system resumption [ 292.924253][ T5853] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 292.924287][ T5853] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.924309][ T5853] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 292.924363][ T5853] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.924391][ T5853] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.926857][ T5853] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 292.926885][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 292.926907][ T5853] usb 4-1: Product: syz [ 292.926921][ T5853] usb 4-1: Manufacturer: syz [ 293.038442][ T5853] cdc_wdm 4-1:1.0: skipping garbage [ 293.038466][ T5853] cdc_wdm 4-1:1.0: skipping garbage [ 293.076770][ T5853] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 293.076795][ T5853] cdc_wdm 4-1:1.0: Unknown control protocol [ 293.111904][ T5799] Bluetooth: hci2: command tx timeout [ 293.251369][ T7414] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 293.270214][ T48] usb 4-1: USB disconnect, device number 4 [ 295.208957][ T5803] Bluetooth: hci2: command tx timeout [ 295.286352][ T7446] syz.1.256 (7446) used greatest stack depth: 18648 bytes left [ 295.522321][ T7274] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.522477][ T7274] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.522730][ T7274] bridge_slave_0: entered allmulticast mode [ 295.525619][ T7274] bridge_slave_0: entered promiscuous mode [ 297.033023][ T7274] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.310997][ T5799] Bluetooth: hci2: command tx timeout [ 297.329531][ T7274] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.329827][ T7274] bridge_slave_1: entered allmulticast mode [ 297.432888][ T7480] random: crng reseeded on system resumption [ 298.149258][ T7274] bridge_slave_1: entered promiscuous mode [ 298.495431][ T7274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.656359][ T7274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.951887][ T5799] Bluetooth: hci5: command 0x0406 tx timeout [ 298.970512][ T7274] team0: Port device team_slave_0 added [ 298.992205][ T6538] bridge_slave_1: left allmulticast mode [ 298.992234][ T6538] bridge_slave_1: left promiscuous mode [ 299.020152][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.094623][ T6538] bridge_slave_0: left allmulticast mode [ 299.094655][ T6538] bridge_slave_0: left promiscuous mode [ 299.094916][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.948236][ T6538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.060138][ T6538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.141109][ T6538] bond0 (unregistering): Released all slaves [ 301.178063][ T7274] team0: Port device team_slave_1 added [ 301.453226][ T7548] netlink: 'syz.1.284': attribute type 3 has an invalid length. [ 302.050814][ T7274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.050833][ T7274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.050860][ T7274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.065633][ T7274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.065651][ T7274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.065676][ T7274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.489213][ T7274] hsr_slave_0: entered promiscuous mode [ 303.490814][ T7274] hsr_slave_1: entered promiscuous mode [ 303.507583][ T7274] debugfs: 'hsr0' already exists in 'hsr' [ 303.507615][ T7274] Cannot create hsr debugfs directory [ 307.481295][ T7389] chnl_net:caif_netlink_parms(): no params data found [ 307.761074][ T6538] hsr_slave_0: left promiscuous mode [ 307.793275][ T6538] hsr_slave_1: left promiscuous mode [ 307.794702][ T6538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.794770][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.834559][ T6538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.834626][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.957819][ T6538] veth1_macvtap: left promiscuous mode [ 307.958142][ T6538] veth0_macvtap: left promiscuous mode [ 307.958877][ T6538] veth1_vlan: left promiscuous mode [ 307.959339][ T6538] veth0_vlan: left promiscuous mode [ 309.378454][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 311.112197][ T6538] team0 (unregistering): Port device team_slave_1 removed [ 311.222671][ T6538] team0 (unregistering): Port device team_slave_0 removed [ 312.655938][ T807] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 312.667747][ T7389] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.667943][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.668130][ T7389] bridge_slave_0: entered allmulticast mode [ 312.670776][ T7389] bridge_slave_0: entered promiscuous mode [ 312.687316][ T7389] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.687440][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.687638][ T7389] bridge_slave_1: entered allmulticast mode [ 312.690217][ T7389] bridge_slave_1: entered promiscuous mode [ 312.805796][ T807] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.805856][ T807] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 312.805881][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.845478][ T807] usb 2-1: config 0 descriptor?? [ 312.868363][ T807] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 312.947614][ T7746] netlink: 36 bytes leftover after parsing attributes in process `syz.4.340'. [ 312.947640][ T7746] netlink: 16 bytes leftover after parsing attributes in process `syz.4.340'. [ 312.947659][ T7746] netlink: 36 bytes leftover after parsing attributes in process `syz.4.340'. [ 312.947773][ T7746] netlink: 36 bytes leftover after parsing attributes in process `syz.4.340'. [ 313.261146][ T7389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.289235][ T7389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.525387][ T7389] team0: Port device team_slave_0 added [ 313.569061][ T7389] team0: Port device team_slave_1 added [ 313.692961][ T7389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.692979][ T7389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.693004][ T7389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.708025][ T7746] syz.4.340 (7746) used greatest stack depth: 17128 bytes left [ 313.824742][ T7389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.824760][ T7389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.824790][ T7389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.037579][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 314.037714][ T7774] netlink: 24 bytes leftover after parsing attributes in process `syz.4.353'. [ 314.979809][ T7389] hsr_slave_0: entered promiscuous mode [ 314.980762][ T7389] hsr_slave_1: entered promiscuous mode [ 314.981430][ T7389] debugfs: 'hsr0' already exists in 'hsr' [ 314.981446][ T7389] Cannot create hsr debugfs directory [ 315.412559][ T48] usb 2-1: USB disconnect, device number 8 [ 315.600989][ T7796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.363'. [ 315.601016][ T7796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.363'. [ 315.601036][ T7796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.363'. [ 315.601089][ T7796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.363'. [ 318.053143][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.053223][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.885510][ T7851] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 319.558541][ T7274] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 319.981978][ T7875] __nla_validate_parse: 2 callbacks suppressed [ 319.982013][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'. [ 319.982030][ T7875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.385'. [ 320.805033][ T7274] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 320.905834][ T7274] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 320.966730][ T7274] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 322.125977][ T6538] bridge_slave_1: left allmulticast mode [ 322.125999][ T6538] bridge_slave_1: left promiscuous mode [ 322.126238][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.255732][ T6538] bridge_slave_0: left allmulticast mode [ 322.255760][ T6538] bridge_slave_0: left promiscuous mode [ 322.255943][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.554293][ T5803] Bluetooth: hci0: command 0x0406 tx timeout [ 324.843211][ T6538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.932459][ T6538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.985260][ T6538] bond0 (unregistering): Released all slaves [ 325.447851][ T6538] hsr_slave_0: left promiscuous mode [ 325.464194][ T7952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.411'. [ 325.522177][ T6538] hsr_slave_1: left promiscuous mode [ 325.522897][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.552910][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.502830][ T6538] team0 (unregistering): Port device team_slave_1 removed [ 326.562741][ T6538] team0 (unregistering): Port device team_slave_0 removed [ 328.768713][ T7274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.840301][ T7274] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.860324][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.860467][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.905785][ T6539] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.905899][ T6539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.872222][ T7389] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 330.961602][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 330.977049][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 330.990155][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 331.000071][ T7389] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 331.005579][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 331.006374][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 331.171801][ T7389] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 331.253661][ T7389] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 332.887035][ T8100] tipc: Enabling of bearer rejected, already enabled [ 333.112070][ T5799] Bluetooth: hci3: command tx timeout [ 333.281863][ T5805] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 333.411986][ T5805] usb 2-1: device descriptor read/64, error -71 [ 333.651829][ T5805] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 333.781940][ T5805] usb 2-1: device descriptor read/64, error -71 [ 333.894513][ T5805] usb usb2-port1: attempt power cycle [ 334.421848][ T5805] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 334.442713][ T5805] usb 2-1: device descriptor read/8, error -71 [ 334.608494][ T8056] chnl_net:caif_netlink_parms(): no params data found [ 334.743208][ T5805] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 334.764785][ T5805] usb 2-1: device descriptor read/8, error -71 [ 334.902812][ T5805] usb usb2-port1: unable to enumerate USB device [ 335.165335][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.165477][ T8056] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.165732][ T8056] bridge_slave_0: entered allmulticast mode [ 335.168848][ T8056] bridge_slave_0: entered promiscuous mode [ 335.191880][ T5799] Bluetooth: hci3: command tx timeout [ 335.219602][ T7389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.220767][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.221097][ T8056] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.221405][ T8056] bridge_slave_1: entered allmulticast mode [ 335.263485][ T8056] bridge_slave_1: entered promiscuous mode [ 335.766507][ T8056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.799596][ T8056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.926825][ T7389] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.957077][ T6539] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.957312][ T6539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.215944][ T8056] team0: Port device team_slave_0 added [ 336.287229][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.287381][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.317310][ T8056] team0: Port device team_slave_1 added [ 336.317665][ T2859] bridge_slave_1: left allmulticast mode [ 336.317690][ T2859] bridge_slave_1: left promiscuous mode [ 336.319656][ T2859] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.445696][ T2859] bridge_slave_0: left allmulticast mode [ 336.445730][ T2859] bridge_slave_0: left promiscuous mode [ 336.445993][ T2859] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.542347][ T1564] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 336.695319][ T1564] usb 2-1: Using ep0 maxpacket: 8 [ 336.697210][ T1564] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 336.697239][ T1564] usb 2-1: config 179 has no interface number 0 [ 336.697289][ T1564] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 336.697317][ T1564] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 336.697345][ T1564] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 336.697370][ T1564] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 336.697394][ T1564] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 336.697448][ T1564] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 336.697471][ T1564] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.722430][ T8180] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 336.745710][ T1564] xpad 2-1:179.65: probe with driver xpad failed with error -5 [ 337.088065][ T5876] usb 2-1: USB disconnect, device number 13 [ 337.196587][ T5799] Bluetooth: Frame is too long (len 12, expected len 4) [ 337.274963][ T5803] Bluetooth: hci3: command tx timeout [ 338.703612][ T2859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.742670][ T2859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.764002][ T2859] bond0 (unregistering): Released all slaves [ 339.121521][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.121534][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.121550][ T8056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.183975][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.183993][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.184022][ T8056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.392244][ T5803] Bluetooth: hci3: command tx timeout [ 340.705872][ T2859] hsr_slave_0: left promiscuous mode [ 340.753718][ T2859] hsr_slave_1: left promiscuous mode [ 340.754924][ T2859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.772705][ T2859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.100267][ T5803] Bluetooth: Frame is too long (len 12, expected len 4) [ 343.311798][ T5805] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 343.342515][ T2859] team0 (unregistering): Port device team_slave_1 removed [ 343.393288][ T2859] team0 (unregistering): Port device team_slave_0 removed [ 343.654196][ T5805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.654248][ T5805] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 343.654272][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.673309][ T5805] usb 2-1: config 0 descriptor?? [ 343.865474][ T5805] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 343.976686][ T8056] hsr_slave_0: entered promiscuous mode [ 343.978139][ T8056] hsr_slave_1: entered promiscuous mode [ 343.979173][ T8056] debugfs: 'hsr0' already exists in 'hsr' [ 343.979198][ T8056] Cannot create hsr debugfs directory [ 345.596982][ T7389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.034202][ T5876] usb 2-1: USB disconnect, device number 14 [ 346.541823][ T5876] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 346.702286][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 346.732227][ T5876] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 346.732258][ T5876] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.732278][ T5876] usb 2-1: config 0 has no interface number 0 [ 346.732324][ T5876] usb 2-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 346.790563][ T5876] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 346.790597][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.790618][ T5876] usb 2-1: Product: syz [ 346.790633][ T5876] usb 2-1: Manufacturer: syz [ 346.790648][ T5876] usb 2-1: SerialNumber: syz [ 346.834687][ T5876] usb 2-1: config 0 descriptor?? [ 346.843918][ T7389] veth0_vlan: entered promiscuous mode [ 346.921243][ T7389] veth1_vlan: entered promiscuous mode [ 347.278870][ T8056] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 347.308287][ T48] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 347.332210][ T8056] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 347.382865][ T8056] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 347.408494][ T8056] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 347.471795][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 347.481052][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.481103][ T48] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 347.481127][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.534200][ T48] usb 5-1: config 0 descriptor?? [ 347.539363][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 347.539931][ T48] hub 5-1:0.0: bad descriptor, ignoring hub [ 347.539966][ T48] hub 5-1:0.0: probe with driver hub failed with error -5 [ 347.559365][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 347.564265][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 347.567963][ T5799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 347.568741][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 347.614660][ T48] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 347.866002][ T48] usb 5-1: USB disconnect, device number 8 [ 348.713016][ T5799] Bluetooth: Frame is too long (len 12, expected len 4) [ 349.450537][ T48] usb 2-1: USB disconnect, device number 15 [ 349.672665][ T5799] Bluetooth: hci4: command tx timeout [ 349.819906][ T8426] tmpfs: Bad value for 'mpol' [ 350.142100][ T48] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 350.288098][ T8377] chnl_net:caif_netlink_parms(): no params data found [ 350.292570][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 350.295670][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.295699][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.295736][ T48] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 350.295756][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.358390][ T48] usb 5-1: config 0 descriptor?? [ 350.381360][ T48] hub 5-1:0.0: USB hub found [ 350.583147][ T48] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 350.596929][ T48] usbhid 5-1:0.0: can't add hid device: -71 [ 350.597063][ T48] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 350.644946][ T48] usb 5-1: USB disconnect, device number 9 [ 351.183046][ T8056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.722193][ T8377] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.722325][ T8377] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.722548][ T8377] bridge_slave_0: entered allmulticast mode [ 351.751893][ T5799] Bluetooth: hci5: command 0x0406 tx timeout [ 351.751932][ T5799] Bluetooth: hci4: command tx timeout [ 351.775131][ T8377] bridge_slave_0: entered promiscuous mode [ 351.803904][ T8377] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.804045][ T8377] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.804299][ T8377] bridge_slave_1: entered allmulticast mode [ 351.821936][ T8377] bridge_slave_1: entered promiscuous mode [ 352.550416][ T8377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.582816][ T8056] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.619935][ T8377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.859543][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.864128][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.078457][ T8377] team0: Port device team_slave_0 added [ 353.119554][ T8377] team0: Port device team_slave_1 added [ 353.189032][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.214064][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.349884][ T8489] tmpfs: Bad value for 'mpol' [ 353.515501][ T8377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.515516][ T8377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.515532][ T8377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.573371][ T8377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.573385][ T8377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.573401][ T8377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.687178][ T6786] bridge_slave_1: left allmulticast mode [ 353.687201][ T6786] bridge_slave_1: left promiscuous mode [ 353.687365][ T6786] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.782837][ T6786] bridge_slave_0: left allmulticast mode [ 353.782860][ T6786] bridge_slave_0: left promiscuous mode [ 353.783024][ T6786] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.831891][ T5803] Bluetooth: hci4: command tx timeout [ 355.060372][ T6786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.329639][ T6786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.365232][ T6786] bond0 (unregistering): Released all slaves [ 355.912206][ T5803] Bluetooth: hci4: command tx timeout [ 356.399665][ T8526] netlink: 36 bytes leftover after parsing attributes in process `syz.1.617'. [ 356.399690][ T8526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.617'. [ 356.399708][ T8526] netlink: 36 bytes leftover after parsing attributes in process `syz.1.617'. [ 356.399750][ T8526] netlink: 36 bytes leftover after parsing attributes in process `syz.1.617'. [ 356.577832][ T8377] hsr_slave_0: entered promiscuous mode [ 356.579357][ T8377] hsr_slave_1: entered promiscuous mode [ 356.580515][ T8377] debugfs: 'hsr0' already exists in 'hsr' [ 356.580541][ T8377] Cannot create hsr debugfs directory [ 356.882595][ T6786] hsr_slave_0: left promiscuous mode [ 356.946770][ T6786] hsr_slave_1: left promiscuous mode [ 356.947944][ T6786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.982710][ T6786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.764514][ T6786] veth1_vlan: left promiscuous mode [ 358.764745][ T6786] veth0_vlan: left promiscuous mode [ 359.683272][ T6786] team0 (unregistering): Port device team_slave_1 removed [ 359.745343][ T6786] team0 (unregistering): Port device team_slave_0 removed [ 360.599410][ T8582] capability: warning: `syz.1.637' uses deprecated v2 capabilities in a way that may be insecure [ 360.762891][ T8542] tipc: Enabling of bearer rejected, already enabled [ 361.091891][ T5787] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 361.254930][ T5787] usb 5-1: device descriptor read/64, error -71 [ 361.491828][ T5787] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 361.621872][ T5787] usb 5-1: device descriptor read/64, error -71 [ 361.732274][ T5787] usb usb5-port1: attempt power cycle [ 361.918961][ T8613] tipc: Enabling of bearer rejected, already enabled [ 362.082001][ T5787] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 362.105863][ T5787] usb 5-1: device descriptor read/8, error -71 [ 362.214110][ T8056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.445017][ T5787] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 362.483362][ T5787] usb 5-1: device descriptor read/8, error -71 [ 362.730608][ T5787] usb usb5-port1: unable to enumerate USB device [ 364.059225][ T8651] netlink: 36 bytes leftover after parsing attributes in process `syz.1.665'. [ 364.059253][ T8651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.665'. [ 364.059272][ T8651] netlink: 36 bytes leftover after parsing attributes in process `syz.1.665'. [ 364.059333][ T8651] netlink: 36 bytes leftover after parsing attributes in process `syz.1.665'. [ 364.182750][ T8377] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 364.360792][ T8377] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 365.154157][ T8377] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 365.331754][ T8377] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 366.055063][ T8056] veth0_vlan: entered promiscuous mode [ 366.142513][ T8056] veth1_vlan: entered promiscuous mode [ 367.285252][ T8683] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.676'. [ 367.356033][ T48] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 367.489354][ T8056] veth0_macvtap: entered promiscuous mode [ 367.493791][ T48] usb 5-1: device descriptor read/64, error -71 [ 367.567956][ T8056] veth1_macvtap: entered promiscuous mode [ 367.647264][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.694248][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.731155][ T8377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.757503][ T6539] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.760588][ T6539] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.761974][ T48] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 367.765860][ T6539] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.771822][ T6539] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.873144][ T8377] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.897879][ T48] usb 5-1: device descriptor read/64, error -71 [ 368.012683][ T48] usb usb5-port1: attempt power cycle [ 368.043214][ T1211] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.061857][ T1211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.145848][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.146007][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.264113][ T6539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.264137][ T6539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.392264][ T48] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 368.412776][ T48] usb 5-1: device descriptor read/8, error -71 [ 