last executing test programs: 11m32.338833334s ago: executing program 32 (id=53): sched_setscheduler(0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x9, 0x7ffc0002}]}) personality(0x0) 10m51.746233867s ago: executing program 33 (id=133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@memory_hugetlb_accounting}, {@favordynmods}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00', 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xd}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m48.954463866s ago: executing program 34 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prctl$PR_SET_TSC(0x1a, 0x1) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r1, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) connect$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) setregid(0xffffffffffffffff, 0x0) setreuid(0xee01, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3eff763673cb699) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x26, 0x0) fcntl$lock(r3, 0x26, 0x0) 8m16.81489851s ago: executing program 7 (id=502): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08001efbb07d586e", 0x2a}, {0x0, 0xd6}], 0x2, 0x0, 0x0, 0x60000000}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 8m14.860592651s ago: executing program 7 (id=509): bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) shutdown(r4, 0x1) 8m13.634508023s ago: executing program 7 (id=513): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tkill(0x0, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) fsopen(0x0, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 8m10.926431565s ago: executing program 7 (id=519): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08001efbb07d586e", 0x2a}, {0x0, 0xd6}], 0x2, 0x0, 0x0, 0x60000000}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 8m8.975324524s ago: executing program 7 (id=526): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r0, 0x2008000000010002, 0x1) 8m8.635073878s ago: executing program 7 (id=529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) io_uring_setup(0x734a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfff7fffc}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 7m51.844662728s ago: executing program 35 (id=529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) io_uring_setup(0x734a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfff7fffc}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 6m47.696810518s ago: executing program 1 (id=710): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdrlabel={0x40, 0x49, 0x200, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x10, 0x0, 0x0, 0x7}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000180)=0x8) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000009c0)) 6m43.026738191s ago: executing program 8 (id=716): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) 6m42.718554633s ago: executing program 1 (id=718): socket$rxrpc(0x21, 0x2, 0x2) socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) 6m42.017204872s ago: executing program 8 (id=719): sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m40.156502239s ago: executing program 1 (id=721): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, 0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xff05) r5 = syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305720, &(0x7f00000004c0)={0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000bde000/0x4000)=nil, &(0x7f0000be0000/0x3000)=nil, &(0x7f0000bdd000/0x1000)=nil, &(0x7f0000bdf000/0x3000)=nil, &(0x7f0000be0000/0x1000)=nil, &(0x7f0000bdd000/0x3000)=nil, &(0x7f0000be1000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bda000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000bda000/0x1000)=nil, &(0x7f0000000500), 0x0, r5}, 0x64) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m40.069903672s ago: executing program 8 (id=723): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pim6reg\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x42000}, 0x40000d4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11f031bf8ed23da02f7a291fcc59c4382ecb979d1e92e19420e0ee84", 0x4b, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 6m37.773648648s ago: executing program 8 (id=728): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdrlabel={0x40, 0x49, 0x200, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x10, 0x0, 0x0, 0x7}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000180)=0x8) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000009c0)) 6m36.283014144s ago: executing program 8 (id=731): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000780)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f00000000c0)) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB='1'], 0x31) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="e40000001000010400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="0891040000000000b000128009000100766c616e00000000a000028004000480400003800c0001002d0a0000030000000c00010009000000080000000c00010035570000030000000c00010009000000f00000000c0001000300000006000000580004800c1e0100f9ffffff65e200000c00010048000000f80e00000c00010000000000000000000c0001003cf00000150000000c00010025000000080000000c00010003000000040000000c000100480000008100000014000300766c616e30"], 0xe4}}, 0x0) 6m34.684339715s ago: executing program 1 (id=733): gettid() r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{@multicast2, 0x7ff}, {@loopback, 0x8}, {@remote, 0x5}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 6m34.669723648s ago: executing program 8 (id=734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="00000000000000000008c0", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14) 6m34.410641762s ago: executing program 1 (id=736): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0xc4a4, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) r3 = io_uring_setup(0x6005, &(0x7f0000000080)={0x0, 0xb724, 0x800, 0x3, 0x100135}) close_range(r3, r3, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) listen(r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x80000) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) 6m33.249917213s ago: executing program 1 (id=740): r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r3, 0xda90) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = syz_io_uring_setup(0x498, &(0x7f0000000540)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r5, 0x3498, 0x969, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000001c0)=r10, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) 6m18.282811923s ago: executing program 36 (id=734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="00000000000000000008c0", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14) 6m17.152043174s ago: executing program 37 (id=740): r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r3, 0xda90) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = syz_io_uring_setup(0x498, &(0x7f0000000540)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r5, 0x3498, 0x969, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000001c0)=r10, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) 3m16.594023199s ago: executing program 6 (id=1147): socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x5e4b, &(0x7f0000000040)={0x0, 0x4b70, 0x20, 0x0, 0x1c4}) mmap(&(0x7f00004e9000/0x2000)=nil, 0x2000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"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"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) sync() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, 0x0, 0x0, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x141802, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r1, &(0x7f0000000200), 0x12) 3m14.998724563s ago: executing program 6 (id=1152): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000045, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) shutdown(r0, 0x1) 3m13.538629944s ago: executing program 6 (id=1155): openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002680)=""/70, 0x46}], 0x1}}], 0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={0x0}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000104000000000304000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c61766500000000580005800500190003000000050005000000000006001f00d5000000050007000000000005000a00000000000500080000000000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r6 = dup(r5) sendmsg$kcm(r6, 0x0, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1d, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) 3m10.175525496s ago: executing program 6 (id=1161): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x3, r2, r1}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r5}) 3m9.87394819s ago: executing program 6 (id=1163): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x40080c0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000180)=0x8) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000009c0)) 3m8.474642697s ago: executing program 6 (id=1165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 2m50.687120608s ago: executing program 38 (id=1165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1m51.583242111s ago: executing program 9 (id=1321): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000280)={0xa1, 0x5, 0x802, 0xfffe, 0x0, 0x4, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r4, 0x40046103, &(0x7f0000000380)={0x1, 0x0, 0x4, 0x3, 0x2, 0xfe, 0x2, 0x40, 0x6, 0x3, 0x7, "2b6e0839ff06a368dea963f9cde886cdbe2b4fc87683c84088585b07693dc737"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000200)=@sr0, &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0) cachestat(r3, &(0x7f0000000040), &(0x7f000009de80), 0x0) 1m42.975819751s ago: executing program 9 (id=1336): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4bfa, &(0x7f0000000000)=""/176) 1m42.627287193s ago: executing program 9 (id=1339): socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x5e4b, &(0x7f0000000040)={0x0, 0x4b70, 0x20, 0x0, 0x1c4}) mmap(&(0x7f00004e9000/0x2000)=nil, 0x2000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"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"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) sync() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, 0x0, 0x0, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[], 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r1, &(0x7f0000000200), 0x12) 1m41.238092527s ago: executing program 9 (id=1341): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x5402) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x42602) 1m40.984508416s ago: executing program 9 (id=1343): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, 0x0) close_range(r0, r1, 0x0) 1m40.317693387s ago: executing program 9 (id=1347): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000003e0007012bbd700000000000037c00000400fc800f0001"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) socket$inet(0x2, 0x2, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x4001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x499, 0x0, &(0x7f0000000100), 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') syz_init_net_socket$ax25(0x3, 0x3, 0xcf) close_range(r4, 0xffffffffffffffff, 0x0) 1m22.596198195s ago: executing program 39 (id=1347): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000003e0007012bbd700000000000037c00000400fc800f0001"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) socket$inet(0x2, 0x2, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x4001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x499, 0x0, &(0x7f0000000100), 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') syz_init_net_socket$ax25(0x3, 0x3, 0xcf) close_range(r4, 0xffffffffffffffff, 0x0) 1m4.279693405s ago: executing program 4 (id=1428): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mount(&(0x7f0000000200)=@sr0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000040)='ecryptfs\x00', 0x0, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 57.196519638s ago: executing program 4 (id=1440): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) msgsnd(r1, &(0x7f0000000000)={0x3}, 0x8, 0x800) 56.780766162s ago: executing program 4 (id=1442): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 55.564948333s ago: executing program 4 (id=1445): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) 54.598734258s ago: executing program 4 (id=1446): capset(&(0x7f0000000080)={0x20071026}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4bfa, &(0x7f0000000000)=""/176) 54.34468354s ago: executing program 4 (id=1449): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x602, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f00000001c0)=@other={0x2000200300000000, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x46) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xe, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x415a, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r6, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c050) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x4080010) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c20000000180c200000286dd6000000000105466fc440000000000000000000000000000ff0200000000000000000000000000018b009078000f0009"], 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000006000000080000000300000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0xffffffff, 0x0, 0x1, 0xa10a, r7, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x7}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000200000000000000000000000181100", @ANYRES32=r8, @ANYBLOB="0000000000000000ec37aecb00000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4a}, 0x94) r10 = openat$ocfs2_control(0xffffff9c, &(0x7f00000003c0), 0x18141, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r10, &(0x7f0000000400)={0x2, 0x4}, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x0, 0xfffffffffffffc2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 38.141838882s ago: executing program 40 (id=1449): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x602, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f00000001c0)=@other={0x2000200300000000, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x46) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xe, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x415a, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r6, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c050) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x4080010) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c20000000180c200000286dd6000000000105466fc440000000000000000000000000000ff0200000000000000000000000000018b009078000f0009"], 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000006000000080000000300000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0xffffffff, 0x0, 0x1, 0xa10a, r7, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x7}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000200000000000000000000000181100", @ANYRES32=r8, @ANYBLOB="0000000000000000ec37aecb00000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4a}, 0x94) r10 = openat$ocfs2_control(0xffffff9c, &(0x7f00000003c0), 0x18141, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r10, &(0x7f0000000400)={0x2, 0x4}, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x0, 0xfffffffffffffc2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 22.297537049s ago: executing program 0 (id=1510): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000001900)=ANY=[@ANYBLOB="5e022a1173f7dedc04b574482a4d3934eb364ce70fc2f9ba995b7f79fad2552552810ae0c8acb77597804408c01b64c563208d5fdb7aa290732e0c806eb7cb660c2fca84367a604af6e4f04ef21f6c8f8a905f3fb5a9ff788d4f6f65d302bb22902e3db48b0a51306442da614341c3a53583f31f7952239eefe7e282d268f8f71838b9c76b26f81d15d4425dcc8b0954a5b39871e3ac6a0c1bf5effa564533658ceb589ed04058b994415339d6ffcfa1c3fa4e784e437bfa998f09ac808ab72f7916483fadc569d13675ae8ab4f0dc7f14de6c7500925d4ab8d6ea34de61cca9625998b4b04130a35c9fb048c569af51e163b2c7b4acfbd42303a042762d52b0bd45d3112fbdba6680769b766d3e3f946707f515ef74f5e3db55bba47ae0f030957f1354fbf79a1d2877e861d80ead9ae8ddab9a857fb39cc777000e34cb890d2e66803bc2f9850f40ad903488031f3fceac81a073713bf51baa6b18d6744262ec2d70a908b21a713708ce5267df4174990ccdd932a85e7b58930c94e2a6f33417faa628706212cf006744a09e77d07ab99b128be2848c17abd7c6f6a00d0ac24557744c654b272d8e6667fd511550819c8f2a52a7ecaba1142a6e6628a699db89bf7ecebf5db5f682d812f7ed1c3a642ce6ca0da18bf43490d6675e3a48ae9187e063e0c93462c052253b14f0510875f3b15b194285e8ced04f352fd47491a57abb38f30f62b2d9d03dda6424579432f7ac717d761124f68922ebd68486c07cb5d983205a44c30447235d0097c217c91b2c272daa1711a3ead04e6dc61f4d4d5ddf29dd1c1208ad6ebc10e11ee1af3c05ae225e66b4f673b806d6cc12f3dd7d41f9bef597524e3fab90f296650fa92d9939157f6b016cb3ccb681c824bc0593f5a3ec9685ea1ef5fb9d9ccdb0476b5655a45a82a212f386fd0de8b35869dddcaa8320490643ce82fb9c25b9150d9d9552a4962af665c4b47cfecc3b000c38e0afd943b65cf81c0fe3ee8cb1a7eb4bce5f7ddff821e2fca5dd655be560e514539de5ae363399a80a08d23433ea439c53452052468d34417db64220915a23b695614b502c599a3f7d0f23890b2fa41554a0c93387368b5c4b69d9ea5beedb870d4940eb1f42e0e35a6c37aca0c76106d45a224e84b2b88f7bda32583b61646b7923b3e1d86edabb6e429a1914d676702eb010a7dd8a18e62cb00eff870f71926d81d8bf521c211b76ea547c440a51884584370eae698c36299566356c7656403eadac8d1077061f942bb51859d6d157ed71a13d72163986e66dfcabd19839559abcd5df1d7b282234338e4170b777a9ac892c2394ba4138ea2c67b4fb2d576f8ac3c34e9edc10d6fbbc4a50331a4180d1ed7cb3765ebb7475a3f0826f589a1f63c906a64f5a33b2fc0c2205fa5c3060cdefaf7191bac0b054e1cec8d541f506e2aaba6db891b461cfe41d4072a6aaa452248b9df718043b53a77e8ab1b2c8809f141e97f2e5ec81de247bd1d7782940b3f4144d8caa37147331d396e6e975f28eb5be0218b91578e2a11547488d6ada5e2a7fcc235e56a98bbd78caee88681cebeae903b7403cf1b76a8b7223dfa3a48919f35536634017a499d62b01cbcbce3d1e085768f32c907e4df266cc2e8d1f5b6bd5d9382888aa09657922de79241eb4cd9a7f5a841ee6f4a27eddcab348765a48df3446d2729cdb3a0a5a536494f5eba54821bae60881e37a1ffd1a0bd68508c3d843b9a048c4a3b23e1375f01fd47674da1339607db06f123fbd33b6c4f17507238948624eb9b00af5d55e643a0d0a500ff877d48843acf10788dde2de8a598640e4641d5668decdb058407edf8b532c6841faf035141f413430319cfd97e01df317b9d5e1915e43806032bd8c7cdd99a24a812653411d466607802a86c838af0804904cfa932e24c1a7a16c43ff3baa7bab26be9dd4b8af4684fa929dbcbcb41e713a429c885a9054e661ff66b1edca04139816479b83dc4676f262d29f29606d8c0a2082a86ab0a62ec8309a06430f4cad4712e3f6eda47e8ef855e952cfc5757809726b4b9603a206ec3b45b5f83208325068ede98630b74f65a5edd97a22b4f68b461c32164aaf8b73704c1532b550e8bac0bfddef58ca98e946470d4518b24c2972e7631e6bbd11566c0b5eae4ae74004718482ed3e4b668dd60ee6973773a3b3b80d726f13a503b53552694e1cd5dfc074f35125291ee47281ffb078d0dfdfa0b564aab70fc4a388ccbc6060e7c34271ed87de9e80497bbd621e596b8d0a330541d7a723ec0e3b4976316872f21cc09644aec9774c65344e4c109624c74872c42bf9f07c3739f736c2123dd0db4c115626c37aadd5622c5f8a3f1aa5021791bdcf2bbbcc57732d6067556155e76385452099654980f7efbb330af931c2db700b9ebc6fb4656f6c166072d53db9c82cb8466422b52275c6e590dfcfceeb883e96907f92825d5bb81b30732bf782791de9b8d69b7f08b07cb90190a881078e8811426ac942697aa9110e65fcdae0970dd04859dc069c4988c49ee265a68d7f2e12770d60bdf8999fca21cbf98cdf582d89bc39f1ed8f11c00f8cbb5b2c26608f7f09399703643d93d49256762553e3183f1d66d4bcf7ccf7594cbd316884700ca5bfa738e89356a7dff87029aa7b8681088e8483982a74ec1e27018aefb2d680ddecad8d9728a5a5b22dd764c28d094263f93f1831b0676b943459f35ac4f205e638b722be2d3695eaeb071cb3474c98b711114801325ef457e6308d105debf3d240b3c88a0b27995bfe3246a3ac6e022ea972741efaea69ffb41d2f895b2b036e55cebeb30908d6c54b41cd99d3fe2054dd2b036fc9d34e1bedd09c8b640f843e6c60414b253679ad5308d3b7ceb5d69bf539576dc1f773fefb6035c14f59a0803c93efdfa8a236c30953da98afc0d096006194907447fe44b8fa451b41d5e474a6ee503b9c1a85305ba2ed107d0f1a4f3fe628efcdfc27da1c9f9c8ed79f0d8b278084407a08236465ab6b7c50c4757d2a41947634f9e37eedde07601d1e393a1501f4973e2e2a2270914fa7c49297f5d13ed2b7b60c1826b2dd5035a16ca9f8c8a4f728f553ef375095bada1e0764f26e1755a308a8f4f7084573a9be7b52d98eb834350f6ea76a894ea27f2d1d8237810a2b14ef3f75e56c94570deb1f322d2799eeab58f2202b12f1ee0ad56c822932d07b94163668610466e6cfb064bcf08098f85be2f633b6704e2583eeea55a4d7d1a9c14314f2acb84c3996933ec1745764edbddc2e0dd471d09def8a7c12e6e45e4812556e88c6a3d822c621ed56601693e4f1ec2d622fb7e3f2c8955ebf9c4b416d59ec18d386c00323f59e06205dba08299169760d3540187a7c26e57055e40487218a02cdc147ca52f9fb7ed7ec8b8aff8d10d3c40549e76be6b84ba8f57407ee83a8fe3db6ddcbbd75075311a02e684136f449e0aa7c2802a318baacc75e9c61eef5edad3cf481fe3e4a2aac2499a6ffe8f9b088ec6831efee2f4083e05d12515fa9fc8ccf6b133d5556adfb6fe40fa254ba94f2a2bdd056e4162d832c6d40ca9e13c3865585054cb2fddb53bae1548fa9cbab20536821192e1c491ccd02c8992bb9d64e1ae6fd5f826fe1bc95589f5cb4e8dc70f0dffef0e604956c6ae6cc83e8a7462dc1f2a059f91a8deb68b5a212521b2c34d4087071f5c54142338c1902adc53a4950ff546f56d71a9d2bfc8c8d938f66c6278e94bbf1aa74a115961276eb89dd75089675dacad6c765ace9d4e32fc4c0c6d615226301b9cb14d84e1f1a73d50f177cff8f03acbc9dbf4fe3c4428b9d2d2e9959cadc3b8521a2518757570f321c24fd4919b7da432646d348e3dddcf7185112e760fd4e03c0a8d6662e1d33e2dd2e76cb6f910d0d697a99e152aa8f8ed41efd61bbbb01e7eda3ccadb7c65860d2bba47f0d05f850c0264bd16468c0f202fad7eb40df6aba61cec1d236f79752bfa32899dbcbd8aa6e22aa8636fea9996141d768897d8ca0f2193e9f84b44bf35ec2dc85360cdb0636c39403d578dcdbc8713fb3e0aa2f659cb71d3831372888838e393aee4022598132c2cc8474e4a3f9f0b99f25d75e412cbe74fda64ed1a881127e74c82a4e306ce9f97a84cf531997b1e7d834646546e9ae490b32e6399e4c8769af37e884ef102c2a6b321007a1373ecf60f157980b7b390b91511d2fa471b4ef9d7cc07b41a57f5d5ab0e9c18640516416c496debfb37b2ad7cf0567dfc4da98dd3959f9cddbad336165bb2d07a6e2785d36564a58b65eeea0cfd5528ecb8afbc91e31c255f98dd235efeebba2417d38cd82b11eb3fc8784e832535eae9f3eef58e97f2a9566856868d11ff147daac0b5a89cafb182e4e80bdd796a8a52631adeaa6ded33a9b61fe4d41d86ee0e6007faddc1a2309896330d5ce748b9f621ef745ff93a70bb9579872c7da02d3a9d7f65a531d5c6b754f348b66b02ebbf113d6b7fea7473ffdc217145a5a37ad1872f27c64ae2ee49dd6cfc6fd6d76994759a487322d7ff3315163ec1d840165d2208fda212caec63143b8446ddfd541ea883e23cf482fb3a8a736971fe5ad956a994284586e6bf0e3bb156fd09b729efc49e7daf18e6ca5256065ffbbffc927a59bf0bb403a13c5e2b4fb537cd9903d1e22e20760e312e7180542b3e35b7280bd65e4c6a55ab6e4f84a15298dfe20d7c63fc751855cf545f9d0d068c50f4a76ffb2264f563882ea3e3deb96850501cf7551777bec96d76492c730d26767257cc4239268a5a8c6c0dd680fb5149a39419b8b808db3d56ae32fd534943e8f668e9a390938256a4e09d97a29cf6a5e2cc276d270d2262bc8ca8e20d66b890f4a90fcc87b60348a4739593c619bc9a54e9570f5f8288840b565a731daa53fd9493f0b870c853262931baa4f8a9423450d84f40c5a7e1a438630f8f4103db95282ce31a42763fb2d895c711da5dce6f08e2fa8e80d0bafa79fd7d9dd359a3e24b50a50e3211b3e56d556536e6b97e5f59d16af0f4a27a3c52a23f10d1f2d63837bc8", @ANYRES32=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21.078446594s ago: executing program 0 (id=1516): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000340)={0x30, 0x5, 0x0, {0x0, 0x1, 0xff, 0x401}}, 0x30) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r0, 0x6c212000) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) 15.278079266s ago: executing program 2 (id=1540): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 15.140965228s ago: executing program 2 (id=1541): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000200)=@sr0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000040)='ecryptfs\x00', 0x0, 0x0) cachestat(r2, &(0x7f0000000040), &(0x7f000009de80), 0x0) write$fb(r2, &(0x7f0000000100)="485a38e63bbbd0fb48957dc57de91e50fe184d520008cca00d88a163123d72006359ec8a9d6da42ca87979bceef800e8d04afeb4bf56c66ebaeec86d0c9ad9cf0b7f89886e0492b6a8dd92c0b1100d83bf4ca40858364a9b36463a6b0a93e3971457392f6830a8e1f65755b967e9929012507ca42177d38dff020275463f5cf00db8b21cc46a2391fef064852e5ff51bde4ff92529ab8be206c11e5be324150d151fbf1c978bf8690be2272bee3e985c3ad6b3c58e2fbaf8e78f7338b1cc8f443ea39b94b8927a5445725f105ff5accc5135a0c8b6967466698160dd86e32a06", 0xe0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x1, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3, 0x4, 0x4, 0xffffffff, 0x0, r3, 0x4}, 0x50) r4 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x60b, 0x0) read$char_usb(r5, &(0x7f0000000040)=""/18, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 11.232453297s ago: executing program 0 (id=1547): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 10.939750636s ago: executing program 0 (id=1548): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 8.939452093s ago: executing program 3 (id=1554): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x60) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') socket$inet(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x700, 0x0) 8.635200511s ago: executing program 0 (id=1555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000001ff00000044000000080003", @ANYRES32=r3, @ANYBLOB="0a001800030303030303000008006b"], 0x30}}, 0x0) 7.850060904s ago: executing program 3 (id=1556): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}}, 0x40) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r3, r4, 0x2) readv(r4, 0x0, 0x0) ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000009e0000006a0a00ff000000006900a40500000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 7.700259964s ago: executing program 0 (id=1557): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000340)={0x30, 0x5, 0x0, {0x0, 0x1, 0xff, 0x401}}, 0x30) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r0, 0x6c212000) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) 7.227299355s ago: executing program 3 (id=1559): r0 = socket$unix(0x1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) io_uring_setup(0x6005, &(0x7f0000000080)={0x0, 0xb724, 0x800, 0x3, 0x100135}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x802, &(0x7f0000000500)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r1, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x80000) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) 6.119004968s ago: executing program 3 (id=1560): socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) 4.81580831s ago: executing program 3 (id=1561): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(streebog512-generic,ecb-twofish-avx)\x00'}, 0x58) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 4.525443993s ago: executing program 3 (id=1562): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000880)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) fsmount(0xffffffffffffffff, 0x0, 0x83) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, 0x0, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) lseek(r7, 0x40000000400016, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) 4.524617683s ago: executing program 5 (id=1563): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x3, r2, r1}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r5}) 4.2789277s ago: executing program 5 (id=1564): r0 = inotify_init() syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.232658035s ago: executing program 2 (id=1565): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @time={0x200, 0x401}, {0x40, 0xff}, {0x10, 0x9}, @result={0x1, 0x2}}, {0x0, 0x0, 0x1, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r4, &(0x7f00000005c0), 0x0) read$snapshot(r4, 0x0, 0xffffffbf) read$FUSE(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x4c, r8, 0x1, 0x70bd2b, 0x4000, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6}}]}, 0x4c}}, 0x4040000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0], 0x0, 0x1, r9}) syz_open_dev$tty1(0xc, 0x4, 0x3) 1.314247117s ago: executing program 2 (id=1566): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000001ff00000044000000080003", @ANYRES32=r3, @ANYBLOB="0a001800030303030303000008006b"], 0x30}}, 0x0) 1.122747193s ago: executing program 5 (id=1567): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x2c, 0x107, 0x70bd28, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x2400c810) 965.534081ms ago: executing program 2 (id=1568): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}}, 0x40) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r3, r4, 0x2) readv(r4, 0x0, 0x0) ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000009e0000006a0a00ff000000006900a40500000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 830.823555ms ago: executing program 5 (id=1569): r0 = socket$unix(0x1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) io_uring_setup(0x6005, &(0x7f0000000080)={0x0, 0xb724, 0x800, 0x3, 0x100135}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x802, &(0x7f0000000500)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r1, 0x0, &(0x7f0000000180), 0x80000) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) 409.547341ms ago: executing program 2 (id=1570): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x4, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x4, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0xfffffffc, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x3, 0x129432e2, 0xcb, 0xf9, 0x8, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x10007, 0x5, 0x2f, 0xb98, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0x8, 0x1005, 0x100007ff, 0x5f2d, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x6, 0x5, 0xb, 0x84, 0x5, 0x5, 0x0, 0x1ef, 0xb, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x7d29, 0x6d01, 0x6, 0x3b, 0x8317, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x80004, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x9, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0xfff, 0xa, 0x2, 0x4, 0x6, 0xffffffff, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 223.545621ms ago: executing program 5 (id=1571): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(streebog512-generic,ecb-twofish-avx)\x00'}, 0x58) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 0s ago: executing program 5 (id=1572): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x14, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008260001080006040003000000000000ac1414"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000340)={0x30, 0x5, 0x0, {0x0, 0x1, 0xff, 0x401}}, 0x30) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r1, 0x6c212000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioprio_set$pid(0x2, 0x0, 0x6000) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): ge_slave_0) entered blocking state [ 167.507457][ T6383] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.541872][ T6383] bridge_slave_0: entered allmulticast mode [ 167.650007][ T6383] bridge_slave_0: entered promiscuous mode [ 168.322401][ T6383] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.322532][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.322783][ T6383] bridge_slave_1: entered allmulticast mode [ 168.346968][ T6383] bridge_slave_1: entered promiscuous mode [ 168.430453][ T5800] Bluetooth: hci4: command tx timeout [ 169.501095][ T6492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.291389][ T6383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.314490][ T6383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.423730][ T6383] team0: Port device team_slave_0 added [ 170.426815][ T6383] team0: Port device team_slave_1 added [ 170.543463][ T6383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.543482][ T6383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.543513][ T6383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.642619][ T5800] Bluetooth: hci4: command tx timeout [ 170.728958][ T6383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.728977][ T6383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.729007][ T6383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.730235][ T6421] chnl_net:caif_netlink_parms(): no params data found [ 170.947773][ T6078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.392585][ T6383] hsr_slave_0: entered promiscuous mode [ 171.394183][ T6383] hsr_slave_1: entered promiscuous mode [ 171.395248][ T6383] debugfs: 'hsr0' already exists in 'hsr' [ 171.395273][ T6383] Cannot create hsr debugfs directory [ 171.975796][ T175] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.057573][ T6421] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.057731][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.057979][ T6421] bridge_slave_0: entered allmulticast mode [ 172.060865][ T6421] bridge_slave_0: entered promiscuous mode [ 172.104312][ T6421] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.104489][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.104702][ T6421] bridge_slave_1: entered allmulticast mode [ 172.132610][ T6421] bridge_slave_1: entered promiscuous mode [ 172.135952][ T6078] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.284917][ T175] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.212728][ T6542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.259406][ T6421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.617058][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.618365][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.655794][ T6421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.097327][ T175] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.397675][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.397819][ T4242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.591020][ T175] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.634450][ T6421] team0: Port device team_slave_0 added [ 177.690418][ T6421] team0: Port device team_slave_1 added [ 177.793949][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.793965][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.793989][ T6421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.864624][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.864643][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.864681][ T6421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.216702][ T6421] hsr_slave_0: entered promiscuous mode [ 178.218030][ T6421] hsr_slave_1: entered promiscuous mode [ 178.240646][ T6421] debugfs: 'hsr0' already exists in 'hsr' [ 178.240674][ T6421] Cannot create hsr debugfs directory [ 179.013196][ T6383] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 179.086458][ T175] bridge_slave_1: left allmulticast mode [ 179.086489][ T175] bridge_slave_1: left promiscuous mode [ 179.086751][ T175] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.176746][ T175] bridge_slave_0: left allmulticast mode [ 179.176779][ T175] bridge_slave_0: left promiscuous mode [ 179.177032][ T175] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.293873][ T175] bridge_slave_1: left allmulticast mode [ 179.298164][ T175] bridge_slave_1: left promiscuous mode [ 179.298554][ T175] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.419765][ T175] bridge_slave_0: left allmulticast mode [ 179.419788][ T175] bridge_slave_0: left promiscuous mode [ 179.419976][ T175] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.025859][ T5803] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 180.034760][ T5803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 180.052118][ T5803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.053426][ T5803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.054240][ T5803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 181.019346][ T175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.104804][ T175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.127952][ T175] bond0 (unregistering): Released all slaves [ 181.500311][ T175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.607262][ T175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.651430][ T175] bond0 (unregistering): Released all slaves [ 181.695121][ T6383] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 181.849911][ T6383] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 182.001920][ T6383] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 182.272645][ T5800] Bluetooth: hci5: command tx timeout [ 184.491635][ T5800] Bluetooth: hci5: command tx timeout [ 185.913022][ T6605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.628156][ T6421] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 186.717223][ T5800] Bluetooth: hci5: command tx timeout [ 186.743822][ T6421] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 187.173884][ T6421] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 187.291619][ T6421] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 187.927592][ T6644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.187'. [ 189.474011][ T5800] Bluetooth: hci5: command tx timeout [ 191.501880][ T6654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.834492][ T175] hsr_slave_0: left promiscuous mode [ 191.876166][ T175] hsr_slave_1: left promiscuous mode [ 191.877318][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.877344][ T175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.919837][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.919866][ T175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.016218][ T6667] fuse: Bad value for 'fd' [ 192.142853][ T175] hsr_slave_0: left promiscuous mode [ 192.175082][ T175] hsr_slave_1: left promiscuous mode [ 192.176214][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.176240][ T175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.208091][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.208119][ T175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.487841][ T175] veth1_macvtap: left promiscuous mode [ 192.487923][ T175] veth0_macvtap: left promiscuous mode [ 192.489621][ T175] veth1_vlan: left promiscuous mode [ 192.489746][ T175] veth0_vlan: left promiscuous mode [ 192.606262][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.196'. [ 194.536903][ T175] veth1_macvtap: left promiscuous mode [ 194.536978][ T175] veth0_macvtap: left promiscuous mode [ 194.537148][ T175] veth1_vlan: left promiscuous mode [ 194.537266][ T175] veth0_vlan: left promiscuous mode [ 197.561274][ T175] team0 (unregistering): Port device team_slave_1 removed [ 197.596965][ T175] team0 (unregistering): Port device team_slave_0 removed [ 198.310192][ T175] team0 (unregistering): Port device team_slave_1 removed [ 198.363679][ T175] team0 (unregistering): Port device team_slave_0 removed [ 198.525165][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.525240][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.797087][ T6582] chnl_net:caif_netlink_parms(): no params data found [ 200.155966][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.156170][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.156391][ T6582] bridge_slave_0: entered allmulticast mode [ 200.175539][ T6582] bridge_slave_0: entered promiscuous mode [ 200.195128][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.195255][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.195493][ T6582] bridge_slave_1: entered allmulticast mode [ 200.210382][ T6582] bridge_slave_1: entered promiscuous mode [ 200.263344][ T6383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.532659][ T6721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.209'. [ 200.720900][ T6721] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.489186][ T6721] bridge_slave_1: left allmulticast mode [ 201.489220][ T6721] bridge_slave_1: left promiscuous mode [ 201.489583][ T6721] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.785090][ T6582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.873086][ T6582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.944836][ T6383] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.767311][ T6582] team0: Port device team_slave_0 added [ 203.776322][ T1821] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.776459][ T1821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.789282][ T6582] team0: Port device team_slave_1 added [ 203.887584][ T1821] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.887814][ T1821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.912553][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.912571][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.912600][ T6582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.010602][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.010621][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.010650][ T6582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.158081][ T6421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.187113][ T6582] hsr_slave_0: entered promiscuous mode [ 204.188551][ T6582] hsr_slave_1: entered promiscuous mode [ 205.006221][ T6421] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.119153][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 206.336873][ T6279] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.337375][ T6279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.460096][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.461835][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.538456][ T6775] Illegal XDP return value 32768 on prog (id 27) dev N/A, expect packet loss! [ 207.299802][ T6787] netlink: 220 bytes leftover after parsing attributes in process `syz.1.222'. [ 207.619887][ T6383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.378080][ T41] bridge_slave_1: left allmulticast mode [ 208.378109][ T41] bridge_slave_1: left promiscuous mode [ 208.378368][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.493715][ T41] bridge_slave_0: left allmulticast mode [ 208.493741][ T41] bridge_slave_0: left promiscuous mode [ 208.493949][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.383007][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.414804][ T6820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.228'. [ 209.466118][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.510198][ T41] bond0 (unregistering): Released all slaves [ 209.878839][ T6820] vlan2: entered promiscuous mode [ 209.878863][ T6820] bond0: entered promiscuous mode [ 209.878877][ T6820] bond_slave_0: entered promiscuous mode [ 209.879148][ T6820] bond_slave_1: entered promiscuous mode [ 210.565983][ T41] hsr_slave_0: left promiscuous mode [ 210.628536][ T41] hsr_slave_1: left promiscuous mode [ 210.810798][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.576733][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.073801][ T41] team0 (unregistering): Port device team_slave_1 removed [ 212.137048][ T41] team0 (unregistering): Port device team_slave_0 removed [ 212.497344][ T6582] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 212.588441][ T6582] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 212.647230][ T6421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.679309][ T6582] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 212.752201][ T6582] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 212.892168][ T6383] veth0_vlan: entered promiscuous mode [ 212.970639][ T6383] veth1_vlan: entered promiscuous mode [ 213.208859][ T6383] veth0_macvtap: entered promiscuous mode [ 213.288447][ T6383] veth1_macvtap: entered promiscuous mode [ 214.053928][ T6383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.107549][ T6383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.205592][ T6278] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.205847][ T6278] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.206298][ T6278] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.238608][ T6278] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.627233][ T6582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.399394][ T6582] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.553696][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.553835][ T4242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.664404][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.664425][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.724193][ T6279] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.734954][ T6279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.819189][ T6421] veth0_vlan: entered promiscuous mode [ 215.993216][ T6278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.993240][ T6278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.055475][ T6421] veth1_vlan: entered promiscuous mode [ 216.278081][ T6421] veth0_macvtap: entered promiscuous mode [ 216.305304][ T6421] veth1_macvtap: entered promiscuous mode [ 216.393443][ T6421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.485606][ T6421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.547909][ T1790] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.548446][ T1790] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.615188][ T37] audit: type=1326 audit(1771936378.110:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.3.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c53ec629 code=0x7ffc0000 [ 216.615246][ T37] audit: type=1326 audit(1771936378.110:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.3.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f52c53ec629 code=0x7ffc0000 [ 216.615291][ T37] audit: type=1326 audit(1771936378.110:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.3.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c53ec629 code=0x7ffc0000 [ 216.615336][ T37] audit: type=1326 audit(1771936378.110:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.3.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f52c53ec629 code=0x7ffc0000 [ 216.615381][ T37] audit: type=1326 audit(1771936378.119:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.3.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c53ec629 code=0x7ffc0000 [ 216.632311][ T1790] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.673681][ T1790] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.930750][ T6915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.930969][ T6915] batadv_slave_0: entered promiscuous mode [ 218.355483][ T6924] tmpfs: Unsupported parameter 'huge' [ 218.826922][ T6582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.836628][ T6279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.836651][ T6279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.060927][ T1790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.060949][ T1790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.645224][ T6943] hub 8-0:1.0: USB hub found [ 219.650465][ T6943] hub 8-0:1.0: 1 port detected [ 221.201015][ T6961] overlayfs: failed to clone lowerpath [ 221.260298][ T6961] overlayfs: failed to clone lowerpath [ 221.676647][ T6582] veth0_vlan: entered promiscuous mode [ 221.748996][ T6582] veth1_vlan: entered promiscuous mode [ 221.883130][ T6582] veth0_macvtap: entered promiscuous mode [ 222.185183][ T6582] veth1_macvtap: entered promiscuous mode [ 222.215284][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.641299][ T5814] Bluetooth: hci0: command 0x0406 tx timeout [ 222.963170][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.029470][ T4242] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.032609][ T4242] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.035232][ T4242] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.164646][ T4242] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.312737][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 223.846581][ T37] audit: type=1326 audit(1771936384.885:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6992 comm="syz.3.263" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52c53ec629 code=0x0 [ 223.931702][ T978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.931722][ T978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.173448][ T7008] tmpfs: Unsupported parameter 'huge' [ 224.222427][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.222449][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.797763][ T5895] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 227.081609][ T7055] netlink: 84 bytes leftover after parsing attributes in process `syz.3.277'. [ 227.098132][ T7055] vlan0: entered promiscuous mode [ 227.835744][ T5895] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.835806][ T5895] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 227.835831][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.911552][ T5895] usb 6-1: config 0 descriptor?? [ 227.968387][ T37] audit: type=1326 audit(1771936388.740:8): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7053 comm="syz.6.279" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc64032c629 code=0x0 [ 227.996069][ T5895] pwc: Askey VC010 type 2 USB webcam detected. [ 228.176230][ T5895] pwc: send_video_command error -71 [ 228.176263][ T5895] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 228.176741][ T5895] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 228.257523][ T5895] usb 6-1: USB disconnect, device number 2 [ 228.764186][ T5895] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 229.541399][ T5895] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.541464][ T5895] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 229.541490][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.635866][ T5895] usb 6-1: config 0 descriptor?? [ 229.682669][ T5895] pwc: Askey VC010 type 2 USB webcam detected. [ 230.007960][ T5895] pwc: send_video_command error -71 [ 230.007980][ T5895] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 230.010466][ T5895] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 230.068357][ T5895] usb 6-1: USB disconnect, device number 3 [ 238.721244][ T7168] tmpfs: Unsupported parameter 'huge' [ 238.744625][ T7170] netlink: 'syz.7.308': attribute type 1 has an invalid length. [ 240.918098][ T7196] tipc: Enabling of bearer rejected, failed to enable media [ 240.994177][ T7189] Zero length message leads to an empty skb [ 244.152330][ T7228] mmap: syz.1.321 (7228) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 245.432802][ T7243] tmpfs: Unsupported parameter 'huge' [ 245.962678][ T7261] overlayfs: failed to clone upperpath [ 247.003437][ T7288] fuse: Bad value for 'fd' [ 249.206398][ T7308] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 249.206427][ T7308] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 249.375834][ T7308] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 249.375863][ T7308] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 249.522436][ T7308] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 249.522460][ T7308] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 251.047855][ T7308] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 251.047882][ T7308] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 251.261632][ T7308] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 251.261657][ T7308] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 255.221954][ T7364] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 259.138437][ T7383] trusted_key: encrypted_key: key user:syz not found [ 260.906742][ T7395] 9pnet_virtio: no channels available for device syz [ 264.180270][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.180346][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.748641][ T7451] tmpfs: Unsupported parameter 'huge' [ 266.290201][ T7462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.890254][ T7504] netlink: 64 bytes leftover after parsing attributes in process `syz.7.396'. [ 271.954336][ T7507] syzkaller1: entered promiscuous mode [ 271.954364][ T7507] syzkaller1: entered allmulticast mode [ 272.275040][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.397'. [ 272.275078][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.397'. [ 274.564304][ T36] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 274.713850][ T36] usb 7-1: device descriptor read/64, error -71 [ 275.002495][ T36] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 275.144289][ T36] usb 7-1: device descriptor read/64, error -71 [ 275.262608][ T36] usb usb7-port1: attempt power cycle [ 275.718786][ T36] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 275.754095][ T36] usb 7-1: device descriptor read/8, error -71 [ 276.006953][ T36] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 276.031541][ T36] usb 7-1: device descriptor read/8, error -71 [ 276.146306][ T36] usb usb7-port1: unable to enumerate USB device [ 284.795348][ T37] audit: type=1326 audit(1771936441.922:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7629 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c53ec629 code=0x7ffc0000 [ 284.795404][ T37] audit: type=1326 audit(1771936441.922:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7629 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c53ec629 code=0x7ffc0000 [ 284.901716][ T37] audit: type=1326 audit(1771936442.015:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7629 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f52c53ec629 code=0x7ffc0000 [ 284.901773][ T37] audit: type=1326 audit(1771936442.015:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7629 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c53ec629 code=0x7ffc0000 [ 284.901811][ T37] audit: type=1326 audit(1771936442.025:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7629 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c53ec629 code=0x7ffc0000 [ 284.901850][ T37] audit: type=1326 audit(1771936442.025:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7629 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f52c53ec629 