last executing test programs: 10m49.343644315s ago: executing program 32 (id=2202): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f1ecd65f3ff9dd4a7260f01c9f3360f30670f01ca0f01fa8146051900baf80c66b8fa8ecd8c66efbafc0cb8f64aefdbe03e26660f38825f47", 0x3a}], 0x1, 0x5b, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f00000001c0)={0xdb, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000340)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r7, &(0x7f00000004c0)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x8, &(0x7f00000194c0)=0x80000000000003) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m6.70036203s ago: executing program 33 (id=2448): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b", 0x1}], 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0xd) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) write$cgroup_devices(r4, 0x0, 0x9) write(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 8m56.1887973s ago: executing program 34 (id=2497): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f00000001c0)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire]}) openat(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f0000000540)}) 8m55.274563884s ago: executing program 2 (id=2507): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc080) mount$9p_fd(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x0, &(0x7f0000002a80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 8m55.059253095s ago: executing program 2 (id=2509): r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x1, 0x2) close(0x3) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)='V', 0x1}], 0x1) 8m54.557775557s ago: executing program 2 (id=2511): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/sda\x00', 0x42, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000340)=0x5) 8m54.098146213s ago: executing program 2 (id=2512): syz_mount_image$ext4(&(0x7f0000000d00)='ext4\x00', &(0x7f0000000d40)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@data_writeback}, {@grpquota}]}, 0x4, 0x4ed, &(0x7f0000001580)="$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") r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000001000)=0x7, 0x4) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=""/129, 0xbc}, 0x100db30}], 0x1, 0x40002062, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x14, &(0x7f0000001340)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x40000000, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x214802, &(0x7f0000000480)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./sys\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) write(r1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000f80)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x100000000000000, 0x0, 0x400}, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000ac0)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000b00)=@loop={'/dev/loop', 0x0}, &(0x7f0000000b40)='./bus\x00', 0x0, 0x5000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = open(&(0x7f0000000b80)='./bus\x00', 0x0, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000bc0)=0x3f) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x42, 0xc8) pwrite64(r3, &(0x7f0000000c80)='\"', 0x1, 0x4fed0) 8m53.073533528s ago: executing program 2 (id=2516): r0 = socket$inet(0x2, 0x1, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000030000000000000003000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0xc) 8m52.374061129s ago: executing program 2 (id=2520): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000380)={r0, &(0x7f0000000000)='usrquota', 0x105000, &(0x7f0000000100)={@_ha_fsid={[0x53b4bd78, 0x2]}, {0x8, 0x7, 0x5, 0x5}}, 0x1, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000340)=0x10000}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x18804, &(0x7f0000001080)={0x2, 0x4e24, @empty}, 0x10) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04ff03"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x280440e, &(0x7f00000027c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@test_dummy_encryption_v1}, {@nodelalloc}, {@errors_continue}, {@grpid}, {@lazytime}, {@nojournal_checksum}, {@nodioread_nolock}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7fffffff}}, {@usrquota}, {@nogrpid}]}, 0x1, 0xbda, &(0x7f0000000480)="$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") capset(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)={0x200000, 0x200000}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1720}], 0x1) 8m51.902255547s ago: executing program 35 (id=2520): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000380)={r0, &(0x7f0000000000)='usrquota', 0x105000, &(0x7f0000000100)={@_ha_fsid={[0x53b4bd78, 0x2]}, {0x8, 0x7, 0x5, 0x5}}, 0x1, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000340)=0x10000}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x18804, &(0x7f0000001080)={0x2, 0x4e24, @empty}, 0x10) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04ff03"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x280440e, &(0x7f00000027c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@test_dummy_encryption_v1}, {@nodelalloc}, {@errors_continue}, {@grpid}, {@lazytime}, {@nojournal_checksum}, {@nodioread_nolock}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7fffffff}}, {@usrquota}, {@nogrpid}]}, 0x1, 0xbda, &(0x7f0000000480)="$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") capset(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)={0x200000, 0x200000}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1720}], 0x1) 8m44.281943133s ago: executing program 6 (id=2439): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x280440e, &(0x7f0000000080)={[{@data_err_ignore}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@errors_remount}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@minixdf}, {@usrquota}, {@errors_remount}, {@jqfmt_vfsold}, {@nodioread_nolock}, {@mb_optimize_scan}]}, 0x1, 0xbdb, &(0x7f0000000b80)="$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") mount$bind(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000900)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000940)='./file0/../file0\x00', &(0x7f0000000980)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000009c0)='./file0/../file0\x00', &(0x7f0000000a00)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000a40)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000a80)='.\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002c40)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002c80)={0x2020}, 0x2020) 8m43.72426504s ago: executing program 6 (id=2545): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x200000b, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x100000000e2) keyctl$clear(0x3, 0xfffffffffffffffd) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x15, 0x3, &(0x7f0000000440)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x12}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) accept4$inet6(r5, 0x0, 0x0, 0x80000) timer_create(0x3, 0x0, &(0x7f00000004c0)) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000540)='./bus\x00', 0x90, &(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=0x0], 0x0, 0x6a2, &(0x7f0000000600)="$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") ptrace$setregs(0xd, r6, 0x5bd, &(0x7f0000000cc0)) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d2, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000580)=ANY=[@ANYBLOB=',,'], 0x6a) 8m43.005956183s ago: executing program 6 (id=2551): syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x2b8, &(0x7f0000000d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000800)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000900)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r1, &(0x7f00000009c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x6) add_key(&(0x7f0000000a40)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000bc0)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = fsopen(&(0x7f0000000c00)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xa) fchdir(r4) setgroups(0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x410, &(0x7f0000001040)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@default_permissions}, {@default_permissions}], [{@dont_measure}, {@pcr={'pcr', 0x3d, 0x3f}}, {@seclabel}, {@smackfsroot={'smackfsroot', 0x3d, ')\xb3\\#c\\-^}'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fowner_eq}, {@euid_gt}]}}) 8m42.54589444s ago: executing program 36 (id=2551): syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x2b8, &(0x7f0000000d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000800)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000900)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r1, &(0x7f00000009c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x6) add_key(&(0x7f0000000a40)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000bc0)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = fsopen(&(0x7f0000000c00)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xa) fchdir(r4) setgroups(0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x410, &(0x7f0000001040)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@default_permissions}, {@default_permissions}], [{@dont_measure}, {@pcr={'pcr', 0x3d, 0x3f}}, {@seclabel}, {@smackfsroot={'smackfsroot', 0x3d, ')\xb3\\#c\\-^}'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fowner_eq}, {@euid_gt}]}}) 8m38.334689779s ago: executing program 7 (id=2568): unshare(0x40400) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x40) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x16, 0x10000002, 0x4, 0xffefffff, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80042, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 8m38.097406753s ago: executing program 7 (id=2569): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, 0x0, 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x0, 0x0}, 0x10) 8m36.359919711s ago: executing program 7 (id=2578): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='mnt\x00', 0x1f9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mount(0x0, &(0x7f0000000800)='mnt\x00', &(0x7f0000000840)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='mnt/ttyUSB0\x00', 0x181102, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000080)='mnt\x00', 0x400, &(0x7f00000000c0)=ANY=[], 0x0, 0x1c4, &(0x7f0000000100)="$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") sendmsg$inet(0xffffffffffffffff, 0x0, 0x20040010) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000680)={0x9, 0x1, 0xffff, 0x47, 0x1, "8ea3d8af90891b527e4818bf7ba8ab91b0479a"}) 8m35.738650414s ago: executing program 4 (id=2583): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@base={0x9, 0x1, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0xffffffff}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x1, 0x15, &(0x7f0000001640)=ANY=[@ANYBLOB="1800000000000000000000000000000061180000000000007a0af8ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff8500000001000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={r2, 0x0, 0xe, 0x0, &(0x7f00000017c0)='\x00'/14, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m35.559205152s ago: executing program 4 (id=2585): socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x8, r2) wait4(r2, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 8m35.177301831s ago: executing program 4 (id=2586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2200000, &(0x7f0000000080)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@data_err_ignore}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x7, 0x572, &(0x7f0000000a80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./file1\x00', 0x105042, 0x83) writev(r1, &(0x7f0000001040)=[{&(0x7f0000001080)="10", 0x3fe00}], 0x1) openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file1\x00', 0x101242, 0x220) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x2c8, 0x0, 0xffffffff, 0x228, 0x370, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 8m34.625174297s ago: executing program 7 (id=2590): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x404, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r1, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x152) 8m34.583812601s ago: executing program 4 (id=2591): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000000240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002e00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000002e40)='./debug\x00', &(0x7f0000002e80)='debugfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000700)='./dev\x00', &(0x7f0000000740)='devtmpfs\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x44000) r0 = syz_open_procfs(0x0, &(0x7f0000000c00)='mounts\x00') mount$bind(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000d40)='.