368.468489][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.468513][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.653792][ T48] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 368.675531][ T48] usb 5-1: device descriptor read/8, error -71 [ 368.785092][ T48] usb usb5-port1: unable to enumerate USB device [ 369.263986][ T8377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.528994][ T8732] tmpfs: Bad value for 'mpol' [ 370.044827][ T8738] netlink: 36 bytes leftover after parsing attributes in process `syz.1.681'. [ 370.044853][ T8738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.681'. [ 370.044872][ T8738] netlink: 36 bytes leftover after parsing attributes in process `syz.1.681'. [ 370.044914][ T8738] netlink: 36 bytes leftover after parsing attributes in process `syz.1.681'. [ 370.761830][ T5787] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 370.911819][ T5787] usb 2-1: Using ep0 maxpacket: 8 [ 370.915447][ T5787] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 370.915477][ T5787] usb 2-1: config 179 has no interface number 0 [ 370.915528][ T5787] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 370.915557][ T5787] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 370.915585][ T5787] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 370.915612][ T5787] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 370.915640][ T5787] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 370.915686][ T5787] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 370.915709][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.064312][ T8754] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 371.427427][ T5853] usb 2-1: USB disconnect, device number 16 [ 371.427440][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 371.427508][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 373.267715][ T8377] veth0_vlan: entered promiscuous mode [ 373.291035][ T8377] veth1_vlan: entered promiscuous mode [ 373.549121][ T8780] tmpfs: Bad value for 'mpol' [ 374.023455][ T8377] veth0_macvtap: entered promiscuous mode [ 374.062986][ T8377] veth1_macvtap: entered promiscuous mode [ 374.195904][ T8377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.218529][ T8377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.256736][ T1211] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.257024][ T1211] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.257066][ T1211] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.257104][ T1211] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.906746][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.906769][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.130090][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.130113][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.812434][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.812515][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.261835][ T5853] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 379.421799][ T5853] usb 2-1: Using ep0 maxpacket: 32 [ 379.424251][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.424285][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.424327][ T5853] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 379.424351][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.484596][ T5853] usb 2-1: config 0 descriptor?? [ 379.509029][ T5853] hub 2-1:0.0: USB hub found [ 379.712666][ T5853] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 379.749040][ T5853] usbhid 2-1:0.0: can't add hid device: -71 [ 379.749189][ T5853] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 379.782760][ T5853] usb 2-1: USB disconnect, device number 17 [ 380.985071][ T8878] netlink: 52 bytes leftover after parsing attributes in process `syz.5.733'. [ 385.132361][ T8950] random: crng reseeded on system resumption [ 385.222775][ T8952] netlink: 32 bytes leftover after parsing attributes in process `syz.1.756'. [ 385.224191][ T8950] Unrecognized hibernate image header format! [ 385.224205][ T8950] PM: hibernation: Image mismatch: architecture specific data [ 386.562606][ T8965] netlink: 52 bytes leftover after parsing attributes in process `syz.5.760'. [ 386.586060][ T8968] tmpfs: Unknown parameter 'usrquota_' [ 387.150699][ T8984] ubi31: attaching mtd0 [ 387.177439][ T8984] ubi31: scanning is finished [ 387.841477][ T5803] Bluetooth: Frame is too long (len 12, expected len 4) [ 388.256492][ T8984] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 389.245776][ T5803] Bluetooth: hci5: unexpected event for opcode 0x0c20 [ 390.462469][ T9023] netlink: 36 bytes leftover after parsing attributes in process `syz.1.776'. [ 393.215918][ T5803] Bluetooth: hci5: unexpected event for opcode 0x0c20 [ 395.291068][ T9108] max out of range [ 395.411522][ T5803] block nbd3: Receive control failed (result -32) [ 395.502653][ T9106] nbd3: detected capacity change from 0 to 127 [ 395.542935][ T9114] block nbd3: Dead connection, failed to find a fallback [ 395.542975][ T9114] block nbd3: shutting down sockets [ 395.542989][ T9114] blk_print_req_error: 138 callbacks suppressed [ 395.543001][ T9114] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 395.543028][ T9114] buffer_io_error: 138 callbacks suppressed [ 395.543038][ T9114] Buffer I/O error on dev nbd3, logical block 0, async page read [ 395.543100][ T9114] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 395.543123][ T9114] Buffer I/O error on dev nbd3, logical block 1, async page read [ 395.543170][ T9114] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 395.543193][ T9114] Buffer I/O error on dev nbd3, logical block 2, async page read [ 395.543241][ T9114] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 395.543263][ T9114] Buffer I/O error on dev nbd3, logical block 3, async page read [ 395.543319][ T9114] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 395.543341][ T9114] Buffer I/O error on dev nbd3, logical block 0, async page read [ 395.543387][ T9114] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 395.543410][ T9114] Buffer I/O error on dev nbd3, logical block 1, async page read [ 395.543456][ T9114] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 395.543478][ T9114] Buffer I/O error on dev nbd3, logical block 2, async page read [ 395.549013][ T9114] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 395.549050][ T9114] Buffer I/O error on dev nbd3, logical block 3, async page read [ 395.549143][ T9114] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 395.549170][ T9114] Buffer I/O error on dev nbd3, logical block 0, async page read [ 395.549224][ T9114] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 395.549249][ T9114] Buffer I/O error on dev nbd3, logical block 1, async page read [ 395.550074][ T9114] ldm_validate_partition_table(): Disk read failed. [ 395.550461][ T9114] Dev nbd3: unable to read RDB block 0 [ 395.550969][ T9114] nbd3: unable to read partition table [ 395.594735][ T9114] ldm_validate_partition_table(): Disk read failed. [ 395.595366][ T9114] Dev nbd3: unable to read RDB block 0 [ 395.596146][ T9114] nbd3: unable to read partition table [ 395.964716][ T5803] Bluetooth: min 0 < 6 [ 397.994239][ T5803] block nbd4: Receive control failed (result -32) [ 397.997850][ T5803] Bluetooth: hci4: command tx timeout [ 398.059582][ T9154] nbd4: detected capacity change from 0 to 127 [ 398.086517][ T9114] block nbd4: Dead connection, failed to find a fallback [ 398.086547][ T9114] block nbd4: shutting down sockets [ 398.088188][ T9114] ldm_validate_partition_table(): Disk read failed. [ 398.088586][ T9114] Dev nbd4: unable to read RDB block 0 [ 398.089087][ T9114] nbd4: unable to read partition table [ 398.158171][ T9114] ldm_validate_partition_table(): Disk read failed. [ 398.158973][ T9114] Dev nbd4: unable to read RDB block 0 [ 398.159941][ T9114] nbd4: unable to read partition table [ 398.821905][ T5787] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 398.996511][ T5787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.996572][ T5787] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 398.996620][ T5787] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 398.996645][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.046376][ T5787] usb 2-1: config 0 descriptor?? [ 399.080143][ T5787] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 401.257898][ T9272] nfs: Unknown parameter 'ÿÿÿÿ' [ 401.283988][ T9272] comedi comedi0: comedi_config --init_data is deprecated [ 401.615262][ T5853] usb 2-1: USB disconnect, device number 18 [ 402.491845][ T5999] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 402.651770][ T5999] usb 6-1: Using ep0 maxpacket: 32 [ 402.654415][ T5999] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 402.654446][ T5999] usb 6-1: config 0 has no interface number 0 [ 402.654494][ T5999] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 402.657576][ T5999] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 402.657605][ T5999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.657626][ T5999] usb 6-1: Product: syz [ 402.657642][ T5999] usb 6-1: Manufacturer: syz [ 402.657657][ T5999] usb 6-1: SerialNumber: syz [ 402.728184][ T5999] usb 6-1: config 0 descriptor?? [ 402.787879][ T5999] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 402.787929][ T5999] em28xx 6-1:0.132: Video interface 132 found: [ 403.187559][ T5999] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 403.657006][ T5999] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 403.657044][ T5999] em28xx 6-1:0.132: board has no eeprom [ 403.731801][ T5999] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 403.731822][ T5999] em28xx 6-1:0.132: analog set to bulk mode. [ 403.736328][ T1564] em28xx 6-1:0.132: Registering V4L2 extension [ 403.871752][ T5853] usb 6-1: USB disconnect, device number 4 [ 403.874097][ T5853] em28xx 6-1:0.132: Disconnecting em28xx [ 403.894255][ T1564] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 404.050773][ T1564] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 404.050799][ T1564] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 404.050813][ T1564] em28xx 6-1:0.132: No AC97 audio processor [ 404.118256][ T1564] usb 6-1: Decoder not found [ 404.118279][ T1564] em28xx 6-1:0.132: failed to create media graph [ 404.118320][ T1564] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 404.164536][ T1564] em28xx 6-1:0.132: Remote control support is not available for this card. [ 404.164603][ T5853] em28xx 6-1:0.132: Closing input extension [ 404.238960][ T5853] em28xx 6-1:0.132: Freeing device [ 405.677480][ T9362] ubi31: attaching mtd0 [ 405.714510][ T9362] ubi31: scanning is finished [ 405.866284][ T9161] Bluetooth: Frame is too long (len 12, expected len 4) [ 406.596306][ T9373] tipc: Enabling of bearer rejected, already enabled [ 406.720816][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 406.747439][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 406.749510][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 406.750897][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 406.752529][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 406.994681][ T9362] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 407.742118][ T9400] nfs: Unknown parameter 'ÿÿÿÿ' [ 407.745055][ T9400] comedi comedi0: comedi_config --init_data is deprecated [ 407.941865][ T8148] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 408.070217][ T9374] chnl_net:caif_netlink_parms(): no params data found [ 408.124096][ T8148] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.124133][ T8148] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 408.124160][ T8148] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 408.124174][ T8148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.131188][ T8148] usb 2-1: config 0 descriptor?? [ 408.197889][ T8148] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 408.499564][ T9424] tipc: Enabling of bearer rejected, already enabled [ 408.791832][ T5799] Bluetooth: hci2: command tx timeout [ 408.906725][ T1171] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.871226][ T9374] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.871469][ T9374] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.875806][ T9374] bridge_slave_0: entered allmulticast mode [ 409.879432][ T9374] bridge_slave_0: entered promiscuous mode [ 409.884433][ T9374] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.884735][ T9374] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.884935][ T9374] bridge_slave_1: entered allmulticast mode [ 409.888198][ T9374] bridge_slave_1: entered promiscuous mode [ 410.008679][ T9374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.030310][ T9374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.504352][ T9374] team0: Port device team_slave_0 added [ 410.705640][ T8148] usb 2-1: USB disconnect, device