code=0x7ffc0000 [ 284.905114][ T37] audit: type=1326 audit(1771936442.025:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7629 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c53ec629 code=0x7ffc0000 [ 284.955162][ T7637] pim6reg: entered allmulticast mode [ 284.994090][ T37] audit: type=1326 audit(1771936442.034:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7629 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c53ec629 code=0x7ffc0000 [ 284.994235][ T37] audit: type=1326 audit(1771936442.043:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7629 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f52c53ec629 code=0x7ffc0000 [ 284.994360][ T37] audit: type=1326 audit(1771936442.043:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7629 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c53ec629 code=0x7ffc0000 [ 285.595755][ T7629] pim6reg: left allmulticast mode [ 292.381764][ T7719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.838695][ T7726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.843821][ T7726] batadv_slave_0: entered promiscuous mode [ 293.129608][ T7729] ======================================================= [ 293.129608][ T7729] WARNING: The mand mount option has been deprecated and [ 293.129608][ T7729] and is ignored by this kernel. Remove the mand [ 293.129608][ T7729] option from the mount to silence this warning. [ 293.129608][ T7729] ======================================================= [ 294.161638][ T7739] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.573048][ T7739] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.058156][ T7739] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.556642][ T7739] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.457080][ T41] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.554507][ T41] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.906503][ T1111] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.288700][ T41] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.741307][ T7824] xfrm0 speed is unknown, defaulting to 1000 [ 301.775262][ T7824] xfrm0 speed is unknown, defaulting to 1000 [ 301.992918][ T7824] xfrm0 speed is unknown, defaulting to 1000 [ 302.410972][ T7824] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 303.632594][ T7824] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 304.391383][ T37] kauditd_printk_skb: 35 callbacks suppressed [ 304.391479][ T37] audit: type=1326 audit(1771936460.263:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7844 comm="syz.1.475" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4fb948c629 code=0x0 [ 304.527247][ T7824] xfrm0 speed is unknown, defaulting to 1000 [ 304.548961][ T7824] xfrm0 speed is unknown, defaulting to 1000 [ 304.756333][ T7824] xfrm0 speed is unknown, defaulting to 1000 [ 304.788822][ T7824] xfrm0 speed is unknown, defaulting to 1000 [ 304.833973][ T7824] xfrm0 speed is unknown, defaulting to 1000 [ 317.375603][ T7961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.729917][ T8013] syz.7.529 uses obsolete (PF_INET,SOCK_PACKET) [ 327.366647][ T8028] tmpfs: Unsupported parameter 'huge' [ 330.605999][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.606077][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 339.220449][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.223861][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.254743][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.255976][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.256805][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.308560][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.337882][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.339838][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.341096][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.342015][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.635514][ T8084] xfrm0 speed is unknown, defaulting to 1000 [ 341.801563][ T5800] Bluetooth: hci2: command tx timeout [ 342.742208][ T8084] chnl_net:caif_netlink_parms(): no params data found [ 344.023518][ T5800] Bluetooth: hci2: command tx timeout [ 344.676874][ T8127] tmpfs: Unsupported parameter 'huge' [ 345.722570][ T5886] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 345.854063][ T8084] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.869161][ T8084] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.869420][ T8084] bridge_slave_0: entered allmulticast mode [ 345.892866][ T8084] bridge_slave_0: entered promiscuous mode [ 345.904968][ T5886] usb 7-1: Using ep0 maxpacket: 8 [ 345.913155][ T5886] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 345.913198][ T5886] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 345.913240][ T5886] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 345.913270][ T5886] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 345.913306][ T5886] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 345.913334][ T5886] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 345.913363][ T5886] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 345.913392][ T5886] usb 7-1: config 168 interface 0 has no altsetting 0 [ 346.022260][ T5886] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 346.022307][ T5886] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 346.022350][ T5886] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 346.022380][ T5886] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 346.022409][ T5886] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 346.022438][ T5886] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 346.022466][ T5886] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 346.022495][ T5886] usb 7-1: config 168 interface 0 has no altsetting 0 [ 346.027411][ T5886] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 346.027457][ T5886] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 346.027500][ T5886] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 346.027531][ T5886] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 346.027559][ T5886] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 346.027588][ T5886] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 346.027618][ T5886] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 346.027648][ T5886] usb 7-1: config 168 interface 0 has no altsetting 0 [ 346.240064][ T5800] Bluetooth: hci2: command tx timeout [ 346.252159][ T5886] usb 7-1: string descriptor 0 read error: -22 [ 346.252268][ T5886] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 346.252285][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.321500][ T5886] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 346.530268][ T8130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.530692][ T8130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.622831][ T8084] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.623345][ T8084] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.624105][ T8084] bridge_slave_1: entered allmulticast mode [ 346.653661][ T8084] bridge_slave_1: entered promiscuous mode [ 346.693555][ T5895] usb 7-1: USB disconnect, device number 6 [ 348.603339][ T5803] Bluetooth: hci2: command tx timeout [ 351.240273][ T978] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.608964][ T8084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.625302][ T8084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.878181][ T8084] team0: Port device team_slave_0 added [ 352.900185][ T8084] team0: Port device team_slave_1 added [ 354.239413][ T5886] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 354.408244][ T5886] usb 7-1: config 1 interface 0 has no altsetting 0 [ 354.424229][ T5886] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 354.424263][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.424293][ T5886] usb 7-1: Product: syz [ 354.424309][ T5886] usb 7-1: Manufacturer: syz [ 354.424325][ T5886] usb 7-1: SerialNumber: syz [ 355.594806][ T8084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.594824][ T8084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.594856][ T8084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.643105][ T8084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.643120][ T8084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.643144][ T8084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.274841][ T5886] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 356.275742][ T978] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.616524][ T8194] overlayfs: failed to clone upperpath [ 356.819502][ T978] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.722184][ T8084] hsr_slave_0: entered promiscuous mode [ 357.725705][ T8084] hsr_slave_1: entered promiscuous mode [ 357.726714][ T8084] debugfs: 'hsr0' already exists in 'hsr' [ 357.726739][ T8084] Cannot create hsr debugfs directory [ 357.822303][ T8196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.822843][ T8196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.115769][ T978] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.152252][ T36] usb 7-1: USB disconnect, device number 7 [ 359.215262][ T8177] usblp0: removed [ 359.331238][ T978] bridge_slave_1: left allmulticast mode [ 359.331268][ T978] bridge_slave_1: left promiscuous mode [ 359.331518][ T978] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.367450][ T978] bridge_slave_0: left allmulticast mode [ 360.367484][ T978] bridge_slave_0: left promiscuous mode [ 360.367738][ T978] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.925144][ T8239] overlayfs: failed to clone upperpath [ 364.468364][ T978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.550909][ T978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.602576][ T978] bond0 (unregistering): Released all slaves [ 365.794126][ T8084] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 365.924950][ T8084] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 366.004605][ T8084] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 366.077169][ T8084] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 368.931479][ T978] hsr_slave_0: left promiscuous mode [ 368.978198][ T978] hsr_slave_1: left promiscuous mode [ 368.979406][ T978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.979432][ T978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.051414][ T978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.051445][ T978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.180686][ T978] veth1_macvtap: left promiscuous mode [ 369.180795][ T978] veth0_macvtap: left promiscuous mode [ 369.181057][ T978] veth1_vlan: left promiscuous mode [ 369.182700][ T978] veth0_vlan: left promiscuous mode [ 372.088577][ T978] team0 (unregistering): Port device team_slave_1 removed [ 372.150001][ T978] team0 (unregistering): Port device team_slave_0 removed [ 372.523251][ T5799] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 373.720298][ T5799] usb 7-1: Using ep0 maxpacket: 16 [ 373.722686][ T5799] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.722711][ T5799] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.730135][ T5799] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 373.730166][ T5799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.730188][ T5799] usb 7-1: Product: syz [ 373.730204][ T5799] usb 7-1: Manufacturer: syz [ 373.730220][ T5799] usb 7-1: SerialNumber: syz [ 373.825630][ T8084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.000531][ T8084] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.035231][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.035364][ T6278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.085284][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.085429][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.112655][ T5799] usb 7-1: 0:2 : does not exist [ 374.444980][ T5799] usb 7-1: USB disconnect, device number 8 [ 374.887868][ T8096] udevd[8096]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 375.961252][ T8084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.690573][ T8084] veth0_vlan: entered promiscuous mode [ 377.710393][ T8084] veth1_vlan: entered promiscuous mode [ 377.783407][ T8084] veth0_macvtap: entered promiscuous mode [ 377.790123][ T8084] veth1_macvtap: entered promiscuous mode [ 377.849118][ T8084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.905601][ T8084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.066163][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.452980][ T6278] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.453253][ T6278] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.454356][ T6278] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.607370][ T37] audit: type=1326 audit(1771936529.709:55): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=8393 comm="syz.3.639" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52c53ec629 code=0x0 [ 379.441462][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.441484][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.618658][ T6278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.618680][ T6278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.496577][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 395.496652][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 405.565988][ T8656] netlink: 68 bytes leftover after parsing attributes in process `syz.6.715'. [ 408.796728][ T8668] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 408.797138][ T8668] Error validating options; rc = [-22] [ 413.057079][ T8707] netlink: 84 bytes leftover after parsing attributes in process `syz.8.731'. [ 413.066333][ T8707] vlan0: entered promiscuous mode [ 414.087182][ T3120] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 414.247297][ T8715] syzkaller0: entered promiscuous mode [ 414.247327][ T8715] syzkaller0: entered allmulticast mode [ 414.296310][ T3120] usb 7-1: config 1 interface 0 has no altsetting 0 [ 414.300965][ T3120] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 414.300996][ T3120] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.301011][ T3120] usb 7-1: Product: syz [ 414.301021][ T3120] usb 7-1: Manufacturer: syz [ 414.301032][ T3120] usb 7-1: SerialNumber: syz [ 414.830720][ T3120] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 415.181823][ T8730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.182374][ T8730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.188256][ T8730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.188985][ T8730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.041597][ T5799] usb 7-1: USB disconnect, device number 9 [ 417.074841][ T5799] usblp0: removed [ 417.639630][ T5799] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 417.778505][ T5799] usb 7-1: device descriptor read/64, error -71 [ 418.045940][ T5799] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 418.195469][ T5799] usb 7-1: device descriptor read/64, error -71 [ 418.313424][ T5799] usb usb7-port1: attempt power cycle [ 418.721022][ T5799] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 420.394571][ T5799] usb 7-1: device descriptor read/8, error -71 [ 423.569521][ T8786] 9pnet_virtio: no channels available for device syz [ 423.971854][ T8788] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 423.974260][ T8788] overlayfs: overlapping lowerdir path [ 430.394098][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 430.419107][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 430.441874][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 430.443167][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 430.444007][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 431.637801][ T5800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 431.652556][ T5800] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 431.654441][ T5800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 431.684376][ T5800] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 431.685189][ T5800] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 432.484319][ T8799] xfrm0 speed is unknown, defaulting to 1000 [ 432.635658][ T8803] xfrm0 speed is unknown, defaulting to 1000 [ 432.664311][ T5803] Bluetooth: hci4: command tx timeout [ 433.017766][ T8815] tmpfs: Unsupported parameter 'huge' [ 433.985589][ T5803] Bluetooth: hci6: command tx timeout [ 434.886877][ T5803] Bluetooth: hci4: command tx timeout [ 435.169812][ T31] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 435.594681][ T31] usb 7-1: config 1 interface 0 has no altsetting 0 [ 435.599324][ T31] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 435.599353][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.599367][ T31] usb 7-1: Product: syz [ 435.599378][ T31] usb 7-1: Manufacturer: syz [ 435.599389][ T31] usb 7-1: SerialNumber: syz [ 435.712537][ T8850] 9pnet_virtio: no channels available for device syz [ 436.068239][ T8852] overlayfs: failed to clone lowerpath [ 437.006528][ T5803] Bluetooth: hci6: command tx timeout [ 437.269868][ T5803] Bluetooth: hci4: command tx timeout [ 438.097296][ T31] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 438.447143][ T8831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.447701][ T8831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.474975][ T8831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.482532][ T8831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.525257][ T5803] Bluetooth: hci4: command tx timeout [ 439.747475][ T5803] Bluetooth: hci6: command tx timeout [ 439.894341][ T5895] usb 7-1: USB disconnect, device number 14 [ 439.925604][ T5895] usblp0: removed [ 440.126954][ T8799] chnl_net:caif_netlink_parms(): no params data found [ 440.527002][ T1127] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.578896][ T8885] 9pnet: p9_errstr2errno: server reported unknown error ile1 [ 440.791489][ T8803] chnl_net:caif_netlink_parms(): no params data found [ 441.152316][ T8900] 9pnet_virtio: no channels available for device syz [ 441.508648][ T8902] overlayfs: failed to clone lowerpath [ 441.937655][ T5803] Bluetooth: hci6: command tx timeout [ 444.006804][ T1127] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.360899][ T5878] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 444.574643][ T5878] usb 7-1: config 1 interface 0 has no altsetting 0 [ 444.594486][ T5878] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 444.594518][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.594540][ T5878] usb 7-1: Product: syz [ 444.594556][ T5878] usb 7-1: Manufacturer: syz [ 444.594572][ T5878] usb 7-1: SerialNumber: syz [ 444.658255][ T1127] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.001491][ T8934] netlink: 'syz.3.787': attribute type 4 has an invalid length. [ 445.086573][ T5878] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 445.339070][ T1127] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.476825][ T8799] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.477042][ T8799] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.477261][ T8799] bridge_slave_0: entered allmulticast mode [ 445.480051][ T8799] bridge_slave_0: entered promiscuous mode [ 445.485651][ T8938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.486220][ T8938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.488985][ T8938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.489554][ T8938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.592104][ T8936] bridge0: entered promiscuous mode [ 445.592321][ T8936] macvlan2: entered promiscuous mode [ 445.613043][ T8799] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.613172][ T8799] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.613397][ T8799] bridge_slave_1: entered allmulticast mode [ 445.637175][ T8799] bridge_slave_1: entered promiscuous mode [ 445.887176][ T8799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.892852][ T8803] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.892982][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.893207][ T8803] bridge_slave_0: entered allmulticast mode [ 445.940021][ T8803] bridge_slave_0: entered promiscuous mode [ 445.963623][ T8799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.964905][ T8803] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.965224][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.965427][ T8803] bridge_slave_1: entered allmulticast mode [ 446.001689][ T8803] bridge_slave_1: entered promiscuous mode [ 446.172839][ T8799] team0: Port device team_slave_0 added [ 446.190893][ T8803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.232238][ T8799] team0: Port device team_slave_1 added [ 446.243006][ T8803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.442626][ T8799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.442645][ T8799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.442674][ T8799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.502326][ T8803] team0: Port device team_slave_0 added [ 446.518632][ T8799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.518650][ T8799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.518681][ T8799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.574360][ T8803] team0: Port device team_slave_1 added [ 446.819201][ T8803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.819597][ T8803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.819629][ T8803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.898444][ T8953] netlink: 'syz.3.793': attribute type 1 has an invalid length. [ 447.915707][ T5895] usb 7-1: USB disconnect, device number 15 [ 447.941689][ T5895] usblp0: removed [ 448.285625][ T8960] 9pnet_virtio: no channels available for device syz [ 448.483708][ T8961] overlayfs: failed to clone lowerpath [ 450.151424][ T1127] bridge_slave_1: left allmulticast mode [ 450.151455][ T1127] bridge_slave_1: left promiscuous mode [ 450.151866][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.384276][ T1127] bridge_slave_0: left allmulticast mode [ 450.384307][ T1127] bridge_slave_0: left promiscuous mode [ 450.384549][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.109420][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.194823][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.218148][ T1127] bond0 (unregistering): Released all slaves [ 451.261100][ T8803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.261119][ T8803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.261149][ T8803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.323790][ T8799] hsr_slave_0: entered promiscuous mode [ 451.325176][ T8799] hsr_slave_1: entered promiscuous mode [ 451.326147][ T8799] debugfs: 'hsr0' already exists in 'hsr' [ 451.326172][ T8799] Cannot create hsr debugfs directory [ 451.329992][ T8953] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 451.395115][ T8957] vlan2: entered allmulticast mode [ 451.395141][ T8957] veth0_to_bond: entered allmulticast mode [ 452.226547][ T8803] hsr_slave_0: entered promiscuous mode [ 452.227486][ T8803] hsr_slave_1: entered promiscuous mode [ 452.228112][ T8803] debugfs: 'hsr0' already exists in 'hsr' [ 452.228129][ T8803] Cannot create hsr debugfs directory [ 454.120591][ T8993] 9pnet_virtio: no channels available for device syz [ 454.453579][ T8993] overlayfs: failed to clone lowerpath [ 456.415604][ T1127] hsr_slave_0: left promiscuous mode [ 456.430441][ T1127] hsr_slave_1: left promiscuous mode [ 456.436632][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.436654][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.476489][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.476511][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.576094][ T1127] veth1_macvtap: left promiscuous mode [ 456.576210][ T1127] veth0_macvtap: left promiscuous mode [ 456.576447][ T1127] veth1_vlan: left promiscuous mode [ 457.468067][ T1127] team0 (unregistering): Port device team_slave_1 removed [ 457.510077][ T1127] team0 (unregistering): Port device team_slave_0 removed [ 461.148960][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 461.149011][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 461.210000][ T9021] overlayfs: failed to clone upperpath [ 461.482451][ T8799] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 461.701516][ T9032] 9pnet_virtio: no channels available for device syz [ 461.937203][ T9033] overlayfs: failed to clone lowerpath [ 462.421515][ T8799] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 464.440172][ T8799] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 464.656686][ T9067] 9p: Bad value for 'rfdno' [ 467.191093][ T9081] 9pnet_virtio: no channels available for device syz [ 467.788315][ T9081] overlayfs: failed to clone lowerpath [ 470.599272][ T8799] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 471.411217][ T9127] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 471.411242][ T9127] Error validating options; rc = [-22] [ 473.999188][ T36] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 474.158193][ T36] usb 7-1: Using ep0 maxpacket: 16 [ 474.166458][ T36] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 474.166481][ T36] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 474.166499][ T36] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 474.166519][ T36] usb 7-1: config 1 interface 0 has no altsetting 0 [ 474.219669][ T36] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 474.219691][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.219705][ T36] usb 7-1: Product: syz [ 474.219715][ T36] usb 7-1: Manufacturer: syz [ 474.219726][ T36] usb 7-1: SerialNumber: syz [ 474.790328][ T36] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 475.845390][ T1127] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.411539][ T1127] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.513592][ T9170] syz_tun: entered allmulticast mode [ 476.539136][ T9166] syz_tun: left allmulticast mode [ 476.924417][ T1127] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.606316][ T1127] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.795371][ T9201] netlink: 'syz.3.851': attribute type 1 has an invalid length. [ 477.918032][ T9201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 478.051047][ T8803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 478.226719][ T8803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 478.607338][ T8803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 478.686867][ T8803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 478.911014][ T9216] syz_tun: entered allmulticast mode [ 479.002553][ T8799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.004071][ T9213] syz_tun: left allmulticast mode [ 479.290228][ T1127] bridge_slave_0: left allmulticast mode [ 479.290259][ T1127] bridge_slave_0: left promiscuous mode [ 479.290531][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.144429][ T9093] usblp0:failed reading printer status (-110) [ 481.213290][ T6933] usb 7-1: USB disconnect, device number 16 [ 481.343155][ T6933] usblp0: removed [ 481.473986][ T9255] netlink: 'syz.6.860': attribute type 1 has an invalid length. [ 481.500203][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.565031][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.609497][ T1127] bond0 (unregistering): Released all slaves [ 481.795354][ T9255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.807897][ T8799] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.992941][ T1821] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.993095][ T1821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.511306][ T1821] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.540871][ T1821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.705074][ T9266] binder: 9265:9266 ioctl 4018620d 0 returned -22 [ 482.993405][ T9267] syz_tun: entered allmulticast mode [ 483.025407][ T9265] syz_tun: left allmulticast mode [ 483.495524][ T1127] hsr_slave_0: left promiscuous mode [ 483.520892][ T1127] hsr_slave_1: left promiscuous mode [ 483.521976][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.522001][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.671534][ T1127] veth1_macvtap: left promiscuous mode [ 483.671606][ T1127] veth0_macvtap: left promiscuous mode [ 483.671763][ T1127] veth1_vlan: left promiscuous mode [ 483.671880][ T1127] veth0_vlan: left promiscuous mode [ 486.453283][ T9288] netlink: 40 bytes leftover after parsing attributes in process `syz.3.866'. [ 487.719855][ T1127] team0 (unregistering): Port device team_slave_1 removed [ 487.772714][ T1127] team0 (unregistering): Port device team_slave_0 removed [ 488.302088][ T8803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.307989][ T9310] netlink: 'syz.5.870': attribute type 1 has an invalid length. [ 488.366546][ T9310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 488.437686][ T9315] syz_tun: entered allmulticast mode [ 488.458061][ T8803] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.560401][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.560547][ T6278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.600691][ T9311] syz_tun: left allmulticast mode [ 488.625747][ T119] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.625992][ T119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.986600][ T8799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.835880][ T9354] netlink: 40 bytes leftover after parsing attributes in process `syz.5.880'. [ 490.098802][ T8803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.220356][ T9366] netlink: 'syz.5.882': attribute type 1 has an invalid length. [ 490.303411][ T9366] 8021q: adding VLAN 0 to HW filter on device bond2 [ 490.401840][ T9366] vlan2: entered allmulticast mode [ 490.401865][ T9366] veth0_to_bond: entered allmulticast mode [ 490.532876][ T9373] syz_tun: entered allmulticast mode [ 490.550836][ T9372] syz_tun: left allmulticast mode [ 490.824020][ T8799] veth0_vlan: entered promiscuous mode [ 491.049323][ T8799] veth1_vlan: entered promiscuous mode [ 491.141321][ T8799] veth0_macvtap: entered promiscuous mode [ 491.191836][ T8799] veth1_macvtap: entered promiscuous mode [ 492.275019][ T8799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.391551][ T8799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.411196][ T1111] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.411431][ T1111] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.411657][ T1111] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.411855][ T1111] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.202231][ T9404] tmpfs: Unsupported parameter 'huge' [ 493.909731][ T9396] netlink: 32 bytes leftover after parsing attributes in process `syz.3.888'. [ 494.140109][ T9414] netlink: 40 bytes leftover after parsing attributes in process `syz.3.890'. [ 494.615425][ T8803] veth0_vlan: entered promiscuous mode [ 494.693916][ T8803] veth1_vlan: entered promiscuous mode [ 494.915131][ T8803] veth0_macvtap: entered promiscuous mode [ 494.941316][ T8803] veth1_macvtap: entered promiscuous mode [ 494.991094][ T8803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.026584][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 495.040999][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 495.046819][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 495.058719][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 495.080305][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 495.165563][ T8803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.243474][ T1790] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.243968][ T1790] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.244000][ T1790] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.244027][ T1790] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.970242][ T9432] xfrm0 speed is unknown, defaulting to 1000 [ 498.018614][ T5803] Bluetooth: hci0: command tx timeout [ 498.874652][ T9459] netlink: 'syz.3.897': attribute type 1 has an invalid length. [ 499.113491][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 499.131350][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 499.140441][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 499.161672][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 499.162789][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 499.384904][ T9469] tmpfs: Unsupported parameter 'huge' [ 499.705206][ T9473] netlink: 40 bytes leftover after parsing attributes in process `syz.5.900'. [ 499.987242][ T9459] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 499.999672][ T9462] vlan2: entered allmulticast mode [ 500.199949][ T5800] Bluetooth: hci0: command tx timeout [ 501.062711][ T1111] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.580780][ T5800] Bluetooth: hci2: command tx timeout [ 502.452646][ T5800] Bluetooth: hci0: command tx timeout [ 502.684373][ T1111] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.790465][ T5800] Bluetooth: hci2: command tx timeout [ 503.839941][ T9464] xfrm0 speed is unknown, defaulting to 1000 [ 504.060133][ T9541] tmpfs: Unsupported parameter 'huge' [ 504.652839][ T5800] Bluetooth: hci0: command tx timeout [ 506.558202][ T5800] Bluetooth: hci2: command tx timeout [ 506.636972][ T1111] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.317827][ T9570] fuse: Bad value for 'fd' [ 508.430533][ T1111] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.876984][ T5800] Bluetooth: hci2: command tx timeout [ 513.667829][ T9432] chnl_net:caif_netlink_parms(): no params data found [ 513.717888][ T1111] bridge_slave_1: left allmulticast mode [ 513.717918][ T1111] bridge_slave_1: left promiscuous mode [ 513.718336][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.818303][ T1111] bridge_slave_0: left allmulticast mode [ 513.818331][ T1111] bridge_slave_0: left promiscuous mode [ 513.818587][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.913590][ T9631] fuse: Bad value for 'fd' [ 521.402057][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.467826][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.512652][ T1111] bond0 (unregistering): Released all slaves [ 522.452607][ T9464] chnl_net:caif_netlink_parms(): no params data found [ 523.046956][ T1111] hsr_slave_0: left promiscuous mode [ 523.095726][ T1111] hsr_slave_1: left promiscuous mode [ 523.096880][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.096906][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.154821][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.154850][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.303209][ T1111] veth1_macvtap: left promiscuous mode [ 523.304579][ T1111] veth0_macvtap: left promiscuous mode [ 523.304768][ T1111] veth1_vlan: left promiscuous mode [ 523.304891][ T1111] veth0_vlan: left promiscuous mode [ 527.003676][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 527.003736][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 527.005997][ T9712] netlink: 84 bytes leftover after parsing attributes in process `syz.6.940'. [ 527.439402][ T1111] team0 (unregistering): Port device team_slave_1 removed [ 527.505246][ T1111] team0 (unregistering): Port device team_slave_0 removed [ 527.725915][ T9712] vlan0: entered promiscuous mode [ 527.827910][ T9432] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.828058][ T9432] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.828298][ T9432] bridge_slave_0: entered allmulticast mode [ 527.863999][ T9432] bridge_slave_0: entered