\x00', &(0x7f0000000d80)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000000dc0)={0x2020}, 0x2020) 8m34.418183598s ago: executing program 7 (id=2592): syz_usb_connect(0x2, 0xb3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e010000"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 8m34.244476266s ago: executing program 4 (id=2593): iopl(0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x8040480) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f0000000280)="$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") r0 = open(&(0x7f0000000f80)='./file1\x00', 0x66842, 0x21) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) clock_nanosleep(0x2, 0x1, &(0x7f0000000e40), 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000fc0)={0x1, 0x0, 0x1000, 0x10, &(0x7f0000001040)="c2caeea9f5984b46c488e84c742ffde5", 0x0, 0x0, 0x0}) 8m33.249025537s ago: executing program 7 (id=2596): capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x101042, 0xa) ioctl(r0, 0x1, &(0x7f0000000140)) 8m33.210119021s ago: executing program 4 (id=2597): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000880)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000940)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000980)=""/222}, 0x78) 8m32.712170452s ago: executing program 37 (id=2596): capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x101042, 0xa) ioctl(r0, 0x1, &(0x7f0000000140)) 8m32.690108984s ago: executing program 38 (id=2597): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000880)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000940)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000980)=""/222}, 0x78) 3m44.498500256s ago: executing program 3 (id=3467): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c80)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000cc0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000d00)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000d40), 0x0, 0x0) read$msr(r3, &(0x7f0000000d80)=""/102392, 0x18ff8) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x5453, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000019dc0)=0x8) pwritev(0xffffffffffffffff, &(0x7f0000019e00), 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000019e40)={0xa, 0x9004, 0x0, @local, 0x9}, 0x1c) writev(r4, &(0x7f0000019e80)=[{&(0x7f0000019ec0)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100050808004149014006040800", 0x58}], 0x1) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000480)=0x100000001) r7 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004018) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a40)={0xffffffffffffffff, &(0x7f0000000a80), 0x0}, 0x20) 3m43.022815975s ago: executing program 3 (id=3468): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) mkdir(&(0x7f0000000500)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680), 0x8, &(0x7f00000006c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000700)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f0000000740)='./file1\x00', 0x800, 0x1) r2 = open(&(0x7f0000000780)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f00000007c0)='./bus\x00') linkat(r2, &(0x7f0000000800)='./file1\x00', r2, &(0x7f0000000880)='./file0\x00', 0x1000) unlink(&(0x7f00000008c0)='./file1\x00') open(&(0x7f0000000900)='./file0\x00', 0x400, 0x43) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) 3m37.885009877s ago: executing program 3 (id=3473): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c80)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000cc0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000d00)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000d40), 0x0, 0x0) read$msr(r3, &(0x7f0000000d80)=""/102392, 0x18ff8) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x5453, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000019dc0)=0x8) pwritev(0xffffffffffffffff, &(0x7f0000019e00), 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000019e40)={0xa, 0x9004, 0x0, @local, 0x9}, 0x1c) writev(r4, &(0x7f0000019e80)=[{&(0x7f0000019ec0)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100050808004149014006040800", 0x58}], 0x1) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000480)=0x100000001) r7 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004018) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd9a, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2000}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a40)={r8, &(0x7f0000000a80), 0x0}, 0x20) 3m36.054777993s ago: executing program 3 (id=3477): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e04}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000021c0), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002240)=0x6) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/177, 0xb1}], 0x38) 3m31.758164489s ago: executing program 3 (id=3484): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) mkdir(&(0x7f0000000500)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680), 0x8, &(0x7f00000006c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000700)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f0000000740)='./file1\x00', 0x800, 0x1) r2 = open(&(0x7f0000000780)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f00000007c0)='./bus\x00') linkat(r2, &(0x7f0000000800)='./file1\x00', r2, &(0x7f0000000880)='./file0\x00', 0x1000) unlink(&(0x7f00000008c0)='./file1\x00') open(&(0x7f0000000900)='./file0\x00', 0x400, 0x43) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8000) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3m29.548358323s ago: executing program 3 (id=3488): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f1ecd65f3ff9dd4a7260f01c9f3360f30670f01ca0f01fa8146051900baf80c66b8fa8ecd8c66efbafc0cb8f64aefdbe03e26660f38825f47", 0x3a}], 0x1, 0x5b, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f00000001c0)={0xdb, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000340)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r8, &(0x7f00000004c0)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000019500)='./dev\x00', &(0x7f0000019540)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000019580)='./dev\x00', 0x121181, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000195c0)={0x0, 0x0, &(0x7f0000019600)={&(0x7f0000019640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000196c0)={0x0, 0x0, &(0x7f0000019700)={&(0x7f0000019740)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x80000002, 0x9, 0xfffffffffffffffd, 0x80000000, 0x2, 0x0, 0x4002004c4, 0xfe6, 0x45c5, 0x0, 0x8001, 0x102, 0x3, 0x2000000000000000, 0x80000004000000, 0xc], 0x5f000, 0x12d7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m14.362055384s ago: executing program 39 (id=3488): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f1ecd65f3ff9dd4a7260f01c9f3360f30670f01ca0f01fa8146051900baf80c66b8fa8ecd8c66efbafc0cb8f64aefdbe03e26660f38825f47", 0x3a}], 0x1, 0x5b, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f00000001c0)={0xdb, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000340)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r8, &(0x7f00000004c0)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000019500)='./dev\x00', &(0x7f0000019540)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000019580)='./dev\x00', 0x121181, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000195c0)={0x0, 0x0, &(0x7f0000019600)={&(0x7f0000019640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000196c0)={0x0, 0x0, &(0x7f0000019700)={&(0x7f0000019740)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x80000002, 0x9, 0xfffffffffffffffd, 0x80000000, 0x2, 0x0, 0x4002004c4, 0xfe6, 0x45c5, 0x0, 0x8001, 0x102, 0x3, 0x2000000000000000, 0x80000004000000, 0xc], 0x5f000, 0x12d7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 33.162109145s ago: executing program 8 (id=3709): preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xb2e45000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000000200)=""/102368, 0x18fe0) gettid() timer_create(0x0, 0x0, &(0x7f0000019240)) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0xfd01}, 0x4) syz_emit_ethernet(0x1d, &(0x7f0000019200)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019340)={0x11, 0x8, &(0x7f0000019400)=ANY=[@ANYBLOB], &(0x7f0000019440)='syzkaller\x00', 0x3, 0x0, 0x0, 0x7376c40bedd761a3, 0xa}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) pipe(&(0x7f0000019640)={0xffffffffffffffff}) close(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x801, &(0x7f0000019740)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@privport}, {@directio}, {@aname={'aname', 0x3d, '$'}}]}}) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000197c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000019800)='./sys\x00', &(0x7f0000019840)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000019880)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r5, &(0x7f00000198c0)='n', 0x1) 32.132982249s ago: executing program 5 (id=3710): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='100', 0x3) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000440), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x39) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(r1, &(0x7f0000000500)={'syz1\x00', {0x8000}, 0x0, [0x7, 0x0, 0x0, 0x4b, 0x0, 0xae17, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0xfffffffd, 0x1000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x3, 0x0, 0x487, 0xd6, 0x0, 0x0, 0x7b, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x52, 0xffffffff, 0x0, 0x0, 0xc, 0x1002, 0x14], [0x0, 0xffffffff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x2, 0x8001, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000, 0x7, 0x0, 0x80, 0x0, 0x0, 0x1, 0x10001, 0x27], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x403, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xe8c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x3, 0xffffffff, 0x5, 0x0, 0x401, 0x806, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x5, 0xff, 0x40, 0x0, 0x0, 0x28000000, 0x0, 0xffffaed9, 0x0, 0x0, 0x2000000], [0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x80000, 0x7, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0xffffffff, 0xff, 0x0, 0x0, 0x7, 0xfffffffe, 0x3, 0x2, 0x0, 0x0, 0x0, 0x400001, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) 27.553251344s ago: executing program 9 (id=3714): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x5, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x9, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x0, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x9, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x8, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x8, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x3, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,']) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000020603000000000009"], 0x2c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000120001000000", @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 27.512474968s ago: executing program 5 (id=3715): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) mkdir(&(0x7f0000000500)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680), 0x8, &(0x7f00000006c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000740)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000780)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f00000007c0)='./bus\x00') linkat(r1, &(0x7f0000000800)='./file1\x00', r1, &(0x7f0000000880)='./file0\x00', 0x1000) unlink(&(0x7f00000008c0)='./file1\x00') open(&(0x7f0000000900)='./file0\x00', 0x400, 0x43) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8000) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 26.077951134s ago: executing program 8 (id=3717): setns(0xc9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000019640), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r4, &(0x7f0000000500)=""/102392, 0x18ff8) socket(0x11, 0x80a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000019540)='./sys\x00', &(0x7f0000019580)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000019600)='wwnn=0x1000000010000001,', 0x18) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000040)={{0x0, 0x70000, 0x0, 0x9b, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0xfd}, {0x0, 0x8e34dcfe457b01f9, 0x0, 0x83, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xbe}, {0x0, 0x30000, 0x0, 0x94, 0x1, 0x0, 0x1, 0x1}, {0xf000, 0xffff, 0xd, 0x93, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x94, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7d}, {0x0, 0x54000, 0xf, 0xc, 0x5, 0x0, 0x1, 0x1}, {0x25000, 0x50000, 0x10, 0x8b, 0x1, 0x0, 0x1, 0x1, 0x9}, {0x0, 0x2000, 0x0, 0x83, 0x1, 0x2, 0x1, 0x7, 0x0, 0x2}, {}, {0x6000}, 0x10, 0x0, 0xddd80000, 0x30, 0x3, 0x0, 0xfe000000}) 23.581025647s ago: executing program 5 (id=3719): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000000c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000019780)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x22, 0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f00000006c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000700)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000740), 0x0, 0x0) read$msr(r6, &(0x7f0000000780)=""/102392, 0x18ff8) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x1a}}}, &(0x7f00000002c0)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000300)={0x0, 0x1, 0x1, 0x3, 0x256}, &(0x7f0000000380)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3ca5, 0x40000, 0x0, 0x14a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd93e, 0x8000, 0x2, 0x363, 0x0, r0}}], 0x1, &(0x7f0000000600)={0x2e, 0x44, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 22.120463155s ago: executing program 9 (id=3720): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f1ecd65f3ff9dd4a7260f01c9f3360f30670f01ca0f01fa8146051900baf80c66b8fa8ecd8c66efbafc0cb8f64aefdbe03e26660f38825f47", 0x3a}], 0x1, 0x5b, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f00000001c0)={0xdb, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000340)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000440)=0x6) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r8, &(0x7f00000004c0)=""/102392, 0x18ff8) sched_setaffinity(r7, 0x8, &(0x7f00000194c0)=0x80000000000003) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000019500)='./dev\x00', &(0x7f0000019540)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000019580)='./dev\x00', 0x121181, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000195c0)={0x0, 0x0, &(0x7f0000019600)={&(0x7f0000019640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000196c0)={0x0, 0x0, &(0x7f0000019700)={&(0x7f0000019740)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x80000002, 0x9, 0xfffffffffffffffd, 0x80000000, 0x2, 0x0, 0x4002004c4, 0xfe6, 0x45c5, 0x0, 0x8001, 0x102, 0x3, 0x2000000000000000, 0x80000004000000, 0xc], 0x5f000, 0x12d7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22.107283166s ago: executing program 0 (id=3721): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x22052, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x1, '\x00', 0xc94}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20.856362004s ago: executing program 5 (id=3722): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000003c00)=""/24, 0x18}], 0xa}, 0x40000180) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000440), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xd01c4813, 0x0) 18.151701848s ago: executing program 9 (id=3723): socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000280)={0x1, 0x0, 0x10001, 0x4}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000002c0)={@multicast1, @local}, 0xc) syz_mount_image$hfsplus(&(0x7f0000000340), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6c733d64656661756c742c6465636f6d706f73652c706172743d3078303030303030303030303030303030392c706172743d3078303030303030303030303030303030392c006009785eda8b7d61e025ecbde093924e76933b3a39ae5392c9347cd15ff5913db02bfa9d2b522770566b0bc301e6385d7e3a4dc76bfe187361dfd218ca7dfa8a6440fb5b33ac0a14fa09e7749b848c65db2fdefd28f9017f1c427b3b93cc682e82b107c47e1995b464c3067a722b84f8b512b24ee9cf39c96acf157e7b15f4a534feb85bce7dce195b0f50711830a1f42d3d3abbe154bd6707bd286e5decea1d0ee56db2c0516dd06ded5e524d5bfced14e4b61d3611b475c9ed41e43a72dab99647adca9d6911"], 