number 19 [ 410.761592][ T1171] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.815294][ T9374] team0: Port device team_slave_1 added [ 410.815371][ T9467] tipc: Enabling of bearer rejected, already enabled [ 410.874361][ T5799] Bluetooth: hci2: command tx timeout [ 410.898607][ T5799] Bluetooth: min 0 < 6 [ 410.966153][ T9374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.966169][ T9374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.966192][ T9374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.072192][ T9161] Bluetooth: hci2: command tx timeout [ 413.072429][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 413.215354][ T1171] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.345590][ T9374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.345611][ T9374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.345640][ T9374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.723862][ T9374] hsr_slave_0: entered promiscuous mode [ 413.836639][ T9502] ubi31: attaching mtd0 [ 413.865955][ T9502] ubi31: scanning is finished [ 414.032449][ T9374] hsr_slave_1: entered promiscuous mode [ 414.033540][ T9374] debugfs: 'hsr0' already exists in 'hsr' [ 414.033567][ T9374] Cannot create hsr debugfs directory [ 414.765099][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 414.780369][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 414.789759][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 414.791384][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 414.801795][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 414.963800][ T9502] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 415.113058][ T9161] Bluetooth: hci2: command tx timeout [ 416.072370][ T1171] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.387973][ T9161] block nbd5: Receive control failed (result -32) [ 416.504047][ T9516] nbd5: detected capacity change from 0 to 127 [ 416.507337][ T9114] block nbd5: Dead connection, failed to find a fallback [ 416.507364][ T9114] block nbd5: shutting down sockets [ 416.507379][ T9114] blk_print_req_error: 286 callbacks suppressed [ 416.507392][ T9114] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 416.507418][ T9114] buffer_io_error: 286 callbacks suppressed [ 416.507430][ T9114] Buffer I/O error on dev nbd5, logical block 0, async page read [ 416.507497][ T9114] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 416.507522][ T9114] Buffer I/O error on dev nbd5, logical block 1, async page read [ 416.507578][ T9114] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 416.507603][ T9114] Buffer I/O error on dev nbd5, logical block 2, async page read [ 416.507656][ T9114] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 416.507680][ T9114] Buffer I/O error on dev nbd5, logical block 3, async page read [ 416.507747][ T9114] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 416.507773][ T9114] Buffer I/O error on dev nbd5, logical block 0, async page read [ 416.507826][ T9114] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 416.507857][ T9114] Buffer I/O error on dev nbd5, logical block 1, async page read [ 416.507909][ T9114] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 416.507933][ T9114] Buffer I/O error on dev nbd5, logical block 2, async page read [ 416.507983][ T9114] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 416.508007][ T9114] Buffer I/O error on dev nbd5, logical block 3, async page read [ 416.508066][ T9114] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 416.508100][ T9114] Buffer I/O error on dev nbd5, logical block 0, async page read [ 416.508157][ T9114] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 416.508182][ T9114] Buffer I/O error on dev nbd5, logical block 1, async page read [ 416.509182][ T9114] ldm_validate_partition_table(): Disk read failed. [ 416.509877][ T9114] Dev nbd5: unable to read RDB block 0 [ 416.510814][ T9114] nbd5: unable to read partition table [ 416.576324][ T9114] ldm_validate_partition_table(): Disk read failed. [ 416.578207][ T9114] Dev nbd5: unable to read RDB block 0 [ 416.589136][ T9114] nbd5: unable to read partition table [ 416.693025][ T9526] tipc: Enabling of bearer rejected, already enabled [ 416.958720][ T9161] Bluetooth: hci3: command tx timeout [ 419.032827][ T9161] Bluetooth: hci3: command tx timeout [ 419.474462][ T1171] bridge_slave_1: left allmulticast mode [ 419.474494][ T1171] bridge_slave_1: left promiscuous mode [ 419.474873][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.561852][ T8148] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 419.613585][ T1171] bridge_slave_0: left allmulticast mode [ 419.613620][ T1171] bridge_slave_0: left promiscuous mode [ 419.613914][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.721802][ T8148] usb 6-1: Using ep0 maxpacket: 8 [ 419.737634][ T8148] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 419.737668][ T8148] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.830615][ T8148] pvrusb2: Hardware description: Terratec Grabster AV400 [ 419.830638][ T8148] pvrusb2: ********** [ 419.830645][ T8148] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 419.830657][ T8148] pvrusb2: Important functionality might not be entirely working. [ 419.830667][ T8148] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 419.830679][ T8148] pvrusb2: ********** [ 420.027138][ T2358] pvrusb2: Invalid write control endpoint [ 420.216183][ T5787] usb 6-1: USB disconnect, device number 5 [ 420.378352][ T2358] pvrusb2: Invalid write control endpoint [ 420.378370][ T2358] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 420.378379][ T2358] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 420.378387][ T2358] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 420.378397][ T2358] pvrusb2: Device being rendered inoperable [ 420.415140][ T2358] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 420.415205][ T2358] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 420.439560][ T2358] pvrusb2: Attached sub-driver cx25840 [ 420.439576][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 420.439586][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 421.084130][ T1171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.111817][ T9161] Bluetooth: hci3: command tx timeout [ 421.131828][ T8148] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 421.166378][ T1171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.223214][ T1171] bond0 (unregistering): Released all slaves [ 421.289879][ T8148] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 421.289913][ T8148] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.289933][ T8148] usb 6-1: Product: syz [ 421.289947][ T8148] usb 6-1: Manufacturer: syz [ 421.289962][ T8148] usb 6-1: SerialNumber: syz [ 421.398979][ T8148] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 421.724670][ T31] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 422.168151][ T9] usb 6-1: USB disconnect, device number 6 [ 422.957401][ T31] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 422.975782][ T31] ath9k_htc: Failed to initialize the device [ 423.061347][ T9651] autofs: Bad value for 'fd' [ 423.194482][ T9161] Bluetooth: hci3: command tx timeout [ 423.863415][ T9] usb 6-1: ath9k_htc: USB layer deinitialized [ 424.051820][ T5787] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 424.245708][ T5787] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 424.245747][ T5787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 424.252540][ T5787] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 424.252571][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.252590][ T5787] usb 2-1: Product: syz [ 424.252604][ T5787] usb 2-1: Manufacturer: syz [ 424.252617][ T5787] usb 2-1: SerialNumber: syz [ 424.279221][ T5787] usb 2-1: config 0 descriptor?? [ 424.382582][ T5787] streamzap 2-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 424.391531][ T9669] Device name cannot be null; rc = [-22] [ 424.487870][ T1171] hsr_slave_0: left promiscuous mode [ 424.528264][ T31] usb 2-1: USB disconnect, device number 20 [ 424.539304][ T1171] hsr_slave_1: left promiscuous mode [ 424.540533][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.540559][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.592476][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.592497][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.740384][ T1171] veth1_macvtap: left promiscuous mode [ 424.740457][ T1171] veth0_macvtap: left promiscuous mode [ 424.740609][ T1171] veth1_vlan: left promiscuous mode [ 424.740714][ T1171] veth0_vlan: left promiscuous mode [ 426.386553][ T1171] team0 (unregistering): Port device team_slave_1 removed [ 426.463070][ T1171] team0 (unregistering): Port device team_slave_0 removed [ 426.798792][ T9507] chnl_net:caif_netlink_parms(): no params data found [ 427.201557][ T9752] autofs: Unknown parameter '0x0000000000000000' [ 427.973490][ T9507] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.973818][ T9507] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.974073][ T9507] bridge_slave_0: entered allmulticast mode [ 427.977153][ T9507] bridge_slave_0: entered promiscuous mode [ 428.008669][ T9507] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.008921][ T9507] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.009181][ T9507] bridge_slave_1: entered allmulticast mode [ 428.062294][ T9507] bridge_slave_1: entered promiscuous mode [ 428.390181][ T9507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.403968][ T9507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.668445][ T9507] team0: Port device team_slave_0 added [ 428.676585][ T9507] team0: Port device team_slave_1 added [ 428.812341][ T9771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1013'. [ 429.684894][ T9507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.684921][ T9507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.684949][ T9507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.687716][ T9507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.687730][ T9507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.687756][ T9507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.731318][ T9374] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 429.933677][ T9374] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 430.449292][ T9374] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 430.583143][ T9799] autofs: Unknown parameter '0x0000000000000000' [ 431.496614][ T9507] hsr_slave_0: entered promiscuous mode [ 431.501368][ T9507] hsr_slave_1: entered promiscuous mode [ 431.515681][ T9507] debugfs: 'hsr0' already exists in 'hsr' [ 431.515708][ T9507] Cannot create hsr debugfs directory [ 431.539605][ T9374] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 431.976019][ T9808] nfs: Unknown parameter 'ÿÿÿÿ' [ 432.023246][ T9808] comedi comedi0: comedi_config --init_data is deprecated [ 432.865262][ T9820] binder: BINDER_SET_CONTEXT_MGR already set [ 432.865274][ T9820] binder: 9818:9820 ioctl 4018620d 200000004a80 returned -16 [ 435.079223][ T9374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.160041][ T9374] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.414678][ T9865] binder: BINDER_SET_CONTEXT_MGR already set [ 435.414851][ T9865] binder: 9860:9865 ioctl 4018620d 200000004a80 returned -16 [ 435.868370][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.868586][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.660874][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.661020][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.832320][ T9882] Device name cannot be null; rc = [-22] [ 438.325021][ T5805] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 438.475021][ T5805] usb 2-1: Using ep0 maxpacket: 32 [ 438.478833][ T5805] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 438.478864][ T5805] usb 2-1: config 0 has no interface number 0 [ 438.478924][ T5805] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 438.494361][ T5805] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 438.494395][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.494415][ T5805] usb 2-1: Product: syz [ 438.494430][ T5805] usb 2-1: Manufacturer: syz [ 438.494445][ T5805] usb 2-1: SerialNumber: syz [ 438.519379][ T9507] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 438.568077][ T5805] usb 2-1: config 0 descriptor?? [ 438.585519][ T5805] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 438.585558][ T5805] em28xx 2-1:0.132: Video interface 132 found: [ 438.634704][ T9507] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 438.710827][ T9507] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 438.770251][ T9507] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 438.999969][ T5805] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 439.699320][ T5805] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 