last executing test programs: 5m35.314790333s ago: executing program 3 (id=872): r0 = fsopen(&(0x7f0000000340)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x44090) fchdir(r1) munmap(&(0x7f0000003000/0x2000)=nil, 0x2000) syz_genetlink_get_family_id$nl80211(0x0, r1) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x16a) getdents64(r7, &(0x7f0000001f80)=""/4111, 0xfffffffffffffef9) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000480)=@nbd={'/dev/nbd', 0x0}, r8, 0x0) 5m34.259113811s ago: executing program 3 (id=874): socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8", 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000240), &(0x7f0000000280)={'U-', 0x1}, 0x16, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) syz_io_uring_setup(0x34b7, 0x0, 0x0, &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048014) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) 5m32.637386842s ago: executing program 3 (id=876): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_submit(0x0, 0x0, 0x0) 5m32.431343604s ago: executing program 3 (id=878): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r3, 0x48212b8952c3aff5, 0x70bd24, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031c08d3fc1408202b4788031c", 0xe, 0x4, 0x0, 0x0) syz_emit_vhci(0x0, 0x10) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 5m31.163954852s ago: executing program 3 (id=879): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, 0x0, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, 0x0) 5m30.179161049s ago: executing program 3 (id=881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2f5fee778bb", 0x17}], 0x2) 5m13.733993292s ago: executing program 32 (id=881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2f5fee778bb", 0x17}], 0x2) 4m50.013838574s ago: executing program 4 (id=954): io_setup(0x8, &(0x7f0000004200)=0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x4008815}, 0x810) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) io_submit(r0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 4m48.621250494s ago: executing program 4 (id=956): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1c8, 0x12) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) migrate_pages(r0, 0x4, &(0x7f0000000300)=0x7, &(0x7f0000000340)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffd}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x20}]}, &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4000}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) getrlimit(0x8, &(0x7f0000000380)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 4m45.038312948s ago: executing program 4 (id=963): r0 = fsopen(&(0x7f0000000340)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x44090) fchdir(r1) munmap(&(0x7f0000003000/0x2000)=nil, 0x2000) syz_genetlink_get_family_id$nl80211(0x0, r1) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x16a) getdents64(r7, &(0x7f0000001f80)=""/4111, 0xfffffffffffffef9) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000480)=@nbd={'/dev/nbd', 0x0}, r8, 0x0) 4m43.984766725s ago: executing program 4 (id=965): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000012001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000400000000"], 0x20}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40004801}, 0x24004880) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, 0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/95, 0x5f}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'pimreg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r4, &(0x7f0000000300)="989f850dd518", &(0x7f00000005c0)=""/104}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x90000, 0x0) pipe2$9p(0x0, 0x0) 4m43.740377437s ago: executing program 4 (id=967): socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xc8f, &(0x7f0000000180)={0x0, 0xb491, 0x1000, 0x0, 0x387}, 0x0, &(0x7f0000000340)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xffffffb4) syz_emit_ethernet(0x0, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x7, &(0x7f0000000140)={0x0, 0x37, 0x1, @thr={&(0x7f00000003c0)="81132c5dc49e484ffabf8104cc69f196d389d11cce9728f56bea7fba4ece7404c2883c4e7d50ef5abc06523bf1ce2112064b25dfcfb8f705d3aedd943f59ae2677be8d9ef5485a6bb2cd1f36f124efdfdb5afbfffdb8a36fcaf7957f00668abf3e15fe32b511af8bfcd6c9eb0b537d9b31f2470bc681e8ee32887877d18f49df8334fbb585450541954f", &(0x7f0000000880)="8f2f2cc07749e6335c329899f252de022bcaf7205e3419d30ae6e803114ccca2e49f7b4f34dd22d5d3de84bc6ccf36ea31cbbcd305911b5612c565ba8bfaa948bad76747e0fa6f38d944ceb1d47965b28b1299448e902a893cb5b6aff090551d761333d72837076089253e75076598ca118796713b908882d63676352d1cb25f361da55f80b88b63e69488bf67730c5dd3c53038b6b0d227935fb9a8c1fef4cf11574f3a84d3392216c6579bfa4926218427b6a4bd4866625f80852cd4defa9f38a002a55535b1cc8b1ab961161bdbc27bd4395ce25411464af451c0dc4fc75f902e937f8a1bb3cf68c0e1dbe27ecb93ec95dc2f97ed9fb52504fbe0ff1ff0eb456f2c620ed3b78c51b8650f2e5393b3e191fb5a856dfb9f5724613e284ca49d7a4996049c7b8a76bed880261e8440e69ec1571c1c379e709245b719225d14b05bf186aefce85ca8f64911e532be9efd6f7c6f24625e389290b3126b32610fc155055e67d847d6aec492000e22f6d3a5ee98d724a99d493260b56359a165243bc15e2fd44925929e462867770f96f1778a57024c30bf7dd4d8cc9a6bc04c1db74ebd46b5dda500e86ebacdaf53cb69300c76345b3412ba5e44fcc9f81c0d7583e6236f059e7dca6b2fc9721b005db0176ecfc9f7103fb46c1a598fbe239f572a3fcbc49319e8a74c37191664c62874a62f4925995339f9470fc16e0752a00b6a8934ef47e2640cd6a649f4dbbc5a1befe8fe129b2c0669378cb742244e4352c568f34187575c37e6aaaaa1fc6f1a93b063fb32853624f401474d2160a9527ff66ce3c698b26c9da264143c3c1a94dd0c25677326dc50e9bf3e355376cfb4c12e2d9c3ce66e499295c4284c04bd10643b8c4c25bc9cf11ae095ad96115bef99b8456ae80b02cb721d11e572cf28d85055067d323566647ba463abe3f271b8deab4ff19ee2469ff85718a77e6fe525fea8cae801d446082f3c9d2469be3fa8e8df44404d5d923b7243838371d15eb5d8860b7c94ab962700a1a2a5ff9f37b3bce634132f4ab09ca39b01a319f63230fd2af070047a44eb103aacf1c1d762bbf886fd7e83aa6c8c5b100e665d695179c290923fd8ad9049c76b562c76c8bab7fa5390eaa368d0ded2f5524618593f2a05cd9aa14f24db68a281dbfc6b7e4b377a24def77bbca1eaf45cc2292803df75e66c8b48135e855221c2a760f53c5c0b7f237c51c982f994dc3a77a44481c96267a3c028f7c25369e8e9b92667755062adde842250c2382767d8b816d3b4969cd5387a9c870543a03b0562c8fe942d3d88ab468d2c2f1dc20c72ee759115b110b64d28be1601417f32880a2a12b0d1f4e754ae2950d91c1cb7f4cf9e338cb4134ed7781b65f6fadc6ed2f9e6dc133682f199e53b50ded028c546c9091d0e35282b473e36605f092d707c689b0fd9424fe84ce73625e12044d47ef47aa015a2ccec04fc32dab8bc27eba00cd75f7977c6fda8b30145772a5ab4f634c84776266bce68235ae2b3a8854aed4fe1053cf8965444995e35680c82b5da9bf26031a7c0dda96d0490cef59b31031d31307ba4eadf70a07b90f6c29228c80c9b3cb29677fb67218fedf68863cb68f2b9c893c41b27d09601af4e1e8b4f93945b22d790e41210dab6a887e72c28af26d9777c071692411b40353971e043a01a9e0418280b4aae13bab4097f07814ba741eb60ca723fe3e964a4844ad314f6b1572ed0c1353073a0d4e5eccb37fd4da165b08e7b4ecb9441602767c26df980b86bb605eb87d8f7171770b7424ccd29f2acfb8fc614d47a38dd19a6ff01848823e70bf4ff41f8b234e80b6cea4f8171a25e38dfbe8bab30454a8f6cf42e6b6f237ea8bd2e4f4d082448addb9e2bfb569c33687f29e351027c52a4924f4b214b9168d7376df6c144b59dd97a531cbd62cb5dc9c3ed9f47db27f1affd5b51ab406a7a9a82f5667b71b07829203f8afd7ff48264f76990cb8b52c4f7bdd45b581daf0b1208bdcae9c172e5258bb7c10c2b8fffda6e0e0a08f10855734a71db88ead84fdc56f1ee821e8a2f9fbb8b92a3eb000fdb6024a82fc6ffdc3cad9d5c42f9efecc3b5c33116ff0ce027f8ee33bdce1c19cc7f326e14b496f1961d143310b663741a462a51864530c8656a08fe725c48b600e44273321e8543478e7a4fbebb9f83c2ad9f7d61fc384fde5b25318a8eb23698dce9e795a6db85c22888a2445010d5eaedf20c63234cab408a4962016455ff91df401fe8334475277d046471c45fb9419ea8552a9039dcb1adbfc0c789e7a0411a875542a97bdb7ff9bf279ab1dc6b736c8fd9a4440d02a96b2546f1b817c9f41149f20f2f"}}, &(0x7f0000000480)) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) madvise(&(0x7f000018a000/0x2000)=nil, 0x2000, 0x12) close(r0) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7ffffffe) 4m39.131502978s ago: executing program 4 (id=970): inotify_init1(0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40408d1) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 4m23.782633784s ago: executing program 33 (id=970): inotify_init1(0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40408d1) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 40.703666489s ago: executing program 2 (id=1324): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x6, 0x6, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r1}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 40.54075201s ago: executing program 6 (id=1326): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0xffffffffffffffff, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) 40.442141221s ago: executing program 6 (id=1328): socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000280)={{0xfffe, 0x60}, 'syz0\x00', 0x19}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000028c0)={0x2020}, 0x2020) r1 = socket(0x10, 0x803, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r2, 0x208) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r5}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r5, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0xa0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff00", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x2c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x10000, 0x8, 0x5, 0x10, 0x1, 0xa, 0x3}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x5, 0x8, 0xb4f, 0x15, 0x1f, 0x18, 0x4}}]}}]}, 0x5c}}, 0x0) 37.864439694s ago: executing program 2 (id=1330): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$evdev(0x0, 0x2, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r2, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) lseek(r2, 0x0, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000800) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008084) umount2(&(0x7f0000000340)='./file0\x00', 0x9) ioctl$EVIOCGMASK(r1, 0x80104592, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x88fb, @gre={{0x5, 0x4, 0x2, 0x1, 0x58, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x81, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x6, 0x2, 0x1, 0x1, 0x6, 0x4}, 0x1, {0x500c}}}, {0x8, 0x22eb, 0x4, {{0xe, 0x2, 0xf8, 0x3, 0x1, 0x2, 0x4, 0xf9}, 0x2, {0x1, 0x9, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) 37.17924856s ago: executing program 6 (id=1332): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000280)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x2, 0x2, 0x8c86, 0x3}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x1d, 0x2, 0x6) r2 = add_key$keyring(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r2) pipe2$watch_queue(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x5, 0x2, 0x10, 0xc, 0x7a, 0x2}, {0x9, 0x5, 0x2, 0x2, 0x3ff, 0x3, 0x3, 0x7}, {0x9, 0x5, 0x6, 0x3, 0x3ff, 0x7, 0xda, 0x1a}}}}}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f0000001640)={0x2c, &(0x7f00000003c0)={0x10, 0xc, 0x71, {0x71, 0x22, "00126ae242478b3ec31d306a97ade4c67d9500e99842cfe5a37be02c513bf020f4d860a4e79e48c964763f7b173afec30ba02315590fc4c2f3c874d76a41d8f83c3b78f0a85744a10d8fdfc84099a8613e27a9d8308fa590418e502eddd9bcd3a07702fb7daa278868ea30c0031c52"}}, 0x0, &(0x7f00000014c0)={0x0, 0xf, 0xed, {0x5, 0xf, 0xed, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x63, 0x4, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x79, 0x2, 0x0, 0xf000, 0x7, [0xfff0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0xf8, 0x82, 0x1000, 0x2}, @generic={0xbf, 0x10, 0xa, "3374a67634db05e80162bd786332591af89089a289ea5ad2757ada9fc9beb80a269d4a7c3cc0aac6ea2e52ae8306c1df56b72a2c519d37f054d295c2a0739530c895ad023fb5c32dbc3384999446046bcd918ceaf3a8205d82295d48663d0a845bd769390b27300154f8ab75eeb71f3b08fcf0dd156a0098cb7ebb63225cf5f82f76aa6e027b4e216f8746feea463a4aa028d632430cbf35977063cc43d9430fb1ffb81aedcaadd4ea9b3dd81f4369ecc93a86f414b6b5059effdacf"}]}}, &(0x7f00000015c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x60, 0x2, 0x81, "f20915e0", "b6ddc6e7"}}, &(0x7f0000001600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfc, 0x10, 0x1, 0x9, 0xff, 0x4, 0x7}}}, &(0x7f0000001b40)={0x84, &(0x7f0000001680)={0x40, 0x16, 0xe2, "8a4b2b9f65a691a3b9a69c278b32934fe890ec087e7e57b2773139e8dc134ba41154383bc58243d35ff7f7235e578b3a7fad29bfe10afb15bb49e3395570ad15aa980575477147b7c4b09c19b257097ff492b8a0510e00c4476a5bc04cf85d116ccb189f9cc210ec2e33367507bffc7d397f59a89041af2c96335f3a076ee7aa7b6bf779b428538dca0f7ae448891459ece5f0c43d01a45b940721e96ed35892efc62a7e1124a5c34f036c091bbe3fe82a268cde3f69abcc095ef470ffccf5f25a400c7066600a352057eafa56d75c3a319e6e0fb16947a5b1a75526de4e686262a4"}, &(0x7f0000001780)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000017c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001800)={0x20, 0x0, 0x4, {0x3, 0x7}}, &(0x7f0000001840)={0x20, 0x0, 0x4, {0x30, 0x4}}, &(0x7f0000001880)={0x40, 0x7, 0x2, 0xb}, &(0x7f00000018c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000001900)={0x40, 0xb, 0x2, "2fa4"}, &(0x7f0000001940)={0x40, 0xf, 0x2, 0xa}, &(0x7f0000001980)={0x40, 0x13, 0x6, @local}, &(0x7f00000019c0)={0x40, 0x17, 0x6}, &(0x7f0000001a00)={0x40, 0x19, 0x2, "ad6c"}, &(0x7f0000001a40)={0x40, 0x1a, 0x2, 0xb}, &(0x7f0000001a80)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001ac0)={0x40, 0x1e, 0x1, 0xac}, &(0x7f0000001b00)={0x40, 0x21, 0x1, 0x4}}) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xc2) write$cgroup_devices(r3, &(0x7f0000000000)={'b', ' *:* ', 'rwm\x00'}, 0xa) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) timer_create(0x4, &(0x7f0000000140)={0x0, 0x20, 0x1, @tid=r5}, &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) 32.079393363s ago: executing program 2 (id=1336): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) 30.268693909s ago: executing program 6 (id=1344): socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee", 0xe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x8000}}, './file0\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="f4ba", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf250100000005000400040000000800110000000000050021000100000008001800ac1414bb06000300070000000500220001000000"], 0x44}}, 0x40004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002400000000114020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3f0200000000000000ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e"], 0x294}}, 0x4048014) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) 29.01135366s ago: executing program 2 (id=1345): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x569, &(0x7f00000002c0)="$eJzs3U1rXFUfAPD/nWT6/jxNoRQVkYALK7WTJvGlgou61mJB93VIbkPJpFMyk9LEgu3CrqW4EQviXly7LH4BF36GghaKlKALN5E7uTOdJDPJtJ0mU+f3g1vOuS8598y5/9NzcmYyAQyt8eyfQsTLEfF1EnE0IpL82GjkB8fXz1t9dGMm25JYW/v0z6RxXpZv/qzmdYfzzEsR8ctXEacKW8utLa/MlyuVdDHPT9QXrk7UlldOX14oz6Vz6ZWp6emz70xPvf/eu32r65sX/v72k3sjee7YnSTOxZE8116PZ3CzPTMe4/lrUoxzm06c7ENhgyTpuPenXb8PnsxIHufFyPqAozGSRz3w3/dlRKwBQyp54vj/rfh87gTYXc1xQHNu36d58Avj4YfrE6Ct9R9d/91IHGjMjQ6tJhtmRtl8d6wP5Wdl/PzH3TvZFv37PQTAjm7eiogzo6Nb+78k7/+e3pkeztlchv4Pds+9bPzzVqfxT6E1/okO45/DHWL3aewc/4UHfSimq2z890HH8W9r0WpsJM/9rzHmKyaXLlfSrG/7f0ScjOL+LL/des7Z1ftr3Y61j/+yLSu/ORbM7+PB6P6N18yW6+VnqXO7h7ciXuk4/k1a7Z90aP/s9bjQYxkn0ruvdTu2c/2fr7UfIt7o2P6PV7SS7dcnJxrPw0Tzqdjqr9snfu1W/l7XP2v/Q9vXfyxpX6+ttV890lMZ3x/4J43WevJGG+ofvT//+5LPGul9+b7r5Xp9cTJiX/Jxa3+huX/q8bXNfPP8rP4nX9++/+v0/B+MiM97qn3E7eM/vtrt2CC0/2zH9m/Nbje1/5Mn7n/0xXfdyu+t/3u7kTqZ7+ml/+v1Bp/ltQMAAAAAAIBBU4iII5EUSq10oVAqrb+/43gcKlSqtfqpS9WlK7PR+KzsWBQLzZXuo23vh5jMVwyb+alN+emIOBYR34wcbORLM9XK7F5XHgAAAAAAAAAAAAAAAAAAAAbE4S6f/8/8vvXPux/Y/TsEnitf+Q3Da8f478c3PQEDyf//MLzEPwwv8Q/DS/zD8BL/MLzEPwwv8Q/DS/wDAAAAAAAAAAAAAAAAAAAAAAAAAABAX104fz7b1lYf3ZjJ8rPXlpfmq9dOz6a1+dLC0kxpprp4tTRXrc5V0tJMdWGnn1epVq9OTsXS9Yl6WqtP1JZXLi5Ul67UL15eKM+lF9PirtQKAAAAAAAAAAAAAAAAAAAAXiy15ZX5cqWSLkpIPFVidDBuQ6LPib3umQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgsX8DAAD//welMww=") lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x8804) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX], 