0x5, 0x5ea, &(0x7f0000000580)="$eJzs3U1vG8cdB+Df0pJsuqjDJHaSFi0q2IcWMWqLYuLoUKBuURQ6BEWAXnLJQbBpWzCtBBJTKEFR2H299hskRSGfe+qh6MFAe+5HqIAecijQu24udrmUGEuRpVg2qfh5gOHMcHZnZ/7eHXGXMBjgubX4bqYfpMjixbfXy/rmRqe3udG5MywnOZmkkUwNshQrSTGdXM0g5Rvlm3V3xRcd571P3lr4rH3/3qA2Vadq+8Z++x3M3TplNsmJOj+q/q49cX/F9gzLgF0YBg7G7eEudw+z+xNet8AkKAZ/N3dpJaeTnKo/B6ReHRrPdnRH71CrHAAAABxTL2xlK+s5M+5xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHFS//5/UafGsDybYvj7/zP1e6nLx9qDcQ8AAAAAAAAAAI7Ad7aylfWcGdYfFtV3/uerytnq9Wv5MGvpZjWXsp6l9NPPatpJWiMdzawv9fur7QPsOb/nnvPPZr4AAAAAAAAA8BX16yzufP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACToEhODLIqnR2WW2lMJTmVZKbc7m7y92H5OHsw7gEAAADAM/DCVraynjPD+sOiuud/pbrvP5UPs5J+ltNPL91cr54FDO76G5sbnd7mRudOmXb3+6P/HWoYVY8ZPHvY+8hz1RbnqvY/zySL+Wl+nouZzTtZzXJ+kaX0081sflKVllKkVT+9aA3Hufd4r36u9s7jxvpaNZJmbmS5GtulXMv76eV6GtUcqm32P+K9MjrFD2sHjNH1Oi9n9Mc6nwytKiLT2xGZq2NfRuPF/SNxyPPk0SO109h+BnX2KcT8dJ2Xsf79RMd8fuTse2X/SCTn//Ptv97qrdy+dWPt4uRM6Ut6NBKdkUi8+lxFYqaOxmAVHa6Wpcevluerfc9kOT/L+7mebt7MQt7MfN7IG5nLQq6MxPXc46+1m0kOc61d+F5daCb5Q51PhjKuL47EdXSla1Vto+/sROmlo1+Rpr5ZF8pj/KbOJ8OjkWiPROLl/SPxp4fl61pv5fbqraUPDni879Z5edn+bqLW5vJ8ean8x6pqnz87yraX92xrV21nt9sau9rO/fvrddvjrtSZ+jPc7p7mq7ZX92zrVG2vjbTt9SkHgIl3+vXTM83/Nv/V/LT52+at5tunfnxy4eS3ZjL9z6m/nfhL437jB8Xr+TS/2rn/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvry1jz6+vdTrdVcVFI5tYao+mydlPF+FwpgXJuCpu9y/88HltY8+/v7ynaWb3ZvdlU6nfWV+4crC/JXLN5Z73bnB67iHCTwFO3/0xz0SAAAAAAAAAAAA4KCexX8nGPccAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgONt8d1MP0iR9tylubK+udHplWlY3tlyKkkjSfHLpPhHcjWDlNZId8UXHee9T95a+Kx9/95OX1PD7Rv77Xcwd+uU2SQn6vyo+rv2xP0V2zMsA3ZhGDgYt/8HAAD//6ulC6Y=") r2 = syz_open_procfs(0x0, &(0x7f0000000b80)='net/dev\x00') pread64(r2, &(0x7f0000000bc0)=""/102356, 0x18fd4, 0x143) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0xc040400) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r3, 0x20, &(0x7f00000003c0)={0x0, 0x47, 0x0, 0x0}}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x46, &(0x7f0000019c00)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f000001bf40)=[{{&(0x7f0000019c40)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f000001bec0), 0x0, 0x0, 0xfffffffffffffee8}}], 0x1, 0x20000015) pipe2$watch_queue(0x0, 0x80) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 18.108214592s ago: executing program 1 (id=3724): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3000003) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_sec\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x1) mount(0x0, &(0x7f0000000200)='./sys_sec\x00', &(0x7f0000000240)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r2, &(0x7f00000002c0)=""/9, 0xfffffd87) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYRES8=r1], 0xffe) 16.446927391s ago: executing program 1 (id=3725): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3000003) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_sec\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='10', 0x2) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x1) mount(0x0, &(0x7f0000000200)='./sys_sec\x00', &(0x7f0000000240)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r2, &(0x7f00000002c0)=""/9, 0xfffffd87) getrlimit(0x9, &(0x7f0000000300)) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYRES8=r1], 0xffe) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="0100fdffffff0000000001000000100007800c00018008000100", @ANYRES32, @ANYBLOB="08000100000040000c000200ff7f000000000000"], 0x38}}, 0x20000000) socket(0x40000000015, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000d00)={'\x00', 0x1, 0x2, 0x1, 0xd2, 0x9, 0xffffffffffffffff}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x24}}, 0x0) 13.889900611s ago: executing program 8 (id=3726): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e04}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000021c0), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002240)=0x6) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r1, 0x0, 0x0) 13.589257281s ago: executing program 1 (id=3727): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x80, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) listen(r0, 0x5) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c90012000e00050014420a008000400003e3"], 0x17) accept4(r0, 0x0, 0x0, 0x0) close(0x3) 12.334339068s ago: executing program 8 (id=3728): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x80005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000003f00)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000200)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}], 0x1c) sched_setaffinity(r2, 0x8, &(0x7f000001cf00)=0x7) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f000001cfc0)=0x1, 0x4) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2800) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000100)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24) 12.332444168s ago: executing program 0 (id=3729): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) mkdir(&(0x7f0000000500)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680), 0x8, &(0x7f00000006c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000740)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000780)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f00000007c0)='./bus\x00') linkat(r1, &(0x7f0000000800)='./file1\x00', r1, &(0x7f0000000880)='./file0\x00', 0x1000) unlink(&(0x7f00000008c0)='./file1\x00') open(&(0x7f0000000900)='./file0\x00', 0x400, 0x43) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8000) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 11.086264385s ago: executing program 8 (id=3730): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3000003) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_sec\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='10', 0x2) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x1) mount(0x0, &(0x7f0000000200)='./sys_sec\x00', &(0x7f0000000240)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r2, &(0x7f00000002c0)=""/9, 0xfffffd87) getrlimit(0x9, &(0x7f0000000300)) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYRES8=r1], 0xffe) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="0100fdffffff0000000001000000100007800c00018008000100", @ANYRES32, @ANYBLOB="08000100000040000c000200ff7f000000000000"], 0x38}}, 0x20000000) socket(0x40000000015, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000cc0)="0000000002000000000000000000", 0x0, 0x3000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000d00)={'\x00', 0x1, 0x2, 0x1, 0xd2, 0x9, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 9.997189006s ago: executing program 1 (id=3731): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x5, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x9, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x0, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x9, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x8, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x8, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x3, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,']) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000020603000000000009"], 0x2c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000120001000000", @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 9.928348182s ago: executing program 0 (id=3732): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3000003) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_sec\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='10', 0x2) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x1) mount(0x0, &(0x7f0000000200)='./sys_sec\x00', &(0x7f0000000240)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r2, &(0x7f00000002c0)=""/9, 0xfffffd87) getrlimit(0x9, &(0x7f0000000300)) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYRES8=r1], 0xffe) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="0100fdffffff0000000001000000100007800c00018008000100", @ANYRES32, @ANYBLOB="08000100000040000c000200ff7f000000000000"], 0x38}}, 0x20000000) socket(0x40000000015, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000cc0)="0000000002000000000000000000", 0x0, 0x3000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000d00)={'\x00', 0x1, 0x2, 0x1, 0xd2, 0x9, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 8.247959413s ago: executing program 0 (id=3733): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3000003) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_sec\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='10', 0x2) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x1) mount(0x0, &(0x7f0000000200)='./sys_sec\x00', &(0x7f0000000240)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r2, &(0x7f00000002c0)=""/9, 0xfffffd87) getrlimit(0x9, &(0x7f0000000300)) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYRES8=r1], 0xffe) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="0100fdffffff0000000001000000100007800c00018008000100", @ANYRES32, @ANYBLOB="08000100000040000c000200ff7f000000000000"], 0x38}}, 0x20000000) socket(0x40000000015, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000cc0)="0000000002000000000000000000", 0x0, 0x3000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 6.70430021s ago: executing program 0 (id=3734): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3000003) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_sec\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='10', 0x2) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x1) mount(0x0, &(0x7f0000000200)='./sys_sec\x00', &(0x7f0000000240)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r2, &(0x7f00000002c0)=""/9, 0xfffffd87) getrlimit(0x9, &(0x7f0000000300)) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYRES8=r1], 0xffe) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="0100fdffffff0000000001000000100007800c00018008000100", @ANYRES32, @ANYBLOB="08000100000040000c000200ff7f000000000000"], 0x38}}, 0x20000000) socket(0x40000000015, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000cc0)="0000000002000000000000000000", 0x0, 0x3000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000d00)={'\x00', 0x1, 0x2, 0x1, 0xd2, 0x9, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 6.664902224s ago: executing program 9 (id=3735): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3000003) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_sec\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='10', 0x2) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x1) mount(0x0, &(0x7f0000000200)='./sys_sec\x00', &(0x7f0000000240)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r2, &(0x7f00000002c0)=""/9, 0xfffffd87) getrlimit(0x9, &(0x7f0000000300)) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYRES8=r1], 0xffe) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="0100fdffffff0000000001000000100007800c00018008000100", @ANYRES32, @ANYBLOB="08000100000040000c000200ff7f000000000000"], 0x38}}, 0x20000000) socket(0x40000000015, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000cc0)="0000000002000000000000000000", 0x0, 0x3000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000d00)={'\x00', 0x1, 0x2, 0x1, 0xd2, 0x9, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 6.551124285s ago: executing program 5 (id=3736): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000000c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000019780)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x22, 0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f00000006c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000700)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000740), 0x0, 0x0) read$msr(r6, &(0x7f0000000780)=""/102392, 0x18ff8) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x1a}}}, &(0x7f00000002c0)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000300)={0x0, 0x1, 0x1, 0x3, 0x256}, &(0x7f0000000380)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3ca5, 0x40000, 0x0, 0x14a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd93e, 0x8000, 0x2, 0x363, 0x0, r0}}], 0x1, &(0x7f0000000600)={0x2e, 0x44, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 6.514294389s ago: executing program 1 (id=3737): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3000003) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_sec\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='10', 0x2) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x1) mount(0x0, &(0x7f0000000200)='./sys_sec\x00', &(0x7f0000000240)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r2, &(0x7f00000002c0)=""/9, 0xfffffd87) getrlimit(0x9, &(0x7f0000000300)) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYRES8=r1], 0xffe) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="0100fdffffff0000000001000000100007800c00018008000100", @ANYRES32, @ANYBLOB="08000100000040000c000200ff7f000000000000"], 0x38}}, 0x20000000) socket(0x40000000015, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000d00)={'\x00', 0x1, 0x2, 0x1, 0xd2, 0x9, 0xffffffffffffffff}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x24}}, 0x0) 3.072362678s ago: executing program 5 (id=3738): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e04}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000021c0), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002240)=0x6) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r1, &(0x7f0000000080), 0x0) 2.986985367s ago: executing program 9 (id=3739): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000240)='ns/net\x00') read$msr(r3, &(0x7f0000000680)=""/102392, 0x18ff8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x11, 0x1, 0x800) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x11e, 0x1, 0x0, 0xfffffffffffffd61) r5 = syz_open_dev$vim2m(0x0, 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000280)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000340)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1\x00', 0x1c0) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/idVendor\x00', 0x80200, 0x0) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000540)='dummy_udc.0', 0xb) 2.933955842s ago: executing program 0 (id=3740): preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xb2e45000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000000200)=""/102368, 0x18fe0) gettid() r1 = syz_open_dev$sndctrl(&(0x7f00000192c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000019300)=0x407) syz_open_dev$sndpcmp(&(0x7f0000019340), 0xfffffffffffffffe, 0xa2c0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x0, 