439.699394][ T5805] em28xx 2-1:0.132: board has no eeprom [ 439.764225][ T5805] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 439.764270][ T5805] em28xx 2-1:0.132: analog set to bulk mode. [ 439.845062][ T5999] em28xx 2-1:0.132: Registering V4L2 extension [ 439.863146][ T5805] usb 2-1: USB disconnect, device number 21 [ 439.865768][ T5805] em28xx 2-1:0.132: Disconnecting em28xx [ 439.916560][ T9374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.377688][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.379670][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.947554][ T9507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.102076][ T9507] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.185056][ T9955] binder: BINDER_SET_CONTEXT_MGR already set [ 441.185133][ T9955] binder: 9952:9955 ioctl 4018620d 200000004a80 returned -16 [ 441.670299][ T1211] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.672607][ T1211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.718088][ T1415] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.718352][ T1415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.778653][ T5999] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 441.778681][ T5999] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 441.778695][ T5999] em28xx 2-1:0.132: No AC97 audio processor [ 441.805380][ T5999] usb 2-1: Decoder not found [ 441.805403][ T5999] em28xx 2-1:0.132: failed to create media graph [ 441.805443][ T5999] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 441.807868][ T5999] em28xx 2-1:0.132: Remote control support is not available for this card. [ 441.807932][ T5805] em28xx 2-1:0.132: Closing input extension [ 441.869486][ T5805] em28xx 2-1:0.132: Freeing device [ 442.254991][ T5805] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 442.465367][ T5805] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 442.465400][ T5805] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 442.465420][ T5805] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 442.465475][ T5805] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 442.465503][ T5805] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 442.468998][ T5805] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 442.469028][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 442.469049][ T5805] usb 2-1: Product: syz [ 442.469064][ T5805] usb 2-1: Manufacturer: syz [ 442.614387][ T5805] cdc_wdm 2-1:1.0: skipping garbage [ 442.614411][ T5805] cdc_wdm 2-1:1.0: skipping garbage [ 442.644975][ T5805] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 442.645000][ T5805] cdc_wdm 2-1:1.0: Unknown control protocol [ 442.864392][ T9374] veth0_vlan: entered promiscuous mode [ 442.897503][ T9374] veth1_vlan: entered promiscuous mode [ 443.073451][ T9374] veth0_macvtap: entered promiscuous mode [ 443.103834][ T9374] veth1_macvtap: entered promiscuous mode [ 443.114648][ T8287] usb 2-1: USB disconnect, device number 22 [ 443.261256][ T9374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.325544][ T9374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.358685][ T42] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.358931][ T42] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.391282][ T42] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.402630][ T42] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.441135][ T9507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.045534][ T1211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.045559][ T1211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.193035][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.193059][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.528479][T10017] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1073'. [ 444.579086][T10017] ptrace attach of "./syz-executor exec"[6644] was attempted by "./syz-executor exec"[10017] [ 445.032410][ T5807] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 445.107464][ T9507] veth0_vlan: entered promiscuous mode [ 445.172893][ T9507] veth1_vlan: entered promiscuous mode [ 445.201785][ T5807] usb 2-1: Using ep0 maxpacket: 32 [ 445.204170][ T5807] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 445.204199][ T5807] usb 2-1: config 0 has no interface number 0 [ 445.204249][ T5807] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 445.209630][ T5807] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 445.209661][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.209682][ T5807] usb 2-1: Product: syz [ 445.209697][ T5807] usb 2-1: Manufacturer: syz [ 445.209711][ T5807] usb 2-1: SerialNumber: syz [ 445.301706][ T5807] usb 2-1: config 0 descriptor?? [ 445.362909][ T5807] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 445.362935][ T5807] em28xx 2-1:0.132: Video interface 132 found: [ 445.598909][ T9507] veth0_macvtap: entered promiscuous mode [ 445.691833][ T5805] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 445.709122][ T9507] veth1_macvtap: entered promiscuous mode [ 445.729247][ T5807] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 445.811580][ T9507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.855428][ T5805] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 445.855461][ T5805] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 445.855481][ T5805] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 445.855606][ T5805] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 445.855643][ T5805] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 445.867764][ T5805] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 445.867845][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 445.867872][ T5805] usb 6-1: Product: syz [ 445.867886][ T5805] usb 6-1: Manufacturer: syz [ 445.987023][ T5805] cdc_wdm 6-1:1.0: skipping garbage [ 445.987612][ T5805] cdc_wdm 6-1:1.0: skipping garbage [ 446.020975][ T9507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.127722][ T5805] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 446.128465][ T5805] cdc_wdm 6-1:1.0: Unknown control protocol [ 446.149669][ T5807] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 446.149694][ T5807] em28xx 2-1:0.132: board has no eeprom [ 446.207557][ T9956] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.210428][ T9956] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.211390][ T9956] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.211436][ T9956] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.426919][ T5807] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 446.426953][ T5807] em28xx 2-1:0.132: analog set to bulk mode. [ 446.432250][ T5805] em28xx 2-1:0.132: Registering V4L2 extension [ 446.454539][ T5999] usb 6-1: USB disconnect, device number 7 [ 446.608996][T10067] autofs: Unknown parameter 'fd0x0000000000000000' [ 447.527675][ T5807] usb 2-1: USB disconnect, device number 23 [ 447.534410][ T5807] em28xx 2-1:0.132: Disconnecting em28xx [ 447.781755][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.781777][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.881069][ T6539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.881094][ T6539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.149410][ T5805] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 448.149428][ T5805] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 448.149436][ T5805] em28xx 2-1:0.132: No AC97 audio processor [ 448.156199][ T5805] usb 2-1: Decoder not found [ 448.156219][ T5805] em28xx 2-1:0.132: failed to create media graph [ 448.156255][ T5805] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 448.174204][ T5805] em28xx 2-1:0.132: Remote control support is not available for this card. [ 448.174606][ T5807] em28xx 2-1:0.132: Closing input extension [ 448.301441][ T5807] em28xx 2-1:0.132: Freeing device [ 449.619190][T10105] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1095'. [ 449.634749][T10105] ptrace attach of "./syz-executor exec"[9507] was attempted by "./syz-executor exec"[10105] [ 449.975235][ T5799] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 450.000335][ T5799] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 450.002697][ T5799] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 450.003935][ T5799] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 450.005083][ T5799] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 452.392648][T10132] netlink: 'syz.5.1101': attribute type 1 has an invalid length. [ 452.392671][T10132] netlink: 1696 bytes leftover after parsing attributes in process `syz.5.1101'. [ 453.112716][ T5799] Bluetooth: hci5: command tx timeout [ 453.268784][T10129] netlink: 'syz.5.1101': attribute type 3 has an invalid length. [ 453.268845][T10129] netlink: 666 bytes leftover after parsing attributes in process `syz.5.1101'. [ 453.961953][T10129] netlink: 'syz.5.1101': attribute type 11 has an invalid length. [ 453.961969][T10129] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1101'. [ 454.006692][T10147] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1105'. [ 454.010520][T10147] ptrace attach of "./syz-executor exec"[6644] was attempted by "./syz-executor exec"[10147] [ 454.162042][ T8148] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 454.316246][ T8148] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 454.316267][ T8148] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 454.316279][ T8148] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 454.316310][ T8148] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 454.316325][ T8148] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 454.317950][ T8148] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 454.317967][ T8148] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 454.317979][ T8148] usb 10-1: Product: syz [ 454.317987][ T8148] usb 10-1: Manufacturer: syz [ 454.438753][ T8148] cdc_wdm 10-1:1.0: skipping garbage [ 454.438777][ T8148] cdc_wdm 10-1:1.0: skipping garbage [ 454.479396][ T8148] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 454.479423][ T8148] cdc_wdm 10-1:1.0: Unknown control protocol [ 455.478034][ T5799] Bluetooth: hci5: command tx timeout [ 455.632262][T10163] random: crng reseeded on system resumption [ 455.803737][ T8148] usb 10-1: USB disconnect, device number 2 [ 456.249140][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.535822][ T5799] Bluetooth: hci5: command tx timeout [ 457.799834][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.922349][T10198] random: crng reseeded on system resumption [ 458.524190][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.592662][ T5799] Bluetooth: hci5: command tx timeout [ 460.323752][T10222] ALSA: mixer_oss: invalid OSS volume 'M' [ 460.741162][T10241] random: crng reseeded on system resumption [ 460.756743][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.063532][T10108] chnl_net:caif_netlink_parms(): no params data found [ 463.016126][T10108] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.016268][T10108] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.016532][T10108] bridge_slave_0: entered allmulticast mode [ 463.028891][T10108] bridge_slave_0: entered promiscuous mode [ 463.076214][T10108] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.076541][T10108] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.077297][T10108] bridge_slave_1: entered allmulticast mode [ 463.192916][T10108] bridge_slave_1: entered promiscuous mode [ 463.442579][T10288] random: crng reseeded on system resumption [ 463.716826][T10108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.243376][T10108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.972989][T10108] team0: Port device team_slave_0 added [ 465.973266][ T57] bridge_slave_1: left allmulticast mode [ 465.973291][ T57] bridge_slave_1: left promiscuous mode [ 465.973590][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.077641][ T57] bridge_slave_0: left allmulticast mode [ 466.077674][ T57] bridge_slave_0: left promiscuous mode [ 466.083079][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.199446][T10329] random: crng reseeded on system resumption [ 466.247222][T10329] Unrecognized hibernate image header format! [ 466.247236][T10329] PM: hibernation: Image mismatch: architecture specific data [ 468.057525][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.156191][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.200347][ T57] bond0 (unregistering): Released all slaves [ 468.246605][T10363] netlink: 'syz.9.1162': attribute type 2 has an invalid length. [ 468.246635][T10363] netlink: 'syz.9.1162': attribute type 2 has an invalid length. [ 468.278058][T10108] team0: Port device team_slave_1 added [ 468.544105][T10345] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1156'. [ 469.409176][T10380] random: crng reseeded on system resumption [ 470.096347][ T8287] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 470.911768][ T8287] usb 10-1: Using ep0 maxpacket: 8 [ 470.917573][ T8287] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 470.917604][ T8287] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.950835][ T8287] pvrusb2: Hardware description: Terratec Grabster AV400 [ 470.950854][ T8287] pvrusb2: ********** [ 470.950861][ T8287] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 470.950874][ T8287] pvrusb2: Important functionality might not be entirely working. [ 470.950884][ T8287] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 470.950895][ T8287] pvrusb2: ********** [ 471.186459][ T2358] pvrusb2: Invalid write control endpoint [ 471.357934][T10386] pvrusb2: Invalid write control endpoint [ 471.566555][ T2358] pvrusb2: Invalid write control endpoint [ 471.566566][ T2358] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 471.566572][ T2358] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 471.566576][ T2358] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 471.566582][ T2358] pvrusb2: Device being rendered inoperable [ 471.566618][ T2358] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 471.566658][ T2358] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 471.571880][T10108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.571897][T10108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.571922][T10108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.574354][T10108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.574367][T10108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.574391][T10108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.591062][ T2358] pvrusb2: Attached sub-driver cx25840 [ 471.591080][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 471.591090][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 471.770676][T10415] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 471.770693][T10415] CIFS mount error: No usable UNC path provided in device string! [ 471.770693][T10415] [ 471.770852][T10415] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 472.040223][ T5805] usb 10-1: USB disconnect, device number 3 [ 473.322707][ T9161] Bluetooth: hci4: command 0x0406 tx timeout [ 473.838897][T10443] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1178'. [ 474.032269][T10460] CIFS mount error: No usable UNC path provided in device string! [ 474.032269][T10460] [ 474.032285][T10460] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 474.143634][T10462] random: crng reseeded on system resumption [ 474.257386][T10108] hsr_slave_0: entered promiscuous mode [ 474.273692][T10108] hsr_slave_1: entered promiscuous mode [ 474.287799][T10108] debugfs: 'hsr0' already exists in 'hsr' [ 474.287830][T10108] Cannot create hsr debugfs directory [ 474.641868][T10072] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 475.621720][T10072] usb 2-1: Using ep0 maxpacket: 8 [ 475.624130][T10072] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 475.624162][T10072] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.672464][ T57] hsr_slave_0: left promiscuous mode [ 475.778031][T10072] pvrusb2: Hardware description: Terratec Grabster AV400 [ 475.778069][T10072] pvrusb2: ********** [ 475.778077][T10072] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 475.778090][T10072] pvrusb2: Important functionality might not be entirely working. [ 475.778099][T10072] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 475.778110][T10072] pvrusb2: ********** [ 475.828114][ T57] hsr_slave_1: left promiscuous mode [ 475.839134][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.839167][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.961884][ T2358] pvrusb2: Invalid write control endpoint [ 476.234997][T10467] pvrusb2: Invalid write control endpoint [ 476.237331][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.237359][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.312055][ T2358] pvrusb2: Invalid write control endpoint [ 476.312161][ T2358] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 476.312174][ T2358] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 476.312183][ T2358] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 476.312192][ T2358] pvrusb2: Device being rendered inoperable [ 476.315762][ T2358] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 476.315804][ T2358] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 476.321307][ T2358] pvrusb2: Attached sub-driver cx25840 [ 476.321318][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 476.321324][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 476.488374][ T57] veth1_macvtap: left promiscuous mode [ 476.488500][ T57] veth0_macvtap: left promiscuous mode [ 476.488771][ T57] veth1_vlan: left promiscuous mode [ 476.524657][ T57] veth0_vlan: left promiscuous mode [ 476.525528][T10492] CIFS mount error: No usable UNC path provided in device string! [ 476.525528][T10492] [ 476.525542][T10492] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 476.753261][ T8148] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 476.917575][ T8148] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.917613][ T8148] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.917636][ T8148] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 476.917682][ T8148] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 476.917707][ T8148] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.951197][ T8148] usb 10-1: config 0 descriptor?? [ 477.373750][ T8148] usbhid 10-1:0.0: can't add hid device: -71 [ 477.373963][ T8148] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 477.393812][ T8148] usb 10-1: USB disconnect, device number 4 [ 477.983476][ T57] team0 (unregistering): Port device team_slave_1 removed [ 478.042177][ T57] team0 (unregistering): Port device team_slave_0 removed [ 479.174418][ T5853] usb 2-1: USB disconnect, device number 24 [ 479.357459][ T36] audit: type=1326 audit(1774779134.238:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10518 comm="syz.9.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a3a3c799 code=0x7ffc0000 [ 479.357517][ T36] audit: type=1326 audit(1774779134.258:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10518 comm="syz.9.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a3a3c799 code=0x7ffc0000 [ 479.400003][ T36] audit: type=1326 audit(1774779134.308:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10518 comm="syz.9.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f56a3a3c799 code=0x7ffc0000 [ 479.400056][ T36] audit: type=1326 audit(1774779134.308:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10518 comm="syz.9.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a3a3c799 code=0x7ffc0000 [ 479.400098][ T36] audit: type=1326 audit(1774779134.308:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10518 comm="syz.9.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a3a3c799 code=0x7ffc0000 [ 479.600408][ T36] audit: type=1326 audit(1774779134.318:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10518 comm="syz.9.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f56a3a3c799 code=0x7ffc0000 [ 479.601417][ T36] audit: type=1326 audit(1774779134.508:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10518 comm="syz.9.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a3a3c799 code=0x7ffc0000 [ 479.601450][ T36] audit: type=1326 audit(1774779134.508:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10518 comm="syz.9.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a3a3c799 code=0x7ffc0000 [ 479.997098][ T36] audit: type=1326 audit(1774779134.908:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10518 comm="syz.9.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f56a3a3c799 code=0x7ffc0000 [ 480.791804][T10530] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1210'. [ 480.943064][ T5853] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 481.155790][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.155827][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.155868][ T5853] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 481.155893][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.212024][ T5853] usb 2-1: config 0 descriptor?? [ 481.946326][ T5853] hid_parser_main: 4 callbacks suppressed [ 481.946352][ T5853] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 481.946383][ T5853] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 481.946409][ T5853] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 481.946435][ T5853] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 481.946460][ T5853] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 481.972460][ T5853] hid-steam 0003:28DE:1142.0008: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 482.279947][T10072] usb 2-1: USB disconnect, device number 25 [ 482.377218][T10550] fido_id[10550]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 482.912027][ T5807] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 483.073347][ T5807] usb 6-1: Using ep0 maxpacket: 8 [ 483.076045][ T5807] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 483.076077][ T5807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.318952][ T5807] pvrusb2: Hardware description: Terratec Grabster AV400 [ 483.318967][ T5807] pvrusb2: ********** [ 483.318971][ T5807] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 483.318978][ T5807] pvrusb2: Important functionality might not be entirely working. [ 483.318983][ T5807] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 483.318990][ T5807] pvrusb2: ********** [ 484.106439][ T2358] pvrusb2: Invalid write control endpoint [ 484.384407][T10562] pvrusb2: Invalid write control endpoint [ 484.843909][ T2358] pvrusb2: Invalid write control endpoint [ 484.843927][ T2358] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 484.843937][ T2358] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 484.843946][ T2358] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 484.843957][ T2358] pvrusb2: Device being rendered inoperable [ 484.884650][T10581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1220'. [ 484.888910][ T2358] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 484.888970][ T2358] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 484.890045][ T2358] pvrusb2: Attached sub-driver cx25840 [ 484.890056][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 484.890065][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 488.884676][T10108] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 489.432627][T10108] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 489.563070][T10108] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 489.673573][T10108] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 490.377423][ T5853] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 491.062750][ T5853] usb 10-1: Using ep0 maxpacket: 8 [ 491.079550][ T5853] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 491.127871][ T5853] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 491.127904][ T5853] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 491.127918][ T5853] usb 10-1: Product: syz [ 491.127926][ T5853] usb 10-1: Manufacturer: syz [ 491.127934][ T5853] usb 10-1: SerialNumber: syz [ 491.249020][ T8148] usb 6-1: USB disconnect, device number 8 [ 491.401103][ T5853] usb 10-1: palm_os_3_probe - error -32 getting connection information [ 491.401231][ T5853] visor 10-1:1.0: probe with driver visor failed with error -32 [ 491.452448][ T5853] usb 10-1: USB disconnect, device number 5 [ 491.496134][T10661] netlink: 'syz.1.1238': attribute type 3 has an invalid length. [ 491.496158][T10661] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1238'. [ 491.496815][T10661] netlink: 'syz.1.1238': attribute type 1 has an invalid length. [ 491.496833][T10661] netlink: 1696 bytes leftover after parsing attributes in process `syz.1.1238'. [ 491.591427][T10108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.629849][T10108] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.255484][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.256214][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.308121][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.308307][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.311784][ T8148] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 494.359081][T10108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.570639][T10072] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 494.949493][ T8148] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 494.962489][ T8148] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 494.962524][ T8148] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.962545][ T8148] usb 9-1: Product: syz [ 494.962560][ T8148] usb 9-1: Manufacturer: syz [ 494.962574][ T8148] usb 9-1: SerialNumber: syz [ 