0xfe37, 0x0) 28.582469134s ago: executing program 6 (id=1346): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000280)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x2, 0x2, 0x8c86, 0x3}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x1d, 0x2, 0x6) r2 = add_key$keyring(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r2) pipe2$watch_queue(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x5, 0x2, 0x10, 0xc, 0x7a, 0x2}, {0x9, 0x5, 0x2, 0x2, 0x3ff, 0x3, 0x3, 0x7}, {0x9, 0x5, 0x6, 0x3, 0x3ff, 0x7, 0xda, 0x1a}}}}}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f0000001640)={0x2c, &(0x7f00000003c0)={0x10, 0xc, 0x71, {0x71, 0x22, "00126ae242478b3ec31d306a97ade4c67d9500e99842cfe5a37be02c513bf020f4d860a4e79e48c964763f7b173afec30ba02315590fc4c2f3c874d76a41d8f83c3b78f0a85744a10d8fdfc84099a8613e27a9d8308fa590418e502eddd9bcd3a07702fb7daa278868ea30c0031c52"}}, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, 0x0, &(0x7f00000015c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x60, 0x2, 0x81, "f20915e0", "b6ddc6e7"}}, &(0x7f0000001600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfc, 0x10, 0x1, 0x9, 0xff, 0x4, 0x7}}}, &(0x7f0000001b40)={0x84, &(0x7f0000001680)={0x40, 0x16, 0xe2, "8a4b2b9f65a691a3b9a69c278b32934fe890ec087e7e57b2773139e8dc134ba41154383bc58243d35ff7f7235e578b3a7fad29bfe10afb15bb49e3395570ad15aa980575477147b7c4b09c19b257097ff492b8a0510e00c4476a5bc04cf85d116ccb189f9cc210ec2e33367507bffc7d397f59a89041af2c96335f3a076ee7aa7b6bf779b428538dca0f7ae448891459ece5f0c43d01a45b940721e96ed35892efc62a7e1124a5c34f036c091bbe3fe82a268cde3f69abcc095ef470ffccf5f25a400c7066600a352057eafa56d75c3a319e6e0fb16947a5b1a75526de4e686262a4"}, &(0x7f0000001780)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000017c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001800)={0x20, 0x0, 0x4, {0x3, 0x7}}, &(0x7f0000001840)={0x20, 0x0, 0x4, {0x30, 0x4}}, &(0x7f0000001880)={0x40, 0x7, 0x2, 0xb}, &(0x7f00000018c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000001900)={0x40, 0xb, 0x2, "2fa4"}, &(0x7f0000001940)={0x40, 0xf, 0x2, 0xa}, &(0x7f0000001980)={0x40, 0x13, 0x6, @local}, &(0x7f00000019c0)={0x40, 0x17, 0x6}, &(0x7f0000001a00)={0x40, 0x19, 0x2, "ad6c"}, &(0x7f0000001a40)={0x40, 0x1a, 0x2, 0xb}, &(0x7f0000001a80)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001ac0)={0x40, 0x1e, 0x1, 0xac}, &(0x7f0000001b00)={0x40, 0x21, 0x1, 0x4}}) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xc2) write$cgroup_devices(r3, &(0x7f0000000000)={'b', ' *:* ', 'rwm\x00'}, 0xa) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) timer_create(0x4, &(0x7f0000000140)={0x0, 0x20, 0x1, @tid=r5}, &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) 25.139246264s ago: executing program 2 (id=1349): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 24.632787118s ago: executing program 6 (id=1350): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 23.860392995s ago: executing program 2 (id=1351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}], 0x1) 18.731742039s ago: executing program 5 (id=1358): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x7, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) faccessat(0xffffffffffffffff, 0x0, 0x12a) r1 = getpid() ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f0000000000), 0x1001) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x4, 0x3c, 0x67, 0x0, 0x3, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, "08b20d41e263881f11c9a5bd1cf9335b480d97e67ed408a40788595cfb9708b9acf496e62d4024e1"}}}}, 0x0) 16.858855995s ago: executing program 5 (id=1360): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x569, &(0x7f00000002c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x8804) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX], 0xfe37, 0x0) 16.28565901s ago: executing program 5 (id=1361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 13.103384217s ago: executing program 0 (id=1369): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000280)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x2, 0x2, 0x8c86, 0x3}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x1d, 0x2, 0x6) r2 = add_key$keyring(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r2) pipe2$watch_queue(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x5, 0x2, 0x10, 0xc, 0x7a, 0x2}, {0x9, 0x5, 0x2, 0x2, 0x3ff, 0x3, 0x3, 0x7}, {0x9, 0x5, 0x6, 0x3, 0x3ff, 0x7, 0xda, 0x1a}}}}}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f0000001640)={0x2c, &(0x7f00000003c0)={0x10, 0xc, 0x6d, {0x6d, 0x22, "00126ae242478b3ec31d306a97ade4c67d9500e99842cfe5a37be02c513bf020f4d860a4e79e48c964763f7b173afec30ba02315590fc4c2f3c874d76a41d8f83c3b78f0a85744a10d8fdfc84099a8613e27a9d8308fa590418e502eddd9bcd3a07702fb7daa278868ea30"}}, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, &(0x7f00000014c0)={0x0, 0xf, 0xed, {0x5, 0xf, 0xed, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x63, 0x4, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x79, 0x2, 0x0, 0xf000, 0x7, [0xfff0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0xf8, 0x82, 0x1000, 0x2}, @generic={0xbf, 0x10, 0xa, "3374a67634db05e80162bd786332591af89089a289ea5ad2757ada9fc9beb80a269d4a7c3cc0aac6ea2e52ae8306c1df56b72a2c519d37f054d295c2a0739530c895ad023fb5c32dbc3384999446046bcd918ceaf3a8205d82295d48663d0a845bd769390b27300154f8ab75eeb71f3b08fcf0dd156a0098cb7ebb63225cf5f82f76aa6e027b4e216f8746feea463a4aa028d632430cbf35977063cc43d9430fb1ffb81aedcaadd4ea9b3dd81f4369ecc93a86f414b6b5059effdacf"}]}}, &(0x7f00000015c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x60, 0x2, 0x81, "f20915e0", "b6ddc6e7"}}, &(0x7f0000001600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfc, 0x10, 0x1, 0x9, 0xff, 0x4, 0x7}}}, &(0x7f0000001b40)={0x84, &(0x7f0000001680)={0x40, 0x16, 0xe2, "8a4b2b9f65a691a3b9a69c278b32934fe890ec087e7e57b2773139e8dc134ba41154383bc58243d35ff7f7235e578b3a7fad29bfe10afb15bb49e3395570ad15aa980575477147b7c4b09c19b257097ff492b8a0510e00c4476a5bc04cf85d116ccb189f9cc210ec2e33367507bffc7d397f59a89041af2c96335f3a076ee7aa7b6bf779b428538dca0f7ae448891459ece5f0c43d01a45b940721e96ed35892efc62a7e1124a5c34f036c091bbe3fe82a268cde3f69abcc095ef470ffccf5f25a400c7066600a352057eafa56d75c3a319e6e0fb16947a5b1a75526de4e686262a4"}, &(0x7f0000001780)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000017c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001800)={0x20, 0x0, 0x4, {0x3, 0x7}}, &(0x7f0000001840)={0x20, 0x0, 0x4, {0x30, 0x4}}, &(0x7f0000001880)={0x40, 0x7, 0x2, 0xb}, &(0x7f00000018c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000001900)={0x40, 0xb, 0x2, "2fa4"}, &(0x7f0000001940)={0x40, 0xf, 0x2, 0xa}, &(0x7f0000001980)={0x40, 0x13, 0x6, @local}, &(0x7f00000019c0)={0x40, 0x17, 0x6}, &(0x7f0000001a00)={0x40, 0x19, 0x2, "ad6c"}, &(0x7f0000001a40)={0x40, 0x1a, 0x2, 0xb}, &(0x7f0000001a80)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001ac0)={0x40, 0x1e, 0x1, 0xac}, &(0x7f0000001b00)={0x40, 0x21, 0x1, 0x4}}) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xc2) write$cgroup_devices(r3, &(0x7f0000000000)={'b', ' *:* ', 'rwm\x00'}, 0xa) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) timer_create(0x4, &(0x7f0000000140)={0x0, 0x20, 0x1, @tid=r5}, &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) 10.168825962s ago: executing program 1 (id=1370): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) 9.561166368s ago: executing program 0 (id=1371): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x1, 0x5}, 0x50) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) shutdown(r3, 0x1) 9.505748788s ago: executing program 34 (id=1350): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 9.145128052s ago: executing program 0 (id=1373): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) migrate_pages(r0, 0x4, &(0x7f0000000300)=0x7, &(0x7f0000000340)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffd}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x20}]}, &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4000}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) getrlimit(0x8, &(0x7f0000000380)) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 8.448003617s ago: executing program 35 (id=1351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}], 0x1) 8.371450928s ago: executing program 1 (id=1375): io_setup(0x8, &(0x7f0000004200)=0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x4008815}, 0x810) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) io_submit(r0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 8.228885939s ago: executing program 5 (id=1376): r0 = socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0x395, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b80)={r4, r3, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x3, 0x58, 0x67, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x1, {{0x8, 0x1, 0x52, 0x0, 0x0, 0x1, 0x4, 0x1}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x0, {{0x6, 0x2, 0x3, 0x2, 0x1, 0x0, 0x0, 0x5}, 0x2, {0x7, 0x7, 0x0, 0x1f, 0x0, 0x0, 0x2, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x3) r5 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000000c0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b8020000180070001"], 0xe4}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x4, 0x4, 0x3a4, 0xffffffff, 0x120, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2dc, 0x2dc, 0x2dc, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xffffffff, 0xffffff00], [0x0, 0xff, 0xff000000, 0xf0969c30512e8e79], 'nr0\x00', 'veth1_to_batadv\x00', {}, {}, 0x87, 0x7, 0x2}, 0x2f2, 0xfc, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'team0\x00', {0x44, 0x0, 0xffff, 0x9, 0x8, 0xf, 0x5, 0x20, 0x80}, {0x7}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x200, 0x5addaf4b}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x400) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x414, 0x164, 0x164, 0x1f8, 0x0, 0xa0, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@remote, @empty, 0xff, 0xffffff00, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x1}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x0, @empty, 0x4e21}}}, {{@uncond, 0x0, 0x94, 0xc4, 0x0, {}, [@common=@icmp={{0x24}, {0xf, '\x00', 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9c, 0x1, @multicast1, 0x201}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffff00, 0xff, 'ip6tnl0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x62, 0x2, 0x26}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}, {{@ip={@multicast2, @private=0xa010100, 0xffffff00, 0x0, 'syz_tun\x00', 'bridge0\x00', {}, {0xff}, 0x0, 0x0, 0x20}, 0x0, 0xb8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xc}}, @inet=@rpfilter={{0x24}, {0xb}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x0, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x470) 6.729465112s ago: executing program 1 (id=1377): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000012001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000400000000"], 0x20}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40004801}, 0x24004880) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, 0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/95, 0x5f}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'pimreg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r4, &(0x7f0000000300)="989f850dd518", &(0x7f00000005c0)=""/104}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x90000, 0x0) pipe2$9p(0x0, 0x0) 6.399558895s ago: executing program 1 (id=1378): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x32c, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x2e0, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0xf}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x284, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x260, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x4}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x32c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 3.773473798s ago: executing program 5 (id=1379): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 3.772788708s ago: executing program 0 (id=1380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) setpriority(0x1, 0xff, 0x7) openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(r1) 3.5489041s ago: executing program 0 (id=1381): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x569, &(0x7f00000002c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @local, 0x5}, 0x1c, 0x0}}], 0x1, 0x810) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX], 0xfe37, 0x0) 3.221807673s ago: executing program 1 (id=1382): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000280)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x2, 0x2, 0x8c86, 0x3}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x1d, 0x2, 0x6) r2 = add_key$keyring(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r2) pipe2$watch_queue(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x5, 0x2, 0x10, 0xc, 0x7a, 0x2}, {0x9, 0x5, 0x2, 0x2, 0x3ff, 0x3, 0x3, 0x7}, {0x9, 0x5, 0x6, 0x3, 0x3ff, 0x7, 0xda, 0x1a}}}}}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f0000001640)={0x2c, &(0x7f00000003c0)={0x10, 0xc, 0x6d, {0x6d, 0x22, "00126ae242478b3ec31d306a97ade4c67d9500e99842cfe5a37be02c513bf020f4d860a4e79e48c964763f7b173afec30ba02315590fc4c2f3c874d76a41d8f83c3b78f0a85744a10d8fdfc84099a8613e27a9d8308fa590418e502eddd9bcd3a07702fb7daa278868ea30"}}, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, &(0x7f00000014c0)={0x0, 0xf, 0xed, {0x5, 0xf, 0xed, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x63, 0x4, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x79, 0x2, 0x0, 0xf000, 0x7, [0xfff0, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0xf8, 0x82, 0x1000, 0x2}, @generic={0xbf, 0x10, 0xa, "3374a67634db05e80162bd786332591af89089a289ea5ad2757ada9fc9beb80a269d4a7c3cc0aac6ea2e52ae8306c1df56b72a2c519d37f054d295c2a0739530c895ad023fb5c32dbc3384999446046bcd918ceaf3a8205d82295d48663d0a845bd769390b27300154f8ab75eeb71f3b08fcf0dd156a0098cb7ebb63225cf5f82f76aa6e027b4e216f8746feea463a4aa028d632430cbf35977063cc43d9430fb1ffb81aedcaadd4ea9b3dd81f4369ecc93a86f414b6b5059effdacf"}]}}, &(0x7f00000015c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x60, 0x2, 0x81, "f20915e0", "b6ddc6e7"}}, &(0x7f0000001600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfc, 0x10, 0x1, 0x9, 0xff, 0x4, 0x7}}}, &(0x7f0000001b40)={0x84, &(0x7f0000001680)={0x40, 0x16, 0xe2, "8a4b2b9f65a691a3b9a69c278b32934fe890ec087e7e57b2773139e8dc134ba41154383bc58243d35ff7f7235e578b3a7fad29bfe10afb15bb49e3395570ad15aa980575477147b7c4b09c19b257097ff492b8a0510e00c4476a5bc04cf85d116ccb189f9cc210ec2e33367507bffc7d397f59a89041af2c96335f3a076ee7aa7b6bf779b428538dca0f7ae448891459ece5f0c43d01a45b940721e96ed35892efc62a7e1124a5c34f036c091bbe3fe82a268cde3f69abcc095ef470ffccf5f25a400c7066600a352057eafa56d75c3a319e6e0fb16947a5b1a75526de4e686262a4"}, &(0x7f0000001780)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000017c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001800)={0x20, 0x0, 0x4, {0x3, 0x7}}, &(0x7f0000001840)={0x20, 0x0, 0x4, {0x30, 0x4}}, &(0x7f0000001880)={0x40, 0x7, 0x2, 0xb}, &(0x7f00000018c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000001900)={0x40, 