last executing test programs: 15m3.908933375s ago: executing program 32 (id=768): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x20180) ioctl$EVIOCGABS20(r2, 0x80184560, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) open_by_handle_at(r0, &(0x7f0000000100)=@orangefs_parent={0x28, 0x2, {{"3d26f9387866168a817cfa3ad8ed6d16", 0x6}, {"f3a7b9f5b898327b1564761254f84a88", 0x7}}}, 0x20000) mprotect(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452492954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r5) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002a40)={0x20, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x20}}, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) 9m1.238346727s ago: executing program 33 (id=1847): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x5, 0x4, 0x0, 0x2, 0xb49, 0xfffffffffffffff4, 0x8, 0x4a, 0x3}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf9, 0x8, 0x5, '\x00', 0x350}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8m36.171794689s ago: executing program 34 (id=1952): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f00000002c0)={&(0x7f0000000700)={0x50, 0xffffffffffffffda, 0x16, {0x7, 0x29, 0x0, 0x21, 0x72, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x600) fsync(r2) 8m30.132027251s ago: executing program 35 (id=1962): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, '.,\x03\x00\\{t\xca\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0xfa0, 0x932}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x94}}, 0x801) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 7m36.028056348s ago: executing program 36 (id=2069): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x401, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000940), 0x81000, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, 0x0, 0x1f) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x30200, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x4) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="70000000b088f0fe484febc2e639223db93e2f3024a7437296807beb3686e2ba6da90dfe2bd8ebf5d3055d99188c13f275041fb40f313dce39052d9ad6c1df890277154b", @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf254b0000000c00a600d200000000000000080001007063690011000200303030303a30303a31302e30000000000c00a6002e880000000000000c00a60005000000000000000f00a8007365636f6e646e616d6500000c00a7000700000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00') write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="066d656d6f9786a272ccf173fe13882ed1230240cc4dc979202b637075202d8b65745f7072"], 0x17) r8 = socket(0x29, 0x5, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, 0x0, 0x0) 6m56.773083913s ago: executing program 37 (id=2191): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x42) open_by_handle_at(r0, &(0x7f0000000380)=ANY=[@ANYRES8=r0], 0x40000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f00000002c0)=@multiplanar_fd={0xc3b4eab, 0x7, 0x4, 0x400, 0x4, {0x0, 0xea60}, {0x5, 0x0, 0x7, 0xb, 0x4, 0x3, "f6de8be8"}, 0xac14, 0x4, {0x0}, 0x2}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x129282, 0x0) read$nci(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r3, 0x80045438, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x3, 0x9, 0x0, 0x4}}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000010c0)={0x8000000000000001, 0x8000, 0x1, 0x0, 0x0, [{{r2}, 0x2}]}) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0xfb, 0x8, 0x0, "062383a78614d321eb086bebba55db0dfca05613826fffd4ee640ffed6cd68cb", 0x32314d54}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001000000000047000280050001"], 0xe4}}, 0x0) 5m52.678609918s ago: executing program 38 (id=2329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x78, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR='[']}]}}]}]}]}}]}, 0x78}}, 0x20040054) socket$nl_generic(0x10, 0x3, 0x10) 5m13.022886301s ago: executing program 39 (id=2347): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000001b40)={'bond0\x00', {0x2, 0x4e20, @empty}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "31bf5f132522a5ee", "12b5fac766a1a7505998358c2c3e27e8", "26f49c01", "4dc03fbf34e95850"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 4m53.05855919s ago: executing program 40 (id=2436): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) 4m0.780847547s ago: executing program 41 (id=2594): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000200)=0x40) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000040)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', 0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="6d61783d30303030573e2b67ee30303030303030303030303030303030"]) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x3, 0x8) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, 0x0) 3m41.294620035s ago: executing program 42 (id=2646): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="080008800400"], 0x30}}, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) connect$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) fsopen(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) timerfd_create(0x9, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a2", 0x27}], 0x1}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) sendmsg$nl_route_sched(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f0000005d40)=[{{0x0, 0x0, 0x0, 0x34}, 0x9}], 0x1, 0xc0002063, 0x0) tkill(0xffffffffffffffff, 0x19) socket$packet(0x11, 0x3, 0x300) 3m40.970970842s ago: executing program 43 (id=2648): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 2m59.614843395s ago: executing program 2 (id=2739): socket$can_j1939(0x1d, 0x2, 0x7) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) write$char_usb(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfc, 0x0, 0x0, @local, @empty}}}}) 2m58.723069083s ago: executing program 2 (id=2741): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) 2m58.143954163s ago: executing program 2 (id=2743): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000380)=[@in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e24, 0x9, @remote, 0x3}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000008c0)={r1, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) 2m58.05299368s ago: executing program 1 (id=2745): setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0xc, &(0x7f0000001600)=""/12, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001680)={0x1, 0xf, 0x8, 0xffff0000}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000003c0)=[{0x0, 0x5, 0xf, 0x3}, {0x5, 0x4, 0xc}, {0x1, 0x5, 0xe}, {0x4, 0x4, 0xd, 0x6}, {0x0, 0x5, 0xc, 0x5}], 0x10, 0x5}, 0x94) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0xbd6b, 0x10001, 0x1000, 0xf7ff, 0x0, "4ae23ae17df2e98c0064180009bad88f00", 0x6, 0xf7fffffa}) r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a854a7a4124a91520800000000000000030000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044010) r7 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) syz_usb_control_io(r7, 0x0, 0x0) 2m56.652290756s ago: executing program 2 (id=2748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="50000000080211000001ffffffffffff0802110000000000000000000000000064000100000602020202020201010b"], 0x48) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000021c0)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110000001000000002"], 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200004a000000c0001"], 0x3c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, r6, 0xfd39e943ccf1163b, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x50) 2m55.022364776s ago: executing program 2 (id=2750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m53.644897068s ago: executing program 2 (id=2753): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xfffffffffffffca1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) io_setup(0x8, 0x0) mremap(&(0x7f0000638000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) close(0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0xb00, 0x12) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xa4, 0x30, 0xb, 0x5, 0x0, {}, [{0x90, 0x1, [@m_ct={0x8c, 0x1, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8890}, 0x40) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002f99cf110e10690a1d5030102f601090212000101810009"], 0x0) 2m53.495644461s ago: executing program 1 (id=2754): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101402) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) 2m39.591121009s ago: executing program 44 (id=2766): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x2}}], 0x4, 0x4048841) 2m39.475854924s ago: executing program 1 (id=2770): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) readv(r0, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1) 2m37.878897598s ago: executing program 45 (id=2753): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xfffffffffffffca1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) io_setup(0x8, 0x0) mremap(&(0x7f0000638000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) close(0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0xb00, 0x12) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xa4, 0x30, 0xb, 0x5, 0x0, {}, [{0x90, 0x1, [@m_ct={0x8c, 0x1, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8890}, 0x40) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002f99cf110e10690a1d5030102f601090212000101810009"], 0x0) 2m37.568141996s ago: executing program 1 (id=2774): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]}) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x147040, 0x0) 2m35.754856847s ago: executing program 1 (id=2777): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x10, 0x3, 0x0) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) 2m33.65568366s ago: executing program 1 (id=2778): ppoll(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) 2m29.355584937s ago: executing program 46 (id=2778): ppoll(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) 2m2.607769454s ago: executing program 7 (id=2818): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="50000000080211000001ffffffffffff0802110000000000000000000000000064000100000602020202020201010b"], 0x48) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000021c0)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110000001000000002"], 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200004a000000c0001"], 0x3c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, r5, 0xfd39e943ccf1163b, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x50) 2m1.419119126s ago: executing program 7 (id=2823): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) readv(r0, &(0x7f0000001400)=[{0x0}, {0x0}], 0x2) 1m59.484717974s ago: executing program 7 (id=2829): gettid() unshare(0x42000000) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x7, 0x2, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 1m55.558795279s ago: executing program 7 (id=2841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x60, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x5588}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x3}}]}, 0x98}}, 0x0) 1m54.612340851s ago: executing program 7 (id=2844): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000100)={0x4}) 1m53.6489796s ago: executing program 7 (id=2850): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @local, 0x1}, 0x1c) r2 = dup(r1) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x16f8c2, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) 1m41.244288752s ago: executing program 4 (id=2870): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x5, 0x20, 0x8, 0x1}, &(0x7f0000000280)=0x18) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0xb, 0x80, 0x9, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f000000c0c0)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x8b, 0x100000500) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1m40.589624152s ago: executing program 4 (id=2871): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000240)) 1m39.938864912s ago: executing program 4 (id=2872): capset(&(0x7f0000000040)={0x20080522}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) 1m39.340162765s ago: executing program 4 (id=2873): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000100)={0x4}) 1m38.231951797s ago: executing program 47 (id=2850): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @local, 0x1}, 0x1c) r2 = dup(r1) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x16f8c2, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) 1m38.127848647s ago: executing program 4 (id=2875): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_open_dev$sndctrl(&(0x7f0000000580), 0x2, 0x141240) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x358, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x74}}, 0x0) socket(0x2, 0x80805, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 1m35.435662394s ago: executing program 4 (id=2882): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) socket$kcm(0x2, 0x5, 0x84) unshare(0x2a020400) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r2, 0x0, 0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r3], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m32.636106466s ago: executing program 9 (id=2883): capset(&(0x7f0000000040)={0x20080522}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) 1m31.882614091s ago: executing program 9 (id=2885): r0 = openat$comedi(0xffffff9c, &(0x7f0000000780)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'aio_iiro_16\x00', [0x5, 0x80008000, 0x9, 0x2, 0xfffffffe, 0xde18, 0x1, 0xf, 0xffe, 0x1, 0x7, 0x1, 0x1006, 0x4, 0xffff, 0x6, 0xffffffa7, 0x4000000d, 0x836, 0x3, 0x3fb, 0x10000, 0x800, 0xe2df, 0x2, 0xfffffffd, 0x4, 0x3, 0x80007, 0x5, 0x8005]}) 1m31.385210405s ago: executing program 9 (id=2887): gettid() unshare(0x42000000) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000180)={0x1, 0x7, 0x2, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 1m27.627821627s ago: executing program 9 (id=2891): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_open_dev$sndctrl(&(0x7f0000000580), 0x2, 0x141240) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x358, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x74}}, 0x0) socket(0x2, 0x80805, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r5 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2, 0x0, r4}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 1m25.768826351s ago: executing program 9 (id=2894): capset(&(0x7f0000000040)={0x20080522}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) 1m24.755854379s ago: executing program 9 (id=2896): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1200) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x2040400) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @default, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 1m19.709878443s ago: executing program 48 (id=2882): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) socket$kcm(0x2, 0x5, 0x84) unshare(0x2a020400) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r2, 0x0, 0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r3], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m8.752686837s ago: executing program 49 (id=2896): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1200) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x2040400) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @default, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 13.203490795s ago: executing program 5 (id=3013): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, r1, 0xfd39e943ccf1163b, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x50) 12.549530175s ago: executing program 5 (id=3015): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mlockall(0x6) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r3, 0x32d7, 0x0, 0x46, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000b00)=0xa) ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f0000000080)=0x3ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11.510968481s ago: executing program 5 (id=3019): modify_ldt$write(0x1, &(0x7f0000000000)={0x9, 0x20000800}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000040)={0x8, 0x20000000, 0x400, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x84440, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet(0x2b, 0x801, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x5, 0x20, 0xffffa}, 0x2f) close(r2) 10.461790109s ago: executing program 5 (id=3022): socket$inet(0xa, 0x801, 0x84) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) 8.699995646s ago: executing program 5 (id=3030): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 8.443946996s ago: executing program 8 (id=3031): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x5, 0x20, 0xffffa}, 0x2f) close(r1) close(r2) 7.49985777s ago: executing program 3 (id=3034): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80e090002000000cc040000020000000100000017ce1c4d5cb2e75b1a89bc9215fa5ef54dbeda37474d32c386a977b6fca71bf4570f57b3dd3e378913b8ddaf933699a08e8e63271d430e6707c2de1f6e632375df5226b6c471212de0aa05b51b5ac1ac3332cbf1f3a4c7ac9421b91a0b73d6beba3e414389a6de32178da84d9e2c08aefeca4dbaab8c6bc1bf0ed7736068952e10c22c18fbb58632f6e083959147224923568b2993"], 0x1000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a01080000000022bbcd0000000000000002080008400000000008000640ffffff0008000740000000310c00104000000000000000040c001040000000000000000240000000140a010800000020000000000a000001290008006762ccdad070ba9ee324100976be1ca0aa1d6cb518798900e5ce9dab4adf4418d7d018733f0000001400000011000100000000000000"], 0xac}, 0x1, 0x0, 0x0, 0x618b37b523276f6c}, 0x20000000) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfeae}) 7.279574022s ago: executing program 5 (id=3035): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_open_dev$sndctrl(&(0x7f0000000580), 0x2, 0x141240) r3 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 7.190437901s ago: executing program 0 (id=3036): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x147040, 0x0) 6.992869976s ago: executing program 3 (id=3037): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) msgsnd(0x0, &(0x7f0000000980)={0x1, "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"}, 0x1b1, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000780)={0x0, 0xf691, 0x10100, 0x0, 0x2b4, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x11, @loopback, 0x15, 0x0, 'rr\x00', 0x3c, 0xa, 0x80}, 0x2c) socket$pppl2tp(0x18, 0x1, 0x1) r7 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r7, 0x0) 6.747229008s ago: executing program 8 (id=3039): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, r1, 0xfd39e943ccf1163b, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x50) 5.817932602s ago: executing program 3 (id=3040): socket$inet(0xa, 0x801, 0x84) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) 5.611846743s ago: executing program 6 (id=3041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 5.505755628s ago: executing program 0 (id=3042): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x802, 0x6b929545a606890f) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc1205531, &(0x7f00000010c0)=""/4111) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000a7f7fe461d0206ee970d3422ac8bd9320fc5d45bf9a71a5ae4ee2ba2c9020bdd86ca599ec75139ddbf6ac4dda0f582d3b5ab19fac7cdb33eed73d8d3b3105e3a74b13cb985d04fd493c380298e030e23000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) sendmsg$nl_netfilter(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[], 0x2cc}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmmsg$inet(r1, &(0x7f0000000880), 0x0, 0x4880) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f0000000140)=@default_ibss_ssid, 0x6, 0x2) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfffffff8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x2c}}, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x3c, 0x3e9, 0x1, 0x70bd2c, 0x25dfdbfe, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0x8, 0xff, 0x9, 0x2, 0x0, 0xfffffff9, 0x1508}, [""]}, 0x3c}}, 0x44000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x140) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x3, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_emit_ethernet(0xba, &(0x7f0000000540)={@local, @empty, @val={@val={0x88a8, 0x2}, {0x8100, 0x4, 0x1}}, {@x25={0x805, {0x3, 0xf5, 0xb, "da9b5ca0c7b4291988c1988511c0a3cd0e8b3d765a05b6eeb68051b579edfa276f5946c04b4f3e0c68b988cd6e63ee1034411daa5f719d81a659cd4227351c3a1d6b98a7b8f6d50e1732707d71542f5ab13b98564315b1c2489936cd75d3f49431e33a2db99223f0c8e91078c5b50fb9b4c473382f3bb0bc1f812e079dfa4524487ed79c77d1271ecc97de636ba78e0497f61a1ef4410dbf2d24f527cc14cce355"}}}}, 0x0) chdir(&(0x7f0000000000)='./bus\x00') 5.311454056s ago: executing program 8 (id=3043): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}]}}]}, 0x40}}, 0x20040074) 5.186362092s ago: executing program 6 (id=3044): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mlockall(0x6) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r3, 0x32d7, 0x0, 0x46, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000b00)=0xa) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 4.329336114s ago: executing program 6 (id=3045): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000032c0)=@newtfilter={0xe0, 0x2c, 0x4, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xb}, {0xb, 0x2}, {0xd, 0xffff}}, [@f_rsvp={{0x9}, {0xb0, 0x2, [@TCA_RSVP_ACT={0xac, 0x6, [@m_police={0xa8, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x79, 0x6, "5270bc7afd6a9b8dc3c3ebc325ed42474576d69386fb923230901fb2922792d72e5789493009e2084f027000af7fd4b65e6a5fb1e0566ca9afe7a512075d68d106a1d83788ab9ec50d4d80e2df89c88adea3588f43a42f3e822b455183505997ac52e698f9c082bdbc6d29a3c8d9f34f8e768948d9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x24000041) recvmmsg$unix(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/214, 0xd6}], 0x1}}], 0x1, 0xa060, 0x0) 4.115631077s ago: executing program 0 (id=3046): modify_ldt$write(0x1, &(0x7f0000000000)={0x9, 0x20000800}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000040)={0x8, 0x20000000, 0x400, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x84440, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet(0x2b, 0x801, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) close(r1) close(r2) 3.800620121s ago: executing program 8 (id=3047): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="5aa2709cb5e900edf9130381", 0xc}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) 3.587512371s ago: executing program 3 (id=3048): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000008c0)={r1}, &(0x7f0000000340)=0x8) 2.944128031s ago: executing program 6 (id=3049): modify_ldt$write(0x1, &(0x7f0000000000)={0x9, 0x20000800}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000040)={0x8, 0x20000000, 0x400, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x84440, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet(0x2b, 0x801, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r6 = openat$cgroup_pressure(r4, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r5}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r6, &(0x7f0000000340)={'some', 0x20, 0x5, 0x20, 0xffffa}, 0x2f) close(r5) close(r6) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf9100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001000)=@generic={&(0x7f0000000fc0)='./file1\x00', r2}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, 0x0, 0x0) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r8 = syz_open_dev$loop(&(0x7f0000000080), 0xfffffffffffffffc, 0xeddbee30e66530de) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r8, {0x1, 0x400}}, './file0\x00'}) modify_ldt$write2(0x11, &(0x7f0000000f80)={0x401, 0x20001000, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='io\x00') 2.872758123s ago: executing program 8 (id=3050): syz_open_dev$dri(0x0, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000001c0)={0x4000000, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000000}) 2.710953738s ago: executing program 0 (id=3051): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0x22) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) 2.227761113s ago: executing program 0 (id=3052): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x147040, 0x0) 2.179689612s ago: executing program 3 (id=3053): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, r1, 0xfd39e943ccf1163b, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x50) 1.70895671s ago: executing program 8 (id=3054): gettid() unshare(0x42000000) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x7, 0x2, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 1.68790423s ago: executing program 6 (id=3055): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mlockall(0x6) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r3, 0x32d7, 0x0, 0x46, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000b00)=0xa) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1.647035519s ago: executing program 3 (id=3056): r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x4010, 0xffffffffffffffff, 0x10000000) r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_UNLINKAT={0x24, 0x16, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r8 = syz_io_uring_setup(0x497, &(0x7f00000004c0)={0x0, 0x465e, 0x400, 0x3, 0x31d}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r8, 0x40f9, 0x217, 0xa5, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0xb16, 0x1, 0x1}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) 824.572049ms ago: executing program 0 (id=3057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}]}}]}, 0x40}}, 0x20040074) 0s ago: executing program 6 (id=3058): socket$inet(0xa, 0x801, 0x84) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) kernel console output (not intermixed with test programs): _slave_0) entered blocking state [ 1139.052588][T14042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.060290][T14042] bridge_slave_0: entered allmulticast mode [ 1139.069633][T14042] bridge_slave_0: entered promiscuous mode [ 1139.119192][T14042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.126923][T14042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.138306][T14042] bridge_slave_1: entered allmulticast mode [ 1139.148030][T14042] bridge_slave_1: entered promiscuous mode [ 1139.425049][T12700] bridge_slave_0: left promiscuous mode [ 1139.431235][T12700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.819509][T12700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1139.879315][T12700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1139.918299][T12700] bond0 (unregistering): Released all slaves [ 1139.983162][T14042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1140.082010][T14042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1140.126371][T12700] tipc: Left network mode [ 1140.325541][T14042] team0: Port device team_slave_0 added [ 1140.450993][T14042] team0: Port device team_slave_1 added [ 1140.801187][ T30] audit: type=1800 audit(1755941524.194:924): pid=14082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2581" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 1140.854872][ T5822] Bluetooth: hci1: command tx timeout [ 1140.998209][T12700] hsr_slave_0: left promiscuous mode [ 1141.009464][T12700] hsr_slave_1: left promiscuous mode [ 1141.023212][T12700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1141.048691][T12700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1141.091930][T12700] team0 (unregistering): Port device batadv1 removed [ 1141.428677][ T1708] usb 2-1: USB disconnect, device number 49 [ 1141.578402][T12700] team0 (unregistering): Port device team_slave_1 removed [ 1141.696575][T12700] team0 (unregistering): Port device team_slave_0 removed [ 1141.913973][T14092] loop1: detected capacity change from 0 to 128 [ 1142.047334][T14092] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1142.195630][T14092] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1142.277068][T14042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1142.284483][T14042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1142.314416][T14042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1142.480585][T14097] fuse: Bad value for 'fd' [ 1142.487099][T14042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1142.494452][T14042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1142.522495][T14042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1142.849193][T14042] hsr_slave_0: entered promiscuous mode [ 1142.860202][T14042] hsr_slave_1: entered promiscuous mode [ 1142.869060][T14042] debugfs: 'hsr0' already exists in 'hsr' [ 1142.875050][T14042] Cannot create hsr debugfs directory [ 1142.925945][T13560] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1142.937430][ T5822] Bluetooth: hci1: command tx timeout [ 1143.166012][T14105] loop2: detected capacity change from 0 to 7 [ 1143.195291][T14105] Dev loop2: unable to read RDB block 7 [ 1143.201113][T14105] loop2: unable to read partition table [ 1143.254917][T14105] loop2: partition table beyond EOD, truncated [ 1143.261374][T14105] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1143.920192][T14118] binder: Bad value for 'max' [ 1143.936208][ T1708] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1144.137814][ T1708] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.155518][ T1708] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1144.169414][ T1708] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1144.178838][ T1708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.229743][ T1708] usb 2-1: config 0 descriptor?? [ 1144.283816][ T1708] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1144.344790][ T5872] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1144.408846][T14122] syzkaller0: entered promiscuous mode [ 1144.414938][T14122] syzkaller0: entered allmulticast mode [ 1144.551544][ T5872] usb 9-1: config 0 has no interfaces? [ 1144.558656][ T5872] usb 9-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1144.568634][ T5872] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.602670][ T5872] usb 9-1: config 0 descriptor?? [ 1144.749696][T14042] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1144.775655][T14042] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1144.811178][T14042] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1144.828204][T14120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.837670][T14120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.850946][T14042] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1144.995138][ T1708] usb 9-1: USB disconnect, device number 27 [ 1145.015353][T12761] Bluetooth: hci1: command tx timeout [ 1145.052387][T14127] fuse: Bad value for 'fd' [ 1145.722083][T14042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.859422][T14042] 8021q: adding VLAN 0 to HW filter on device team0 [ 1145.916744][T12704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.924361][T12704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.992891][T12704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.000491][T12704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1147.059959][ T1708] usb 2-1: USB disconnect, device number 50 [ 1147.286029][T14146] loop2: detected capacity change from 0 to 7 [ 1147.300699][T14146] Dev loop2: unable to read RDB block 7 [ 1147.307109][T14146] loop2: unable to read partition table [ 1147.346857][T14146] loop2: partition table beyond EOD, truncated [ 1147.353314][T14146] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1147.727466][T14042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1148.104818][T14154] fuse: Bad value for 'fd' [ 1148.133513][T14152] syzkaller0: entered promiscuous mode [ 1148.142019][T14152] syzkaller0: entered allmulticast mode [ 1148.240828][T14042] veth0_vlan: entered promiscuous mode [ 1148.362002][T14042] veth1_vlan: entered promiscuous mode [ 1148.633245][T14042] veth0_macvtap: entered promiscuous mode [ 1148.771093][T14162] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1148.811336][T14162] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1149.331060][T14042] veth1_macvtap: entered promiscuous mode [ 1149.633327][T14042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1149.716133][T14042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1149.803776][ T1872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.841116][ T1872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.904398][T12700] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.954952][T12700] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.988918][ T30] audit: type=1800 audit(1755941533.364:925): pid=14175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2615" name="bus" dev="overlay" ino=198 res=0 errno=0 [ 1150.024993][ T1708] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1150.228714][ T1708] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.239558][ T1708] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1150.252875][ T1708] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1150.262140][ T1708] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.396114][ T1708] usb 9-1: config 0 descriptor?? [ 1150.433253][ T1708] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1150.505448][T14181] loop2: detected capacity change from 0 to 7 [ 1150.516475][T14181] Dev loop2: unable to read RDB block 7 [ 1150.522333][T14181] loop2: unable to read partition table [ 1150.534036][T14181] loop2: partition table beyond EOD, truncated [ 1150.541896][T14181] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1151.275085][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1151.281660][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1151.762523][T14192] fuse: Bad value for 'fd' [ 1152.434054][T14196] syzkaller0: entered promiscuous mode [ 1152.442179][T14196] syzkaller0: entered allmulticast mode [ 1152.911922][ T1708] usb 9-1: USB disconnect, device number 28 [ 1154.954666][ T1708] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1155.151978][ T1708] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.162572][ T1708] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1155.209551][ T1708] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1155.219928][ T1708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1155.228765][ T1708] usb 2-1: SerialNumber: syz [ 1155.452328][ T30] audit: type=1800 audit(1755941538.834:926): pid=14221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2627" name="bus" dev="overlay" ino=819 res=0 errno=0 [ 1155.560962][ T1708] usb 2-1: 0:2 : does not exist [ 1155.566157][ T1708] usb 2-1: unit 255 not found! [ 1155.777556][ T1708] usb 2-1: USB disconnect, device number 51 [ 1156.732268][T12700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.743027][T12700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.851714][T14232] fuse: Bad value for 'fd' [ 1156.920825][T12700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.929346][T12700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.006079][T14230] syzkaller0: entered promiscuous mode [ 1157.011744][T14230] syzkaller0: entered allmulticast mode [ 1157.554507][ T1708] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1157.724686][ T1708] usb 3-1: Using ep0 maxpacket: 32 [ 1157.759579][ T1708] usb 3-1: config 0 has no interfaces? [ 1157.768520][ T1708] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1157.779109][ T1708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.824577][ T11] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1157.873818][ T1708] usb 3-1: config 0 descriptor?? [ 1158.020192][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.031441][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.041441][ T11] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1158.050721][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.115048][ T1708] usb 3-1: USB disconnect, device number 54 [ 1158.196512][ T11] usb 2-1: config 0 descriptor?? [ 1158.645046][ T11] steelseries 0003:1038:12B6.0029: unknown main item tag 0x0 [ 1158.653151][ T11] steelseries 0003:1038:12B6.0029: unknown main item tag 0x0 [ 1158.661154][ T11] steelseries 0003:1038:12B6.0029: unknown main item tag 0x0 [ 1158.668821][ T11] steelseries 0003:1038:12B6.0029: unknown main item tag 0x0 [ 1158.676431][ T11] steelseries 0003:1038:12B6.0029: unknown main item tag 0x0 [ 1158.683969][ T11] steelseries 0003:1038:12B6.0029: unknown main item tag 0x0 [ 1158.696547][ T11] steelseries 0003:1038:12B6.0029: unknown main item tag 0x0 [ 1158.785117][T14243] loop8: detected capacity change from 0 to 128 [ 1158.899555][T14243] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1158.922102][ T11] steelseries 0003:1038:12B6.0029: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 1159.085362][T14243] ext4 filesystem being mounted at /153/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1159.212230][ T11] usb 2-1: USB disconnect, device number 52 [ 1159.522822][T11802] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1160.014424][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1160.028575][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1160.038710][ T30] audit: type=1800 audit(1755941543.384:927): pid=14253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2637" name="bus" dev="overlay" ino=36 res=0 errno=0 [ 1160.039752][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1160.170016][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1160.214824][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1160.933971][T14264] fuse: Invalid rootmode [ 1160.968557][T14265] loop2: detected capacity change from 0 to 7 [ 1161.022583][T14265] Dev loop2: unable to read RDB block 7 [ 1161.028823][T14265] loop2: unable to read partition table [ 1161.070549][T14265] loop2: partition table beyond EOD, truncated [ 1161.077348][T14265] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1161.333669][T14254] chnl_net:caif_netlink_parms(): no params data found [ 1161.617842][T14268] tipc: Started in network mode [ 1161.623198][T14268] tipc: Node identity dabf9d643599, cluster identity 4711 [ 1161.631902][T14268] tipc: Enabled bearer , priority 0 [ 1161.742139][T14268] tipc: Resetting bearer [ 1161.831399][T14267] tipc: Disabling bearer [ 1162.009951][ T11] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1162.221345][ T11] usb 6-1: Using ep0 maxpacket: 32 [ 1162.257332][ T11] usb 6-1: config 0 has no interfaces? [ 1162.262980][ T11] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1162.274851][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.328836][T12761] Bluetooth: hci0: command tx timeout [ 1162.356994][ T11] usb 6-1: config 0 descriptor?? [ 1162.567643][T14281] loop2: detected capacity change from 0 to 128 [ 1162.595931][ T11] usb 6-1: USB disconnect, device number 38 [ 1162.735634][T14281] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1162.815919][T14281] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1163.078407][T14254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.087685][T14254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.100567][T14254] bridge_slave_0: entered allmulticast mode [ 1163.110276][T14254] bridge_slave_0: entered promiscuous mode [ 1163.185874][T14042] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1163.240465][T14254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.248221][T14254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.256394][T14254] bridge_slave_1: entered allmulticast mode [ 1163.265592][T14254] bridge_slave_1: entered promiscuous mode [ 1163.545874][T14254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1163.663714][T14254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1163.912138][ T11] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1164.025577][T14254] team0: Port device team_slave_0 added [ 1164.069727][T14254] team0: Port device team_slave_1 added [ 1164.143110][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.154771][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.165157][ T11] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1164.174760][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.294618][T14254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1164.301825][T14254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1164.330945][T14254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1164.357242][ T11] usb 3-1: config 0 descriptor?? [ 1164.393367][T12761] Bluetooth: hci0: command tx timeout [ 1164.443116][T14254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1164.451235][T14254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1164.477780][T14254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1164.840618][ T11] steelseries 0003:1038:12B6.002A: unknown main item tag 0x0 [ 1164.848435][ T11] steelseries 0003:1038:12B6.002A: unknown main item tag 0x0 [ 1164.856233][ T11] steelseries 0003:1038:12B6.002A: unknown main item tag 0x0 [ 1164.863794][ T11] steelseries 0003:1038:12B6.002A: unknown main item tag 0x0 [ 1164.871422][ T11] steelseries 0003:1038:12B6.002A: unknown main item tag 0x0 [ 1164.879327][ T11] steelseries 0003:1038:12B6.002A: unknown main item tag 0x0 [ 1164.887145][ T11] steelseries 0003:1038:12B6.002A: unknown main item tag 0x0 [ 1165.105673][ T11] steelseries 0003:1038:12B6.002A: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 1165.364773][T14254] hsr_slave_0: entered promiscuous mode [ 1165.373857][T14254] hsr_slave_1: entered promiscuous mode [ 1165.381723][T14254] debugfs: 'hsr0' already exists in 'hsr' [ 1165.388783][T14254] Cannot create hsr debugfs directory [ 1165.456077][ T11] usb 3-1: USB disconnect, device number 55 [ 1166.460912][T12761] Bluetooth: hci0: command tx timeout [ 1166.579834][T12704] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.923307][T12704] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.173820][T12704] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.395444][T12704] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.075872][T12704] team0: left allmulticast mode [ 1168.080934][T12704] team_slave_0: left allmulticast mode [ 1168.086707][T12704] team_slave_1: left allmulticast mode [ 1168.092800][T12704] bridge0: port 3(team0) entered disabled state [ 1168.407472][T12704] bridge_slave_1: left allmulticast mode [ 1168.413308][T12704] bridge_slave_1: left promiscuous mode [ 1168.425193][T12704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.581039][T12761] Bluetooth: hci0: command tx timeout [ 1168.695895][T12704] bridge_slave_0: left allmulticast mode [ 1168.702224][T12704] bridge_slave_0: left promiscuous mode [ 1168.708898][T12704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.988845][T14304] fuse: Invalid rootmode [ 1169.156346][T12704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1169.206542][T12704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.281066][T12704] bond0 (unregistering): Released all slaves [ 1169.639724][T14306] loop2: detected capacity change from 0 to 7 [ 1169.687284][T14306] Dev loop2: unable to read RDB block 7 [ 1169.693075][T14306] loop2: unable to read partition table [ 1169.798226][T14306] loop2: partition table beyond EOD, truncated [ 1169.804745][T14306] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1170.112916][T12704] hsr_slave_0: left promiscuous mode [ 1170.137259][T12704] hsr_slave_1: left promiscuous mode [ 1170.145206][T12704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1170.152783][T12704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1170.191753][T12704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1170.199560][T12704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1170.249285][T12704] veth1_macvtap: left promiscuous mode [ 1170.255235][T12704] veth0_macvtap: left promiscuous mode [ 1170.262364][T12704] veth1_vlan: left promiscuous mode [ 1170.267945][T12704] veth0_vlan: left promiscuous mode [ 1170.838971][T12704] team_slave_1 (unregistering): left promiscuous mode [ 1170.985660][T12704] team0 (unregistering): Port device team_slave_1 removed [ 1171.005139][T12704] team_slave_0 (unregistering): left promiscuous mode [ 1171.038616][T12704] team0 (unregistering): Port device team_slave_0 removed [ 1171.655471][T14310] tipc: Enabled bearer , priority 0 [ 1171.713345][T14308] tipc: Disabling bearer [ 1171.850466][T14254] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1171.995180][T14254] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1172.096072][T14254] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1172.158197][T12704] bridge_slave_1: left promiscuous mode [ 1172.165303][T12704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.276028][T12704] bridge_slave_0: left promiscuous mode [ 1172.282544][T12704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.666369][T12704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1172.759436][T12704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1172.794685][T12704] bond0 (unregistering): Released all slaves [ 1172.832352][T14254] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1173.029815][T12704] tipc: Left network mode [ 1173.450087][T12704] batadv_slave_1: left promiscuous mode [ 1173.481034][T12704] batadv_slave_0: left promiscuous mode [ 1173.517866][T12704] hsr_slave_0: left promiscuous mode [ 1173.542848][T12704] hsr_slave_1: left promiscuous mode [ 1173.550014][T12704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1173.577439][T12704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1174.228325][T12704] team0 (unregistering): Port device team_slave_1 removed [ 1174.293415][T12704] team0 (unregistering): Port device team_slave_0 removed [ 1174.792655][T14324] loop2: detected capacity change from 0 to 128 [ 1174.967288][T14324] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1175.077220][T14324] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1175.472175][T14254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1175.665802][T14042] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1175.689936][T14254] 8021q: adding VLAN 0 to HW filter on device team0 [ 1175.825027][T12116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.832466][T12116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1175.871355][T12116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.878890][T12116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.506292][T11074] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1176.723857][T11074] usb 3-1: Using ep0 maxpacket: 32 [ 1176.749117][T11074] usb 3-1: config 0 has no interfaces? [ 1176.755283][T11074] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1176.764670][T11074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.799924][T11074] usb 3-1: config 0 descriptor?? [ 1177.049505][ T1708] usb 3-1: USB disconnect, device number 56 [ 1177.800228][T14254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1178.105568][T14342] syzkaller0: entered promiscuous mode [ 1178.111233][T14342] syzkaller0: entered allmulticast mode [ 1178.787366][T14348] tipc: Started in network mode [ 1178.792576][T14348] tipc: Node identity d22c3cd03e6, cluster identity 4711 [ 1178.800949][T14348] tipc: Enabled bearer , priority 0 [ 1178.941788][T14348] tipc: Resetting bearer [ 1179.031855][T14347] tipc: Disabling bearer [ 1179.161393][T14355] loop2: detected capacity change from 0 to 128 [ 1179.287960][T14355] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1179.444829][T14355] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1179.773630][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1179.796507][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1179.805960][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1179.820551][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1179.832059][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1179.948149][ T5822] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1179.957830][ T5822] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1179.969521][ T5822] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1179.983341][ T5822] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1180.002597][ T5822] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1180.228744][T14042] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1181.345538][T14254] veth0_vlan: entered promiscuous mode [ 1181.685624][T14254] veth1_vlan: entered promiscuous mode [ 1181.902747][ T5822] Bluetooth: hci5: command tx timeout [ 1182.214949][ T5822] Bluetooth: hci6: command tx timeout [ 1182.235589][T14360] chnl_net:caif_netlink_parms(): no params data found [ 1182.851431][T14254] veth0_macvtap: entered promiscuous mode [ 1183.054712][T14254] veth1_macvtap: entered promiscuous mode [ 1183.128663][T14254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1183.200375][T14254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1183.343099][ T1872] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.381510][ T1872] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.448727][ T1872] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.506905][ T1872] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.805461][T14363] chnl_net:caif_netlink_parms(): no params data found [ 1183.975766][ T5822] Bluetooth: hci5: command tx timeout [ 1184.295381][ T5822] Bluetooth: hci6: command tx timeout [ 1184.852080][T14391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1184.955343][T14391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1185.080703][T14393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1185.199862][T14360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.210781][T14360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.218684][T14360] bridge_slave_0: entered allmulticast mode [ 1185.228193][T14360] bridge_slave_0: entered promiscuous mode [ 1185.389110][T14360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.396816][T14360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.404774][T14360] bridge_slave_1: entered allmulticast mode [ 1185.418612][T14360] bridge_slave_1: entered promiscuous mode [ 1186.056828][ T5822] Bluetooth: hci5: command tx timeout [ 1186.060746][T14360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1186.179384][T14363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.187642][T14363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.195769][T14363] bridge_slave_0: entered allmulticast mode [ 1186.203826][T14363] bridge_slave_0: entered promiscuous mode [ 1186.367982][T14360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1186.378115][ T5822] Bluetooth: hci6: command tx timeout [ 1186.388050][T14363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.395700][T14363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.403169][T14363] bridge_slave_1: entered allmulticast mode [ 1186.413087][T14363] bridge_slave_1: entered promiscuous mode [ 1186.859176][T14360] team0: Port device team_slave_0 added [ 1186.903057][T14363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1186.923094][T14404] syzkaller0: entered promiscuous mode [ 1186.928837][T14404] syzkaller0: entered allmulticast mode [ 1186.959138][T14360] team0: Port device team_slave_1 added [ 1187.210707][T14363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.591506][T14360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1187.598715][T14360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.624951][T14360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1187.751481][T14363] team0: Port device team_slave_0 added [ 1187.777115][T14360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1187.785118][T14360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.811936][T14360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1187.850971][T14363] team0: Port device team_slave_1 added [ 1188.134581][ T5822] Bluetooth: hci5: command tx timeout [ 1188.224354][T14363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.231456][T14363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1188.259719][T14363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1188.347054][T14411] tipc: Enabled bearer , priority 0 [ 1188.459693][T14409] syzkaller0: entered promiscuous mode [ 1188.466923][T14409] syzkaller0: entered allmulticast mode [ 1188.480519][ T5822] Bluetooth: hci6: command tx timeout [ 1188.568419][T14408] tipc: Resetting bearer [ 1188.620853][T14408] tipc: Disabling bearer [ 1188.856963][T14363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1188.865081][T14363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1188.891970][T14363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1188.983210][T14360] hsr_slave_0: entered promiscuous mode [ 1188.992050][T14360] hsr_slave_1: entered promiscuous mode [ 1189.002481][T14360] debugfs: 'hsr0' already exists in 'hsr' [ 1189.008425][T14360] Cannot create hsr debugfs directory [ 1189.138265][T12704] team0: left allmulticast mode [ 1189.143318][T12704] team_slave_0: left allmulticast mode [ 1189.150514][T12704] team_slave_1: left allmulticast mode [ 1189.157860][T12704] team0: left promiscuous mode [ 1189.162714][T12704] team_slave_0: left promiscuous mode [ 1189.169079][T12704] team_slave_1: left promiscuous mode [ 1189.176076][T12704] bridge0: port 3(team0) entered disabled state [ 1189.327612][T12704] bridge_slave_1: left allmulticast mode [ 1189.333434][T12704] bridge_slave_1: left promiscuous mode [ 1189.340686][T12704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.433740][T14417] loop2: detected capacity change from 0 to 128 [ 1189.467676][T12704] bridge_slave_0: left allmulticast mode [ 1189.473520][T12704] bridge_slave_0: left promiscuous mode [ 1189.480481][T12704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.558666][T14417] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1189.715430][T14417] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1190.121423][T14042] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1190.308882][T12704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1190.356547][T12704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1190.397289][T12704] bond0 (unregistering): Released all slaves [ 1191.209314][T14363] hsr_slave_0: entered promiscuous mode [ 1191.219933][T14363] hsr_slave_1: entered promiscuous mode [ 1191.227956][T14363] debugfs: 'hsr0' already exists in 'hsr' [ 1191.233766][T14363] Cannot create hsr debugfs directory [ 1191.260033][T14432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1191.364870][T12704] hsr_slave_0: left promiscuous mode [ 1191.382983][T12704] hsr_slave_1: left promiscuous mode [ 1191.393453][T12704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1191.422861][T14431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1191.467253][T12704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1191.473963][T14431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1191.639073][T14438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1191.823754][T14438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1191.865151][T14438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1191.933064][T12704] team0 (unregistering): Port device team_slave_1 removed [ 1191.962824][T12704] team0 (unregistering): Port device team_slave_0 removed [ 1192.813846][T13103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.822133][T13103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.285938][T12116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.294099][T12116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.643166][T14449] tipc: Enabled bearer , priority 0 [ 1193.789638][T14446] syzkaller0: entered promiscuous mode [ 1193.795758][T14446] syzkaller0: entered allmulticast mode [ 1193.867326][T14445] tipc: Resetting bearer [ 1193.918330][T14445] tipc: Disabling bearer [ 1194.245593][T14455] loop7: detected capacity change from 0 to 128 [ 1194.333084][T14455] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1194.350178][T14360] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1194.392159][T14360] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1194.401815][T14455] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1194.532746][T14360] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1194.634922][T14360] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1195.007760][T14363] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1195.030956][T14254] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1195.069548][T14363] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1195.136915][T14363] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1195.258096][T14363] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1196.696502][T14472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1196.850522][T14472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1196.993005][T14475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1197.094992][T14360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1197.211099][T14474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1197.245046][ T11] wlan1: No basic rates, using min rate instead [ 1197.256102][ T11] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 1197.262054][T14363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1197.265466][ T11] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1197.304966][T14360] 8021q: adding VLAN 0 to HW filter on device team0 [ 1197.384608][T12704] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1197.416878][T13103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.424582][T13103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1197.443581][T14474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1197.456227][T12704] wlan1: authenticated [ 1197.461743][ T1708] wlan1: associating to AP 08:02:11:00:00:00 with corrupt probe response [ 1197.502506][T12704] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 1197.555561][T12116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.563085][T12116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1197.635997][T13103] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 1197.649420][T14363] 8021q: adding VLAN 0 to HW filter on device team0 [ 1197.729084][T12116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.736551][T12116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1197.772351][ T8944] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 1197.886910][T12116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.894547][T12116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1197.933231][ T1872] wlan1: association with 08:02:11:00:00:00 timed out [ 1198.330236][T14363] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1198.342015][T14363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1199.490397][T14491] tipc: Started in network mode [ 1199.495978][T14491] tipc: Node identity 4ea9c85b746a, cluster identity 4711 [ 1199.503709][T14491] tipc: Enabled bearer , priority 0 [ 1199.625893][T14491] syzkaller0: entered promiscuous mode [ 1199.631550][T14491] syzkaller0: entered allmulticast mode [ 1199.695122][T14488] tipc: Resetting bearer [ 1199.713193][T14488] tipc: Disabling bearer [ 1200.318242][T14360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1200.388588][T14363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1200.447892][T14498] loop7: detected capacity change from 0 to 128 [ 1200.566262][T14498] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1200.615127][T14498] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1201.082153][T14363] veth0_vlan: entered promiscuous mode [ 1201.116816][T14254] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1201.224256][T14363] veth1_vlan: entered promiscuous mode [ 1201.712119][T14510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1201.713455][T14363] veth0_macvtap: entered promiscuous mode [ 1201.832660][T14363] veth1_macvtap: entered promiscuous mode [ 1201.912439][T14510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1202.009689][T14513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1202.059936][T14363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1202.242220][T14363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1202.358247][ T1872] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.407225][ T1872] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.487231][T12704] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.529403][T12704] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.419405][T14360] veth0_vlan: entered promiscuous mode [ 1203.530202][T14360] veth1_vlan: entered promiscuous mode [ 1203.914075][T14360] veth0_macvtap: entered promiscuous mode [ 1204.010273][T14360] veth1_macvtap: entered promiscuous mode [ 1204.197829][T14360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1204.298230][T14360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1204.418560][T14525] syzkaller0: entered promiscuous mode [ 1204.424556][T14525] syzkaller0: entered allmulticast mode [ 1204.456346][T12703] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.483455][T12703] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.559062][T12703] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.625549][T12703] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.919253][T14530] tipc: Enabled bearer , priority 0 [ 1204.956671][T14530] syzkaller0: entered promiscuous mode [ 1204.962347][T14530] syzkaller0: entered allmulticast mode [ 1205.059127][T14530] tipc: Resetting bearer [ 1205.124737][T14529] tipc: Resetting bearer [ 1205.187775][T14529] tipc: Disabling bearer [ 1206.149688][T14543] loop7: detected capacity change from 0 to 128 [ 1206.256536][T14543] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1206.288342][T14543] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1206.707323][T14552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1206.776939][T14254] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1206.844027][T14552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1206.935826][T14555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1206.952185][T14559] loop2: detected capacity change from 0 to 128 [ 1207.067680][T14559] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1207.083645][T14559] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1207.476235][T14042] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1208.115249][T14574] syzkaller0: entered promiscuous mode [ 1208.120934][T14574] syzkaller0: entered allmulticast mode [ 1209.237632][T14588] tipc: Enabled bearer , priority 0 [ 1209.319133][T14587] syzkaller0: entered promiscuous mode [ 1209.325124][T14587] syzkaller0: entered allmulticast mode [ 1209.437989][T14587] tipc: Resetting bearer [ 1209.515188][T14583] tipc: Resetting bearer [ 1209.562458][T14583] tipc: Disabling bearer [ 1209.910244][T13103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.918958][T13103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1210.101471][T12700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1210.109725][T12700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1210.764087][T14602] loop2: detected capacity change from 0 to 7 [ 1210.820293][T14602] Dev loop2: unable to read RDB block 7 [ 1210.826302][T14602] loop2: unable to read partition table [ 1210.872286][T14602] loop2: partition table beyond EOD, truncated [ 1210.878989][T14602] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1211.805507][T14610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1211.998290][T14610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1212.521791][T12700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.530315][T12700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.638468][T13103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.647056][T13103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.725453][T14617] syzkaller0: entered promiscuous mode [ 1212.731098][T14617] syzkaller0: entered allmulticast mode [ 1212.756452][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.763080][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1214.490590][T14626] tipc: Started in network mode [ 1214.499042][T14626] tipc: Node identity 823f88505aed, cluster identity 4711 [ 1214.508002][T14626] tipc: Enabled bearer , priority 0 [ 1214.525421][T14626] syzkaller0: entered promiscuous mode [ 1214.531075][T14626] syzkaller0: entered allmulticast mode [ 1214.560908][T14626] tipc: Resetting bearer [ 1214.575722][T14625] tipc: Resetting bearer [ 1214.601166][T14625] tipc: Disabling bearer [ 1214.795338][T12761] Bluetooth: hci2: command 0x0406 tx timeout [ 1216.890860][ T30] audit: type=1800 audit(1755941600.274:928): pid=14639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2729" name="bus" dev="ramfs" ino=57519 res=0 errno=0 [ 1218.572024][T14649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.677334][T14654] syzkaller0: entered promiscuous mode [ 1218.683028][T14654] syzkaller0: entered allmulticast mode [ 1218.746817][T14653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.813589][T14649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1219.443489][T14657] loop2: detected capacity change from 0 to 2048 [ 1219.703566][T14657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1219.716168][T14657] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1220.034383][T14664] tipc: Started in network mode [ 1220.039416][T14664] tipc: Node identity 8a728507e8e5, cluster identity 4711 [ 1220.047397][T14664] tipc: Enabled bearer , priority 0 [ 1220.106222][T14665] syzkaller0: entered promiscuous mode [ 1220.111927][T14665] syzkaller0: entered allmulticast mode [ 1220.207623][T14042] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.227615][T14664] tipc: Resetting bearer [ 1220.337720][T14663] tipc: Resetting bearer [ 1220.400082][T14663] tipc: Disabling bearer [ 1223.367296][T14688] syzkaller0: entered promiscuous mode [ 1223.373027][T14688] syzkaller0: entered allmulticast mode [ 1223.483491][T14690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1223.669693][T14690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1223.773202][T14690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1225.137154][T14695] tipc: Enabled bearer , priority 0 [ 1225.189008][T14693] loop7: detected capacity change from 0 to 2048 [ 1225.198961][T14695] syzkaller0: entered promiscuous mode [ 1225.204831][T14695] syzkaller0: entered allmulticast mode [ 1225.392270][T14695] tipc: Resetting bearer [ 1225.469236][T14694] tipc: Resetting bearer [ 1225.491254][T14693] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1225.507932][T14693] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1225.548273][T14694] tipc: Disabling bearer [ 1226.118187][T14254] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1226.641859][T14709] netlink: 'syz.1.2754': attribute type 27 has an invalid length. [ 1227.204903][T14709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.213738][T14709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.253283][ T11] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1227.454662][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 1227.488392][ T11] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.500790][ T11] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1227.622553][T14709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1227.643204][T14709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1227.916866][T14716] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1227.986889][ T11] usb 3-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice= 3.d5 [ 1227.996288][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=246 [ 1228.004766][ T11] usb 3-1: Product: syz [ 1228.009026][ T11] usb 3-1: Manufacturer: syz [ 1228.015425][ T11] usb 3-1: SerialNumber: syz [ 1228.174987][T14716] usb 2-1: Using ep0 maxpacket: 16 [ 1228.291411][T14716] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1228.300295][T14716] usb 2-1: config 0 has no interface number 0 [ 1228.635677][T14716] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1228.645832][T14716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.654362][T14716] usb 2-1: Product: syz [ 1228.658822][T14716] usb 2-1: Manufacturer: syz [ 1228.663714][T14716] usb 2-1: SerialNumber: syz [ 1228.916589][T14716] usb 2-1: config 0 descriptor?? [ 1229.274780][T14711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1229.289283][T14711] 8021q: adding VLAN 0 to HW filter on device team0 [ 1229.367291][T14716] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1229.443837][T14711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1229.624637][T12703] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.759572][T12703] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.885749][T14716] gspca_spca1528: reg_w err -110 [ 1229.922977][T14716] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 1229.994880][T12704] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.004365][T12704] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.135334][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 1234.061095][T14729] syzkaller0: entered promiscuous mode [ 1234.067157][T14729] syzkaller0: entered allmulticast mode [ 1234.733167][T14732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1234.838821][T14734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1234.947875][T14732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1235.082345][T14735] loop6: detected capacity change from 0 to 2048 [ 1235.232476][T14735] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1235.245956][T14735] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1235.473794][T14735] loop6: detected capacity change from 2048 to 64 [ 1236.032026][T12116] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.206465][T14744] tipc: Enabled bearer , priority 0 [ 1236.229184][T14744] syzkaller0: entered promiscuous mode [ 1236.235107][T14744] syzkaller0: entered allmulticast mode [ 1236.270986][T14360] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1236.323329][T12116] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.392905][T14737] kmmpd-loop6: attempt to access beyond end of device [ 1236.392905][T14737] loop6: rw=14337, sector=512, nr_sectors = 8 limit=64 [ 1236.406749][T14737] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 1236.477682][T14744] tipc: Resetting bearer [ 1236.639834][T14743] tipc: Resetting bearer [ 1236.698839][T14743] tipc: Disabling bearer [ 1236.750782][T12116] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.946597][T12116] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.415304][T12116] bridge_slave_1: left allmulticast mode [ 1237.421131][T12116] bridge_slave_1: left promiscuous mode [ 1237.427736][T12116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.502629][T12116] bridge_slave_0: left allmulticast mode [ 1237.508685][T12116] bridge_slave_0: left promiscuous mode [ 1237.515349][T12116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.938586][ T11] usb 2-1: USB disconnect, device number 53 [ 1238.280536][T12116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1238.359182][T12116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1238.380623][T12116] bond0 (unregistering): Released all slaves [ 1238.773349][T12116] hsr_slave_0: left promiscuous mode [ 1238.796194][T12116] hsr_slave_1: left promiscuous mode [ 1238.806081][T12116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1238.813559][T12116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1238.846066][T12116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1238.853596][T12116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1238.912140][T12116] veth1_macvtap: left promiscuous mode [ 1238.918411][T12116] veth0_macvtap: left promiscuous mode [ 1238.925963][T12116] veth1_vlan: left promiscuous mode [ 1238.931463][T12116] veth0_vlan: left promiscuous mode [ 1239.643669][T12116] team0 (unregistering): Port device team_slave_1 removed [ 1239.667926][T12116] team0 (unregistering): Port device team_slave_0 removed [ 1240.248530][T12116] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.397804][T12116] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.514357][T12116] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.710638][T12116] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.054889][T12116] bridge_slave_1: left allmulticast mode [ 1241.061004][T12116] bridge_slave_1: left promiscuous mode [ 1241.068096][T12116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.208226][T12116] bridge_slave_0: left allmulticast mode [ 1241.214705][T12116] bridge_slave_0: left promiscuous mode [ 1241.222360][T12116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.591139][T12761] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1241.616761][T12761] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1241.701605][T12761] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1241.882896][T12761] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1241.901809][T12116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1241.927870][T12761] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1241.987253][T12116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1242.063331][T12116] bond0 (unregistering): Released all slaves [ 1242.307333][T12116] tipc: Left network mode [ 1243.027472][T14776] loop1: detected capacity change from 0 to 2048 [ 1243.142527][T14776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1243.158997][T14776] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1243.235058][T12116] hsr_slave_0: left promiscuous mode [ 1243.324387][T12116] hsr_slave_1: left promiscuous mode [ 1243.332685][T12116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1243.340904][T12116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1243.485637][T12116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1243.493342][T12116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1243.576257][T14776] loop1: detected capacity change from 2048 to 64 [ 1243.601780][ T30] audit: type=1800 audit(1755941626.984:929): pid=14783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2774" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 1243.791167][T12116] veth1_macvtap: left promiscuous mode [ 1243.797375][T12116] veth0_macvtap: left promiscuous mode [ 1243.803175][T12116] veth1_vlan: left promiscuous mode [ 1243.808721][T12116] veth0_vlan: left promiscuous mode [ 1244.044348][T12761] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1244.056003][T12761] Bluetooth: hci3: command tx timeout [ 1244.062991][T14788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1244.085620][T14788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1244.108229][T14788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1244.120841][T14788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1244.461216][T13560] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1244.665041][T14778] kmmpd-loop1: attempt to access beyond end of device [ 1244.665041][T14778] loop1: rw=14337, sector=512, nr_sectors = 8 limit=64 [ 1244.679633][T14778] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 1244.996657][T12116] team0 (unregistering): Port device team_slave_1 removed [ 1245.026829][T12116] team0 (unregistering): Port device team_slave_0 removed [ 1246.144912][T14788] Bluetooth: hci3: command tx timeout [ 1246.214588][T14788] Bluetooth: hci4: command tx timeout [ 1246.925443][T14765] chnl_net:caif_netlink_parms(): no params data found [ 1247.230909][T14784] chnl_net:caif_netlink_parms(): no params data found [ 1247.290754][T12116] bridge_slave_1: left allmulticast mode [ 1247.297264][T12116] bridge_slave_1: left promiscuous mode [ 1247.303727][T12116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.356708][T12116] bridge_slave_0: left allmulticast mode [ 1247.362472][T12116] bridge_slave_0: left promiscuous mode [ 1247.370571][T12116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.253458][T14788] Bluetooth: hci3: command tx timeout [ 1248.260495][T12116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1248.290650][T12116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1248.299675][T14788] Bluetooth: hci4: command tx timeout [ 1248.386891][T12116] bond0 (unregistering): Released all slaves [ 1248.817059][T12116] tipc: Left network mode [ 1249.394486][T12116] hsr_slave_0: left promiscuous mode [ 1249.410916][T12116] hsr_slave_1: left promiscuous mode [ 1249.420620][T12116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1249.485962][T12116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1250.364951][T14788] Bluetooth: hci3: command tx timeout [ 1250.389474][T14788] Bluetooth: hci4: command tx timeout [ 1250.462340][T12116] team0 (unregistering): Port device team_slave_1 removed [ 1250.487037][T12116] team0 (unregistering): Port device team_slave_0 removed [ 1251.200430][T14765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.207933][T14765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.215605][T14765] bridge_slave_0: entered allmulticast mode [ 1251.224953][T14765] bridge_slave_0: entered promiscuous mode [ 1251.333119][T14765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.341249][T14765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.349049][T14765] bridge_slave_1: entered allmulticast mode [ 1251.357376][T14765] bridge_slave_1: entered promiscuous mode [ 1251.377485][ T5872] usb 3-1: USB disconnect, device number 57 [ 1251.499401][T12116] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.730155][T12116] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.814941][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1251.841585][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1251.871636][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1251.892118][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1251.909794][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1251.919357][T12116] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.060965][T14784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.069077][T14784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.078103][T14784] bridge_slave_0: entered allmulticast mode [ 1252.087553][T14784] bridge_slave_0: entered promiscuous mode [ 1252.135246][T14765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1252.233957][T12116] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.290183][T14765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1252.304844][T14784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.312316][T14784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.320042][T14784] bridge_slave_1: entered allmulticast mode [ 1252.328731][T14784] bridge_slave_1: entered promiscuous mode [ 1252.480892][T14788] Bluetooth: hci4: command tx timeout [ 1252.772976][T14765] team0: Port device team_slave_0 added [ 1252.794004][T14784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1252.811638][T14765] team0: Port device team_slave_1 added [ 1252.825240][T14813] tipc: Enabled bearer , priority 0 [ 1252.930465][T14784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1253.021052][T12116] bridge_slave_1: left allmulticast mode [ 1253.027256][T12116] bridge_slave_1: left promiscuous mode [ 1253.033648][T12116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.049426][T12116] bridge_slave_0: left allmulticast mode [ 1253.055972][T12116] bridge_slave_0: left promiscuous mode [ 1253.062187][T12116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.435186][T12116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1253.453322][T12116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1253.481449][T12116] bond0 (unregistering): Released all slaves [ 1253.599935][T14815] tipc: Resetting bearer [ 1253.611898][T14765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1253.619253][T14765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1253.647873][T14765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1253.792618][T14784] team0: Port device team_slave_0 added [ 1253.899155][T14784] team0: Port device team_slave_1 added [ 1253.905937][ T11] tipc: Node number set to 985909339 [ 1254.064434][ T5822] Bluetooth: hci1: command tx timeout [ 1254.073770][T14812] tipc: Disabling bearer [ 1254.281603][T12116] tipc: Left network mode [ 1254.317082][T14765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1254.324615][T14765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1254.353709][T14765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1254.639013][T14784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1254.647348][T14784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1254.674832][T14784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1254.723697][T14784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1254.731384][T14784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1254.758723][T14784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1255.199931][T12116] hsr_slave_0: left promiscuous mode [ 1255.224734][T12116] hsr_slave_1: left promiscuous mode [ 1255.232514][T12116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1255.243611][T12116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1255.279880][T12116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1255.287725][T12116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1255.368434][T12116] veth1_macvtap: left promiscuous mode [ 1255.374967][T12116] veth0_macvtap: left promiscuous mode [ 1255.380931][T12116] veth1_vlan: left promiscuous mode [ 1255.386721][T12116] veth0_vlan: left promiscuous mode [ 1256.204522][ T5822] Bluetooth: hci1: command tx timeout [ 1256.261622][T12116] team0 (unregistering): Port device team_slave_1 removed [ 1256.336145][T12116] team0 (unregistering): Port device team_slave_0 removed [ 1256.763968][T14765] hsr_slave_0: entered promiscuous mode [ 1256.778243][T14765] hsr_slave_1: entered promiscuous mode [ 1256.970313][T14806] chnl_net:caif_netlink_parms(): no params data found [ 1257.063930][T14784] hsr_slave_0: entered promiscuous mode [ 1257.072507][T14784] hsr_slave_1: entered promiscuous mode [ 1257.080521][T14784] debugfs: 'hsr0' already exists in 'hsr' [ 1257.086457][T14784] Cannot create hsr debugfs directory [ 1258.224678][ T5822] Bluetooth: hci1: command tx timeout [ 1258.383238][T14806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.391551][T14806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.399063][T14806] bridge_slave_0: entered allmulticast mode [ 1258.408529][T14806] bridge_slave_0: entered promiscuous mode [ 1258.458395][T14806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.466045][T14806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.473437][T14806] bridge_slave_1: entered allmulticast mode [ 1258.482836][T14806] bridge_slave_1: entered promiscuous mode [ 1258.631811][T14765] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1258.653026][T14765] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1258.779066][T14765] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1258.812452][T14806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.825195][T14765] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1258.877486][T14806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.183669][T14806] team0: Port device team_slave_0 added [ 1259.253668][T14806] team0: Port device team_slave_1 added [ 1259.405490][T14845] tipc: Enabled bearer , priority 0 [ 1259.536732][T14784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1259.583248][T14806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.591658][T14806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1259.618221][T14806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.640850][T14784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1259.670481][T14784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1259.698604][T14845] tipc: Resetting bearer [ 1259.710579][T14784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1259.753470][T14806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.761526][T14806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1259.788074][T14806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1259.804871][T14844] tipc: Disabling bearer [ 1260.206760][T14806] hsr_slave_0: entered