0x0) mknod$loop(&(0x7f0000019680)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000196c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000019700)={'\x00', 0x3e, 0xa, 0x8, 0x0, 0x10}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) 286.993541ms ago: executing program 1 (id=3741): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000400)={0x3, 0x0, 0x2, 0xa89, 'syz1\x00', 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) semget$private(0x0, 0x4, 0x29b) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x4, &(0x7f0000000580)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x88}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x80) 190.381001ms ago: executing program 9 (id=3742): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) mkdir(&(0x7f0000000500)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680), 0x8, &(0x7f00000006c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000740)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000780)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f00000007c0)='./bus\x00') linkat(r1, &(0x7f0000000800)='./file1\x00', r1, &(0x7f0000000880)='./file0\x00', 0x1000) unlink(&(0x7f00000008c0)='./file1\x00') open(&(0x7f0000000900)='./file0\x00', 0x400, 0x43) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8000) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 0s ago: executing program 8 (id=3743): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c80)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000cc0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000d00)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000d40), 0x0, 0x0) read$msr(r3, &(0x7f0000000d80)=""/102392, 0x18ff8) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x5453, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000019dc0)=0x8) pwritev(0xffffffffffffffff, &(0x7f0000019e00), 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(0xffffffffffffffff, &(0x7f0000019e40)={0xa, 0x9004, 0x0, @local, 0x9}, 0x1c) writev(r4, &(0x7f0000019e80)=[{&(0x7f0000019ec0)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100050808004149014006040800", 0x58}], 0x1) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000480)=0x100000001) r6 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004018) prlimit64(0x0, 0xe, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd9a, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2000}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a40)={r7, &(0x7f0000000a80), 0x0}, 0x20) kernel console output (not intermixed with test programs): ANGE): team0: link becomes ready [ 854.620558][T13207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 854.629842][T13207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 854.639797][T13207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 854.660446][T13207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 854.670399][T13207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 855.072694][ T5793] usb 10-1: USB disconnect, device number 2 [ 855.100689][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 855.129703][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 855.161121][T14583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.200249][T14817] fuse: Bad value for 'rootmode' [ 855.393805][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 855.415135][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 855.448662][T14584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.521209][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 855.541438][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 855.654965][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 855.675551][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 855.753316][T14832] loop8: detected capacity change from 0 to 1024 [ 855.837927][T14584] device veth0_vlan entered promiscuous mode [ 855.884674][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 855.899508][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 855.967834][T14584] device veth1_vlan entered promiscuous mode [ 856.272345][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 856.457569][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 856.488889][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 856.544542][T14584] device veth0_macvtap entered promiscuous mode [ 856.577510][T14584] device veth1_macvtap entered promiscuous mode [ 856.611802][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.643091][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.661085][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.687903][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.698189][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.715641][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.727958][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.739468][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.754379][T14584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.772780][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 856.801725][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 856.821571][T14276] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 856.827711][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 856.879895][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 856.918938][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.951791][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.983978][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.012742][T14276] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 857.025578][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.043036][T14276] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 857.062928][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.081199][T14276] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 857.100714][T14276] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 857.106030][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.128785][T14276] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 857.140514][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.151052][T14276] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 857.151368][T14276] usb 9-1: Product: syz [ 857.151383][T14276] usb 9-1: Manufacturer: syz [ 857.177043][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.184989][T14276] cdc_wdm 9-1:1.0: skipping garbage [ 857.192264][T14584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 857.203580][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 857.229200][T14276] cdc_wdm 9-1:1.0: skipping garbage [ 857.229989][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 857.248079][T14863] fuse: Bad value for 'rootmode' [ 857.254584][T14276] cdc_wdm 9-1:1.0: skipping garbage [ 857.259928][T14276] cdc_wdm: probe of 9-1:1.0 failed with error -22 [ 857.265535][T14584] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.295930][T14584] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.315582][T14584] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.345352][T14584] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.567493][ T5318] usb 9-1: USB disconnect, device number 3 [ 857.743974][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 857.839171][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 857.980027][T14583] device veth0_vlan entered promiscuous mode [ 858.113814][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 858.591913][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 858.619551][T14583] device veth1_vlan entered promiscuous mode [ 858.629198][ T4429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.662628][ T4429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.663794][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 858.706921][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 858.732462][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 858.772324][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 858.868097][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 858.882269][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 858.917294][T14583] device veth0_macvtap entered promiscuous mode [ 858.925834][ T4434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.953741][T14583] device veth1_macvtap entered promiscuous mode [ 858.968103][ T4434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.002576][T14833] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 859.037104][T14833] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 859.062937][T14833] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 859.111739][T14583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.158205][T14583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.188066][T14583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.188283][T14897] fuse: Bad value for 'rootmode' [ 859.220743][T14583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.237874][T14583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.259923][T14583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.302659][T14583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.332541][T14583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.359284][T14583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.393215][T14583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.429836][T14583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.456813][T14833] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 859.478454][T14833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 859.521597][T14583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.561213][T14583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.584555][T14583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.618046][T14583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.668813][T14583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.689657][T14583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.741838][T14583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.757107][T14583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.787379][T14583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.808715][T14583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.826464][T14583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.860642][T14833] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 859.885416][T14833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 859.930992][T14276] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 859.957365][T14583] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.975830][T14583] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.999068][T14583] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.018144][T14583] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.238656][ T4504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.286460][T14276] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 860.306401][T14276] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 860.335122][T14276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.340080][ T4504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.352203][ T4434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.360059][ T4434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.379700][T14925] loop9: detected capacity change from 0 to 1024 [ 860.387100][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 860.623477][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 860.709597][T14276] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 860.719246][T14276] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 860.727542][T14276] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 860.847057][T14276] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 860.978318][T14913] loop1: detected capacity change from 0 to 8 [ 861.048379][T14276] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 861.132441][T14276] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 861.141718][T14276] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 861.149631][T14276] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 861.158960][T14276] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 861.245604][T14913] SQUASHFS error: zlib decompression failed, data probably corrupt [ 861.321633][T14913] SQUASHFS error: Failed to read block 0x9b: -5 [ 861.328453][T14913] SQUASHFS error: Unable to read metadata cache entry [99] [ 861.401921][T14913] SQUASHFS error: Unable to read inode 0x127 [ 861.440853][T14932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 861.468744][T14276] usb 2-1: USB disconnect, device number 29 [ 861.480268][T14276] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 861.497505][T14276] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 861.510592][T14276] keyspan 2-1:1.0: device disconnected [ 861.661252][ T4275] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 861.853166][ T4275] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 861.865215][ T4275] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 861.875875][ T4275] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 861.885366][ T4275] usb 10-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF7, skipping [ 861.898267][ T4275] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 861.907858][ T4275] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 861.916183][ T4275] usb 10-1: Product: syz [ 861.920808][ T4275] usb 10-1: Manufacturer: syz [ 861.942126][ T4275] cdc_wdm 10-1:1.0: skipping garbage [ 861.949597][ T4275] cdc_wdm 10-1:1.0: skipping garbage [ 861.955452][ T4275] cdc_wdm: probe of 10-1:1.0 failed with error -22 [ 862.148226][ T4275] usb 10-1: USB disconnect, device number 3 [ 862.237521][T14958] fuse: Bad value for 'fd' [ 865.141202][ T4365] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 865.332794][ T4365] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 865.361355][ T4365] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 865.370459][ T4365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.451760][ T4365] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 865.469750][ T4365] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 866.614426][T14994] loop1: detected capacity change from 0 to 8 [ 866.641038][ T4365] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 866.690333][T14994] SQUASHFS error: zlib decompression failed, data probably corrupt [ 866.721682][ T4365] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 866.729432][ T4365] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 866.741061][T14994] SQUASHFS error: Failed to read block 