0xb, 0x2, "2fa4"}, &(0x7f0000001940)={0x40, 0xf, 0x2, 0xa}, &(0x7f0000001980)={0x40, 0x13, 0x6, @local}, &(0x7f00000019c0)={0x40, 0x17, 0x6}, &(0x7f0000001a00)={0x40, 0x19, 0x2, "ad6c"}, &(0x7f0000001a40)={0x40, 0x1a, 0x2, 0xb}, &(0x7f0000001a80)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001ac0)={0x40, 0x1e, 0x1, 0xac}, &(0x7f0000001b00)={0x40, 0x21, 0x1, 0x4}}) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xc2) write$cgroup_devices(r3, &(0x7f0000000000)={'b', ' *:* ', 'rwm\x00'}, 0xa) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) timer_create(0x4, &(0x7f0000000140)={0x0, 0x20, 0x1, @tid=r5}, &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) 2.982256885s ago: executing program 0 (id=1383): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000d40)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) 25.32534ms ago: executing program 1 (id=1384): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) close(0xffffffffffffffff) io_setup(0x3ff, &(0x7f0000000500)=0x0) close(0x3) io_submit(r1, 0x0, &(0x7f0000000300)) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 0s ago: executing program 5 (id=1385): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4040010, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) kernel console output (not intermixed with test programs): 87][ T4283] Bluetooth: hci4: link tx timeout [ 158.584702][ T4283] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 160.309342][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 162.389369][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 168.435873][ T4943] binder: BINDER_SET_CONTEXT_MGR already set [ 168.438086][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 168.606829][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.645450][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.682237][ T4943] binder: 4942:4943 ioctl 4018620d 200000000040 returned -16 [ 168.735026][ T4943] binder: 4942:4943 ioctl c0306201 200000001440 returned -11 [ 169.381577][ T4950] binder: 4949:4950 ioctl c0306201 200000001440 returned -11 [ 172.512878][ T4986] binder: 4985:4986 ioctl 4018620d 0 returned -22 [ 172.535292][ T4987] binder: 4984:4987 ioctl c0306201 200000001440 returned -11 [ 173.298828][ T4996] loop2: detected capacity change from 0 to 64 [ 173.648082][ T4998] netlink: 48 bytes leftover after parsing attributes in process `syz.1.157'. [ 175.969391][ T5024] binder: 5023:5024 ioctl c0306201 200000001440 returned -11 [ 177.275807][ T5030] loop3: detected capacity change from 0 to 64 [ 177.679590][ T4354] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 177.910181][ T4354] usb 3-1: Using ep0 maxpacket: 8 [ 178.039606][ T4354] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 178.372087][ T4354] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 178.423227][ T4354] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 178.444056][ T4354] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.457638][ T4354] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 178.482997][ T4354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.767763][ T4354] usb 3-1: GET_CAPABILITIES returned 0 [ 178.773551][ T4354] usbtmc 3-1:16.0: can't read capabilities [ 180.065980][ T4334] usb 3-1: USB disconnect, device number 6 [ 181.528778][ T5075] loop3: detected capacity change from 0 to 64 [ 189.306158][ T5116] loop2: detected capacity change from 0 to 64 [ 194.313524][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.320136][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.564244][ T5143] fuse: Bad value for 'fd' [ 195.034746][ T5150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 195.076334][ T5150] rdma_rxe: rxe_register_device failed with error -23 [ 195.184664][ T5150] rdma_rxe: failed to add syz_tun [ 196.739944][ T5165] netlink: 48 bytes leftover after parsing attributes in process `syz.3.206'. [ 200.377936][ T5182] netlink: 48 bytes leftover after parsing attributes in process `syz.3.210'. [ 200.790889][ T4283] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 200.800143][ T4283] Bluetooth: hci1: Injecting HCI hardware error event [ 200.815568][ T4281] Bluetooth: hci1: hardware error 0x00 [ 201.509266][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 201.509282][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 201.509317][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 201.593078][ T5189] fuse: Bad value for 'fd' [ 202.869366][ T4281] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 208.445949][ T5218] netlink: 48 bytes leftover after parsing attributes in process `syz.3.221'. [ 210.225050][ T5229] netlink: 48 bytes leftover after parsing attributes in process `syz.4.225'. [ 214.418541][ T5255] binder: 5254:5255 ioctl c0306201 0 returned -14 [ 214.805461][ T4257] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 215.009230][ T4257] usb 4-1: Using ep0 maxpacket: 32 [ 215.017079][ T4257] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.047337][ T4257] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.090238][ T4257] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 215.116020][ T4257] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 215.145107][ T4257] usb 4-1: Product: syz [ 215.159127][ T4257] usb 4-1: Manufacturer: syz [ 215.173373][ T4257] usb 4-1: SerialNumber: syz [ 215.203931][ T4257] usb 4-1: config 0 descriptor?? [ 215.222714][ T4257] hub 4-1:0.0: bad descriptor, ignoring hub [ 215.270687][ T4257] hub: probe of 4-1:0.0 failed with error -5 [ 217.079362][ T4334] usb 4-1: USB disconnect, device number 4 [ 218.239648][ T5275] netlink: 48 bytes leftover after parsing attributes in process `syz.4.237'. [ 222.936910][ T5313] infiniband syz1: set active [ 223.175673][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 224.507288][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.517761][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.562071][ T5313] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 227.870361][ T5336] netlink: 48 bytes leftover after parsing attributes in process `syz.3.252'. [ 230.859236][ T4354] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 231.069261][ T4354] usb 2-1: Using ep0 maxpacket: 32 [ 231.078293][ T4354] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.113053][ T4354] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 231.157183][ T4354] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 231.849209][ T4354] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 231.857842][ T4354] usb 2-1: Product: syz [ 231.862482][ T4354] usb 2-1: Manufacturer: syz [ 231.867204][ T4354] usb 2-1: SerialNumber: syz [ 231.884653][ T4354] usb 2-1: config 0 descriptor?? [ 231.894090][ T4354] hub 2-1:0.0: bad descriptor, ignoring hub [ 231.905156][ T4354] hub: probe of 2-1:0.0 failed with error -5 [ 232.329760][ T5372] binder: 5371:5372 ioctl c0306201 200000001440 returned -11 [ 233.155439][ T4257] usb 2-1: USB disconnect, device number 5 [ 238.083865][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 238.254312][ T5405] binder: 5388:5405 ioctl 40047440 200000001200 returned -22 [ 238.285574][ T5401] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 247.797084][ T5465] binder: 5464:5465 ioctl c0306201 200000001440 returned -11 [ 249.060739][ T5472] infiniband syz1: set active [ 249.066825][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.111263][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.118834][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.362643][ T5483] binder: 5456:5483 ioctl 40047440 200000001200 returned -22 [ 249.378958][ T5472] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 249.549253][ T4366] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 249.685454][ T4313] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 249.870001][ T4366] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 249.892403][ T4366] usb 1-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 249.902938][ T4366] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 249.912425][ T4366] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 249.979419][ T4313] usb 2-1: Using ep0 maxpacket: 32 [ 249.982108][ T4366] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 249.995426][ T4366] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 250.003544][ T4366] usb 1-1: Product: syz [ 250.007826][ T4366] usb 1-1: Manufacturer: syz [ 250.024088][ T4366] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 250.124076][ T4313] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.740075][ T4313] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.841640][ T4713] usb 1-1: USB disconnect, device number 4 [ 252.847675][ T4313] usb 2-1: string descriptor 0 read error: -71 [ 252.860876][ T4313] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 252.889961][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 252.929986][ T4313] usb 2-1: config 0 descriptor?? [ 252.965817][ T4313] usb 2-1: can't set config #0, error -71 [ 253.011512][ T4313] usb 2-1: USB disconnect, device number 6 [ 255.760968][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.767387][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.866357][ T5512] binder: 5511:5512 ioctl c0306201 200000001440 returned -11 [ 263.846909][ T5551] binder: 5550:5551 ioctl c0306201 200000001440 returned -11 [ 264.481415][ T5561] netlink: 48 bytes leftover after parsing attributes in process `syz.3.314'. [ 266.859201][ T4334] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 267.811668][ T4334] usb 5-1: Using ep0 maxpacket: 32 [ 267.830887][ T4334] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.057834][ T4334] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 268.265820][ T4334] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 268.301538][ T4334] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 268.314791][ T4334] usb 5-1: Product: syz [ 268.322614][ T4334] usb 5-1: Manufacturer: syz [ 268.327875][ T4334] usb 5-1: SerialNumber: syz [ 268.347698][ T4334] usb 5-1: config 0 descriptor?? [ 268.532830][ T4334] hub 5-1:0.0: bad descriptor, ignoring hub [ 268.606021][ T4334] hub: probe of 5-1:0.0 failed with error -5 [ 270.437138][ T4366] usb 5-1: USB disconnect, device number 2 [ 270.632057][ T5600] netlink: 48 bytes leftover after parsing attributes in process `syz.4.326'. [ 272.629245][ T14] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 272.829144][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 272.837772][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.845484][ T5621] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 272.944846][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 272.992819][ T14] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 273.015950][ T14] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 273.047196][ T14] usb 5-1: Product: syz [ 273.078725][ T14] usb 5-1: Manufacturer: syz [ 273.084013][ T5621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.093965][ T14] usb 5-1: SerialNumber: syz [ 273.112924][ T5621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.135648][ T14] usb 5-1: config 0 descriptor?? [ 273.165566][ T14] hub 5-1:0.0: bad descriptor, ignoring hub [ 273.197676][ T14] hub: probe of 5-1:0.0 failed with error -5 [ 273.493284][ T5627] netlink: 48 bytes leftover after parsing attributes in process `syz.0.332'. [ 274.889425][ T22] usb 5-1: USB disconnect, device number 3 [ 274.926895][ T5633] binder: 5632:5633 ioctl c0306201 200000001440 returned -11 [ 282.909729][ T4334] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 284.051773][ T4334] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.139106][ T4334] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 285.152261][ T4334] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 285.161464][ T4334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.177320][ T4334] usb 3-1: config 0 descriptor?? [ 285.190722][ T4334] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 286.575851][ T14] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 287.045755][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 287.070146][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 287.082731][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.099908][ T14] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 287.157260][ T14] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 288.030207][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.037785][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.092079][ T14] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 288.139229][ T14] usb 4-1: Product: syz [ 288.150379][ T14] usb 4-1: Manufacturer: syz [ 288.155029][ T14] usb 4-1: SerialNumber: syz [ 288.171815][ T5693] netlink: 48 bytes leftover after parsing attributes in process `syz.0.353'. [ 288.196509][ T14] usb 4-1: config 0 descriptor?? [ 288.232416][ T4366] usb 3-1: USB disconnect, device number 7 [ 288.239420][ T14] hub 4-1:0.0: bad descriptor, ignoring hub [ 288.262908][ T14] hub: probe of 4-1:0.0 failed with error -5 [ 289.389137][ T14] usb 4-1: USB disconnect, device number 5 [ 289.610326][ T5707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 299.911137][ T5761] netlink: 48 bytes leftover after parsing attributes in process `syz.3.369'. [ 301.269895][ T5775] netlink: 48 bytes leftover after parsing attributes in process `syz.4.373'. [ 302.746752][ T5778] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 302.898401][ T5778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 302.939417][ T5778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 306.730536][ T5810] loop0: detected capacity change from 0 to 128 [ 306.899224][ T5810] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 306.931021][ T5810] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 308.037490][ T5821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'. [ 308.049616][ T4281] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 308.234515][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 308.409399][ T41] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 308.611072][ T41] usb 3-1: config 0 has no interfaces? [ 308.618833][ T41] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 308.647085][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.699109][ T41] usb 3-1: Product: syz [ 308.703347][ T41] usb 3-1: Manufacturer: syz [ 308.710029][ T41] usb 3-1: SerialNumber: syz [ 308.860009][ T41] usb 3-1: config 0 descriptor?? [ 309.070579][ T5823] netlink: 16 bytes leftover after parsing attributes in process `syz.2.384'. [ 309.127886][ T41] usb 3-1: USB disconnect, device number 8 [ 309.683930][ T5843] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 310.609858][ T5843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 310.619206][ T5843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 313.295167][ T5865] loop0: detected capacity change from 0 to 128 [ 313.581892][ T5865] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 313.632844][ T5865] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 313.712444][ T5872] input: syz0 as /devices/virtual/input/input9 [ 313.808592][ T4281] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 313.825203][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'. [ 313.913893][ T5877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.397'. [ 314.074664][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 316.969365][ T5899] input: syz0 as /devices/virtual/input/input10 [ 