495.013541][ T8148] usb 9-1: config 0 descriptor?? [ 495.033164][ T8148] streamzap 9-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 495.151888][T10072] usb 2-1: Using ep0 maxpacket: 8 [ 495.153984][T10072] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 495.154013][T10072] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.223354][T10108] veth0_vlan: entered promiscuous mode [ 495.239161][T10072] pvrusb2: Hardware description: Terratec Grabster AV400 [ 495.239180][T10072] pvrusb2: ********** [ 495.239188][T10072] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 495.239200][T10072] pvrusb2: Important functionality might not be entirely working. [ 495.239209][T10072] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 495.239220][T10072] pvrusb2: ********** [ 495.323456][T10108] veth1_vlan: entered promiscuous mode [ 495.334721][ T6409] usb 9-1: USB disconnect, device number 2 [ 495.402045][ T2358] pvrusb2: Invalid write control endpoint [ 495.458234][T10108] veth0_macvtap: entered promiscuous mode [ 495.479843][T10108] veth1_macvtap: entered promiscuous mode [ 495.541076][T10108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.571417][T10108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.571471][T10711] netlink: 'syz.9.1251': attribute type 3 has an invalid length. [ 495.595634][T10698] pvrusb2: Invalid write control endpoint [ 495.647655][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.647910][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.647966][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.648003][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.683571][ T2358] pvrusb2: Invalid write control endpoint [ 495.683588][ T2358] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 495.683597][ T2358] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 495.683604][ T2358] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 495.683613][ T2358] pvrusb2: Device being rendered inoperable [ 495.683645][ T2358] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 495.683702][ T2358] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 495.684752][ T2358] pvrusb2: Attached sub-driver cx25840 [ 495.684762][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 495.684771][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 496.083644][ T8287] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 496.251756][ T8287] usb 10-1: Using ep0 maxpacket: 8 [ 496.254752][ T8287] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 496.257468][ T8287] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 496.257499][ T8287] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 496.257520][ T8287] usb 10-1: Product: syz [ 496.257580][ T8287] usb 10-1: Manufacturer: syz [ 496.257597][ T8287] usb 10-1: SerialNumber: syz [ 496.405354][ T2859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.405378][ T2859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.524929][T10072] usb 2-1: USB disconnect, device number 26 [ 496.540168][ T8287] usb 10-1: Invalid connection information received from device [ 496.784590][ T5807] usb 10-1: USB disconnect, device number 6 [ 496.809263][ T9956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.809285][ T9956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.496456][T10764] sg_write: data in/out 220/10 bytes for SCSI command 0xf2-- guessing data in; [ 498.496456][T10764] program syz.3.1261 not setting count and/or reply_len properly [ 501.197215][T10775] fuse: Unknown parameter '' [ 502.018938][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.019018][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.562023][ T48] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 502.739635][ T48] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 502.756184][ T48] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 502.756227][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 502.756248][ T48] usb 4-1: Product: syz [ 502.756263][ T48] usb 4-1: Manufacturer: syz [ 502.756277][ T48] usb 4-1: SerialNumber: syz [ 502.902109][ T8287] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 503.056655][ T48] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 503.063482][ T8287] usb 2-1: Using ep0 maxpacket: 8 [ 503.067235][ T8287] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 503.067264][ T8287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.159895][ T8287] pvrusb2: Hardware description: Terratec Grabster AV400 [ 503.159914][ T8287] pvrusb2: ********** [ 503.159921][ T8287] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 503.159934][ T8287] pvrusb2: Important functionality might not be entirely working. [ 503.159944][ T8287] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 503.159956][ T8287] pvrusb2: ********** [ 503.337722][ T2358] pvrusb2: Invalid write control endpoint [ 503.511118][ T2358] pvrusb2: Invalid write control endpoint [ 503.511136][ T2358] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 503.511146][ T2358] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 503.511154][ T2358] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 503.511166][ T2358] pvrusb2: Device being rendered inoperable [ 503.511205][ T2358] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 503.511259][ T2358] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 503.512780][ T2358] pvrusb2: Attached sub-driver cx25840 [ 503.512794][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 503.512803][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 503.524198][T10787] pvrusb2: Attempted to execute control transfer when device not ok [ 504.393825][T10812] netlink: 'syz.9.1268': attribute type 2 has an invalid length. [ 504.393854][T10812] netlink: 'syz.9.1268': attribute type 2 has an invalid length. [ 505.311149][ T31] usb 4-1: USB disconnect, device number 5 [ 505.363004][ T31] usblp0: removed [ 505.906905][T10839] 9p: Bad value for 'wfdno' [ 506.660869][ T5807] usb 2-1: USB disconnect, device number 27 [ 506.961757][T10072] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 507.094973][T10072] usb 4-1: device descriptor read/64, error -71 [ 508.231788][T10072] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 508.361748][T10072] usb 4-1: device descriptor read/64, error -71 [ 508.472763][T10072] usb usb4-port1: attempt power cycle [ 511.566930][ T5799] block nbd6: Receive control failed (result -32) [ 511.834644][T10890] nbd6: detected capacity change from 0 to 127 [ 511.836072][T10896] block nbd6: Dead connection, failed to find a fallback [ 511.836096][T10896] block nbd6: shutting down sockets [ 511.836108][T10896] blk_print_req_error: 138 callbacks suppressed [ 511.836119][T10896] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 511.836140][T10896] buffer_io_error: 138 callbacks suppressed [ 511.836147][T10896] Buffer I/O error on dev nbd6, logical block 0, async page read [ 511.836189][T10896] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 511.836204][T10896] Buffer I/O error on dev nbd6, logical block 1, async page read [ 511.836235][T10896] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 511.836250][T10896] Buffer I/O error on dev nbd6, logical block 2, async page read [ 511.836280][T10896] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 511.836326][T10896] Buffer I/O error on dev nbd6, logical block 3, async page read [ 511.836366][T10896] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 511.836381][T10896] Buffer I/O error on dev nbd6, logical block 0, async page read [ 511.836411][T10896] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 511.836425][T10896] Buffer I/O error on dev nbd6, logical block 1, async page read [ 511.836455][T10896] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 511.836469][T10896] Buffer I/O error on dev nbd6, logical block 2, async page read [ 511.836499][T10896] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 511.836513][T10896] Buffer I/O error on dev nbd6, logical block 3, async page read [ 511.836548][T10896] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 511.836563][T10896] Buffer I/O error on dev nbd6, logical block 0, async page read [ 511.836592][T10896] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 511.836607][T10896] Buffer I/O error on dev nbd6, logical block 1, async page read [ 511.837182][T10896] ldm_validate_partition_table(): Disk read failed. [ 511.837578][T10896] Dev nbd6: unable to read RDB block 0 [ 511.925988][T10901] tipc: Enabling of bearer rejected, already enabled [ 511.930117][T10896] nbd6: unable to read partition table [ 512.159961][T10896] ldm_validate_partition_table(): Disk read failed. [ 512.160769][T10896] Dev nbd6: unable to read RDB block 0 [ 512.180980][T10896] nbd6: unable to read partition table [ 512.518135][ T9161] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 512.529806][ T9161] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 512.545150][ T9161] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 512.571920][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 512.593363][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 513.012384][ T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 513.351899][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 513.354818][ T31] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 513.354850][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.662704][ T31] pvrusb2: Hardware description: Terratec Grabster AV400 [ 513.662723][ T31] pvrusb2: ********** [ 513.662730][ T31] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 513.662743][ T31] pvrusb2: Important functionality might not be entirely working. [ 513.662754][ T31] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 513.662766][ T31] pvrusb2: ********** [ 513.722440][ T2358] pvrusb2: Invalid write control endpoint [ 513.851185][ T2358] pvrusb2: Invalid write control endpoint [ 513.851201][ T2358] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 513.851211][ T2358] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 513.851220][ T2358] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 513.851229][ T2358] pvrusb2: Device being rendered inoperable [ 513.851270][ T2358] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 513.851335][ T2358] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 513.924783][T10913] pvrusb2: Attempted to execute control transfer when device not ok [ 514.000103][ T2358] pvrusb2: Attached sub-driver cx25840 [ 514.000121][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 514.000133][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 514.690077][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 514.712060][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 514.715301][ T5799] Bluetooth: hci0: command tx timeout [ 514.719590][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 514.744838][ T5799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 514.751850][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 514.964415][T10941] tipc: Resetting bearer [ 514.992175][ T31] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 515.121750][ T31] usb 10-1: device descriptor read/64, error -71 [ 515.391814][ T31] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 515.581895][ T31] usb 10-1: device descriptor read/64, error -71 [ 515.692252][ T31] usb usb10-port1: attempt power cycle [ 516.042187][ T31] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 516.064208][ T31] usb 10-1: device descriptor read/8, error -71 [ 516.226600][T10955] nbd7: detected capacity change from 0 to 127 [ 516.241391][ T5799] block nbd7: Receive control failed (result -32) [ 516.279755][T10896] block nbd7: Dead connection, failed to find a fallback [ 516.279786][T10896] block nbd7: shutting down sockets [ 516.281263][T10896] ldm_validate_partition_table(): Disk read failed. [ 516.314348][ T31] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 516.333844][T10896] Dev nbd7: unable to read RDB block 0 [ 516.350203][ T31] usb 10-1: device descriptor read/8, error -71 [ 516.452557][ T31] usb usb10-port1: unable to enumerate USB device [ 516.461568][T10915] chnl_net:caif_netlink_parms(): no params data found [ 516.539769][T10896] nbd7: unable to read partition table [ 516.570044][T10896] ldm_validate_partition_table(): Disk read failed. [ 516.570765][T10896] Dev nbd7: unable to read RDB block 0 [ 516.635494][T10896] nbd7: unable to read partition table [ 516.745954][ T1564] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 516.801404][ T42] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.811674][ T5799] Bluetooth: hci0: command tx timeout [ 516.871968][ T5799] Bluetooth: hci4: command tx timeout [ 516.905765][ T1564] usb 4-1: Using ep0 maxpacket: 8 [ 516.909567][ T1564] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 516.912279][ T1564] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 