0x9b: -5 [ 866.747474][T14994] SQUASHFS error: Unable to read metadata cache entry [99] [ 866.801001][T14994] SQUASHFS error: Unable to read inode 0x127 [ 866.814066][ T4365] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 866.862619][ T4365] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 866.890812][ T4365] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 866.914661][ T4365] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 866.957272][ T4365] usb 2-1: USB disconnect, device number 30 [ 866.983538][ T4365] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 867.049721][ T4365] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 867.096161][ T4365] keyspan 2-1:1.0: device disconnected [ 869.173884][T14272] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 869.188968][T14272] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 869.198130][T14272] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 869.210808][T14272] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 869.220194][T14272] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 869.281421][T14272] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 869.407303][T15046] rxe_eth0 speed is unknown, defaulting to 1000 [ 870.016318][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.022741][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.159932][T15046] chnl_net:caif_netlink_parms(): no params data found [ 870.482477][T15046] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.501109][T15046] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.527273][T15046] device bridge_slave_0 entered promiscuous mode [ 870.567271][T15046] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.601188][T15046] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.609398][T15046] device bridge_slave_1 entered promiscuous mode [ 870.678285][T15046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 870.726869][T15083] loop1: detected capacity change from 0 to 1024 [ 870.815253][T15046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.344863][T15046] team0: Port device team_slave_0 added [ 871.371086][T12976] Bluetooth: hci5: command 0x0409 tx timeout [ 871.395725][T15046] team0: Port device team_slave_1 added [ 871.440150][T15046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.518733][T15046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.608700][T15046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.631012][ T4371] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 871.662492][T15046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.681022][T15046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.782424][T15046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.832883][ T4371] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 871.861145][ T4371] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 871.921456][ T4371] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.960052][ T4371] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 871.988141][T15046] device hsr_slave_0 entered promiscuous mode [ 871.988611][ T4371] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 872.024858][ T4371] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1 [ 872.056052][ T4371] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 872.082346][ T4371] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 872.097319][T15046] device hsr_slave_1 entered promiscuous mode [ 872.116481][T15046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 872.139683][ T4371] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 872.154432][T15086] loop8: detected capacity change from 0 to 8 [ 872.157016][T15046] Cannot create hsr debugfs directory [ 872.187966][ T4371] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 873.348914][ T4371] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 873.361439][T15086] SQUASHFS error: zlib decompression failed, data probably corrupt [ 873.375457][T15086] SQUASHFS error: Failed to read block 0x9b: -5 [ 873.411327][T15086] SQUASHFS error: Unable to read metadata cache entry [99] [ 873.412782][ T4371] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 873.419270][T15086] SQUASHFS error: Unable to read inode 0x127 [ 873.451033][T12976] Bluetooth: hci5: command 0x041b tx timeout [ 874.060768][T14276] usb 9-1: USB disconnect, device number 4 [ 874.083297][T14276] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 874.120321][T14276] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 874.148964][T14276] keyspan 9-1:1.0: device disconnected [ 874.187747][T15046] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.230086][T15046] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.419227][T15046] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.436123][T15046] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.676970][T15046] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.731362][T15046] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.029647][T15143] loop9: detected capacity change from 0 to 1024 [ 875.935933][T12976] Bluetooth: hci5: command 0x040f tx timeout [ 876.122962][T15046] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.191003][T15046] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.707282][T15046] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 876.869823][T15046] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 877.386529][T15046] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 877.458297][T15046] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 878.393453][T12976] Bluetooth: hci5: command 0x0419 tx timeout [ 878.541207][T15046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.604971][T13304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 878.643197][T13304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 878.687134][T15046] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.830750][T15046] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 878.881091][ T4365] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 879.010575][T15196] loop5: detected capacity change from 0 to 1024 [ 879.342209][ T4365] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 879.602732][ T4365] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 879.621473][T15046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 879.641774][ T4365] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.656803][T13478] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 879.678063][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 879.712586][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 879.732259][ T4365] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 879.740061][ T4365] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 879.748427][ T4365] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 879.761142][ T4365] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 879.769181][ T4365] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 879.817049][ T4365] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 879.832077][ T4365] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 879.840595][ T4411] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.847793][ T4411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.911116][ T4365] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 879.974514][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 879.982656][ T4365] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 879.985009][T15188] loop9: detected capacity change from 0 to 8 [ 880.833140][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 880.956179][ T4411] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.963391][ T4411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 880.977791][T15188] SQUASHFS error: zlib decompression failed, data probably corrupt [ 881.054123][T15188] SQUASHFS error: Failed to read block 0x9b: -5 [ 881.060439][T15188] SQUASHFS error: Unable to read metadata cache entry [99] [ 881.068551][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 881.132039][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 881.160867][T15188] SQUASHFS error: Unable to read inode 0x127 [ 881.208475][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 881.263607][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 881.302046][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 881.344901][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 881.383896][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 881.452122][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 881.476671][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 881.536123][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 881.568606][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 881.617900][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 881.657941][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 882.011309][T15223] ip_tables: iptables: counters copy to user failed while replacing table [ 882.945018][ T4275] usb 10-1: USB disconnect, device number 4 [ 882.975582][ T4275] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 882.998753][ T4275] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 883.021168][ T4275] keyspan 10-1:1.0: device disconnected [ 884.214637][T15244] loop5: detected capacity change from 0 to 1024 [ 884.761767][T15046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.800520][T15169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 884.814326][T15169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 884.908107][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 884.923139][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 885.703640][T13478] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 885.743793][T15169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 885.803386][T15169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 886.014009][T15169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 886.057219][T15169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 886.131133][T15260] loop1: detected capacity change from 0 to 1024 [ 887.595491][T15046] device veth0_vlan entered promiscuous mode [ 887.891496][T15046] device veth1_vlan entered promiscuous mode [ 888.004697][T13304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 888.022483][T13304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 888.103758][T15046] device veth0_macvtap entered promiscuous mode [ 888.143597][T15046] device veth1_macvtap entered promiscuous mode [ 888.213405][T15046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.256527][T15046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.285254][T15046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.672606][T15274] blktrace: Concurrent blktraces are not allowed on loop2 [ 889.511038][T15046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.551031][T15046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.611001][T15046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.648157][T15046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.696171][T15046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.714552][T15046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.761153][T15046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.787821][T15046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.811048][T15046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.850900][T15046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 889.872154][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 889.905381][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 889.937179][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 889.982915][T15046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.021040][T15046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.059820][T15046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.071120][ T4363] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 890.101603][T15046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.161103][T15046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.212461][T15046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.273817][T15046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.289521][ T4363] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 890.304726][T15046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.580619][ T4363] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 891.701145][T15046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.742258][ T4363] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.786819][T15046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.836568][ T4363] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 891.871144][T15046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.924124][ T4363] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 891.963756][T15046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.973974][ T4363] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1 [ 891.996550][ T4363] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 892.006271][T15046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 892.041087][ T4363] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 892.061170][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 892.070529][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 892.089242][T15278] loop8: detected capacity change from 0 to 8 [ 892.133555][ T4363] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 892.158152][T15046] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.192664][ T4363] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 892.200416][ T4363] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 892.233352][T15046] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.251335][T15046] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.260107][T15046] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.287036][T15278] SQUASHFS error: zlib decompression failed, data probably corrupt [ 892.307257][ T4363] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 892.396017][T15278] SQUASHFS error: Failed to read block 0x9b: -5 [ 892.477825][T15278] SQUASHFS error: Unable to read metadata cache entry [99] [ 892.508120][T13207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.538502][T15278] SQUASHFS error: Unable to read inode 0x127 [ 892.551575][T13207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.569161][T13304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.618519][T13207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 892.632469][T13304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.691931][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 