promiscuous mode [ 1260.215601][T14806] hsr_slave_1: entered promiscuous mode [ 1260.223058][T14806] debugfs: 'hsr0' already exists in 'hsr' [ 1260.230017][T14806] Cannot create hsr debugfs directory [ 1260.304604][ T5822] Bluetooth: hci1: command tx timeout [ 1260.789158][T14765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1260.899030][T14765] 8021q: adding VLAN 0 to HW filter on device team0 [ 1260.988200][ T1872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.995631][ T1872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1261.028493][T14784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1261.131945][ T1872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.139388][ T1872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1261.490771][T14784] 8021q: adding VLAN 0 to HW filter on device team0 [ 1261.634553][T12703] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.641860][T12703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1261.855488][T14765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1261.949725][T12703] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.957240][T12703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.549050][T14806] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1262.672485][T14806] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1262.776580][T14806] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1262.925709][T14806] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1264.048697][T14765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.469547][T14784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.514067][T14806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.687054][T14806] 8021q: adding VLAN 0 to HW filter on device team0 [ 1264.781578][T12700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.789119][T12700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.863016][T12700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.870525][T12700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1265.163731][T14784] veth0_vlan: entered promiscuous mode [ 1265.348495][T14806] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1265.359691][T14806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1265.442725][T14784] veth1_vlan: entered promiscuous mode [ 1265.765439][T14784] veth0_macvtap: entered promiscuous mode [ 1265.839274][T14784] veth1_macvtap: entered promiscuous mode [ 1266.096271][T14784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1266.188979][T14784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1266.305522][T12700] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.354403][T12700] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.363379][T12700] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.364848][T14716] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1266.468735][T12700] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.654808][T14716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.666777][T14716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1266.677435][T14716] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1266.687462][T14716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.822853][T14716] usb 4-1: config 0 descriptor?? [ 1267.000310][T14765] veth0_vlan: entered promiscuous mode [ 1267.188718][T14765] veth1_vlan: entered promiscuous mode [ 1267.329201][T14806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1267.569488][T14716] usbhid 4-1:0.0: can't add hid device: -71 [ 1267.577552][T14716] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1267.657571][T14716] usb 4-1: USB disconnect, device number 71 [ 1267.680178][T14765] veth0_macvtap: entered promiscuous mode [ 1267.728735][T14765] veth1_macvtap: entered promiscuous mode [ 1267.903514][T14765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1267.982684][T14765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1268.090927][T12615] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.224923][T12615] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.233940][T12615] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.270212][T12615] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.109475][T14806] veth0_vlan: entered promiscuous mode [ 1270.249552][T14806] veth1_vlan: entered promiscuous mode [ 1270.290664][T14910] loop3: detected capacity change from 0 to 128 [ 1270.425014][T14910] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1270.476072][T14910] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1270.542480][T14806] veth0_macvtap: entered promiscuous mode [ 1270.620877][T14806] veth1_macvtap: entered promiscuous mode [ 1270.798207][T14806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1270.853086][T14363] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1270.888500][T14806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1270.970281][T12703] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.027926][T12703] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.086871][T12703] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.134945][T12703] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.377831][T14922] tipc: Enabled bearer , priority 0 [ 1271.539350][T14920] tipc: Resetting bearer [ 1271.582393][T14918] tipc: Disabling bearer [ 1272.789539][ T1872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.798025][ T1872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.806354][ T5879] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1272.990264][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.002174][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.013006][ T5879] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1273.022996][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.029695][ T8944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.039210][ T8944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.062437][ T5879] usb 4-1: config 0 descriptor?? [ 1273.483260][T14954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1273.600183][T14956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1273.671738][T14954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1273.706181][ T5879] usbhid 4-1:0.0: can't add hid device: -71 [ 1273.712780][ T5879] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1273.752111][ T5879] usb 4-1: USB disconnect, device number 72 [ 1274.010520][T12121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.018665][T12121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.113665][ T8944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.122433][ T8944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.164529][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1274.171142][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1274.486367][T14967] loop7: detected capacity change from 0 to 128 [ 1274.636146][T14967] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1274.785387][T14967] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1275.038733][T14978] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1275.155840][T14254] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1275.612650][T14982] tipc: Enabled bearer , priority 0 [ 1275.664526][T14982] syzkaller0: entered promiscuous mode [ 1275.670278][T14982] syzkaller0: entered allmulticast mode [ 1275.764018][T14981] tipc: Resetting bearer [ 1275.810447][T14981] tipc: Disabling bearer [ 1276.303582][T12704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1276.311753][T12704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1276.468629][T12703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1276.478142][T12703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.258253][T15006] tipc: Started in network mode [ 1277.263455][T15006] tipc: Node identity d6fd06f1c154, cluster identity 4711 [ 1277.276702][T15006] tipc: Enabled bearer , priority 0 [ 1277.309620][T15008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1277.330449][T15009] syzkaller0: entered promiscuous mode [ 1277.340188][T15009] syzkaller0: entered allmulticast mode [ 1277.352652][T14716] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1277.388615][T15012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1277.419119][T15006] tipc: Resetting bearer [ 1277.436280][ T5879] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1277.462086][T15008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1277.490611][T15005] tipc: Resetting bearer [ 1277.526689][T15005] tipc: Disabling bearer [ 1277.541430][T14716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1277.542536][T15014] loop4: detected capacity change from 0 to 128 [ 1277.552765][T14716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1277.569210][T14716] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1277.581081][T14716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.603987][T14716] usb 4-1: config 0 descriptor?? [ 1277.639351][T15014] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1277.660491][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1277.670778][ T5879] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1277.683485][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.697262][ T5879] usb 1-1: config 0 descriptor?? [ 1277.698107][T15014] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1277.734990][ T5879] usbhid 1-1:0.0: can't add hid device: -22 [ 1277.735554][ T5879] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 1277.841710][T14765] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1278.264737][T14716] usbhid 4-1:0.0: can't add hid device: -71 [ 1278.271382][T14716] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1278.322011][T14716] usb 4-1: USB disconnect, device number 73 [ 1279.442277][T15034] tipc: Enabled bearer , priority 0 [ 1279.463868][T15034] syzkaller0: entered promiscuous mode [ 1279.469637][T15034] syzkaller0: entered allmulticast mode [ 1279.616780][T15031] tipc: Resetting bearer [ 1279.666782][T15031] tipc: Disabling bearer [ 1280.245050][T14716] usb 1-1: USB disconnect, device number 20 [ 1280.792726][T15055] loop9: detected capacity change from 0 to 128 [ 1280.819046][T15055] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1280.883509][T15055] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1282.197653][T14806] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1282.239568][T14716] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1282.372732][T15069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1282.405245][T14716] usb 8-1: Using ep0 maxpacket: 32 [ 1282.444656][T14716] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1282.454042][T14716] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.478087][T15069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1282.552173][T15069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1282.596730][T14716] usb 8-1: config 0 descriptor?? [ 1282.813321][T14716] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1282.835214][T14716] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1282.870236][T14716] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1282.877866][T14716] usb 8-1: media controller created [ 1282.942620][T14716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1283.049683][T14716] az6027: usb out operation failed. (-71) [ 1283.072277][T14716] az6027: usb out operation failed. (-71) [ 1283.078516][T14716] stb0899_attach: Driver disabled by Kconfig [ 1283.084701][T14716] az6027: no front-end attached [ 1283.084701][T14716] [ 1283.100398][T14716] az6027: usb out operation failed. (-71) [ 1283.110329][T14716] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1283.120054][T14716] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input15 [ 1283.135926][T14716] dvb-usb: schedule remote query interval to 400 msecs. [ 1283.143265][T14716] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1283.155917][T14716] usb 8-1: USB disconnect, device number 7 [ 1283.667651][T15078] netlink: 'syz.9.2836': attribute type 1 has an invalid length. [ 1283.693596][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2836'. [ 1283.759270][T14716] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1285.477673][T15100] loop7: detected capacity change from 0 to 128 [ 1285.616664][T15100] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1285.768411][T15100] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1286.026670][T15115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1286.149779][T14254] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1286.173246][T15115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1286.218499][T15113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1286.455174][T14788] Bluetooth: hci0: command 0x0406 tx timeout [ 1287.804402][T14716] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1288.003354][T14716] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1288.029811][T14716] usb 10-1: config 7 has an invalid interface number: 188 but max is 0 [ 1288.039070][T14716] usb 10-1: config 7 has no interface number 0 [ 1288.045581][T14716] usb 10-1: config 7 interface 188 has no altsetting 0 [ 1288.108255][T14716] usb 10-1: New USB device found, idVendor=054c, idProduct=0010, bcdDevice= 5.06 [ 1288.118161][T14716] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.130675][T14716] usb 10-1: Product: syz [ 1288.135761][T14716] usb 10-1: Manufacturer: syz [ 1288.140629][T14716] usb 10-1: SerialNumber: syz [ 1288.471987][T14716] usb-storage 10-1:7.188: USB Mass Storage device detected [ 1288.497844][T14716] usb-storage 10-1:7.188: Quirks match for vid 054c pid 0010: 1 [ 1288.545827][T14716] usb 10-1: USB disconnect, device number 8 [ 1290.106896][T15148] loop3: detected capacity change from 0 to 128 [ 1290.235418][T15148] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1290.265334][T15148] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1290.549676][T15153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1290.763694][T15156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1290.953240][T14363] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1290.975942][T15153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1300.739872][T15193] loop4: detected capacity change from 0 to 128 [ 1300.957539][T15193] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1301.170204][T15193] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1301.688048][T14765] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1302.750118][T14788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1302.760264][T14788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1302.772574][T14788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1302.785763][T14788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1302.796821][T14788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1304.886724][ T5822] Bluetooth: hci2: command tx timeout [ 1307.035483][T15204] chnl_net:caif_netlink_parms(): no params data found [ 1307.044942][T12761] Bluetooth: hci6: command 0x0406 tx timeout [ 1307.051155][T12761] Bluetooth: hci2: command tx timeout [ 1307.912788][T15237] loop0: detected capacity change from 0 to 128 [ 1308.163306][T15243] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 1308.167070][T15237] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1308.284373][T15237] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1308.709292][T15250] random: crng reseeded on system resumption [ 1309.134603][ T5822] Bluetooth: hci2: command tx timeout [ 1309.177477][T14784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1309.194642][T14716] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1309.313545][T15204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.325195][T15204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.332681][T15204] bridge_slave_0: entered allmulticast mode [ 1309.341137][T15204] bridge_slave_0: entered promiscuous mode [ 1309.454531][T14716] usb 10-1: Using ep0 maxpacket: 32 [ 1309.525074][T14716] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1309.534430][T14716] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.552106][T15204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.559805][T15204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.567705][T15204] bridge_slave_1: entered allmulticast mode [ 1309.576469][T15204] bridge_slave_1: entered promiscuous mode [ 1309.746578][T14716] usb 10-1: config 0 descriptor?? [ 1309.834002][T15204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1309.959941][T15204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1310.139764][T14716] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1310.190533][T14716] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1310.212330][T14716] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1310.220846][T14716] usb 10-1: media controller created [ 