317.192911][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.200427][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.139900][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'. [ 318.525242][ T5906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.405'. [ 319.554215][ T5921] loop1: detected capacity change from 0 to 128 [ 319.635162][ T5921] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 319.689500][ T5921] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 319.894575][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 321.809472][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 322.191921][ T14] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 322.956451][ T14] usb 1-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 322.967147][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 322.976681][ T14] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 322.996515][ T14] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 323.039988][ T14] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 323.048190][ T14] usb 1-1: Product: syz [ 323.052818][ T14] usb 1-1: Manufacturer: syz [ 323.092667][ T14] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 323.347077][ T14] usb 1-1: USB disconnect, device number 5 [ 323.440391][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.418'. [ 324.946973][ T5957] fuse: Bad value for 'fd' [ 331.613565][ T41] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 331.809202][ T41] usb 2-1: Using ep0 maxpacket: 8 [ 331.816201][ T41] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 332.790948][ T41] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.804484][ T41] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 332.814746][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.850776][ T41] usbtmc 2-1:16.0: bulk endpoints not found [ 334.743366][ T4313] usb 2-1: USB disconnect, device number 7 [ 335.244230][ T6006] fuse: Bad value for 'fd' [ 337.879313][ T4366] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 338.441203][ T4366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.478766][ T4366] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 338.638922][ T4366] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 338.736393][ T4366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.836496][ T6022] fuse: Unknown parameter ';K9"»ü§¾0°RF‰N¸® ­ Rý+–ÊfÃ4võP]°r‹d(C2“7W¥ì‹ŽHxJ÷Á¸âÖ¯8€YÊ rejected, failed to enable media [ 473.239096][ T4313] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 473.439207][ T4313] usb 2-1: Using ep0 maxpacket: 32 [ 473.450534][ T4313] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.598633][ T4313] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 473.935132][ T41] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 475.617464][ T4313] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 475.672895][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 475.716054][ T4313] usb 2-1: config 0 descriptor?? [ 477.421002][ T4313] usb 2-1: can't set config #0, error -71 [ 478.931905][ T4313] usb 2-1: USB disconnect, device number 12 [ 481.958338][ T6919] loop3: detected capacity change from 0 to 2048 [ 483.104878][ T6919] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 483.490533][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 491.999901][ T41] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 492.213739][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.273493][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.350238][ T41] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 493.415811][ T41] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 493.572986][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.641659][ T41] usb 5-1: config 0 descriptor?? [ 495.442552][ T41] usbhid 5-1:0.0: can't add hid device: -71 [ 495.448650][ T41] usbhid: probe of 5-1:0.0 failed with error -71 [ 495.505399][ T41] usb 5-1: USB disconnect, device number 7 [ 496.179071][ T41] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 497.135673][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.164079][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.021836][ T41] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 499.339348][ T41] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 499.477436][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.656096][ T41] usb 5-1: config 0 descriptor?? [ 499.767517][ T41] usb 5-1: can't set config #0, error -71 [ 499.889109][ T41] usb 5-1: USB disconnect, device number 8 [ 501.511041][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.517444][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.899059][ T128] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 505.211003][ T128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.237865][ T128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.266389][ T128] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 505.301136][ T128] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 505.402320][ T128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.875260][ T128] usb 1-1: config 0 descriptor?? [ 506.326064][ T128] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 506.558297][ T128] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 508.361291][ T7052] fuse: Bad value for 'fd' [ 510.638565][ T41] usb 1-1: USB disconnect, device number 7 [ 511.022620][ T7060] netlink: 96 bytes leftover after parsing attributes in process `syz.1.711'. [ 511.287302][ T7072] netlink: 16 bytes leftover after parsing attributes in process `syz.4.709'. [ 516.479152][ T4713] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 516.670957][ T4713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.703861][ T4713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.746846][ T4713] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 516.815253][ T4713] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 516.830974][ T4713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.871702][ T4713] usb 4-1: config 0 descriptor?? [ 517.284671][ T4713] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 517.321382][ T4713] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 517.907732][ T7117] netlink: 16 bytes leftover after parsing attributes in process `syz.2.726'. [ 519.382099][ T14] usb 4-1: USB disconnect, device number 14 [ 523.950160][ T7156] netlink: 32 bytes leftover after parsing attributes in process `syz.0.735'. [ 528.039451][ T4713] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 528.274642][ T4713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.334372][ T4713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.425439][ T4713] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 528.595305][ T4713] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 528.685816][ T4713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.757152][ T4713] usb 4-1: config 0 descriptor?? [ 529.597474][ T4713] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 529.710646][ T4713] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 531.169075][ T4713] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 531.649146][ T4713] usb 4-1: device descriptor read/64, error -32 [ 531.731997][ T7200] binder: BINDER_SET_CONTEXT_MGR already set [ 531.753845][ T7200] binder: 7198:7200 ioctl 4018620d 2000000002c0 returned -16 [ 532.646106][ T14] usb 4-1: USB disconnect, device number 15 [ 539.887564][ T7234] fuse: Bad value for 'fd' [ 541.359115][ T4257] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 541.647942][ T4257] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.679602][ T4257] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.690656][ T4257] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 542.704480][ T4257] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 542.714488][ T4257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.815489][ T4257] usb 3-1: config 0 descriptor?? [ 543.765685][ T4257] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 545.019399][ T4257] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 545.063280][ T4257] usb 3-1: USB disconnect, device number 11 [ 545.455787][ T7255] fido_id[7255]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 546.147439][ T7274] fuse: Bad value for 'fd' [ 548.558256][ T7289] netlink: 24 bytes leftover after parsing attributes in process `syz.0.776'. [ 548.709012][ T4341] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 548.903250][ T4341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.954894][ T4341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.966335][ T4341] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 548.979929][ T4341] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 548.993878][ T4341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.005480][ T4341] usb 4-1: config 0 descriptor?? [ 549.422722][ T4341] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 549.479543][ T4341] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 551.480513][ T6590] usb 4-1: USB disconnect, device number 16 [ 553.018890][ T7319] fuse: Bad value for 'fd' [ 556.659103][ T14] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 556.869237][ T4341] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 556.883151][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.933917][ T7346] netlink: 96 bytes leftover after parsing attributes in process `syz.2.795'. [ 556.943042][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.953384][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 556.966874][ T14] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 557.629741][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.682546][ T14] usb 2-1: config 0 descriptor?? [ 557.749098][ T4341] usb 5-1: Using ep0 maxpacket: 32 [ 557.776880][ T4341] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.884984][ T4341] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 558.090652][ T4341] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 558.119374][ T4341] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 558.127763][ T4341] usb 5-1: Product: syz [ 558.144463][ T4341] usb 5-1: Manufacturer: syz [ 558.197345][ T4341] usb 5-1: SerialNumber: syz [ 558.233795][ T14] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 558.266803][ T4341] usb 5-1: config 0 descriptor?? [ 558.311961][ T14] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 558.383207][ T7352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.796'. [ 559.859223][ T14] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 559.886306][ T7365] fuse: Bad value for 'fd' [ 560.946826][ T6560] usb 5-1: USB disconnect, device number 9 [ 561.906217][ T6590] usb 2-1: USB disconnect, device number 13 [ 562.961411][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.967879][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.910469][ T7209] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 566.639736][ T7209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.679296][ T7209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.689227][ T7209] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 566.746166][ T7209] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 566.755457][ T7209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.790467][ T7209] usb 3-1: config 0 descriptor?? [ 568.314455][ T7209] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 568.369443][ T7209] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 569.839212][ T6590] usb 3-1: reset high-speed USB device number 12 using dummy_hcd [ 570.009162][ T6590] usb 3-1: device descriptor read/64, error -32 [ 570.952122][ T7209] usb 3-1: USB disconnect, device number 12 [ 574.980826][ T7209] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 575.190758][ T7209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.244509][ T7209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.307785][ T7209] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 575.358358][ T7209] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 575.371494][ T7209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.330997][ T7209] usb 1-1: config 0 descriptor?? [ 577.393108][ T7209] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 577.434758][ T7209] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 578.869310][ T7209] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 579.912747][ T6590] usb 1-1: USB disconnect, device number 8 [ 583.129030][ T4366] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 583.269211][ T7209] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 583.530748][ T4366] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.629152][ T7209] usb 2-1: Using ep0 maxpacket: 32 [ 583.722334][ T7209] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.893221][ T4366] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.924410][ T7209] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 583.934556][ T4366] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 583.953824][ T4366] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 583.976983][ T7209] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 584.038299][ T7209] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 584.049113][ T4366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.057199][ T7209] usb 2-1: Product: syz [ 584.067684][ T7209] usb 2-1: Manufacturer: syz [ 584.082648][ T4366] usb 4-1: config 0 descriptor?? [ 584.087785][ T7209] usb 2-1: SerialNumber: syz [ 584.113086][ T7209] usb 2-1: config 0 descriptor?? [ 584.505053][ T4366] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 584.662632][ T4366] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 585.935589][ T4366] usb 2-1: USB disconnect, device number 14 [ 586.951919][ T4341] usb 4-1: USB disconnect, device number 17 [ 591.169001][ T14] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 591.800498][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.827339][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.959061][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 592.019994][ T14] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 592.057413][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.097015][ T14] usb 5-1: config 0 descriptor?? [ 593.185305][ T14] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 593.248055][ T14] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 594.639195][ T14] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 595.583934][ T7209] usb 5-1: USB disconnect, device number 10 [ 599.369062][ T6560] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 600.279660][ T7668] Can't find ip_set type ha [ 600.481129][ T6560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.738063][ T6560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.865965][ T6560] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 600.882575][ T6560] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 600.892178][ T6560] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.934135][ T6560] usb 1-1: config 0 descriptor?? [ 601.362679][ T6560] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 601.421327][ T6560] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 602.621890][ T7209] usb 1-1: USB disconnect, device number 9 [ 610.354239][ T4257] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 611.098977][ T14] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 611.355098][ T4257] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.366484][ T4257] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.377086][ T4257] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 611.387520][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 