892.721105][T15307] loop5: detected capacity change from 0 to 1024 [ 894.155300][T13478] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 894.293777][ T5793] usb 9-1: USB disconnect, device number 5 [ 894.312665][ T5793] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 894.359967][ T5793] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 894.481090][ T4363] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 895.153844][ T5793] keyspan 9-1:1.0: device disconnected [ 895.382997][ T4363] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 895.401561][ T4363] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 896.661308][ T4363] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 896.711059][ T4363] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF7, skipping [ 896.752139][ T4363] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 896.801031][ T4363] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 896.816212][ T4363] usb 4-1: Product: syz [ 896.820709][ T4363] usb 4-1: Manufacturer: syz [ 896.888352][ T4363] cdc_wdm 4-1:1.0: skipping garbage [ 896.895684][ T4363] cdc_wdm 4-1:1.0: skipping garbage [ 896.921591][ T4363] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 897.076198][ T4363] usb 4-1: USB disconnect, device number 42 [ 898.081803][T15348] loop9: detected capacity change from 0 to 1024 [ 900.181189][ T4275] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 900.579038][ T4275] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 900.628224][ T4275] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 900.715624][ T4275] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.868532][ T4275] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 900.938972][ T4275] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 901.012321][ T4275] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 901.080857][T15369] loop9: detected capacity change from 0 to 8 [ 901.228403][ T4275] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 901.325636][T15369] SQUASHFS error: zlib decompression failed, data probably corrupt [ 901.361252][T15369] SQUASHFS error: Failed to read block 0x9b: -5 [ 901.368258][T15369] SQUASHFS error: Unable to read metadata cache entry [99] [ 901.375979][T15369] SQUASHFS error: Unable to read inode 0x127 [ 901.400120][ T4275] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 901.442712][ T4275] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 901.516859][ T4275] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 902.911950][T15396] blktrace: Concurrent blktraces are not allowed on loop10 [ 903.901629][ T4275] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 903.984839][T15400] ip_tables: iptables: counters copy to user failed while replacing table [ 904.004000][ T4275] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 904.219168][ T4275] usb 10-1: USB disconnect, device number 5 [ 904.303093][ T4275] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 904.441323][T14276] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 904.455442][ T4275] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 904.500607][ T4275] keyspan 10-1:1.0: device disconnected [ 904.809735][T15409] loop9: detected capacity change from 0 to 1024 [ 908.905091][T15437] blktrace: Concurrent blktraces are not allowed on loop6 [ 909.823925][T15428] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2794'. [ 910.113855][T15445] loop1: detected capacity change from 0 to 1024 [ 910.121386][T15445] hfsplus: unable to parse mount options [ 913.071737][T15463] fuse: Bad value for 'fd' [ 916.171155][T11150] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 917.566308][T11150] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.601117][T11150] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 917.641020][T11150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.697234][T11150] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 917.718632][T11150] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 918.803272][T15482] loop3: detected capacity change from 0 to 8 [ 918.823319][T11150] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 918.831896][T11150] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 918.841022][T11150] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 918.858994][T11150] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 918.880645][T15482] SQUASHFS error: zlib decompression failed, data probably corrupt [ 918.896562][T15482] SQUASHFS error: Failed to read block 0x9b: -5 [ 918.929809][T11150] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 918.941094][T15482] SQUASHFS error: Unable to read metadata cache entry [99] [ 918.948337][T15482] SQUASHFS error: Unable to read inode 0x127 [ 918.962711][T11150] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 918.984266][T11150] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 919.071762][T14276] usb 4-1: USB disconnect, device number 44 [ 919.101295][T14276] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 920.057755][T14276] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 920.071943][T14276] keyspan 4-1:1.0: device disconnected [ 920.642828][T15527] loop8: detected capacity change from 0 to 1024 [ 927.425201][T15550] blktrace: Concurrent blktraces are not allowed on loop6 [ 929.159403][T15585] blktrace: Concurrent blktraces are not allowed on loop6 [ 929.199721][T15565] blktrace: Concurrent blktraces are not allowed on loop10 [ 932.156747][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.163120][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.487314][T15612] loop5: detected capacity change from 0 to 1024 [ 933.157125][T15613] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 935.092215][T15634] blktrace: Concurrent blktraces are not allowed on loop2 [ 937.191745][T15654] fuse: Bad value for 'fd' [ 938.781830][T15673] loop5: detected capacity change from 0 to 1024 [ 939.344254][T15613] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 941.432503][T15704] blktrace: Concurrent blktraces are not allowed on loop16 [ 942.587398][T15707] loop5: detected capacity change from 0 to 1024 [ 943.303004][T15613] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 943.741670][T15716] fuse: Bad value for 'fd' [ 944.430531][T12976] Bluetooth: hci2: command 0x0406 tx timeout [ 949.609093][T15770] loop1: detected capacity change from 0 to 1024 [ 949.793793][T15773] fuse: Unknown parameter '0x0000000000000003' [ 951.958448][T15791] svc: failed to register nfsdv3 RPC service (errno 111). [ 953.054007][T15791] svc: failed to register nfsaclv3 RPC service (errno 111). [ 954.031701][T14272] Bluetooth: hci0: command 0x0406 tx timeout [ 955.011136][T14873] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 955.206209][T14873] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 956.238087][T14873] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 956.247655][T14873] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.274429][T14873] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 956.299249][T14873] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 956.315884][T14873] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 956.331784][T14873] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 956.339641][T14873] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 956.369693][T14873] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 956.382354][T14873] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 956.390213][T14873] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 956.412319][T14873] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 956.477552][T15830] loop9: detected capacity change from 0 to 8 [ 956.479676][T15850] loop8: detected capacity change from 0 to 128 [ 956.583679][T15830] SQUASHFS error: zlib decompression failed, data probably corrupt [ 956.721055][T15830] SQUASHFS error: Failed to read block 0x9b: -5 [ 957.155129][T15830] SQUASHFS error: Unable to read metadata cache entry [99] [ 957.775477][T15830] SQUASHFS error: Unable to read inode 0x127 [ 958.919082][T15876] loop8: detected capacity change from 0 to 1024 [ 960.241360][ T4366] usb 10-1: USB disconnect, device number 6 [ 960.293809][ T4366] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 960.296783][T15888] fuse: Unknown parameter '0x0000000000000003' [ 960.379630][ T4366] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 960.436584][ T4366] keyspan 10-1:1.0: device disconnected [ 961.537234][T15923] loop9: detected capacity change from 0 to 128 [ 962.532468][T15941] loop9: detected capacity change from 0 to 1024 [ 963.751135][ T4366] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 963.800686][T15961] fuse: Unknown parameter '0x0000000000000003' [ 963.952629][ T4366] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 963.986152][ T4366] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 964.016012][ T4366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.058151][ T4366] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 964.119813][ T4366] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 964.149608][ T4366] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 964.178764][T15974] loop3: detected capacity change from 0 to 128 [ 964.186649][ T4366] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 964.221036][ T4366] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 964.257093][ T4366] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 964.265364][T12976] Bluetooth: hci4: command 0x0406 tx timeout [ 964.271725][T12976] Bluetooth: hci3: command 0x0406 tx timeout [ 964.435739][ T4366] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 964.444613][ T4366] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 964.452796][T15982] loop1: detected capacity change from 0 to 8 [ 964.454539][ T4366] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 964.555741][T15982] SQUASHFS error: zlib decompression failed, data probably corrupt [ 964.667572][T15982] SQUASHFS error: Failed to read block 0x9b: -5 [ 964.695888][T15982] SQUASHFS error: Unable to read metadata cache entry [99] [ 964.745586][T15982] SQUASHFS error: Unable to read inode 0x127 [ 964.984167][T11150] usb 2-1: USB disconnect, device number 31 [ 965.010835][T11150] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 965.056445][T11150] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 965.092216][T11150] keyspan 2-1:1.0: device disconnected [ 965.446895][T16011] loop9: detected capacity change from 0 to 1024 [ 966.980728][T16021] fuse: Unknown parameter '0x0000000000000003' [ 967.136171][T16026] loop3: detected capacity change from 0 to 128 [ 968.951010][ T4366] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 969.176515][ T4366] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 969.250625][ T4366] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 969.498272][ T4366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.524109][ T4366] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 969.532332][ T4366] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 969.540367][ T4366] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 969.579291][ T4366] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 969.700443][ T4366] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 969.727287][ T4366] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 969.858098][T16085] loop5: detected capacity change from 0 to 1024 [ 970.416784][ T4366] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 970.449286][T16090] fuse: Unknown parameter '0x0000000000000003' [ 970.457956][ T4366] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 970.467395][ T4366] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 970.531728][T15793] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 970.857827][T16097] loop9: detected capacity change from 0 to 128 [ 971.275207][T11150] usb 4-1: USB disconnect, device number 45 [ 971.298611][T11150] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 971.350972][T11150] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 971.387270][T11150] keyspan 4-1:1.0: device disconnected [ 972.806528][T16156] fuse: Unknown parameter '0x0000000000000003' [ 972.819890][T16158] loop1: detected capacity change from 0 to 128 [ 973.289366][T16171] loop8: detected capacity change from 0 to 1024 [ 974.451308][ T4275] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 974.697115][ T4275] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 974.808570][ T4275] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 975.055211][ T4275] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.171114][ T4275] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 975.199340][ T4275] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 975.203644][T16205] fuse: Unknown parameter 'fd0x0000000000000003' [ 975.222892][ T4275] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 975.242735][ T4275] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 975.250632][ T4275] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 975.270399][ T4275] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 975.312212][ T4275] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 975.330748][ T4275] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 975.354152][ T4275] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 975.419062][T16218] loop8: detected capacity change from 0 to 128 [ 975.873356][ T4275] usb 6-1: USB disconnect, device number 4 [ 975.898612][ T4275] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 975.996211][T16234] loop1: detected capacity change from 0 to 1024 [ 976.629688][ T4275] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 976.714131][ T4275] keyspan 6-1:1.0: device disconnected [ 978.059713][T13304] tipc: Disabling bearer [ 978.067141][T13304] tipc: Left network mode [ 978.075780][T16267] loop3: detected capacity change from 0 to 128 [ 978.114504][T16268] fuse: Unknown parameter 'fd0x0000000000000003' [ 978.811432][T16290] loop9: detected capacity change from 0 to 1024 [ 979.521048][T14873] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 979.712610][T14873] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 979.734460][T14873] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 979.773730][T14873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.846425][T14873] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 979.873705][T14873] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 979.896757][T14873] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 