516.912306][ T1564] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 516.912324][ T1564] usb 4-1: Product: syz [ 516.912338][ T1564] usb 4-1: Manufacturer: syz [ 516.912351][ T1564] usb 4-1: SerialNumber: syz [ 517.168026][ T1564] usb 4-1: Invalid connection information received from device [ 517.374372][ T1564] usb 4-1: USB disconnect, device number 9 [ 517.416561][ T42] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.848843][ T42] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.938568][T10915] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.938704][T10915] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.938962][T10915] bridge_slave_0: entered allmulticast mode [ 517.961876][T10915] bridge_slave_0: entered promiscuous mode [ 518.787931][T10915] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.788107][T10915] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.788377][T10915] bridge_slave_1: entered allmulticast mode [ 518.799244][T10915] bridge_slave_1: entered promiscuous mode [ 518.871838][ T5799] Bluetooth: hci0: command tx timeout [ 518.891476][ T8287] usb 2-1: USB disconnect, device number 28 [ 518.951975][ T5799] Bluetooth: hci4: command tx timeout [ 519.255826][ T42] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.917921][T10915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.028601][T10915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.579528][T10915] team0: Port device team_slave_0 added [ 520.721104][ T1564] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 520.836352][T10915] team0: Port device team_slave_1 added [ 520.851810][ T1564] usb 10-1: device descriptor read/64, error -71 [ 521.059473][ T5799] Bluetooth: hci0: command tx timeout [ 521.059508][ T5799] Bluetooth: hci4: command tx timeout [ 521.101944][ T1564] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 521.417702][ T1564] usb 10-1: device descriptor read/64, error -71 [ 521.522484][ T1564] usb usb10-port1: attempt power cycle [ 521.656526][T10915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.656547][T10915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.656576][T10915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.775210][T10915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.775229][T10915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.775259][T10915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.782459][T10941] chnl_net:caif_netlink_parms(): no params data found [ 521.921776][ T1564] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 521.942500][ T1564] usb 10-1: device descriptor read/8, error -71 [ 522.150057][ T42] bridge_slave_1: left allmulticast mode [ 522.150079][ T42] bridge_slave_1: left promiscuous mode [ 522.150240][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.181840][ T1564] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 522.203791][ T1564] usb 10-1: device descriptor read/8, error -71 [ 522.244934][ T42] bridge_slave_0: left allmulticast mode [ 522.244957][ T42] bridge_slave_0: left promiscuous mode [ 522.245143][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.312396][ T1564] usb usb10-port1: unable to enumerate USB device [ 523.377699][ T5803] Bluetooth: hci4: command tx timeout [ 524.733190][T11073] nbd8: detected capacity change from 0 to 127 [ 524.824917][ T5803] block nbd8: Receive control failed (result -104) [ 525.589444][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.665527][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.717370][ T42] bond0 (unregistering): Released all slaves [ 526.050534][T10915] hsr_slave_0: entered promiscuous mode [ 526.069061][T10915] hsr_slave_1: entered promiscuous mode [ 526.070388][T10915] debugfs: 'hsr0' already exists in 'hsr' [ 526.070414][T10915] Cannot create hsr debugfs directory [ 527.005293][T10941] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.005452][T10941] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.005721][T10941] bridge_slave_0: entered allmulticast mode [ 527.009224][T10941] bridge_slave_0: entered promiscuous mode [ 527.079966][T11131] netlink: 'syz.9.1329': attribute type 2 has an invalid length. [ 527.079985][T11131] netlink: 'syz.9.1329': attribute type 2 has an invalid length. [ 527.160240][T10941] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.160440][T10941] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.160717][T10941] bridge_slave_1: entered allmulticast mode [ 527.207647][T10941] bridge_slave_1: entered promiscuous mode [ 528.092513][T11146] netlink: 182 bytes leftover after parsing attributes in process `syz.3.1332'. [ 528.864764][T10941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.912568][T10941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.970015][T11153] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1334'. [ 528.970031][T11153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1334'. [ 528.970041][T11153] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1334'. [ 528.970076][T11153] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1334'. [ 529.800586][ T42] hsr_slave_0: left promiscuous mode [ 530.054031][ T42] hsr_slave_1: left promiscuous mode [ 530.055204][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.055232][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.352847][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.352878][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.388428][T11163] netlink: 'syz.3.1338': attribute type 2 has an invalid length. [ 530.388456][T11163] netlink: 'syz.3.1338': attribute type 2 has an invalid length. [ 530.480900][ T42] veth1_macvtap: left promiscuous mode [ 530.481033][ T42] veth0_macvtap: left promiscuous mode [ 530.481327][ T42] veth1_vlan: left promiscuous mode [ 530.481514][ T42] veth0_vlan: left promiscuous mode [ 531.306831][T11183] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1346'. [ 531.306850][T11183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1346'. [ 531.306861][T11183] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1346'. [ 531.306885][T11183] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1346'. [ 532.771937][T11192] netlink: 'syz.3.1349': attribute type 2 has an invalid length. [ 532.771968][T11192] netlink: 'syz.3.1349': attribute type 2 has an invalid length. [ 532.913010][ T42] team0 (unregistering): Port device team_slave_1 removed [ 532.980637][ T42] team0 (unregistering): Port device team_slave_0 removed [ 533.083753][ T31] ------------[ cut here ]------------ [ 533.083769][ T31] in_task() && kcov_mode_enabled(mode) [ 533.083778][ T31] WARNING: kernel/kcov.c:884 at kcov_remote_start+0x5d8/0x710, CPU#1: kworker/1:0/31 [ 533.083826][ T31] Modules linked in: [ 533.083848][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 533.083878][ T31] Tainted: [L]=SOFTLOCKUP [ 533.083885][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 533.083899][ T31] Workqueue: usb_hub_wq hub_event [ 533.083926][ T31] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 533.083954][ T31] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e2 db d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 ba 3c 5f 09 89 c0 48 c7 c7 a8 33 4f [ 533.083974][ T31] RSP: 0000:ffffc90000a5f7c8 EFLAGS: 00010202 [ 533.083992][ T31] RAX: 0000000000000002 RBX: ffff88801d2a8000 RCX: 0000000000000000 [ 533.084008][ T31] RDX: 0000000000000000 RSI: ffffffff8ba673e0 RDI: ffffffff8ba673a0 [ 533.084023][ T31] RBP: ffffc90000a5fad0 R08: ffffffff8b2601d0 R09: ffffffff8ddcb9c0 [ 533.084040][ T31] R10: dffffc0000000000 R11: fffffbfff1ed4c97 R12: ffff8880298c5000 [ 533.084056][ T31] R13: dffffc0000000000 R14: 010000000000000a R15: ffff8880298ca000 [ 533.084073][ T31] FS: 0000000000000000(0000) GS:ffff888126436000(0000) knlGS:0000000000000000 [ 533.084091][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 533.084106][ T31] CR2: 00007ff297dad6a0 CR3: 000000005461c000 CR4: 00000000003526f0 [ 533.084132][ T31] Call Trace: [ 533.084141][ T31] [ 533.084156][ T31] hub_event+0x150/0x4f60 [ 533.084180][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 533.084211][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 533.084240][ T31] ? look_up_lock_class+0x57/0x110 [ 533.084266][ T31] ? register_lock_class+0x31/0x2e0 [ 533.084287][ T31] ? update_load_avg+0x1b0/0x1ec0 [ 533.084314][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 533.084353][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 533.084388][ T31] ? __pfx_hub_event+0x10/0x10 [ 533.084427][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 533.084457][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 533.084490][ T31] process_scheduled_works+0xb6e/0x18c0 [ 533.084557][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 533.084596][ T31] ? assign_work+0x3d5/0x5e0 [ 533.084632][ T31] worker_thread+0xa53/0xfc0 [ 533.084695][ T31] kthread+0x388/0x470 [ 533.084720][ T31] ? __pfx_worker_thread+0x10/0x10 [ 533.084748][ T31] ? __pfx_kthread+0x10/0x10 [ 533.084774][ T31] ret_from_fork+0x51e/0xb90 [ 533.084808][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 533.084837][ T31] ? __switch_to+0xc7d/0x1450 [ 533.084869][ T31] ? __pfx_kthread+0x10/0x10 [ 533.084894][ T31] ret_from_fork_asm+0x1a/0x30 [ 533.084936][ T31] [ 533.084947][ T31] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 533.084965][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 533.084992][ T31] Tainted: [L]=SOFTLOCKUP [ 533.084999][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 533.085012][ T31] Workqueue: usb_hub_wq hub_event [ 533.085036][ T31] Call Trace: [ 533.085044][ T31] [ 533.085053][ T31] vpanic+0x56c/0xa60 [ 533.085085][ T31] ? __pfx__printk+0x10/0x10 [ 533.085115][ T31] ? __pfx_vpanic+0x10/0x10 [ 533.085152][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 533.085182][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 533.085223][ T31] panic+0xc5/0xd0 [ 533.085254][ T31] ? __pfx_panic+0x10/0x10 [ 533.085298][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 533.085325][ T31] __warn+0x315/0x4f0 [ 533.085356][ T31] ? kcov_remote_start+0x5d8/0x710 [ 533.085384][ T31] ? kcov_remote_start+0x5d8/0x710 [ 533.085414][ T31] __report_bug+0x29a/0x540 [ 533.085443][ T31] ? kcov_remote_start+0x5d8/0x710 [ 533.085470][ T31] ? __pfx___report_bug+0x10/0x10 [ 533.085496][ T31] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 533.085531][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 533.085571][ T31] ? kcov_remote_start+0x5d8/0x710 [ 533.085597][ T31] report_bug+0x16a/0x220 [ 533.085620][ T31] ? kcov_remote_start+0x5d8/0x710 [ 533.085644][ T31] ? kcov_remote_start+0x5da/0x710 [ 533.085669][ T31] handle_bug+0x9c/0x200 [ 533.085696][ T31] exc_invalid_op+0x1a/0x50 [ 533.085723][ T31] asm_exc_invalid_op+0x1a/0x20 [ 533.085745][ T31] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 533.085772][ T31] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e2 db d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 ba 3c 5f 09 89 c0 48 c7 c7 a8 33 4f [ 533.085790][ T31] RSP: 0000:ffffc90000a5f7c8 EFLAGS: 00010202 [ 533.085808][ T31] RAX: 0000000000000002 RBX: ffff88801d2a8000 RCX: 0000000000000000 [ 533.085822][ T31] RDX: 0000000000000000 RSI: ffffffff8ba673e0 RDI: ffffffff8ba673a0 [ 533.085837][ T31] RBP: ffffc90000a5fad0 R08: ffffffff8b2601d0 R09: ffffffff8ddcb9c0 [ 533.085853][ T31] R10: dffffc0000000000 R11: fffffbfff1ed4c97 R12: ffff8880298c5000 [ 533.085870][ T31] R13: dffffc0000000000 R14: 010000000000000a R15: ffff8880298ca000 [ 533.085892][ T31] ? rt_spin_lock+0x1e0/0x400 [ 533.085930][ T31] ? kcov_remote_start+0xe0/0x710 [ 533.085959][ T31] hub_event+0x150/0x4f60 [ 533.085983][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 533.086012][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 533.086040][ T31] ? look_up_lock_class+0x57/0x110 [ 533.086065][ T31] ? register_lock_class+0x31/0x2e0 [ 533.086085][ T31] ? update_load_avg+0x1b0/0x1ec0 [ 533.086112][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 533.086155][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 533.086184][ T31] ? __pfx_hub_event+0x10/0x10 [ 533.086205][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 533.086221][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 533.086238][ T31] process_scheduled_works+0xb6e/0x18c0 [ 533.086271][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 533.086291][ T31] ? assign_work+0x3d5/0x5e0 [ 533.086310][ T31] worker_thread+0xa53/0xfc0 [ 533.086342][ T31] kthread+0x388/0x470 [ 533.086355][ T31] ? __pfx_worker_thread+0x10/0x10 [ 533.086370][ T31] ? __pfx_kthread+0x10/0x10 [ 533.086384][ T31] ret_from_fork+0x51e/0xb90 [ 533.086402][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 533.086418][ T31] ? __switch_to+0xc7d/0x1450 [ 533.086435][ T31] ? __pfx_kthread+0x10/0x10 [ 533.086448][ T31] ret_from_fork_asm+0x1a/0x30 [ 533.086469][ T31] [ 533.087030][ T31] Kernel Offset: disabled