611.390711][ T4257] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 611.404747][ T4257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.542059][ T4257] usb 2-1: config 0 descriptor?? [ 611.639527][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.972458][ T4257] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 611.996340][ T4257] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 612.079131][ T14] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 612.088271][ T14] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 612.097128][ T14] usb 1-1: Product: syz [ 612.101553][ T14] usb 1-1: Manufacturer: syz [ 612.106388][ T14] usb 1-1: SerialNumber: syz [ 612.224962][ T14] usb 1-1: config 0 descriptor?? [ 612.719133][ T14] hub 1-1:0.0: bad descriptor, ignoring hub [ 612.725120][ T14] hub: probe of 1-1:0.0 failed with error -5 [ 613.828998][ T6560] usb 2-1: reset high-speed USB device number 15 using dummy_hcd [ 614.113078][ T7209] usb 1-1: USB disconnect, device number 10 [ 614.407763][ T7768] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 614.438146][ T7768] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 614.509132][ T7768] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 614.518790][ T7768] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 614.536820][ T7768] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 614.544282][ T7768] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 614.669781][ T128] usb 2-1: USB disconnect, device number 15 [ 616.629217][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 617.352177][ T7783] device syzkaller0 entered promiscuous mode [ 618.499027][ T7209] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 618.719010][ T4281] Bluetooth: hci5: command 0x041b tx timeout [ 618.724859][ T7209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.744941][ T7209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.759185][ T7209] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 618.773846][ T7209] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 618.795531][ T7209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.836448][ T7209] usb 2-1: config 0 descriptor?? [ 619.257119][ T7209] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 619.290106][ T7209] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 620.282712][ T7209] usb 2-1: USB disconnect, device number 16 [ 620.464680][ T7812] fido_id[7812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 620.798997][ T4281] Bluetooth: hci5: command 0x040f tx timeout [ 622.204347][ T7827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.926'. [ 622.869290][ T4281] Bluetooth: hci5: command 0x0419 tx timeout [ 624.391235][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.397621][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.364645][ T4257] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 628.572555][ T4257] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.641713][ T4257] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.544863][ T4257] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 629.590324][ T4257] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 629.619076][ T4257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.676956][ T4257] usb 5-1: config 0 descriptor?? [ 630.156712][ T4257] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 630.351796][ T4257] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 632.206827][ T4257] usb 5-1: USB disconnect, device number 11 [ 634.790491][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'. [ 634.820523][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.943'. [ 635.873608][ T6716] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.616016][ T6716] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.469270][ T4257] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 637.481207][ T6716] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.673276][ T4257] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.733682][ T4257] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.745672][ T4257] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 637.759750][ T4257] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 637.769247][ T4257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.781173][ T4257] usb 3-1: config 0 descriptor?? [ 637.891213][ T6716] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.814702][ T4257] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 638.841818][ T4257] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 639.241637][ T7767] chnl_net:caif_netlink_parms(): no params data found [ 640.096035][ T7767] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.135299][ T7767] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.284045][ T7767] device bridge_slave_0 entered promiscuous mode [ 640.349195][ T14] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 640.396073][ T7767] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.419260][ T7767] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.467329][ T7767] device bridge_slave_1 entered promiscuous mode [ 641.189953][ T7209] usb 3-1: USB disconnect, device number 13 [ 642.213862][ T7767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.330172][ T7767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.528511][ T7767] team0: Port device team_slave_0 added [ 642.613940][ T7767] team0: Port device team_slave_1 added [ 643.616311][ T7767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.634629][ T7767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.693968][ T7767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.995875][ T7767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.002975][ T7767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.029852][ T7767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.492787][ T7767] device hsr_slave_0 entered promiscuous mode [ 644.571392][ T7767] device hsr_slave_1 entered promiscuous mode [ 644.667999][ T7767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 644.726187][ T7767] Cannot create hsr debugfs directory [ 644.799014][ T14] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 645.001220][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.018273][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.036143][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 645.057359][ T14] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 645.139431][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.150216][ T14] usb 3-1: config 0 descriptor?? [ 645.589466][ T14] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 645.661758][ T14] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 646.949017][ T7209] usb 3-1: reset high-speed USB device number 14 using dummy_hcd [ 648.426922][ T6716] device hsr_slave_0 left promiscuous mode [ 648.539915][ T14] usb 3-1: USB disconnect, device number 14 [ 648.572805][ T6716] device hsr_slave_1 left promiscuous mode [ 648.682905][ T6716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.824538][ T6716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.080683][ T6716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.187552][ T6716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.301795][ T8007] fido_id[8007]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 649.328190][ T6716] bridge0: port 3(batadv0) entered disabled state [ 649.522049][ T8011] syz.4.970 uses obsolete (PF_INET,SOCK_PACKET) [ 649.547199][ T6716] device bridge_slave_1 left promiscuous mode [ 649.581257][ T6716] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.602438][ T6716] device bridge_slave_0 left promiscuous mode [ 649.680103][ T6716] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.616097][ T6716] device veth1_macvtap left promiscuous mode [ 650.660374][ T6716] device veth0_macvtap left promiscuous mode [ 650.715627][ T6716] device veth1_vlan left promiscuous mode [ 650.733684][ T6716] device veth0_vlan left promiscuous mode [ 654.489649][ T8056] binder: 8055:8056 ioctl 4018620d 0 returned -22 [ 654.657797][ T6560] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 654.862096][ T6560] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.894552][ T6560] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.904831][ T6560] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 654.918327][ T6560] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 654.928712][ T6560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.940397][ T6560] usb 2-1: config 0 descriptor?? [ 655.182063][ T6716] team0 (unregistering): Port device team_slave_1 removed [ 655.306410][ T6716] team0 (unregistering): Port device team_slave_0 removed [ 655.367658][ T6560] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 655.435756][ T6560] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 655.610882][ T6716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.628587][ T14] usb 2-1: USB disconnect, device number 17 [ 656.646409][ T8063] fido_id[8063]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 656.713316][ T6716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.189366][ T8096] binder: 8095:8096 ioctl 4018620d 0 returned -22 [ 666.381995][ T7768] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 666.396685][ T7768] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 666.428030][ T7768] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 666.519175][ T7768] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 666.527995][ T7768] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 666.535963][ T7768] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 666.559666][ T6716] bond0 (unregistering): Released all slaves [ 667.059063][ T6560] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 667.176702][ T7767] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 667.196646][ T7767] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 667.268034][ T7767] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 667.281824][ T6560] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.298983][ T6560] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.309668][ T6560] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 667.329619][ T6560] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 667.339360][ T6560] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.350873][ T6560] usb 3-1: config 0 descriptor?? [ 667.414559][ T7767] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 667.783165][ T6560] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 667.838166][ T6560] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 668.008460][ T7767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.322396][ T7767] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.375980][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 668.394534][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 668.491812][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 668.509132][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 668.518208][ T6443] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.525401][ T6443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.659603][ T7768] Bluetooth: hci0: command 0x0409 tx timeout [ 668.684877][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 668.694202][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 668.702897][ T6443] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.710114][ T6443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.720597][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 668.731161][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 668.751080][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 668.804820][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 668.831639][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 668.874002][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 668.976466][ T6716] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.041571][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 669.068788][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 669.117845][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 669.185513][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 669.226371][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 669.255516][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 669.365949][ T6716] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.741127][ T6716] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.869722][ T6590] usb 3-1: USB disconnect, device number 15 [ 670.292435][ T6716] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.719096][ T7768] Bluetooth: hci0: command 0x041b tx timeout [ 671.883665][ T8098] chnl_net:caif_netlink_parms(): no params data found [ 672.243597][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 672.259927][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 672.308061][ T7767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.670489][ T8172] binder: 8170:8172 ioctl 4018620d 0 returned -22 [ 672.789233][ T7768] Bluetooth: hci0: command 0x040f tx timeout [ 672.810019][ T8098] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.817635][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.826437][ T8098] device bridge_slave_0 entered promiscuous mode [ 672.837424][ T8098] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.854997][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.879233][ T8098] device bridge_slave_1 entered promiscuous mode [ 674.873124][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 675.904592][ T8098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.078096][ T8098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.109276][ T6560] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 676.223837][ T8098] team0: Port device team_slave_0 added [ 676.300804][ T6560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.339937][ T8098] team0: Port device team_slave_1 added [ 676.353946][ T6560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.379010][ T6560] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 676.449584][ T6560] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 676.459253][ T6560] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.477663][ T6560] usb 1-1: config 0 descriptor?? [ 676.971084][ T6560] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 676.988304][ T6560] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 677.080596][ T8098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.170601][ T8098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.259193][ T8098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.322085][ T7768] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 677.334285][ T7768] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 677.343114][ T7768] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 677.351371][ T7768] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 677.361503][ T7768] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 677.361741][ T8098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.377253][ T7768] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 677.403005][ T8098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.491320][ T8098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.154445][ T8098] device hsr_slave_0 entered promiscuous mode [ 678.205270][ T8098] device hsr_slave_1 entered promiscuous mode [ 679.089770][ T4366] usb 1-1: USB disconnect, device number 11 [ 679.429205][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 679.959684][ T6716] device hsr_slave_0 left promiscuous mode [ 680.011696][ T6716] device hsr_slave_1 left promiscuous mode [ 680.042501][ T6716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.061915][ T6716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.082952][ T6716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.206378][ T6716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.326922][ T6716] device bridge_slave_1 left promiscuous mode [ 680.334565][ T6716] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.382655][ T6716] device bridge_slave_0 left promiscuous mode [ 680.409857][ T6716] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.800073][ T6716] device veth1_macvtap left promiscuous mode [ 680.806140][ T6716] device veth0_macvtap left promiscuous mode [ 681.173956][ T6716] device veth1_vlan left promiscuous mode [ 681.273793][ T6716] device veth0_vlan left promiscuous mode [ 681.297845][ T8233] binder: BINDER_SET_CONTEXT_MGR already set [ 681.328271][ T8233] binder: 8232:8233 ioctl 4018620d 2000000002c0 returned -16 [ 681.509091][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 683.589099][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 685.672691][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 685.682894][ T7209] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 685.840772][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.847109][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.057528][ T7209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.316950][ T7209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.399842][ T7209] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 686.418288][ T7209] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 686.428138][ T7209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.457510][ T7209] usb 1-1: config 0 descriptor?? [ 686.481742][ T6716] team0 (unregistering): Port device team_slave_1 removed [ 686.670250][ T4257] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 686.689668][ T6716] team0 (unregistering): Port device team_slave_0 removed [ 686.750913][ T6716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.844920][ T6716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.879021][ T4257] usb 3-1: Using ep0 maxpacket: 32 [ 686.888305][ T7209] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 686.899355][ T4257] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.924986][ T4257] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 686.956742][ T4257] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 686.967260][ T4257] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 686.976601][ T4257] usb 3-1: Product: syz [ 686.981510][ T4257] usb 3-1: Manufacturer: syz [ 686.986256][ T4257] usb 3-1: SerialNumber: syz [ 686.994491][ T4257] usb 3-1: config 0 descriptor?? [ 687.002063][ T4257] hub 3-1:0.0: bad descriptor, ignoring hub [ 687.008224][ T4257] hub: probe of 3-1:0.0 failed with error -5 [ 687.168009][ T7209] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 687.363592][ T7209] usb 1-1: USB disconnect, device number 12 [ 687.609284][ T4257] usb 3-1: USB disconnect, device number 16 [ 688.756421][ T8267] fido_id[8267]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 689.402995][ T6716] bond0 (unregistering): Released all slaves [ 689.720484][ T8098] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 689.771905][ T8098] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 689.829599][ T8098] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 689.876217][ T8200] chnl_net:caif_netlink_parms(): no params data found [ 689.960262][ T8098] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 690.146189][ T8284] binder: BINDER_SET_CONTEXT_MGR already set [ 690.186476][ T8284] binder: 8283:8284 ioctl 4018620d 2000000002c0 returned -16 [ 690.358200][ T8200] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.381865][ T8200] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.422666][ T8200] device bridge_slave_0 entered promiscuous mode [ 690.488428][ T8200] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.518518][ T8200] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.561351][ T8200] device bridge_slave_1 entered promiscuous mode [ 690.755224][ T8098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.810317][ T8200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.848064][ T8200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.132588][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 691.163540][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 691.184669][ T8098] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.212649][ T8200] team0: Port device team_slave_0 added [ 692.184824][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 692.211618][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 692.230834][ T6694] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.237998][ T6694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.438997][ T6560] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 693.895439][ T8200] team0: Port device team_slave_1 added [ 693.997557][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 694.052408][ T8200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.067965][ T8200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.096674][ T6560] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.117808][ T6560] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.145902][ T6560] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 694.184107][ T8200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.198423][ T6560] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 694.231048][ T8200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.238576][ T8200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.281964][ T6560] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.353189][ T6560] usb 3-1: config 0 descriptor?? [ 694.389048][ T8200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.554422][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 694.572576][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 694.582042][ T6694] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.589258][ T6694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.769257][ T6560] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 694.816975][ T6560] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 694.959791][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 694.980846][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 695.040395][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 695.113046][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 695.133173][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 695.231799][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 695.275691][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 695.302799][ T8200] device hsr_slave_0 entered promiscuous mode [ 695.325671][ T8200] device hsr_slave_1 entered promiscuous mode [ 695.382022][ T8200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 695.395584][ T8200] Cannot create hsr debugfs directory [ 695.408287][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 695.450847][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 695.504086][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 695.516708][ T6443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 695.533622][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 697.030069][ T4334] usb 3-1: USB disconnect, device number 17 [ 697.437433][ T6439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 697.469238][ T6439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 697.622218][ T8098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.132167][ T8200] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 698.299390][ T8200] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 698.350231][ T8200] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 698.449910][ T8200] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 698.489610][ T6716] device hsr_slave_0 left promiscuous mode [ 698.507880][ T6716] device hsr_slave_1 left promiscuous mode [ 698.538174][ T6716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.566234][ T6716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.602271][ T6716] device bridge_slave_1 left promiscuous mode [ 698.608516][ T6716] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.632310][ T6716] device bridge_slave_0 left promiscuous mode [ 698.638619][ T6716] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.709164][ T6716] team0 (unregistering): Port device team_slave_1 removed [ 702.180838][ T6716] team0 (unregistering): Port device team_slave_0 removed [ 702.500248][ T6716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.857305][ T6716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.391129][ T6716] bond0 (unregistering): Released all slaves [ 704.591922][ T8380] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1038'. [ 706.070366][ T8200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.003724][ T8200] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.011981][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 707.069964][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 707.163808][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 707.187021][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 707.230157][ T6691] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.237338][ T6691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.279361][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 707.306403][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 707.331672][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 707.359656][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 707.379688][ T6691] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.386819][ T6691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.456910][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 708.331624][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 708.340781][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 708.350072][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 708.359243][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 708.371317][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 708.381548][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 708.390029][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 708.439664][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 708.453328][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 708.484721][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 708.514815][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 708.540985][ T8200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 708.558020][ T8098] device veth0_vlan entered promiscuous mode [ 708.605259][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 708.630270][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 708.687371][ T8098] device veth1_vlan entered promiscuous mode [ 708.719692][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 708.728802][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 708.790190][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 708.860958][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 708.898767][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 709.719909][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 709.731095][ T8098] device veth0_macvtap entered promiscuous mode [ 709.763247][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 709.803183][ T8098] device veth1_macvtap entered promiscuous mode [ 709.860425][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.889315][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.919142][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.932670][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.946033][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.957194][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.970183][ T8098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.981679][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 710.012395][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 710.042079][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.073618][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.108536][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.131275][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.166096][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.188427][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.226944][ T8098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.248779][ T8098] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.288740][ T8098] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.345641][ T8098] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.729026][ T8098] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.742990][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 711.756700][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 712.362545][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 712.629594][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 712.682845][ T8200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.860350][ T6836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.888903][ T6836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.944718][ T6694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.965470][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 713.007462][ T6694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.053374][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 714.235520][ T8484] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1055'. [ 714.816758][ T6444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 714.856209][ T6444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 714.934683][ T6444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 715.060088][ T6444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 715.274442][ T8200] device veth0_vlan entered promiscuous mode [ 715.321235][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 715.368665][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 715.557233][ T8200] device veth1_vlan entered promiscuous mode [ 715.834310][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 715.867820][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 715.998294][ T8200] device veth0_macvtap entered promiscuous mode [ 716.126944][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 716.160186][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 716.204344][ T8200] device veth1_macvtap entered promiscuous mode [ 716.241591][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 716.283100][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 717.176475][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 717.221285][ T8508] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 717.532107][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.578744][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.589318][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.614651][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.772768][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.790630][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.804891][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.521452][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.533816][ T8200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.544763][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 