promiscuous mode [ 527.959028][ T9432] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.959158][ T9432] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.959423][ T9432] bridge_slave_1: entered allmulticast mode [ 527.997765][ T9432] bridge_slave_1: entered promiscuous mode [ 528.336600][ T9432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.389324][ T9432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.763163][ T9464] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.763311][ T9464] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.763509][ T9464] bridge_slave_0: entered allmulticast mode [ 528.787333][ T9464] bridge_slave_0: entered promiscuous mode [ 528.859042][ T9464] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.859262][ T9464] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.859476][ T9464] bridge_slave_1: entered allmulticast mode [ 528.870152][ T9464] bridge_slave_1: entered promiscuous mode [ 531.150798][ T9432] team0: Port device team_slave_0 added [ 531.282316][ T9432] team0: Port device team_slave_1 added [ 531.297653][ T9464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.460139][ T9464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.678057][ T9432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.678077][ T9432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.678106][ T9432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.832537][ T9432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.832554][ T9432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.832580][ T9432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.839621][ T9464] team0: Port device team_slave_0 added [ 531.939693][ T9464] team0: Port device team_slave_1 added [ 532.099699][ T9464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.099717][ T9464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.099746][ T9464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.248027][ T9464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.248040][ T9464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.248061][ T9464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.599242][ T9432] hsr_slave_0: entered promiscuous mode [ 532.619578][ T9432] hsr_slave_1: entered promiscuous mode [ 532.620943][ T9432] debugfs: 'hsr0' already exists in 'hsr' [ 532.620970][ T9432] Cannot create hsr debugfs directory [ 533.399629][ T9464] hsr_slave_0: entered promiscuous mode [ 533.420923][ T9464] hsr_slave_1: entered promiscuous mode [ 533.437613][ T9464] debugfs: 'hsr0' already exists in 'hsr' [ 533.437633][ T9464] Cannot create hsr debugfs directory [ 533.753517][ T1111] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.583503][ T1111] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.440024][ T1111] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.486426][ T1111] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.560074][ T9871] fuse: Bad value for 'fd' [ 543.367314][ T1111] bridge_slave_1: left allmulticast mode [ 543.367345][ T1111] bridge_slave_1: left promiscuous mode [ 543.367588][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.525398][ T1111] bridge_slave_0: left allmulticast mode [ 543.529934][ T1111] bridge_slave_0: left promiscuous mode [ 543.545349][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.963733][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.030220][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.074306][ T1111] bond0 (unregistering): Released all slaves [ 549.708431][ T1111] hsr_slave_0: left promiscuous mode [ 549.729808][ T1111] hsr_slave_1: left promiscuous mode [ 549.730954][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.730981][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.769612][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.769641][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.843510][ T1111] veth1_macvtap: left promiscuous mode [ 549.843584][ T1111] veth0_macvtap: left promiscuous mode [ 549.843860][ T1111] veth1_vlan: left promiscuous mode [ 549.843993][ T1111] veth0_vlan: left promiscuous mode [ 550.596517][ T1111] team0 (unregistering): Port device team_slave_1 removed [ 550.660035][ T1111] team0 (unregistering): Port device team_slave_0 removed [ 551.342609][ T9970] syz_tun: entered allmulticast mode [ 551.354774][ T9968] syz_tun: left allmulticast mode [ 552.983665][ T9432] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 553.120777][ T9432] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 553.186659][ T9432] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 553.316255][ T9993] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 553.593536][ T9432] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 554.728436][ T9464] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 555.799782][ T9464] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 555.835899][ T9464] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 555.896206][ T9464] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 555.959161][T10016] syz_tun: entered allmulticast mode [ 556.016384][T10015] syz_tun: left allmulticast mode [ 557.289487][ T9464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.397817][ T9464] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.752623][ T9432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.928403][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.938787][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.981273][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.981412][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.454163][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 560.474973][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 560.476268][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 560.477610][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 560.478373][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 560.831742][T10059] xfrm0 speed is unknown, defaulting to 1000 [ 561.106969][T10069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.455374][ T5803] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 561.477354][ T5803] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 561.493778][ T5803] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 561.529769][ T5803] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 561.537326][ T5803] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 562.691911][ T5803] Bluetooth: hci4: command tx timeout [ 562.980491][ T10] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 563.157551][ T10] usb 7-1: too many endpoints for config 0 interface 0 altsetting 254: 254, using maximum allowed: 30 [ 563.157588][ T10] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.157605][ T10] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 563.157624][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 563.157649][ T10] usb 7-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 563.157666][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.239259][ T10] usb 7-1: config 0 descriptor?? [ 563.413669][ T37] audit: type=1326 audit(1771936702.645:56): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=10101 comm="syz.3.1020" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52c53ec629 code=0x0 [ 563.459368][T10075] xfrm0 speed is unknown, defaulting to 1000 [ 563.564428][T10059] chnl_net:caif_netlink_parms(): no params data found [ 563.814024][ T5803] Bluetooth: hci6: command tx timeout [ 563.936156][ T10] chicony 0003:04F2:1123.0001: invalid report_count 15576 [ 563.936182][ T10] chicony 0003:04F2:1123.0001: item 0 2 1 9 parsing failed [ 563.937434][ T10] chicony 0003:04F2:1123.0001: Chicony hid parse failed: -22 [ 563.937519][ T10] chicony 0003:04F2:1123.0001: probe with driver chicony failed with error -22 [ 564.172194][ T36] usb 7-1: USB disconnect, device number 17 [ 564.914720][ T5803] Bluetooth: hci4: command tx timeout [ 566.025996][ T5803] Bluetooth: hci6: command tx timeout [ 566.299348][T10059] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.299561][T10059] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.299804][T10059] bridge_slave_0: entered allmulticast mode [ 566.336003][T10059] bridge_slave_0: entered promiscuous mode [ 566.447995][T10059] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.448126][T10059] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.448374][T10059] bridge_slave_1: entered allmulticast mode [ 566.485772][T10059] bridge_slave_1: entered promiscuous mode [ 567.586020][ T5803] Bluetooth: hci4: command tx timeout [ 567.713706][T10059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.802946][T10059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.963293][ T37] audit: type=1326 audit(1771936706.912:57): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=10141 comm="syz.6.1030" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc64032c629 code=0x0 [ 568.108000][T10059] team0: Port device team_slave_0 added [ 568.225873][T10059] team0: Port device team_slave_1 added [ 568.230836][T10075] chnl_net:caif_netlink_parms(): no params data found [ 568.248697][ T5803] Bluetooth: hci6: command tx timeout [ 568.354938][ T1127] bridge_slave_1: left allmulticast mode [ 568.354970][ T1127] bridge_slave_1: left promiscuous mode [ 568.355317][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.437719][ T1127] bridge_slave_0: left allmulticast mode [ 568.437751][ T1127] bridge_slave_0: left promiscuous mode [ 568.438031][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.787784][ T5803] Bluetooth: hci4: command tx timeout [ 570.906879][ T5803] Bluetooth: hci6: command tx timeout [ 571.062061][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.210649][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.308160][ T1127] bond0 (unregistering): Released all slaves [ 571.571428][T10059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.571447][T10059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.571476][T10059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.755082][T10059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.755101][T10059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.755132][T10059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.755758][T10193] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1044'. [ 571.994505][T10192] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.290292][ T1127] hsr_slave_0: left promiscuous mode [ 572.309424][ T1127] hsr_slave_1: left promiscuous mode [ 572.310621][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.353325][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.463638][ T37] audit: type=1326 audit(1771936711.114:58): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.5.1047" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c5873c629 code=0x0 [ 573.036722][ T1127] team0 (unregistering): Port device team_slave_1 removed [ 573.902342][ T1127] team0 (unregistering): Port device team_slave_0 removed [ 574.250987][T10222] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1053'. [ 574.316355][T10075] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.316565][T10075] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.316758][T10075] bridge_slave_0: entered allmulticast mode [ 574.320157][T10075] bridge_slave_0: entered promiscuous mode [ 574.388564][T10192] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.457929][T10075] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.458037][T10075] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.458235][T10075] bridge_slave_1: entered allmulticast mode [ 574.460362][T10075] bridge_slave_1: entered promiscuous mode [ 574.495188][T10059] hsr_slave_0: entered promiscuous mode [ 574.496641][T10059] hsr_slave_1: entered promiscuous mode [ 574.497492][T10059] debugfs: 'hsr0' already exists in 'hsr' [ 574.497517][T10059] Cannot create hsr debugfs directory [ 574.601132][T10075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.687147][T10192] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.766208][T10075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.863963][T10075] team0: Port device team_slave_0 added [ 574.914872][T10192] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.060705][T10075] team0: Port device team_slave_1 added [ 575.184950][T10075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.184969][T10075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.185008][T10075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.251733][T10075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.251753][T10075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.251786][T10075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.891678][T10075] hsr_slave_0: entered promiscuous mode [ 575.898756][T10075] hsr_slave_1: entered promiscuous mode [ 575.908960][T10075] debugfs: 'hsr0' already exists in 'hsr' [ 575.909035][T10075] Cannot create hsr debugfs directory [ 575.922237][ T1821] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.134980][ T1821] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.364056][ T175] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.491135][ T37] audit: type=1326 audit(1771936714.895:59): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=10250 comm="syz.5.1060" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c5873c629 code=0x0 [ 577.887631][ T175] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.117220][T10272] binder: 10271:10272 ioctl 4018620d 0 returned -22 [ 578.121834][T10267] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1063'. [ 578.512726][T10275] syz_tun: entered allmulticast mode [ 578.817752][ T37] audit: type=1326 audit(1771936717.075:60): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=10289 comm="syz.5.1071" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c5873c629 code=0x0 [ 578.923649][T10271] syz_tun: left allmulticast mode [ 580.879881][T10306] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1075'. [ 581.844407][T10327] binder: 10325:10327 ioctl 4018620d 0 returned -22 [ 582.028659][ T1127] bridge_slave_1: left allmulticast mode [ 582.028690][ T1127] bridge_slave_1: left promiscuous mode [ 582.028962][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.111532][ T1127] bridge_slave_0: left allmulticast mode [ 582.111563][ T1127] bridge_slave_0: left promiscuous mode [ 582.111824][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.138354][T10336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.202668][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.520159][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.554685][ T1127] bond0 (unregistering): Released all slaves [ 584.417786][T10328] syz_tun: entered allmulticast mode [ 584.486187][T10346] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1085'. [ 584.487094][T10328] syz_tun: left allmulticast mode [ 587.330378][ T1127] hsr_slave_0: left promiscuous mode [ 587.451462][ T1127] hsr_slave_1: left promiscuous mode [ 587.452608][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.580702][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.829779][T10373] 9pnet_virtio: no channels available for device syz [ 588.068577][T10382] overlayfs: failed to clone lowerpath [ 589.226681][ T1127] team0 (unregistering): Port device team_slave_1 removed [ 589.271463][ T1127] team0 (unregistering): Port device team_slave_0 removed [ 592.461305][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 592.461381][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 592.542912][T10059] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 592.768846][T10059] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 593.928254][T10059] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 594.185790][T10059] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 594.664753][T10075] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 594.798293][T10075] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 595.021363][T10075] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 595.115338][T10075] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 596.938809][T10059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.095020][T10059] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.182209][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.182358][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.367340][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.367484][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.555449][T10075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.736427][T10075] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.770847][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.805051][ T4242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.885674][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.885779][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.486669][T10059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.922548][T10075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.022791][T10536] netlink: 'syz.6.1127': attribute type 25 has an invalid length. [ 600.022818][T10536] netlink: 'syz.6.1127': attribute type 28 has an invalid length. [ 601.883695][T10059] veth0_vlan: entered promiscuous mode [ 601.921987][T10059] veth1_vlan: entered promiscuous mode [ 602.029908][T10059] veth0_macvtap: entered promiscuous mode [ 602.060490][T10075] veth0_vlan: entered promiscuous mode [ 602.063676][T10059] veth1_macvtap: entered promiscuous mode [ 602.097511][T10075] veth1_vlan: entered promiscuous mode [ 602.131213][T10059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.162882][T10059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.232561][ T119] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.236454][ T1821] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.282922][ T1821] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.331068][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.476545][T10075] veth0_macvtap: entered promiscuous mode [ 603.577271][T10075] veth1_macvtap: entered promiscuous mode [ 603.876208][T10075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.037252][T10075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.068346][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.068371][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.128746][ T1790] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.143856][ T1790] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.144583][ T1790] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.149905][ T1790] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.675800][ T1821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.675825][ T1821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.144610][T10032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.144634][T10032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.579905][ T1821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.579927][ T1821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.997612][ T36] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 620.093228][ T36] usb 10-1: config 1 interface 0 has no altsetting 0 [ 620.107655][ T36] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 620.107690][ T36] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.107714][ T36] usb 10-1: Product: syz [ 620.107730][ T36] usb 10-1: Manufacturer: syz [ 620.107746][ T36] usb 10-1: SerialNumber: syz [ 620.845537][ T36] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 623.691308][ T5799] usb 10-1: USB disconnect, device number 2 [ 623.696647][ T5799] usblp0: removed [ 629.033348][ T1237] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 629.068472][T10769] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1184'. [ 629.223687][ T1237] usb 5-1: config 1 interface 0 has no altsetting 0 [ 629.245942][ T1237] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 629.245977][ T1237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.246000][ T1237] usb 5-1: Product: syz [ 629.246017][ T1237] usb 5-1: Manufacturer: syz [ 629.246033][ T1237] usb 5-1: SerialNumber: syz [ 629.764760][ T1237] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 629.977142][T10785] netlink: 'syz.3.1187': attribute type 1 has an invalid length. [ 630.146382][T10785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 632.210223][ C0] usblp0: nonzero write bulk status received: -71 [ 632.211475][ T5799] usb 5-1: USB disconnect, device number 2 [ 632.816385][T10765] usblp0: removed [ 634.657828][T10828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1195'. [ 638.692449][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 638.734144][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 638.769909][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 638.773137][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 638.779892][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 639.039014][T10869] xfrm0 speed is unknown, defaulting to 1000 [ 639.475830][T10883] overlayfs: failed to clone upperpath [ 640.250737][T10869] chnl_net:caif_netlink_parms(): no params data found [ 641.030740][ T5803] Bluetooth: hci0: command tx timeout [ 643.178245][T10906] 9pnet_virtio: no channels available for device syz [ 643.221904][ T5803] Bluetooth: hci0: command tx timeout [ 643.995793][T10869] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.015360][T10869] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.015568][T10869] bridge_slave_0: entered allmulticast mode [ 644.042688][T10869] bridge_slave_0: entered promiscuous mode [ 644.156442][T10869] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.156530][T10869] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.156733][T10869] bridge_slave_1: entered allmulticast mode [ 644.222018][T10869] bridge_slave_1: entered promiscuous mode [ 644.488838][T10869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.966589][T10869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.320550][T10869] team0: Port device team_slave_0 added [ 645.320704][T10937] ªªªªªª: renamed from wg2 (while UP) [ 645.367357][T10869] team0: Port device team_slave_1 added [ 645.455293][ T5803] Bluetooth: hci0: command tx timeout [ 645.993198][T10869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.993217][T10869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.993251][T10869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.053241][T10869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.053259][T10869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.053302][T10869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.800412][T10869] hsr_slave_0: entered promiscuous mode [ 646.816497][T10869] hsr_slave_1: entered promiscuous mode [ 646.817579][T10869] debugfs: 'hsr0' already exists in 'hsr' [ 646.817616][T10869] Cannot create hsr debugfs directory [ 647.668062][ T5803] Bluetooth: hci0: command tx timeout [ 648.237020][T10973] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 648.300408][T10973] random: crng reseeded on system resumption [ 653.854723][ T10] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 654.036352][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 654.045189][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 654.045212][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.045227][ T10] usb 5-1: Product: syz [ 654.045238][ T10] usb 5-1: Manufacturer: syz [ 654.045249][ T10] usb 5-1: SerialNumber: syz [ 654.376572][T10869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 654.452452][T10869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 654.543015][T10869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 654.604111][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 654.677356][T10869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 655.290814][T10869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.440479][T10869] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.523738][ T978] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.524617][ T978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.550176][T11044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.582460][T11044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.645106][ T1790] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.645327][ T1790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.805741][T11044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.808064][T11044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.657794][ C1] usblp0: nonzero write bulk status received: -71 [ 656.717475][ T5895] usb 5-1: USB disconnect, device number 3 [ 656.769396][ T5895] usblp0: removed [ 657.953140][T10869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.149085][T11068] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 658.568644][T11067] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 658.631929][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 658.632005][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 659.226785][T10869] veth0_vlan: entered promiscuous mode [ 660.267808][T10869] veth1_vlan: entered promiscuous mode [ 660.509802][T10869] veth0_macvtap: entered promiscuous mode [ 660.532768][T10869] veth1_macvtap: entered promiscuous mode [ 660.596139][T10869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.627133][T10869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.658453][ T978] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.658721][ T978] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.658765][ T978] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.658805][ T978] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.564771][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1252'. [ 662.904476][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.904500][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.943694][ T36] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 663.739328][ T36] usb 10-1: config 1 interface 0 has no altsetting 0 [ 663.742428][ T36] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 663.742460][ T36] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.742483][ T36] usb 10-1: Product: syz [ 663.742500][ T36] usb 10-1: Manufacturer: syz [ 663.742517][ T36] usb 10-1: SerialNumber: syz [ 663.964508][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.964530][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.284691][ T36] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 665.238795][T11150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.262774][T11150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.479044][T11150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.479637][T11150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.629732][ C1] usblp0: nonzero write bulk status received: -71 [ 667.641549][ T36] usb 10-1: USB disconnect, device number 3 [ 668.206137][T11111] usblp0: removed [ 669.013770][T11178] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1266'. [ 669.553494][T11192] 9pnet_virtio: no channels available for device syz [ 669.665810][T11195] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 669.665874][T11195] overlayfs: overlapping lowerdir path [ 674.361058][ T5886] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 674.527375][ T5886] usb 5-1: config 1 interface 0 has no altsetting 0 [ 674.562690][ T5886] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 674.562726][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.562749][ T5886] usb 5-1: Product: syz [ 674.562765][ T5886] usb 5-1: Manufacturer: syz [ 674.562782][ T5886] usb 5-1: SerialNumber: syz [ 676.559449][T11225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.764210][ T5886] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 676.779657][T11225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.007333][T11225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.007948][T11225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.040074][ T3120] usb 5-1: USB disconnect, device number 4 [ 679.204705][T11221] usblp0: removed [ 683.105827][T11303] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 683.105857][T11303] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 683.159751][T11303] vhci_hcd vhci_hcd.0: Device attached [ 683.202749][T11309] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 683.202780][T11309] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 683.202838][T11309] vhci_hcd vhci_hcd.0: Device attached [ 683.256102][T11303] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11) [ 683.256134][T11303] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 683.256205][T11303] vhci_hcd vhci_hcd.0: Device attached [ 683.280289][T11303] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(13) [ 683.280371][T11303] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 683.602481][ T1237] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 684.243129][T11303] vhci_hcd vhci_hcd.0: Device attached [ 684.268172][T11303] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(20) [ 684.268204][T11303] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 684.269514][T11303] vhci_hcd vhci_hcd.0: Device attached [ 684.276783][T11303] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 684.278453][T11303] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 684.367201][T11309] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(16) [ 684.367232][T11309] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 684.367341][T11309] vhci_hcd vhci_hcd.0: Device attached [ 684.392182][T11322] vhci_hcd: connection closed [ 684.414735][T11317] vhci_hcd: connection closed [ 684.416324][T11305] vhci_hcd: connection reset by peer [ 684.416376][T11315] vhci_hcd: connection closed [ 684.438157][T11311] vhci_hcd: connection closed [ 684.478192][T11321] vhci_hcd: connection closed [ 684.531402][ T1111] vhci_hcd vhci_hcd.0: stop threads [ 684.559559][ T1111] vhci_hcd vhci_hcd.0: release socket [ 684.560082][ T1111] vhci_hcd vhci_hcd.0: disconnect device [ 684.562565][ T1111] vhci_hcd vhci_hcd.0: stop threads [ 684.562590][ T1111] vhci_hcd vhci_hcd.0: release socket [ 684.562658][ T1111] vhci_hcd vhci_hcd.0: disconnect device [ 684.621469][ T1111] vhci_hcd vhci_hcd.0: stop threads [ 684.621492][ T1111] vhci_hcd vhci_hcd.0: release socket [ 684.621562][ T1111] vhci_hcd vhci_hcd.0: disconnect device [ 684.626787][ T1111] vhci_hcd vhci_hcd.0: stop threads [ 684.626807][ T1111] vhci_hcd vhci_hcd.0: release socket [ 684.626876][ T1111] vhci_hcd vhci_hcd.0: disconnect device [ 684.641191][ T1111] vhci_hcd vhci_hcd.0: stop threads [ 684.641268][ T1111] vhci_hcd vhci_hcd.0: release socket [ 684.641430][ T1111] vhci_hcd vhci_hcd.0: disconnect device [ 684.644794][ T1111] vhci_hcd vhci_hcd.0: stop threads [ 684.644846][ T1111] vhci_hcd vhci_hcd.0: release socket [ 684.645008][ T1111] vhci_hcd vhci_hcd.0: disconnect device [ 685.216517][T11344] netlink: 'syz.0.1310': attribute type 1 has an invalid length. [ 686.239536][T11344] vlan2: entered allmulticast mode [ 686.239561][T11344] veth0_to_bond: entered allmulticast mode [ 691.259601][ T1237] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 696.588764][T11373] Bluetooth: hci4: command 0x0406 tx timeout [ 696.588811][T11373] Bluetooth: hci6: command 0x0406 tx timeout [ 697.159321][ T5799] usb usb34-port1: attempt power cycle [ 697.241006][T11399] netlink: 'syz.0.1323': attribute type 1 has an invalid length. [ 697.773038][ T5799] usb usb34-port1: unable to enumerate USB device [ 705.143820][T11455] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 707.648164][T11496] netlink: 'syz.5.1344': attribute type 4 has an invalid length. [ 708.555832][T11508] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 708.889199][T11507] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 713.249302][T11554] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 713.249332][T11554] Error validating options; rc = [-22] [ 718.578508][T11591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1366'. [ 723.527615][T11645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1380'. [ 723.763244][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 723.763319][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 727.737469][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 727.763481][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 727.770402][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 727.780213][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 727.804529][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 727.882478][T11700] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 727.882506][T11700] Error validating options; rc = [-22] [ 728.240122][ T5799] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 728.528550][ T5799] usb 5-1: Using ep0 maxpacket: 16 [ 728.530945][ T5799] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 728.530976][ T5799] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 728.531012][ T5799] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 728.531042][ T5799] usb 5-1: config 1 interface 0 has no altsetting 0 [ 728.535964][ T5799] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 728.535996][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.536024][ T5799] usb 5-1: Product: syz [ 728.536040][ T5799] usb 5-1: Manufacturer: syz [ 728.536056][ T5799] usb 5-1: SerialNumber: syz [ 728.794314][T11708] xfrm0 speed is unknown, defaulting to 1000 [ 729.013730][ T5799] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 730.096881][ T5803] Bluetooth: hci1: command tx timeout [ 730.475939][ T55] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.300815][ T5803] Bluetooth: hci1: command tx timeout [ 732.308658][T11708] chnl_net:caif_netlink_parms(): no params data found [ 732.673641][T11708] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.673828][T11708] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.674071][T11708] bridge_slave_0: entered allmulticast mode [ 732.713676][T11708] bridge_slave_0: entered promiscuous mode [ 732.747561][T11708] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.760328][T11708] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.760705][T11708] bridge_slave_1: entered allmulticast mode [ 732.799942][T11708] bridge_slave_1: entered promiscuous mode [ 732.854026][T11708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.866974][T11708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.926713][T11708] team0: Port device team_slave_0 added [ 732.930315][T11708] team0: Port device team_slave_1 added [ 733.813456][ T55] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.961483][T11708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 733.961510][T11708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.961542][T11708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.536645][ T5803] Bluetooth: hci1: command tx timeout [ 735.509397][T11708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.509416][T11708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.509447][T11708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.683779][T11781] netlink: 'syz.3.1408': attribute type 4 has an invalid length. [ 735.736271][T11789] netlink: 'syz.3.1408': attribute type 4 has an invalid length. [ 736.168546][ T55] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.038226][ T5803] Bluetooth: hci1: command tx timeout [ 737.109678][T11797] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 737.649247][ T55] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.814066][T11708] hsr_slave_0: entered promiscuous mode [ 737.822272][T11708] hsr_slave_1: entered promiscuous mode [ 737.823264][T11708] debugfs: 'hsr0' already exists in 'hsr' [ 737.823290][T11708] Cannot create hsr debugfs directory [ 737.944135][ T5805] usb 5-1: USB disconnect, device number 5 [ 738.009106][ T5805] usblp0: removed [ 739.239630][T11806] syz.3.1415 (11806) used greatest stack depth: 18528 bytes left [ 739.634003][T11822] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1422'. [ 741.631693][ T55] bridge_slave_1: left allmulticast mode [ 741.631724][ T55] bridge_slave_1: left promiscuous mode [ 741.631993][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.244437][ T55] bridge_slave_0: left allmulticast mode [ 745.244469][ T55] bridge_slave_0: left promiscuous mode [ 745.267949][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.792293][T11860] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 745.792315][T11860] Error validating options; rc = [-22] [ 746.182235][ T5799] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 746.374361][ T5799] usb 1-1: Using ep0 maxpacket: 16 [ 746.529750][ T5799] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 746.529774][ T5799] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 746.529792][ T5799] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 746.529812][ T5799] usb 1-1: config 1 interface 0 has no altsetting 0 [ 746.590484][ T5799] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 746.590518][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.590540][ T5799] usb 1-1: Product: syz [ 746.590555][ T5799] usb 1-1: Manufacturer: syz [ 746.590570][ T5799] usb 1-1: SerialNumber: syz [ 746.770702][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.856020][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.902995][ T55] bond0 (unregistering): Released all slaves [ 746.966212][ T5799] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 752.349340][ T55] hsr_slave_0: left promiscuous mode [ 752.402553][ T55] hsr_slave_1: left promiscuous mode [ 752.408368][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.408398][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.487778][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.488557][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.563061][T11860] usblp0:failed reading printer status (-110) [ 752.668337][ T5799] usb 1-1: USB disconnect, device number 4 [ 752.718234][ T5799] usblp0: removed [ 752.744425][ T55] veth1_macvtap: left promiscuous mode [ 752.744534][ T55] veth0_macvtap: left promiscuous mode [ 752.744794][ T55] veth1_vlan: left promiscuous mode [ 752.744971][ T55] veth0_vlan: left promiscuous mode [ 755.375428][T11991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1454'. [ 755.375448][T11991] openvswitch: netlink: Flow actions attr not present in new flow. [ 755.450217][ T55] team0 (unregistering): Port device team_slave_1 removed [ 755.522328][ T55] team0 (unregistering): Port device team_slave_0 removed [ 757.947002][T11708] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 759.057372][T11708] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 759.260587][T11708] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 759.478703][T11708] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 762.798796][T11708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.829353][T11708] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.847789][ T1790] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.848009][ T1790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.878511][ T1790] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.878648][ T1790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.988715][T11708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.147368][T11708] veth0_vlan: entered promiscuous mode [ 764.183489][T11708] veth1_vlan: entered promiscuous mode [ 764.293802][T11708] veth0_macvtap: entered promiscuous mode [ 764.329239][T11708] veth1_macvtap: entered promiscuous mode [ 764.404807][T11708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.450420][T11708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.490362][ T4242] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.495013][ T4242] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.495082][ T4242] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.495146][ T4242] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.915970][ T119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.915995][ T119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.704532][T11931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.704567][T11931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.889930][T12148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 770.001416][ T5803] Bluetooth: hci0: command 0x0406 tx timeout [ 773.540143][T10063] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 773.563493][T10063] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 773.570402][T10063] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 773.589074][T10063] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 773.590733][T10063] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 773.753520][T12168] xfrm0 speed is unknown, defaulting to 1000 [ 774.973945][T12168] chnl_net:caif_netlink_parms(): no params data found [ 775.825234][ T5803] Bluetooth: hci2: command tx timeout [ 777.252819][T12168] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.284361][T12168] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.284887][T12168] bridge_slave_0: entered allmulticast mode [ 777.286967][T12168] bridge_slave_0: entered promiscuous mode [ 777.322810][T12213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.323611][T12168] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.324277][T12168] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.324534][T12168] bridge_slave_1: entered allmulticast mode [ 777.386112][T12168] bridge_slave_1: entered promiscuous mode [ 777.903147][T12168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.176514][ T5803] Bluetooth: hci2: command tx timeout [ 778.390403][T12218] overlayfs: missing 'lowerdir' [ 780.345382][ T5803] Bluetooth: hci2: command tx timeout [ 780.959705][T12168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.216305][T12168] team0: Port device team_slave_0 added [ 781.251265][T12168] team0: Port device team_slave_1 added [ 781.283523][ T3120] libceph: connect (1)[c::]:6789 error -101 [ 781.287689][ T3120] libceph: mon0 (1)[c::]:6789 connect error [ 781.306456][T12234] ceph: No mds server is up or the cluster is laggy [ 781.349272][T12168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.349291][T12168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.349322][T12168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.355578][T12168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.355621][T12168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.355697][T12168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.730427][ T3120] libceph: connect (1)[c::]:6789 error -101 [ 781.730575][ T3120] libceph: mon0 (1)[c::]:6789 connect error [ 782.199089][T12168] hsr_slave_0: entered promiscuous mode [ 782.200453][T12168] hsr_slave_1: entered promiscuous mode [ 782.201377][T12168] debugfs: 'hsr0' already exists in 'hsr' [ 782.201402][T12168] Cannot create hsr debugfs directory [ 782.392350][T12248] overlayfs: failed to clone upperpath [ 782.396547][T12257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.568926][ T5803] Bluetooth: hci2: command tx timeout [ 786.359902][T12300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.774511][T12309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1514'. [ 786.927875][ T5805] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 786.965232][T12311] overlayfs: failed to clone upperpath [ 787.933831][ T5805] usb 3-1: unable to get BOS descriptor or descriptor too short [ 787.939792][ T5805] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 787.939833][ T5805] usb 3-1: can't read configurations, error -71 [ 788.845658][T12345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 788.962694][T12349] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1524'. [ 790.296480][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 790.296568][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 796.709332][T12439] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1545'. [ 797.237063][T12434] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 797.237090][T12434] Error validating options; rc = [-22] [ 797.614889][ T6933] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 797.831345][ T6933] usb 3-1: Using ep0 maxpacket: 16 [ 797.834467][ T6933] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 797.834501][ T6933] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 797.834528][ T6933] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 797.834558][ T6933] usb 3-1: config 1 interface 0 has no altsetting 0 [ 797.844136][ T6933] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 797.844210][ T6933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.844279][ T6933] usb 3-1: Product: syz [ 797.844323][ T6933] usb 3-1: Manufacturer: syz [ 797.844360][ T6933] usb 3-1: SerialNumber: syz [ 797.966422][ T36] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 798.148200][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 798.150827][ T36] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 798.181804][ T36] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 798.181837][ T36] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 798.181860][ T36] usb 1-1: Product: syz [ 798.181876][ T36] usb 1-1: Manufacturer: syz [ 798.181893][ T36] usb 1-1: SerialNumber: syz [ 798.318763][ T36] usb 1-1: config 0 descriptor?? [ 798.366319][ T6933] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 798.372264][T12452] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 798.405786][ T36] hub 1-1:0.0: bad descriptor, ignoring hub [ 798.405815][ T36] hub 1-1:0.0: probe with driver hub failed with error -5 [ 799.263930][ T6933] usb 1-1: USB disconnect, device number 5 [ 799.598645][T12479] overlayfs: failed to clone upperpath [ 799.951339][T12483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1555'. [ 802.616529][T12168] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 803.705678][T12168] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 803.798704][T12521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1561'. [ 803.833714][T12168] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 803.897871][T12168] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 803.944796][T12433] usblp0:failed reading printer status (-110) [ 804.148083][ T3120] usb 3-1: USB disconnect, device number 4 [ 804.229240][ T3120] usblp0: removed [ 804.688922][T12544] sg_write: data in/out 476/14 bytes for SCSI command 0x0-- guessing data in; [ 804.688922][T12544] program syz.2.1565 not setting count and/or reply_len properly [ 807.111333][T12168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.297983][T12168] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.326446][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.326587][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.377405][T11931] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.377899][T11931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.415209][T12549] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1566'. [ 807.418772][T12550] netlink: 'syz.5.1567': attribute type 1 has an invalid length. [ 808.326571][T12565] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1571'. [ 808.773016][T12168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.637720][ T5457] ODEBUG: Out of memory. ODEBUG disabled [ 809.951223][ C0] ------------[ cut here ]------------ [ 809.951240][ C0] 1 [ 809.951257][ C0] WARNING: kernel/time/timer.c:716 at stub_timer+0xa/0x20, CPU#0: ktimers/0/16 [ 809.951454][ C0] Modules linked in: [ 809.951494][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 809.951521][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 809.951541][ C0] RIP: 0010:stub_timer+0xa/0x20 [ 809.951565][ C0] Code: 0f 94 c0 5b 41 5e e9 55 ed 74 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 809.951586][ C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246 [ 809.951607][ C0] RAX: ffffffff81b095e9 RBX: 0000000080000000 RCX: ffff88801caa8000 [ 809.951626][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 809.951641][ C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100 [ 809.951656][ C0] R10: dffffc0000000000 R11: ffffffff81b095e0 R12: 0000000000000000 [ 809.951673][ C0] R13: 000000010000b53d R14: 1ffff9200002af4c R15: ffff88805d06cc10 [ 809.951691][ C0] FS: 0000000000000000(0000) GS:ffff888126343000(0000) knlGS:0000000000000000 [ 809.951710][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 809.951726][ C0] CR2: 000020000054f000 CR3: 0000000036f22000 CR4: 00000000003526f0 [ 809.951747][ C0] Call Trace: [ 809.951760][ C0] [ 809.951769][ C0] call_timer_fn+0x192/0x640 [ 809.951796][ C0] ? __pfx_stub_timer+0x10/0x10 [ 809.951817][ C0] ? call_timer_fn+0xd4/0x640 [ 809.951839][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 809.951860][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 809.951927][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 809.952051][ C0] ? __pfx_stub_timer+0x10/0x10 [ 809.952076][ C0] __run_timer_base+0x6a3/0x9f0 [ 809.952136][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 809.952169][ C0] ? rt_spin_lock+0x1e0/0x400 [ 809.952214][ C0] run_timer_softirq+0xb7/0x170 [ 809.952251][ C0] handle_softirqs+0x1de/0x6f0 [ 809.952315][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 809.952356][ C0] run_ktimerd+0x69/0x100 [ 809.952394][ C0] smpboot_thread_fn+0x541/0xa50 [ 809.952433][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 809.952481][ C0] kthread+0x388/0x470 [ 809.952507][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 809.952541][ C0] ? __pfx_kthread+0x10/0x10 [ 809.952568][ C0] ret_from_fork+0x51e/0xb90 [ 809.952622][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 809.952654][ C0] ? __switch_to+0xc7d/0x1450 [ 809.952714][ C0] ? __pfx_kthread+0x10/0x10 [ 809.952742][ C0] ret_from_fork_asm+0x1a/0x30 [ 809.952800][ C0] [ 809.952820][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 809.952838][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 809.952865][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 809.952879][ C0] Call Trace: [ 809.952888][ C0] [ 809.952897][ C0] vpanic+0x56c/0xa60 [ 809.952940][ C0] ? __pfx__printk+0x10/0x10 [ 809.952967][ C0] ? __pfx_vpanic+0x10/0x10 [ 809.953000][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 809.953053][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 809.953096][ C0] panic+0xc5/0xd0 [ 809.953140][ C0] ? __pfx_panic+0x10/0x10 [ 809.953187][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 809.953216][ C0] __warn+0x315/0x4f0 [ 809.953250][ C0] ? stub_timer+0xa/0x20 [ 809.953272][ C0] ? stub_timer+0xa/0x20 [ 809.953295][ C0] __report_bug+0x29a/0x540 [ 809.953391][ C0] ? stub_timer+0xa/0x20 [ 809.953413][ C0] ? __pfx___report_bug+0x10/0x10 [ 809.953441][ C0] ? add_lock_to_list+0xc7/0x100 [ 809.953472][ C0] ? lockdep_unlock+0x5d/0xd0 [ 809.953504][ C0] ? __lock_acquire+0x146e/0x2cf0 [ 809.953539][ C0] ? stub_timer+0xa/0x20 [ 809.953560][ C0] report_bug+0x16a/0x220 [ 809.953591][ C0] ? stub_timer+0xa/0x20 [ 809.953609][ C0] ? stub_timer+0xc/0x20 [ 809.953629][ C0] handle_bug+0x98/0x200 [ 809.953691][ C0] exc_invalid_op+0x1a/0x50 [ 809.953727][ C0] asm_exc_invalid_op+0x1a/0x20 [ 809.953766][ C0] RIP: 0010:stub_timer+0xa/0x20 [ 809.953789][ C0] Code: 0f 94 c0 5b 41 5e e9 55 ed 74 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 809.953809][ C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246 [ 809.953830][ C0] RAX: ffffffff81b095e9 RBX: 0000000080000000 RCX: ffff88801caa8000 [ 809.953849][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 809.953864][ C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100 [ 809.953879][ C0] R10: dffffc0000000000 R11: ffffffff81b095e0 R12: 0000000000000000 [ 809.953896][ C0] R13: 000000010000b53d R14: 1ffff9200002af4c R15: ffff88805d06cc10 [ 809.953920][ C0] ? __pfx_stub_timer+0x10/0x10 [ 809.953943][ C0] ? stub_timer+0x9/0x20 [ 809.953971][ C0] ? stub_timer+0x9/0x20 [ 809.953989][ C0] call_timer_fn+0x192/0x640 [ 809.954013][ C0] ? __pfx_stub_timer+0x10/0x10 [ 809.954032][ C0] ? call_timer_fn+0xd4/0x640 [ 809.954055][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 809.954076][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 809.954121][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 809.954159][ C0] ? __pfx_stub_timer+0x10/0x10 [ 809.954183][ C0] __run_timer_base+0x6a3/0x9f0 [ 809.954237][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 809.954270][ C0] ? rt_spin_lock+0x1e0/0x400 [ 809.954313][ C0] run_timer_softirq+0xb7/0x170 [ 809.954349][ C0] handle_softirqs+0x1de/0x6f0 [ 809.954394][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 809.954430][ C0] run_ktimerd+0x69/0x100 [ 809.954467][ C0] smpboot_thread_fn+0x541/0xa50 [ 809.954505][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 809.954553][ C0] kthread+0x388/0x470 [ 809.954579][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 809.954614][ C0] ? __pfx_kthread+0x10/0x10 [ 809.954640][ C0] ret_from_fork+0x51e/0xb90 [ 809.954678][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 809.954710][ C0] ? __switch_to+0xc7d/0x1450 [ 809.954745][ C0] ? __pfx_kthread+0x10/0x10 [ 809.954771][ C0] ret_from_fork_asm+0x1a/0x30 [ 809.954814][ C0] [ 809.955422][ C0] Kernel Offset: disabled