1310.311189][T14716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1310.432209][T15204] team0: Port device team_slave_0 added [ 1310.486757][T15204] team0: Port device team_slave_1 added [ 1310.697482][T14716] az6027: usb out operation failed. (-71) [ 1310.734724][T14716] az6027: usb out operation failed. (-71) [ 1310.740737][T14716] stb0899_attach: Driver disabled by Kconfig [ 1310.747038][T14716] az6027: no front-end attached [ 1310.747038][T14716] [ 1310.879285][T14716] az6027: usb out operation failed. (-71) [ 1310.885546][T14716] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1310.895974][T14716] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input16 [ 1310.943195][T15204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1310.950678][T15204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1310.982855][T15204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1310.997853][T14716] dvb-usb: schedule remote query interval to 400 msecs. [ 1311.005862][T14716] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1311.175010][ T5822] Bluetooth: hci2: command tx timeout [ 1311.581283][T14716] usb 10-1: USB disconnect, device number 9 [ 1311.592831][T15204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1311.600199][T15204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.627155][T15204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1311.993666][T15204] hsr_slave_0: entered promiscuous mode [ 1312.002465][T15204] hsr_slave_1: entered promiscuous mode [ 1312.010346][T15204] debugfs: 'hsr0' already exists in 'hsr' [ 1312.016232][T15204] Cannot create hsr debugfs directory [ 1312.276442][T14716] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1312.881409][T12703] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.259274][T12703] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.489350][T12703] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.801611][T12703] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.455817][T12703] bridge_slave_1: left allmulticast mode [ 1314.462127][T12703] bridge_slave_1: left promiscuous mode [ 1314.468826][T12703] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.568600][T12703] bridge_slave_0: left allmulticast mode [ 1314.574652][T12703] bridge_slave_0: left promiscuous mode [ 1314.581072][T12703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.297139][T12703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1315.331172][T12703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1315.351420][T12703] bond0 (unregistering): Released all slaves [ 1315.952068][T12703] tipc: Left network mode [ 1316.369601][T15204] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1316.504956][T12703] hsr_slave_0: left promiscuous mode [ 1316.562162][T12703] hsr_slave_1: left promiscuous mode [ 1316.569520][T12703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1316.577446][T12703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1316.637709][T12703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1316.645455][T12703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1316.755697][T12703] veth1_macvtap: left promiscuous mode [ 1316.761596][T12703] veth0_macvtap: left promiscuous mode [ 1316.767565][T12703] veth1_vlan: left promiscuous mode [ 1316.772965][T12703] veth0_vlan: left promiscuous mode [ 1318.165817][T12703] team0 (unregistering): Port device team_slave_1 removed [ 1318.260796][T12703] team0 (unregistering): Port device team_slave_0 removed [ 1318.518421][T15204] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1318.693346][T15204] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1318.971484][T15204] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1320.945380][T15204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1321.245320][T15204] 8021q: adding VLAN 0 to HW filter on device team0 [ 1321.481409][T12615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.488820][T12615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1321.612337][T12615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.619822][T12615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.712656][T12761] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1321.721904][T12761] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1321.730452][T12761] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1321.743846][T12761] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1321.753609][T12761] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1321.960931][T14716] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1322.165019][T14716] usb 4-1: Using ep0 maxpacket: 32 [ 1322.199031][T14716] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1322.209127][T14716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.353439][T14716] usb 4-1: config 0 descriptor?? [ 1322.572861][T14716] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1322.603638][T14716] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1322.668053][T14716] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1322.675989][T14716] usb 4-1: media controller created [ 1322.789508][T14716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1322.882285][T14716] az6027: usb out operation failed. (-71) [ 1322.902709][T14716] az6027: usb out operation failed. (-71) [ 1322.909261][T14716] stb0899_attach: Driver disabled by Kconfig [ 1322.916866][T14716] az6027: no front-end attached [ 1322.916866][T14716] [ 1322.925386][T14716] az6027: usb out operation failed. (-71) [ 1322.931344][T14716] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1322.945379][T14716] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 1322.970928][T14716] dvb-usb: schedule remote query interval to 400 msecs. [ 1322.978102][T14716] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1322.998272][T14716] usb 4-1: USB disconnect, device number 74 [ 1323.349550][T14716] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1323.824893][ T5822] Bluetooth: hci0: command tx timeout [ 1323.849970][T15300] chnl_net:caif_netlink_parms(): no params data found [ 1325.137028][T15204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1325.679533][ T1872] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.894990][ T5822] Bluetooth: hci0: command tx timeout [ 1325.938699][ T1872] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.351474][ T1872] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.477549][T15300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.485313][T15300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.493013][T15300] bridge_slave_0: entered allmulticast mode [ 1326.503365][T15300] bridge_slave_0: entered promiscuous mode [ 1326.627046][T15300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.636972][T15300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.645047][T15300] bridge_slave_1: entered allmulticast mode [ 1326.654771][T15300] bridge_slave_1: entered promiscuous mode [ 1326.742325][ T1872] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.279264][T15300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.370898][T15300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.510779][ T1872] bridge_slave_1: left allmulticast mode [ 1327.520369][ T1872] bridge_slave_1: left promiscuous mode [ 1327.526819][ T1872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.598566][ T1872] bridge_slave_0: left allmulticast mode [ 1327.604539][ T1872] bridge_slave_0: left promiscuous mode [ 1327.611035][ T1872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.075065][ T5822] Bluetooth: hci0: command tx timeout [ 1328.208157][ T1872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.227690][ T1872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.247620][ T1872] bond0 (unregistering): Released all slaves [ 1328.712038][T15300] team0: Port device team_slave_0 added [ 1328.882637][T15300] team0: Port device team_slave_1 added [ 1328.995697][ T1872] hsr_slave_0: left promiscuous mode [ 1329.014684][ T1872] hsr_slave_1: left promiscuous mode [ 1329.022398][ T1872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1329.032770][ T1872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1329.091918][ T1872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1329.099832][ T1872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1329.193462][ T1872] veth1_macvtap: left promiscuous mode [ 1329.199555][ T1872] veth0_macvtap: left promiscuous mode [ 1329.205473][ T1872] veth1_vlan: left promiscuous mode [ 1329.210891][ T1872] veth0_vlan: left promiscuous mode [ 1329.875488][ T1872] team0 (unregistering): Port device team_slave_1 removed [ 1329.957378][ T1872] team0 (unregistering): Port device team_slave_0 removed [ 1330.144831][ T5822] Bluetooth: hci0: command tx timeout [ 1330.658304][T15300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1330.665530][T15300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1330.691846][T15300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1330.957512][T15204] veth0_vlan: entered promiscuous mode [ 1331.041483][T15300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1331.048848][T15300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1331.075588][T15300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1331.106102][T15204] veth1_vlan: entered promiscuous mode [ 1331.356238][T15340] autofs4:pid:15340:validate_dev_ioctl: path string terminator missing for cmd(0xc0189373) [ 1331.482843][T15300] hsr_slave_0: entered promiscuous mode [ 1331.492234][T15300] hsr_slave_1: entered promiscuous mode [ 1331.667019][T15204] veth0_macvtap: entered promiscuous mode [ 1331.794832][T15204] veth1_macvtap: entered promiscuous mode [ 1332.410520][T15204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1332.464732][T12761] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1332.473903][T15204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1332.487045][T12761] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1332.498450][T12761] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1332.507135][T12615] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.523577][T12700] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.569155][T12761] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1332.585639][T12761] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1332.593087][T12700] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.758591][T12700] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.825400][T10818] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1333.005930][T10818] usb 4-1: Using ep0 maxpacket: 32 [ 1333.156825][T10818] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1333.166226][T10818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.375094][T10818] usb 4-1: config 0 descriptor?? [ 1333.594527][T10818] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1333.713944][T10818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1333.736992][T10818] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1333.742292][T15345] chnl_net:caif_netlink_parms(): no params data found [ 1333.744621][T10818] usb 4-1: media controller created [ 1333.833907][T10818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1334.027851][T10818] az6027: usb out operation failed. (-71) [ 1334.035332][T10818] az6027: usb out operation failed. (-71) [ 1334.041188][T10818] stb0899_attach: Driver disabled by Kconfig [ 1334.047678][T10818] az6027: no front-end attached [ 1334.047678][T10818] [ 1334.058352][T10818] az6027: usb out operation failed. (-71) [ 1334.064327][T10818] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1334.073966][T10818] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 1334.109691][T15300] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1334.167460][T10818] dvb-usb: schedule remote query interval to 400 msecs. [ 1334.174728][T10818] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1334.193185][T15300] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1334.280682][T15300] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1334.290433][T10818] usb 4-1: USB disconnect, device number 75 [ 1334.416654][T15300] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1334.651102][T12761] Bluetooth: hci3: command tx timeout [ 1334.701842][T10818] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1335.607176][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1335.613788][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1336.398045][T15345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1336.405683][T15345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.413357][T15345] bridge_slave_0: entered allmulticast mode [ 1336.423487][T15345] bridge_slave_0: entered promiscuous mode [ 1336.621027][T15300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1336.676972][T15345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.685126][T15345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.692680][T15345] bridge_slave_1: entered allmulticast mode [ 1336.701331][T15345] bridge_slave_1: entered promiscuous mode [ 1336.713060][T12761] Bluetooth: hci3: command tx timeout [ 1336.942504][T15345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1336.986830][T15300] 8021q: adding VLAN 0 to HW filter on device team0 [ 1337.105787][T12700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.113230][T12700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1337.139237][T15345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1337.431410][T12700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.438942][T12700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1337.573236][T15345] team0: Port device team_slave_0 added [ 1337.673659][T15345] team0: Port device team_slave_1 added [ 1338.123443][T15345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1338.131758][T15345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1338.160126][T15345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1338.187119][T15300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1338.366508][T15345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1338.373752][T15345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1338.403154][T15345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1338.775103][T12761] Bluetooth: hci3: command tx timeout [ 1339.534898][T15345] hsr_slave_0: entered promiscuous mode [ 1339.543970][T15345] hsr_slave_1: entered promiscuous mode [ 1339.552153][T15345] debugfs: 'hsr0' already exists in 'hsr' [ 1339.558111][T15345] Cannot create hsr debugfs directory [ 1340.859371][T12761] Bluetooth: hci3: command tx timeout [ 1341.867703][T15300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1342.592344][T13103] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.929379][T13103] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.189585][T13103] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.284513][T15345] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1343.399547][T13103] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.482947][ T8944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.485842][T15345] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1343.491189][ T8944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.662792][T15345] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1343.843297][T15345] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1343.980340][T12703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.988477][T12703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.997920][T13103] bridge_slave_1: left allmulticast mode [ 1344.003665][T13103] bridge_slave_1: left promiscuous mode [ 1344.010451][T13103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.166304][T13103] bridge_slave_0: left allmulticast mode [ 1344.172119][T13103] bridge_slave_0: left promiscuous mode [ 1344.179871][T13103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.705882][T13103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1344.736588][T13103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1344.800146][T13103] bond0 (unregistering): Released all slaves [ 1345.118293][T13103] tipc: Left network mode [ 1345.564477][T13103] hsr_slave_0: left promiscuous mode [ 1345.579950][T13103] hsr_slave_1: left promiscuous mode [ 1345.587395][T13103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1345.595111][T13103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1345.618706][T13103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1345.627444][T13103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1345.692640][T13103] veth1_macvtap: left promiscuous mode [ 1345.698667][T13103] veth0_macvtap: left promiscuous mode [ 1345.704535][T13103] veth1_vlan: left promiscuous mode [ 1345.709935][T13103] veth0_vlan: left promiscuous mode [ 1345.998743][T15423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1346.141165][T15426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1346.285885][T15423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1346.357297][T13103] team0 (unregistering): Port device team_slave_1 removed [ 1346.388249][T13103] team0 (unregistering): Port device team_slave_0 removed [ 1346.637079][T15300] veth0_vlan: entered promiscuous mode [ 1346.815208][T15300] veth1_vlan: entered promiscuous mode [ 1346.974931][T15300] veth0_macvtap: entered promiscuous mode [ 1347.122236][T15300] veth1_macvtap: entered promiscuous mode [ 1347.220184][T15345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1347.375413][T15345] 8021q: adding VLAN 0 to HW filter on device team0 [ 1347.389104][T15300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1347.490752][T15300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1347.540237][T12114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.547867][T12114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1347.644411][T12116] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.662044][T12114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.669616][T12114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1347.687238][T12700] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.741123][T12700] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.841697][T12700] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.616079][T15345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1351.048327][T15469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1351.152477][T15469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1351.220357][T15472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1353.166285][T15345] veth0_vlan: entered promiscuous mode [ 1353.310596][T15345] veth1_vlan: entered promiscuous mode [ 1353.643007][T15345] veth0_macvtap: entered promiscuous mode [ 1353.762908][T15345] veth1_macvtap: entered promiscuous mode [ 1353.966095][T15345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1354.061434][T15345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1354.186294][T12700] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.265992][T12700] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.327699][T12700] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.414553][T12700] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.432571][ T8944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.440911][ T8944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1355.660272][T13103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.668836][T13103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1358.202579][T15536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1358.376021][T15536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1358.431968][T15538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1361.684383][T13103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1361.692519][T13103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.272197][T12114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.280935][T12114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.994382][T15578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1363.084241][T15581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1363.204323][T15578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1363.224616][ T11] usb 4-1: new low-speed USB device number 76 using dummy_hcd [ 1363.422030][ T11] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1363.430644][ T11] usb 4-1: config 179 has no interface number 0 [ 1363.437322][ T11] usb 4-1: config 179 interface 65 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1363.449435][ T11] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1363.460969][ T11] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x87 has invalid maxpacket 65535, setting to 8 [ 1363.472618][ T11] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1363.483006][ T11] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1363.498220][ T11] usb 4-1: New USB device found, idVendor=12ab, idProduct=0000, bcdDevice=1e.eb [ 1363.507937][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.530242][T15582] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1363.790902][T10818] usb 4-1: USB disconnect, device number 76 [ 1368.121259][T15666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1368.377803][T12761] Bluetooth: hci4: command 0x0406 tx timeout [ 1368.613764][T15680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1372.761215][T15726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1372.938281][T15726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1372.971731][T15726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1374.209905][T15734] netlink: 'syz.6.2982': attribute type 10 has an invalid length. [ 1385.019587][T15821] loop3: detected capacity change from 0 to 2048 [ 1385.124848][T15821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1385.137320][T15821] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1385.668160][T14363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1385.997608][ T11] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1386.226110][ T11] usb 9-1: Using ep0 maxpacket: 16 [ 1386.460547][ T11] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1386.470060][ T11] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.473522][T15829] 9pnet_fd: Insufficient options for proto=fd [ 1386.478507][ T11] usb 9-1: Product: syz [ 1386.489013][ T11] usb 9-1: Manufacturer: syz [ 1386.493803][ T11] usb 9-1: SerialNumber: syz [ 1386.623759][ T11] usb 9-1: config 0 descriptor?? [ 1386.695396][ T11] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 1386.704511][ T11] usb 9-1: Detected FT232H [ 1387.033132][T15826] overlayfs: missing 'lowerdir' [ 1387.444988][ T11] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1387.479004][ T11] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1387.520257][ T11] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71 [ 1387.589942][ T11] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1387.642108][ T11] usb 9-1: USB disconnect, device number 29 [ 1387.694919][ T11] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1387.705137][ T11] ftdi_sio 9-1:0.0: device disconnected [ 1389.254941][T15857] loop3: detected capacity change from 0 to 2048 [ 1389.392007][T15857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1389.407618][T15857] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1390.151223][T14363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1390.370639][T15871] 9pnet_fd: Insufficient options for proto=fd [ 1390.996144][T15883] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3028'. [ 1391.005878][T15883] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3028'. [ 1391.466491][T15891] vivid-000: ================= START STATUS ================= [ 1391.474591][T15891] vivid-000: Test Pattern: 75% Colorbar [ 1391.480336][T15891] vivid-000: Fill Percentage of Frame: 100 [ 1391.486747][T15891] vivid-000: Horizontal Movement: No Movement [ 1391.493008][T15891] vivid-000: Vertical Movement: No Movement [ 1391.499170][T15891] vivid-000: OSD Text Mode: All [ 1391.504344][T15891] vivid-000: Show Border: false [ 1391.509469][T15891] vivid-000: Show Square: false [ 1391.515050][T15891] vivid-000: Sensor Flipped Horizontally: false [ 1391.521674][T15891] vivid-000: Sensor Flipped Vertically: false [ 1391.528127][T15891] vivid-000: Insert SAV Code in Image: false [ 1391.534496][T15891] vivid-000: Insert EAV Code in Image: false [ 1391.540777][T15891] vivid-000: Insert Video Guard Band: false [ 1391.548930][T15891] vivid-000: Reduced Framerate: false [ 1391.555110][T15891] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1391.563017][T15891] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1391.571311][T15891] vivid-000: Enable Capture Cropping: true [ 1391.577511][T15891] vivid-000: Enable Capture Composing: true [ 1391.583715][T15891] vivid-000: Enable Capture Scaler: true [ 1391.589731][T15891] vivid-000: Timestamp Source: End of Frame [ 1391.596000][T15891] vivid-000: Colorspace: sRGB [ 1391.600955][T15891] vivid-000: Transfer Function: Default [ 1391.607927][T15891] vivid-000: Y'CbCr Encoding: Default [ 1391.613587][T15891] vivid-000: HSV Encoding: Hue 0-179 [ 1391.619258][T15891] vivid-000: Quantization: Default [ 1391.624755][T15891] vivid-000: Apply Alpha To Red Only: false [ 1391.630890][T15891] vivid-000: Standard Aspect Ratio: 4x3 [ 1391.636960][T15891] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1391.645195][T15891] vivid-000: DV Timings: 640x480p59 inactive [ 1391.652797][T15891] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1391.660823][T15891] vivid-000: Maximum EDID Blocks: 2 [ 1391.666427][T15891] vivid-000: Limited RGB Range (16-235): false [ 1391.672887][T15891] vivid-000: Rx RGB Quantization Range: Automatic [ 1391.679757][T15891] vivid-000: Power Present: 0x00000001 [ 1391.685606][T15891] tpg source WxH: 320x240 (Y'CbCr) [ 1391.690855][T15891] tpg field: 1 [ 1391.694887][T15891] tpg crop: (0,0)/320x240 [ 1391.699371][T15891] tpg compose: (0,0)/320x240 [ 1391.704316][T15891] tpg colorspace: 8 [ 1391.708251][T15891] tpg transfer function: 0/0 [ 1391.712961][T15891] tpg Y'CbCr encoding: 0/0 [ 1391.717581][T15891] tpg quantization: 0/0 [ 1391.721828][T15891] tpg RGB range: 0/2 [ 1391.726017][T15891] vivid-000: ================== END STATUS ================== [ 1393.231416][T15905] loop0: detected capacity change from 0 to 2048 [ 1393.766885][T15905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1393.779661][T15905] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1393.806812][T15916] 9pnet_fd: Insufficient options for proto=fd [ 1394.326803][T14784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1395.045113][T12611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.053267][T12611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1396.333482][T15948] ieee802154 phy0 wpan0: encryption failed: -22 [ 1397.034563][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1397.041281][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1398.091997][T15968] loop0: detected capacity change from 0 to 2048 [ 1398.282117][T15968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1398.296908][T15968] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1398.584866][ T30] audit: type=1804 audit(1755941781.874:930): pid=15968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3052" name="/newroot/55/file0/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 1399.113657][T14784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1399.495360][ T11] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1399.700944][ T11] usb 9-1: Using ep0 maxpacket: 32 [ 1399.954775][ T11] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1399.964240][ T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.018466][ T11] usb 9-1: config 0 descriptor?? [ 1400.244632][ T11] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1400.280190][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1400.356668][ T11] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1400.364539][ T11] usb 9-1: media controller created [ 1400.470484][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1400.480539][T15978] ===================================================== [ 1400.488159][T15978] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 1400.495530][T15978] _copy_to_user+0xcc/0x120 [ 1400.500118][T15978] i2cdev_ioctl_smbus+0x586/0x660 [ 1400.505366][T15978] compat_i2cdev_ioctl+0x48f/0xb40 [ 1400.510570][T15978] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 1400.516503][T15978] ia32_sys_call+0x2d5f/0x4310 [ 1400.521419][T15978] __do_fast_syscall_32+0xb0/0x150 [ 1400.526810][T15978] do_fast_syscall_32+0x38/0x80 [ 1400.531788][T15978] do_SYSENTER_32+0x1f/0x30 [ 1400.537545][T15978] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1400.544013][T15978] [ 1400.546523][T15978] Uninit was stored to memory at: [ 1400.551728][T15978] __i2c_smbus_xfer+0x2561/0x2f60 [ 1400.560203][T15978] i2c_smbus_xfer+0x31d/0x4d0 [ 1400.565986][T15978] i2cdev_ioctl_smbus+0x4a1/0x660 [ 1400.571130][T15978] compat_i2cdev_ioctl+0x48f/0xb40 [ 1400.576536][T15978] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 1400.582196][T15978] ia32_sys_call+0x2d5f/0x4310 [ 1400.587130][T15978] __do_fast_syscall_32+0xb0/0x150 [ 1400.592370][T15978] do_fast_syscall_32+0x38/0x80 [ 1400.597471][T15978] do_SYSENTER_32+0x1f/0x30 [ 1400.602105][T15978] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1400.608725][T15978] [ 1400.611094][T15978] Local variable msgbuf1.i created at: [ 1400.616804][T15978] __i2c_smbus_xfer+0x86a/0x2f60 [ 1400.621921][T15978] i2c_smbus_xfer+0x31d/0x4d0 [ 1400.626818][T15978] [ 1400.629190][T15978] Byte 0 of 1 is uninitialized [ 1400.634011][T15978] Memory access of size 1 starts at ffff888119d5bc86 [ 1400.640984][T15978] Data copied to user address 0000000080000100 [ 1400.647337][T15978] [ 1400.649754][T15978] CPU: 1 UID: 0 PID: 15978 Comm: syz.8.3054 Not tainted syzkaller #0 PREEMPT(none) [ 1400.662517][T15978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1400.673861][T15978] ===================================================== [ 1400.680999][T15978] Disabling lock debugging due to kernel taint [ 1400.687471][T15978] Kernel panic - not syncing: kmsan.panic set ... [ 1400.693998][T15978] CPU: 1 UID: 0 PID: 15978 Comm: syz.8.3054 Tainted: G B syzkaller #0 PREEMPT(none) [ 1400.705070][T15978] Tainted: [B]=BAD_PAGE [ 1400.709283][T15978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1400.719458][T15978] Call Trace: [ 1400.722806][T15978] [ 1400.725792][T15978] __dump_stack+0x26/0x30 [ 1400.730253][T15978] dump_stack_lvl+0x53/0x270 [ 1400.734990][T15978] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1400.740935][T15978] dump_stack+0x1e/0x25 [ 1400.745199][T15978] vpanic+0x361/0xc50 [ 1400.749299][T15978] panic+0x15d/0x160 [ 1400.753345][T15978] kmsan_report+0x31c/0x320 [ 1400.757969][T15978] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1400.764426][T15978] ? kmsan_internal_check_memory+0x1e1/0x230 [ 1400.770523][T15978] ? kmsan_copy_to_user+0xf1/0x190 [ 1400.775745][T15978] ? _copy_to_user+0xcc/0x120 [ 1400.780532][T15978] ? i2cdev_ioctl_smbus+0x586/0x660 [ 1400.785838][T15978] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 1400.791221][T15978] ? __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 1400.797047][T15978] ? ia32_sys_call+0x2d5f/0x4310 [ 1400.802091][T15978] ? __do_fast_syscall_32+0xb0/0x150 [ 1400.807491][T15978] ? do_fast_syscall_32+0x38/0x80 [ 1400.812658][T15978] ? do_SYSENTER_32+0x1f/0x30 [ 1400.817451][T15978] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1400.824113][T15978] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 1400.829512][T15978] ? __i2c_transfer+0x11cd/0x3110 [ 1400.834633][T15978] ? kmsan_get_metadata+0xfb/0x160 [ 1400.839841][T15978] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1400.846303][T15978] ? kmsan_get_metadata+0xfb/0x160 [ 1400.851539][T15978] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1400.857456][T15978] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 1400.862830][T15978] ? kmsan_get_metadata+0xfb/0x160 [ 1400.868105][T15978] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1400.874031][T15978] kmsan_internal_check_memory+0x1e1/0x230 [ 1400.880020][T15978] kmsan_copy_to_user+0xf1/0x190 [ 1400.885056][T15978] _copy_to_user+0xcc/0x120 [ 1400.889650][T15978] i2cdev_ioctl_smbus+0x586/0x660 [ 1400.894798][T15978] compat_i2cdev_ioctl+0x48f/0xb40 [ 1400.900036][T15978] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1400.906041][T15978] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 1400.911703][T15978] ? kmsan_get_metadata+0xfb/0x160 [ 1400.916922][T15978] ? kmsan_get_metadata+0xfb/0x160 [ 1400.922175][T15978] ia32_sys_call+0x2d5f/0x4310 [ 1400.927030][T15978] __do_fast_syscall_32+0xb0/0x150 [ 1400.932287][T15978] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1400.938148][T15978] do_fast_syscall_32+0x38/0x80 [ 1400.943116][T15978] do_SYSENTER_32+0x1f/0x30 [ 1400.947753][T15978] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1400.954229][T15978] RIP: 0023:0xf7fd4539 [ 1400.958383][T15978] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1400.978086][T15978] RSP: 002b:00000000f54f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1400.986612][T15978] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000720 [ 1400.994670][T15978] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1401.002701][T15978] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1401.010732][T15978] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1401.018765][T15978] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1401.026831][T15978] [ 1401.030318][T15978] Kernel Offset: disabled [ 1401.034717][T15978] Rebooting in 86400 seconds..