718.556845][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.566765][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 718.581089][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.637415][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 718.732401][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.749542][ T8527] binder: 8526:8527 ioctl c0306201 0 returned -14 [ 718.831061][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 718.856289][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.911017][ T8200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 718.969758][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 719.020554][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 719.122122][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 719.207811][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 719.302916][ T8200] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.342534][ T8200] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.384666][ T8200] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.426997][ T8200] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.826744][ T6851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.885385][ T6851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.960871][ T6439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 720.073068][ T6813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.097499][ T6813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.154796][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 722.379083][ T6560] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 722.579279][ T6560] usb 2-1: Using ep0 maxpacket: 32 [ 722.587158][ T6560] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.742500][ T6560] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 724.588897][ T6560] usb 2-1: string descriptor 0 read error: -71 [ 724.612675][ T6560] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 725.428328][ T6560] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 726.580830][ T6560] usb 2-1: config 0 descriptor?? [ 726.634925][ T6560] usb 2-1: can't set config #0, error -71 [ 726.686650][ T6560] usb 2-1: USB disconnect, device number 18 [ 726.847207][ T8579] binder: 8578:8579 ioctl c0306201 0 returned -14 [ 728.648934][ T6590] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 728.956930][ T6590] usb 2-1: Using ep0 maxpacket: 32 [ 728.989164][ T6590] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.009187][ T6590] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 729.401219][ T6590] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 729.449051][ T6590] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 729.457414][ T6590] usb 2-1: Product: syz [ 729.477737][ T6590] usb 2-1: Manufacturer: syz [ 729.498550][ T6590] usb 2-1: SerialNumber: syz [ 729.810542][ T8599] device syzkaller0 entered promiscuous mode [ 729.888771][ T6590] usb 2-1: config 0 descriptor?? [ 730.055196][ T6590] hub 2-1:0.0: bad descriptor, ignoring hub [ 730.309111][ T6590] hub: probe of 2-1:0.0 failed with error -5 [ 730.682479][ T8603] infiniband syz1: set active [ 731.124644][ T8603] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 731.296466][ T8603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 731.327346][ T8603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 731.490853][ T8603] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 732.798119][ T8607] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1078'. [ 733.379521][ T41] usb 2-1: USB disconnect, device number 19 [ 734.085396][ T8618] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1079'. [ 734.144615][ T8621] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1080'. [ 736.247863][ T4281] Bluetooth: hci2: link tx timeout [ 736.253967][ T4281] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 736.265400][ T4281] Bluetooth: hci2: link tx timeout [ 736.271030][ T4281] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 736.310888][ T8631] binder: BINDER_SET_CONTEXT_MGR already set [ 736.316959][ T8631] binder: 8630:8631 ioctl 4018620d 2000000002c0 returned -16 [ 738.309781][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 738.409101][ T7220] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 738.639153][ T7220] usb 6-1: Using ep0 maxpacket: 32 [ 739.533438][ T8666] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1092'. [ 739.607715][ T7220] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.843241][ T7220] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 739.914888][ T7220] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 739.988252][ T7220] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 740.071285][ T7220] usb 6-1: Product: syz [ 740.121437][ T7220] usb 6-1: Manufacturer: syz [ 740.132051][ T7220] usb 6-1: SerialNumber: syz [ 740.148712][ T7220] usb 6-1: config 0 descriptor?? [ 740.336267][ T7220] usb 6-1: can't set config #0, error -71 [ 740.364126][ T7220] usb 6-1: USB disconnect, device number 2 [ 740.388972][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 746.348937][ T4334] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 747.271260][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.277656][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.439071][ T4334] usb 7-1: Using ep0 maxpacket: 32 [ 747.523604][ T4334] usb 7-1: device descriptor read/all, error -71 [ 747.829980][ T8708] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1104'. [ 754.413785][ T8740] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1111'. [ 757.599011][ T4334] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 766.862395][ T8791] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1128'. [ 768.971041][ T8803] loop0: detected capacity change from 0 to 1024 [ 770.722962][ T8803] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 772.731596][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 774.979038][ T128] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 775.229038][ T128] usb 6-1: Using ep0 maxpacket: 32 [ 775.236231][ T128] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.506020][ T128] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 775.526448][ T128] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 776.281674][ T128] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 776.398923][ T128] usb 6-1: Product: syz [ 776.403261][ T128] usb 6-1: Manufacturer: syz [ 776.492330][ T128] usb 6-1: SerialNumber: syz [ 776.509515][ T128] usb 6-1: config 0 descriptor?? [ 776.557029][ T128] usb 6-1: can't set config #0, error -71 [ 776.583270][ T128] usb 6-1: USB disconnect, device number 3 [ 776.909218][ T8854] loop5: detected capacity change from 0 to 1024 [ 776.997760][ T8854] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 777.151935][ T8200] EXT4-fs (loop5): unmounting filesystem. [ 777.449020][ T7209] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 777.639003][ T7209] usb 3-1: Using ep0 maxpacket: 32 [ 780.477222][ T7209] usb 3-1: unable to read config index 0 descriptor/all [ 780.504818][ T7209] usb 3-1: can't read configurations, error -71 [ 791.057484][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1171'. [ 795.429026][ T7768] Bluetooth: hci0: command 0x0406 tx timeout [ 808.712618][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.719228][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.312680][ T9002] loop2: detected capacity change from 0 to 1024 [ 810.423069][ T9002] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 810.750290][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 817.158578][ T9053] Driver unsupported XDP return value 0 on prog (id 94) dev N/A, expect packet loss! [ 826.825209][ T9117] loop6: detected capacity change from 0 to 1024 [ 826.980001][ T9117] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 827.367864][ T8098] EXT4-fs (loop6): unmounting filesystem. [ 837.005758][ T9173] serio: Serial port ptm0 [ 838.908919][ T6590] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 839.098917][ T6590] usb 2-1: Using ep0 maxpacket: 32 [ 839.106763][ T6590] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.158056][ T6590] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 839.232225][ T6590] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 839.280410][ T6590] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 839.359576][ T6590] usb 2-1: Product: syz [ 839.372427][ T6590] usb 2-1: Manufacturer: syz [ 839.392864][ T6590] usb 2-1: SerialNumber: syz [ 839.441648][ T6590] usb 2-1: config 0 descriptor?? [ 839.497942][ T6590] hub 2-1:0.0: bad descriptor, ignoring hub [ 839.516892][ T9203] loop6: detected capacity change from 0 to 512 [ 839.547378][ T6590] hub: probe of 2-1:0.0 failed with error -5 [ 839.662801][ T9203] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 839.682140][ T9203] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 840.008323][ T9203] EXT4-fs error (device loop6): ext4_xattr_block_find:1838: inode #12: comm syz.6.1249: corrupted xattr block 6 [ 840.839332][ T8098] EXT4-fs (loop6): unmounting filesystem. [ 842.003408][ T9215] loop2: detected capacity change from 0 to 512 [ 842.191232][ T9215] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 842.234349][ T9215] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 842.336598][ T9215] EXT4-fs error (device loop2): ext4_xattr_block_find:1838: inode #12: comm syz.2.1251: corrupted xattr block 6 [ 842.587872][ T9225] serio: Serial port ptm0 [ 842.642177][ T6590] usb 2-1: USB disconnect, device number 20 [ 842.797482][ T4275] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2935: inode #12: comm syz-executor: corrupted xattr block 6 [ 842.819871][ T4275] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 842.836702][ T4275] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2935: inode #15: comm syz-executor: corrupted xattr block 33 [ 842.877465][ T4275] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 843.069519][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 848.115682][ T6590] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 848.301912][ T6590] usb 3-1: Using ep0 maxpacket: 32 [ 848.322709][ T6590] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.339035][ T6590] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 848.365165][ T6590] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 848.384729][ T6590] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 848.393940][ T6590] usb 3-1: Product: syz [ 848.399717][ T6590] usb 3-1: Manufacturer: syz [ 848.404347][ T6590] usb 3-1: SerialNumber: syz [ 848.437274][ T6590] usb 3-1: config 0 descriptor?? [ 849.380010][ T6560] usb 3-1: USB disconnect, device number 20 [ 851.614797][ T9279] loop2: detected capacity change from 0 to 1024 [ 851.707831][ T9279] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 852.857291][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 853.048989][ T14] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 853.365633][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 854.230800][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.248998][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 854.272264][ T14] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 854.289114][ T14] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 854.297456][ T14] usb 2-1: Product: syz [ 854.302734][ T14] usb 2-1: Manufacturer: syz [ 854.307468][ T14] usb 2-1: SerialNumber: syz [ 854.315175][ T14] usb 2-1: config 0 descriptor?? [ 854.334424][ T14] hub 2-1:0.0: bad descriptor, ignoring hub [ 854.378986][ T14] hub: probe of 2-1:0.0 failed with error -5 [ 855.705552][ T9308] ip6t_srh: unknown srh match flags 4000 [ 855.712790][ T6560] usb 2-1: USB disconnect, device number 21 [ 855.951620][ T9316] serio: Serial port ptm0 [ 860.329077][ T6590] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 860.569937][ T6590] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.529165][ T6590] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.542258][ T6590] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 861.559080][ T6590] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 861.588916][ T6590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.607518][ T6590] usb 1-1: config 0 descriptor?? [ 863.012906][ T6590] usbhid 1-1:0.0: can't add hid device: -71 [ 863.029422][ T6590] usbhid: probe of 1-1:0.0 failed with error -71 [ 863.075710][ T6590] usb 1-1: USB disconnect, device number 14 [ 864.867787][ T41] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 865.059016][ T41] usb 6-1: Using ep0 maxpacket: 32 [ 865.066062][ T41] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.123678][ T41] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 865.165184][ T41] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 865.191144][ T41] usb 6-1: Product: syz [ 865.211409][ T41] usb 6-1: Manufacturer: syz [ 865.216059][ T41] usb 6-1: SerialNumber: syz [ 865.231760][ T41] usb 6-1: config 0 descriptor?? [ 865.241865][ T41] hub 6-1:0.0: bad descriptor, ignoring hub [ 865.366932][ T41] hub: probe of 6-1:0.0 failed with error -5 [ 866.907970][ T9378] loop6: detected capacity change from 0 to 512 [ 867.100872][ T9378] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 867.199196][ T7209] usb 6-1: USB disconnect, device number 4 [ 867.212388][ T9378] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 869.125690][ T9378] EXT4-fs error (device loop6): ext4_xattr_block_find:1838: inode #12: comm syz.6.1296: corrupted xattr block 6 [ 870.151145][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.157593][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.646368][ T9378] EXT4-fs error (device loop6): ext4_xattr_block_get:546: inode #12: comm syz.6.1296: corrupted xattr block 6 [ 871.936957][ T8098] EXT4-fs (loop6): unmounting filesystem. [ 872.508958][ T14] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 872.573428][ T9408] loop5: detected capacity change from 0 to 1024 [ 872.714021][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.768119][ T9408] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 872.787466][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.889518][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 874.801843][ T8200] EXT4-fs (loop5): unmounting filesystem. [ 875.692585][ T14] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 875.957425][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.970163][ T14] usb 2-1: config 0 descriptor?? [ 875.982643][ T14] usb 2-1: can't set config #0, error -71 [ 875.989917][ T14] usb 2-1: USB disconnect, device number 22 [ 876.093690][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1307'. [ 877.969140][ T14] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 878.009849][ T9433] device pim6reg1 entered promiscuous mode [ 878.169129][ T14] usb 7-1: Using ep0 maxpacket: 32 [ 878.185270][ T14] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.228992][ T14] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 879.325624][ T14] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 880.700758][ T14] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 881.685953][ T14] usb 7-1: Product: syz [ 881.690598][ T14] usb 7-1: Manufacturer: syz [ 881.695330][ T14] usb 7-1: SerialNumber: syz [ 881.709840][ T14] usb 7-1: config 0 descriptor?? [ 881.853119][ T14] usb 7-1: can't set config #0, error -71 [ 881.890087][ T14] usb 7-1: USB disconnect, device number 4 [ 882.147878][ T9449] loop5: detected capacity change from 0 to 512 [ 882.290065][ T9449] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 882.410945][ T9449] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 883.979075][ T9442] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 884.203465][ T9442] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.238051][ T9449] EXT4-fs error (device loop5): ext4_xattr_block_find:1838: inode #12: comm syz.5.1316: corrupted xattr block 6 [ 884.295744][ T9442] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.389698][ T9442] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 884.515012][ T9442] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 884.605091][ T9442] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.775681][ T9442] usb 7-1: config 0 descriptor?? [ 885.359665][ T9442] usbhid 7-1:0.0: can't add hid device: -71 [ 885.367532][ T9442] usbhid: probe of 7-1:0.0 failed with error -71 [ 885.450063][ T9442] usb 7-1: USB disconnect, device number 5 [ 885.450908][ T9449] EXT4-fs error (device loop5): ext4_xattr_block_get:546: inode #12: comm syz.5.1316: corrupted xattr block 6 [ 885.697826][ T8200] EXT4-fs (loop5): unmounting filesystem. [ 885.938879][ T7209] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 886.928893][ T7209] usb 2-1: Using ep0 maxpacket: 32 [ 886.937794][ T7209] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.997058][ T7209] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 887.032890][ T7209] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 887.064903][ T7209] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 887.077779][ T7209] usb 2-1: Product: syz [ 887.082872][ T7209] usb 2-1: Manufacturer: syz [ 887.087520][ T7209] usb 2-1: SerialNumber: syz [ 887.105038][ T7209] usb 2-1: config 0 descriptor?? [ 887.152628][ T7209] hub 2-1:0.0: bad descriptor, ignoring hub [ 887.176800][ T7209] hub: probe of 2-1:0.0 failed with error -5 [ 888.838044][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1328'. [ 889.067282][ T9479] device pim6reg1 entered promiscuous mode [ 889.119783][ T9490] usb 2-1: USB disconnect, device number 23 [ 890.255880][ T9493] loop1: detected capacity change from 0 to 1024 [ 891.823175][ T9493] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 895.218688][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 895.936227][ T6590] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 896.127106][ T9537] fuse: Bad value for 'fd' [ 896.332360][ T6590] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.929974][ T6590] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.941659][ T6590] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 896.955504][ T6590] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 896.964938][ T6590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.979408][ T6590] usb 3-1: config 0 descriptor?? [ 897.426697][ T6590] usbhid 3-1:0.0: can't add hid device: -71 [ 897.567612][ T6590] usbhid: probe of 3-1:0.0 failed with error -71 [ 898.409199][ T6590] usb 3-1: USB disconnect, device number 21 [ 900.557935][ T9550] loop2: detected capacity change from 0 to 1024 [ 900.926160][ T9550] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 902.293912][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 902.671769][ T9566] tipc: Started in network mode [ 902.688207][ T9566] tipc: Node identity 5e5ded749434, cluster identity 4711 [ 902.740621][ T9566] tipc: Enabled bearer , priority 0 [ 902.830615][ T9559] tipc: Resetting bearer [ 903.820898][ T6590] tipc: Node number set to 3395939700 [ 905.279227][ T9590] fuse: Bad value for 'fd' [ 908.015076][ T9559] tipc: Disabling bearer [ 908.030553][ T9578] tipc: Started in network mode [ 908.035488][ T9578] tipc: Node identity daa88dba1e14, cluster identity 4711 [ 908.047034][ T9578] tipc: Enabled bearer , priority 0 [ 908.251717][ T9576] tipc: Resetting bearer [ 908.493794][ T6818] tipc: Resetting bearer [ 908.507882][ T9574] tipc: Resetting bearer [ 908.754844][ T128] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 909.011663][ T128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.073859][ T7209] tipc: Node number set to 3300691386 [ 909.084774][ T128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.186772][ T128] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 909.221524][ T128] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 909.263148][ T128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.338558][ T128] usb 1-1: config 0 descriptor?? [ 909.789097][ T128] usbhid 1-1:0.0: can't add hid device: -71 [ 909.795126][ T128] usbhid: probe of 1-1:0.0 failed with error -71 [ 909.834380][ T128] usb 1-1: USB disconnect, device number 15 [ 910.793951][ T9613] loop5: detected capacity change from 0 to 1024 [ 910.945175][ T9613] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 911.226798][ T8200] EXT4-fs (loop5): unmounting filesystem. [ 913.481075][ T9632] fuse: Bad value for 'fd' [ 913.535805][ T9631] serio: Serial port ptm0 [ 917.668894][ T128] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 917.870463][ T128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.889068][ T128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 917.900080][ T128] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 917.948873][ T128] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 917.973358][ T128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.997528][ T128] usb 2-1: config 0 descriptor?? [ 918.440676][ T128] usbhid 2-1:0.0: can't add hid device: -71 [ 918.446738][ T128] usbhid: probe of 2-1:0.0 failed with error -71 [ 918.464166][ T128] usb 2-1: USB disconnect, device number 24 [ 918.583559][ T7768] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 918.597408][ T7768] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 918.605729][ T7768] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 918.613903][ T7768] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 918.623743][ T7768] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 918.632593][ T7768] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 918.860790][ T9574] tipc: Disabling bearer [ 918.887559][ T9623] device pim6reg1 entered promiscuous mode [ 920.709100][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 920.873087][ T9667] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1376'. [ 921.142117][ T4275] infiniband syz1: set down [ 921.208634][ T128] infiniband syz1: ib_query_port failed (-19) [ 921.442580][ T32] smc: removing ib device syz1 [ 922.416315][ T7768] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 922.430106][ T7768] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 922.443355][ T7768] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 922.453032][ T7768] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 922.487083][ T7768] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 922.497106][ T7768] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 922.789990][ T4281] Bluetooth: hci5: command 0x041b tx timeout [ 923.096561][ T9653] chnl_net:caif_netlink_parms(): no params data found [ 923.655961][ T9653] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.717565][ T9653] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.770376][ T9653] device bridge_slave_0 entered promiscuous mode [ 923.791809][ T9653] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.829121][ T9653] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.871202][ T9653] device bridge_slave_1 entered promiscuous mode [ 924.149076][ T9690] loop0: detected capacity change from 0 to 1024 [ 924.172583][ T9653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.201003][ T9676] chnl_net:caif_netlink_parms(): no params data found [ 924.278313][ T9653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.308349][ T9690] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 924.559391][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 924.603588][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 924.785397][ T9653] team0: Port device team_slave_0 added [ 924.869418][ T4281] Bluetooth: hci5: command 0x040f tx timeout [ 925.054545][ T9653] team0: Port device team_slave_1 added [ 926.290173][ T9676] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.317252][ T9676] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.447258][ T9676] device bridge_slave_0 entered promiscuous mode [ 926.488989][ T4257] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 926.569751][ T9653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.596897][ T9653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.629055][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 926.693654][ T4257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.751392][ T4257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.859967][ T4257] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 926.912359][ T9653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.948932][ T4281] Bluetooth: hci5: command 0x0419 tx timeout [ 927.028608][ T4257] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 927.052342][ T9676] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.077519][ T9676] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.181515][ T4257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.195195][ T9676] device bridge_slave_1 entered promiscuous mode [ 927.292968][ T9653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.332672][ T9653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.414600][ T9653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.471853][ T4257] usb 1-1: config 0 descriptor?? [ 927.476997][ T8498] ------------[ cut here ]------------ [ 927.483135][ T8498] GID entry ref leak for dev syz1 index 2 ref=1 [ 927.512814][ T8498] WARNING: CPU: 0 PID: 8498 at drivers/infiniband/core/cache.c:809 gid_table_release_one+0x30f/0x490 [ 927.524256][ T8498] Modules linked in: [ 927.528240][ T8498] CPU: 0 PID: 8498 Comm: kworker/u4:92 Not tainted syzkaller #0 [ 927.536313][ T8498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 927.546484][ T8498] Workqueue: netns cleanup_net [ 927.551361][ T8498] RIP: 0010:gid_table_release_one+0x30f/0x490 [ 927.557503][ T8498] Code: 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 3c 41 8b 0e 48 c7 c7 00 89 6c 8b 48 8b 74 24 20 44 89 fa e8 c1 4a e9 f9 <0f> 0b e9 14 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a ff [ 927.577374][ T8498] RSP: 0018:ffffc900049ef928 EFLAGS: 00010246 [ 927.583632][ T8498] RAX: 1b1c77d67ef8cd00 RBX: ffff888073243cd8 RCX: ffff88813fe3bb80 [ 927.591720][ T8498] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 927.599769][ T8498] RBP: 1ffff1100e648780 R08: dffffc0000000000 R09: fffff5200093deb5 [ 927.607788][ T8498] R10: fffff5200093deb5 R11: 1ffff9200093deb4 R12: 1ffff1100e64879b [ 927.615848][ T8498] R13: ffff888073243c00 R14: ffff888026ba9d00 R15: 0000000000000002 [ 927.623906][ T8498] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 927.632934][ T8498] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 927.639618][ T8498] CR2: 00007fa5553156c0 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 927.647652][ T8498] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 927.655701][ T8498] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 927.663756][ T8498] Call Trace: [ 927.667086][ T8498] [ 927.670119][ T8498] ib_device_release+0xce/0x1b0 [ 927.675031][ T8498] ? ib_device_uevent+0xa0/0xa0 [ 927.679966][ T8498] device_release+0x92/0x1c0 [ 927.684619][ T8498] kobject_put+0x21d/0x460 [ 927.689213][ T8498] rdma_dev_exit_net+0x208/0x330 [ 927.694219][ T8498] ? __might_sleep+0xd0/0xd0 [ 927.699096][ T8498] ? rdma_dev_init_net+0x270/0x270 [ 927.704272][ T8498] cleanup_net+0x6f0/0xb80 [ 927.708745][ T8498] ? ops_free_list+0x3b0/0x3b0 [ 927.713608][ T8498] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 927.719607][ T8498] ? _raw_spin_unlock+0x40/0x40 [ 927.724518][ T8498] ? _raw_spin_unlock_irq+0x1f/0x40 [ 927.729823][ T8498] ? process_one_work+0x7a1/0x1160 [ 927.734980][ T8498] process_one_work+0x898/0x1160 [ 927.739990][ T8498] ? worker_detach_from_pool+0x240/0x240 [ 927.745670][ T8498] ? _raw_spin_lock_irq+0xab/0xe0 [ 927.750784][ T8498] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 927.756214][ T8498] ? kthread_data+0x4b/0xc0 [ 927.760917][ T8498] worker_thread+0xaa2/0x1250 [ 927.765671][ T8498] kthread+0x29d/0x330 [ 927.769855][ T8498] ? worker_clr_flags+0x1a0/0x1a0 [ 927.774926][ T8498] ? kthread_blkcg+0xd0/0xd0 [ 927.779670][ T8498] ret_from_fork+0x1f/0x30 [ 927.784174][ T8498] [ 927.787274][ T8498] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 927.794684][ T8498] CPU: 0 PID: 8498 Comm: kworker/u4:92 Not tainted syzkaller #0 [ 927.802364][ T8498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 927.812459][ T8498] Workqueue: netns cleanup_net [ 927.817278][ T8498] Call Trace: [ 927.820684][ T8498] [ 927.823646][ T8498] dump_stack_lvl+0x168/0x22e [ 927.828371][ T8498] ? memcpy+0x3c/0x60 [ 927.832401][ T8498] ? show_regs_print_info+0x12/0x12 [ 927.837647][ T8498] ? load_image+0x3b0/0x3b0 [ 927.842215][ T8498] panic+0x2c9/0x710 [ 927.846169][ T8498] ? bpf_jit_dump+0xd0/0xd0 [ 927.850724][ T8498] ? ret_from_fork+0x1f/0x30 [ 927.855457][ T8498] __warn+0x2f8/0x4f0 [ 927.859482][ T8498] ? gid_table_release_one+0x30f/0x490 [ 927.864984][ T8498] ? gid_table_release_one+0x30f/0x490 [ 927.870487][ T8498] report_bug+0x2ba/0x4f0 [ 927.874854][ T8498] ? gid_table_release_one+0x30f/0x490 [ 927.880378][ T8498] handle_bug+0x3a/0x70 [ 927.884581][ T8498] exc_invalid_op+0x16/0x40 [ 927.889118][ T8498] asm_exc_invalid_op+0x16/0x20 [ 927.893994][ T8498] RIP: 0010:gid_table_release_one+0x30f/0x490 [ 927.900089][ T8498] Code: 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 3c 41 8b 0e 48 c7 c7 00 89 6c 8b 48 8b 74 24 20 44 89 fa e8 c1 4a e9 f9 <0f> 0b e9 14 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a ff [ 927.919708][ T8498] RSP: 0018:ffffc900049ef928 EFLAGS: 00010246 [ 927.925787][ T8498] RAX: 1b1c77d67ef8cd00 RBX: ffff888073243cd8 RCX: ffff88813fe3bb80 [ 927.933767][ T8498] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 927.941744][ T8498] RBP: 1ffff1100e648780 R08: dffffc0000000000 R09: fffff5200093deb5 [ 927.949820][ T8498] R10: fffff5200093deb5 R11: 1ffff9200093deb4 R12: 1ffff1100e64879b [ 927.957902][ T8498] R13: ffff888073243c00 R14: ffff888026ba9d00 R15: 0000000000000002 [ 927.965897][ T8498] ? gid_table_release_one+0x30f/0x490 [ 927.971383][ T8498] ib_device_release+0xce/0x1b0 [ 927.976254][ T8498] ? ib_device_uevent+0xa0/0xa0 [ 927.981120][ T8498] device_release+0x92/0x1c0 [ 927.985747][ T8498] kobject_put+0x21d/0x460 [ 927.990197][ T8498] rdma_dev_exit_net+0x208/0x330 [ 927.995146][ T8498] ? __might_sleep+0xd0/0xd0 [ 927.999760][ T8498] ? rdma_dev_init_net+0x270/0x270 [ 928.005536][ T8498] cleanup_net+0x6f0/0xb80 [ 928.010001][ T8498] ? ops_free_list+0x3b0/0x3b0 [ 928.014802][ T8498] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 928.020776][ T8498] ? _raw_spin_unlock+0x40/0x40 [ 928.025677][ T8498] ? _raw_spin_unlock_irq+0x1f/0x40 [ 928.030904][ T8498] ? process_one_work+0x7a1/0x1160 [ 928.036026][ T8498] process_one_work+0x898/0x1160 [ 928.041006][ T8498] ? worker_detach_from_pool+0x240/0x240 [ 928.046754][ T8498] ? _raw_spin_lock_irq+0xab/0xe0 [ 928.051822][ T8498] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 928.057214][ T8498] ? kthread_data+0x4b/0xc0 [ 928.061843][ T8498] worker_thread+0xaa2/0x1250 [ 928.066561][ T8498] kthread+0x29d/0x330 [ 928.070664][ T8498] ? worker_clr_flags+0x1a0/0x1a0 [ 928.075706][ T8498] ? kthread_blkcg+0xd0/0xd0 [ 928.080405][ T8498] ret_from_fork+0x1f/0x30 [ 928.084904][ T8498] [ 928.088240][ T8498] Kernel Offset: disabled [ 928.092692][ T8498] Rebooting in 86400 seconds..