979.923160][T14873] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 979.931454][T14873] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 979.949803][T14873] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 979.980740][T14873] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 980.007295][T14873] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 980.055133][T14873] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 980.100838][T14873] usb 6-1: USB disconnect, device number 5 [ 980.939236][T14873] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 981.021420][T14873] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 981.064728][T14873] keyspan 6-1:1.0: device disconnected [ 981.430298][T16328] fuse: Unknown parameter 'fd0x0000000000000003' [ 982.162344][T16351] loop8: detected capacity change from 0 to 1024 [ 983.161037][T13304] device hsr_slave_0 left promiscuous mode [ 983.196271][T13304] device hsr_slave_1 left promiscuous mode [ 983.229639][T13304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 983.248758][T13304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 983.501263][T14873] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 983.637189][T13304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 983.644838][T13304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 983.655163][T13304] device bridge_slave_1 left promiscuous mode [ 983.668254][T13304] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.684280][T13304] device bridge_slave_0 left promiscuous mode [ 983.703150][T14873] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 983.705884][T13304] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.726264][T14873] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 983.726294][T14873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.748988][T14873] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 983.749141][T14873] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 983.749189][T14873] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 983.753291][T14873] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 983.753343][T14873] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 983.766272][T14873] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 983.768813][T14873] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 983.768863][T14873] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 983.773099][T14873] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 983.912122][T13304] device veth1_macvtap left promiscuous mode [ 983.912265][T13304] device veth0_macvtap left promiscuous mode [ 983.912403][T13304] device veth1_vlan left promiscuous mode [ 983.912496][T13304] device veth0_vlan left promiscuous mode [ 983.948240][T14873] usb 4-1: USB disconnect, device number 46 [ 983.951264][T14873] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 983.959450][T14873] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 983.959878][T14873] keyspan 4-1:1.0: device disconnected [ 984.159506][T16393] loop8: detected capacity change from 0 to 128 [ 985.531200][T16425] loop1: detected capacity change from 0 to 1024 [ 986.871131][ T4366] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 987.063075][ T4366] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.101376][ T4366] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 987.147989][ T4366] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.207990][ T4366] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 987.233398][ T4366] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 987.267464][ T4366] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 987.288568][ T4366] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 987.301247][ T4366] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 987.329221][ T4366] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 987.346853][ T4366] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 987.361416][ T4366] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 987.392431][ T4366] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 987.488585][ T4366] usb 6-1: USB disconnect, device number 6 [ 987.525327][ T4366] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 987.559618][ T4366] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 987.587404][ T4366] keyspan 6-1:1.0: device disconnected [ 988.116607][T16479] loop1: detected capacity change from 0 to 1024 [ 989.286060][T16500] loop1: detected capacity change from 0 to 128 [ 989.579940][T13304] team0 (unregistering): Port device team_slave_1 removed [ 989.788302][T13304] team0 (unregistering): Port device team_slave_0 removed [ 990.318768][T13304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.519374][T13304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.841117][ T4365] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 991.050486][T16539] loop5: detected capacity change from 0 to 1024 [ 991.076167][ T4365] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 991.134144][ T4365] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 991.235497][ T4365] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.481428][ T4365] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 991.605217][ T4365] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 991.673553][T15771] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 991.687557][ T4365] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1 [ 991.708190][ T4365] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 991.732960][ T4365] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 991.751728][ T4365] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 991.773899][ T4365] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 991.831162][ T4365] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 991.864332][ T4365] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 991.967357][ T4365] usb 9-1: USB disconnect, device number 6 [ 992.038970][ T4365] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 992.093682][ T4365] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 992.154774][ T4365] keyspan 9-1:1.0: device disconnected [ 992.895794][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.902979][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.298972][T13304] bond0 (unregistering): Released all slaves [ 993.614435][T16606] loop1: detected capacity change from 0 to 128 [ 993.998159][T16611] loop3: detected capacity change from 0 to 1024 [ 994.492819][ T4366] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 994.794806][ T4366] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 994.833721][ T4366] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 994.854073][ T4366] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.891995][ T4366] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 994.924824][ T4366] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 994.960016][ T4366] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1 [ 994.971241][T14272] Bluetooth: hci5: command 0x0406 tx timeout [ 995.053759][ T4366] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 995.119467][ T4366] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 995.164613][ T4366] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 995.206543][ T4366] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 995.238338][ T4366] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 995.293550][ T4366] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 995.344922][ T4366] usb 9-1: USB disconnect, device number 7 [ 995.379427][ T4366] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 995.452075][ T4366] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 995.495666][ T4366] keyspan 9-1:1.0: device disconnected [ 997.009335][T16674] loop1: detected capacity change from 0 to 1024 [ 998.051198][ T4366] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 998.249994][ T4366] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.281541][ T4366] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 998.290697][ T4366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.322154][ T4366] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 998.332402][ T4366] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 998.353315][ T4366] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 998.374556][ T4366] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 998.395465][ T4366] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 998.421380][ T4366] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 998.449392][ T4366] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 998.474075][ T4366] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 998.507384][ T4366] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 998.581831][ T4366] usb 2-1: USB disconnect, device number 32 [ 998.609149][ T4366] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 998.665146][ T4366] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 998.702982][ T4366] keyspan 2-1:1.0: device disconnected [ 999.047814][T16724] loop9: detected capacity change from 0 to 128 [ 999.585646][T16739] loop1: detected capacity change from 0 to 1024 [ 1002.678583][T16801] loop9: detected capacity change from 0 to 1024 [ 1004.409772][T16833] loop8: detected capacity change from 0 to 128 [ 1005.547415][T16857] loop3: detected capacity change from 0 to 1024 [ 1008.209696][T16910] loop1: detected capacity change from 0 to 1024 [ 1009.063965][T16923] loop9: detected capacity change from 0 to 128 [ 1009.341021][T14873] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1009.542917][T14873] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.565523][T14873] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1009.597439][T14873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.637549][T14873] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 1009.661496][T14873] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 1009.696845][T14873] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 1009.736056][T14873] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 1009.775245][T14873] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 1009.821531][T14873] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1009.846935][T14873] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 1009.898785][T14873] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 1009.928660][T14873] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1010.239192][T14276] usb 2-1: USB disconnect, device number 33 [ 1010.265815][T14276] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1010.310688][T14276] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1010.351422][T14276] keyspan 2-1:1.0: device disconnected [ 1011.946943][T16984] loop8: detected capacity change from 0 to 1024 [ 1013.241174][T14416] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1013.443612][T14416] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.471855][T14416] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1013.532117][T14416] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.578994][T14416] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 1013.621221][T14416] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 1013.656760][T14416] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 1013.687927][T14416] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 1013.719311][T14416] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 1013.753483][T14416] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1013.777506][T17014] loop5: detected capacity change from 0 to 128 [ 1013.802687][T14416] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 1013.831964][T14416] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 1013.887928][T14416] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1014.281845][ T4365] usb 10-1: USB disconnect, device number 7 [ 1014.302903][ T4365] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1014.345495][ T4365] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1014.384630][ T4365] keyspan 10-1:1.0: device disconnected [ 1015.430882][T17048] loop9: detected capacity change from 0 to 1024 [ 1016.962970][T17083] loop8: detected capacity change from 0 to 128 [ 1017.251139][T14873] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1017.452799][T14873] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.478568][T14873] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1017.521157][T14873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.586601][T14873] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 1017.849794][T14873] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 1017.883502][T14873] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 1017.884839][T14873] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 1017.884893][T14873] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 1017.892010][T14873] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1017.962951][T14873] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 1017.970801][T14873] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 1018.003444][T14873] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1018.049751][T14873] usb 2-1: USB disconnect, device number 34 [ 1018.092769][T14873] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1018.144035][T14873] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1018.184240][T14873] keyspan 2-1:1.0: device disconnected [ 1018.807079][T17117] loop9: detected capacity change from 0 to 1024 [ 1019.964047][T17143] loop8: detected capacity change from 0 to 128 [ 1020.471188][ T5318] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1020.696858][ T5318] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.821653][ T5318] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1020.884074][ T5318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.964807][ T5318] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 1021.039968][ T5318] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 1021.082850][ T5318] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 1021.125149][ T5318] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 1021.165537][ T5318] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 1021.199276][ T5318] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1021.222026][ T5318] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 1021.240054][ T5318] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 1021.263164][ T5318] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1021.332425][ T5318] usb 6-1: USB disconnect, device number 7 [ 1021.372295][ T5318] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1021.424066][ T5318] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1021.452675][ T5318] keyspan 6-1:1.0: device disconnected [ 1022.099279][T17180] loop5: detected capacity change from 0 to 1024 [ 1022.709658][T15771] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1023.505372][T17204] loop3: detected capacity change from 0 to 128 [ 1024.871187][ T33] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1025.092992][ T33] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.116284][ T33] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1025.280712][ T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.302045][ T33] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 1025.309610][ T33] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 1025.735342][T17238] loop5: detected capacity change from 0 to 1024 [ 1025.761091][ T33] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 1025.784929][ T33] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 1025.806149][T15793] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1025.831398][ T33] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 1025.862503][ T33] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1025.892815][ T33] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 1025.900600][ T33] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 1026.009923][ T33] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1026.085052][ T33] usb 4-1: USB disconnect, device number 47 [ 1026.128402][ T33] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1026.168187][ T33] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1026.221639][ T33] keyspan 4-1:1.0: device disconnected [ 1026.357997][T17255] loop5: detected capacity change from 0 to 128 [ 1028.376423][T17287] loop3: detected capacity change from 0 to 1024 [ 1029.321063][T14873] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1029.510107][T17314] loop1: detected capacity change from 0 to 128 [ 1029.522705][T14873] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.551098][T14873] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1029.616173][T14873] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.677844][T14873] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 1029.715319][T14873] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 1029.747048][T14873] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 1029.778518][T14873] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 1029.841339][T14873] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 1029.896285][T14873] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1029.945033][T14873] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 1029.978387][T14873] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 1030.008817][T14873] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1030.056945][T14873] usb 10-1: USB disconnect, device number 8 [ 1030.085028][T14873] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1030.119928][T14873] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1030.140418][T14873] keyspan 10-1:1.0: device disconnected [ 1030.877557][T17347] loop9: detected capacity change from 0 to 1024 [ 1033.015001][T17397] loop5: detected capacity change from 0 to 1024 [ 1033.631082][T15771] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1033.641048][ T5318] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1033.843064][ T5318] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.859775][ T5318] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1033.882519][ T5318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.917416][ T5318] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 1033.945659][ T5318] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 1033.976321][ T5318] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 1034.008587][ T5318] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 1034.038244][ T5318] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 1034.076048][ T5318] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1034.106486][ T5318] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 1034.145661][ T5318] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 1034.168494][ T5318] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1034.193357][ T5318] usb 4-1: USB disconnect, device number 48 [ 1034.228097][ T5318] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1034.259287][ T5318] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1034.272298][ T5318] keyspan 4-1:1.0: device disconnected [ 1034.828601][T17425] loop3: detected capacity change from 0 to 128 [ 1036.758146][T17478] loop8: detected capacity change from 0 to 1024 [ 1037.521156][ T33] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1037.722344][ T33] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.743367][ T33] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1037.770379][ T33] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.824962][ T33] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 1037.847257][ T33] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 1037.881656][ T33] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 1037.915219][ T33] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 1037.940221][ T33] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 1038.003231][ T33] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1038.039661][ T33] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 1038.058330][ T33] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 1038.097431][ T33] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1038.147931][ T33] usb 6-1: USB disconnect, device number 8 [ 1038.189148][ T33] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1038.230258][ T33] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1038.275067][ T33] keyspan 6-1:1.0: device disconnected [ 1040.341442][T17547] loop1: detected capacity change from 0 to 1024 [ 1040.639548][T17546] loop5: detected capacity change from 0 to 128 [ 1040.983740][T15771] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1041.701061][ T33] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1041.899634][ T33] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.926635][ T33] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1041.975654][ T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.020023][ T33] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 1042.059612][ T33] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 1042.085679][ T33] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 1042.107820][ T33] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 1042.128201][ T33] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 1042.146003][ T33] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1042.171556][ T33] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 1042.188619][ T33] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 1042.234133][ T33] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1042.301478][ T33] usb 4-1: USB disconnect, device number 49 [ 1042.402893][ T33] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1042.516523][ T33] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1042.571614][ T33] keyspan 4-1:1.0: device disconnected [ 1043.288023][T17605] loop8: detected capacity change from 0 to 1024 [ 1045.461368][ T4365] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1045.683849][T17642] loop9: detected capacity change from 0 to 128 [ 1045.813279][ T4365] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.831027][ T4365] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1045.840103][ T4365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.234389][T17646] loop3: detected capacity change from 0 to 1024 [ 1046.419902][ T4365] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 1046.448427][ T4365] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 1046.471084][ T4365] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 1046.590764][ T4365] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 1046.624508][ T4365] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 1046.657700][ T4365] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1046.727529][ T4365] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 1046.746233][ T4365] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 1046.774937][ T4365] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1046.827282][ T4365] usb 2-1: USB disconnect, device number 35 [ 1046.862147][ T4365] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1046.912500][ T4365] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1046.967476][ T4365] keyspan 2-1:1.0: device disconnected [ 1047.621817][T17685] loop5: detected capacity change from 0 to 1024 [ 1048.570412][T17697] loop8: detected capacity change from 0 to 128 [ 1049.951078][ T4366] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1050.173453][ T4366] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.202794][ T4366] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1050.242830][ T4366] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.287523][ T4366] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 1050.323270][ T4366] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 1050.352450][ T4366] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1 [ 1050.397606][ T4366] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 1050.430113][ T4366] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 1050.475706][ T4366] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1050.522837][ T4366] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 1050.552049][ T4366] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 1050.611655][ T4366] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1050.679254][ T4366] usb 9-1: USB disconnect, device number 8 [ 1050.736721][ T4366] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1050.819642][ T4366] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1050.906810][T17738] loop9: detected capacity change from 0 to 1024 [ 1051.147126][ T4366] keyspan 9-1:1.0: device disconnected [ 1051.720327][T17744] loop8: detected capacity change from 0 to 128 [ 1053.722489][T17792] loop9: detected capacity change from 0 to 1024 [ 1054.373728][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.380080][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.153467][T17845] loop1: detected capacity change from 0 to 1024 [ 1061.004834][T17903] loop1: detected capacity change from 0 to 1024 [ 1065.137391][T17969] loop8: detected capacity change from 0 to 1024 [ 1065.591829][T17973] loop8: detected capacity change from 0 to 128 [ 1066.261127][T14276] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1066.431046][T14276] usb 4-1: device descriptor read/64, error -71 [ 1066.721061][T14276] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1066.886481][T14276] usb 4-1: device descriptor read/64, error -71 [ 1067.011394][T14276] usb usb4-port1: attempt power cycle [ 1067.441122][T14276] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1067.511772][T14276] usb 4-1: device descriptor read/8, error -71 [ 1067.808531][T14276] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1067.854442][T14276] usb 4-1: device descriptor read/8, error -71 [ 1067.988033][T14276] usb usb4-port1: unable to enumerate USB device [ 1070.165135][T18042] loop1: detected capacity change from 0 to 1024 [ 1071.062451][T18050] blktrace: Concurrent blktraces are not allowed on loop6 [ 1072.023374][T18047] svc: failed to register nfsdv3 RPC service (errno 111). [ 1072.063732][T18047] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1072.506780][T18069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3385'. [ 1073.171044][T11150] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1073.361011][T11150] usb 6-1: device descriptor read/64, error -71 [ 1073.931207][T11150] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1074.091227][T11150] usb 6-1: device descriptor read/64, error -71 [ 1074.191670][T18095] ip_tables: iptables: counters copy to user failed while replacing table [ 1074.225719][T11150] usb usb6-port1: attempt power cycle [ 1075.471037][T11150] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1075.514024][T18099] loop3: detected capacity change from 0 to 128 [ 1075.521640][T11150] usb 6-1: device descriptor read/8, error -71 [ 1075.811022][T11150] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1075.935536][T11150] usb 6-1: device descriptor read/8, error -71 [ 1076.197718][T11150] usb usb6-port1: unable to enumerate USB device [ 1076.383533][T18114] loop1: detected capacity change from 0 to 1024 [ 1081.401164][T18127] blktrace: Concurrent blktraces are not allowed on loop2 [ 1084.781057][ T4363] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1084.951278][ T4363] usb 6-1: device descriptor read/64, error -71 [ 1085.231220][ T4363] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1085.391226][ T4363] usb 6-1: device descriptor read/64, error -71 [ 1085.394099][T18175] blktrace: Concurrent blktraces are not allowed on loop16 [ 1085.511214][ T4363] usb usb6-port1: attempt power cycle [ 1085.921053][ T4363] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1085.971778][ T4363] usb 6-1: device descriptor read/8, error -71 [ 1086.241367][ T4363] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1086.311515][ T4363] usb 6-1: device descriptor read/8, error -71 [ 1086.442143][ T4363] usb usb6-port1: unable to enumerate USB device [ 1086.515551][T18206] svc: failed to register nfsdv3 RPC service (errno 111). [ 1089.123781][T18206] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1094.679387][ T4363] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1094.921105][ T4363] usb 10-1: device descriptor read/64, error -71 [ 1095.191071][ T4363] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1096.001132][ T4363] usb 10-1: device descriptor read/64, error -71 [ 1096.141225][ T4363] usb usb10-port1: attempt power cycle [ 1097.601022][ T4363] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1098.018466][ T4363] usb 10-1: device descriptor read/8, error -71 [ 1098.647724][T18304] svc: failed to register nfsdv3 RPC service (errno 111). [ 1098.686151][T18304] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1106.361012][T11150] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1107.370257][T11150] usb 10-1: device descriptor read/64, error -71 [ 1107.641073][T11150] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1107.841373][T11150] usb 10-1: device descriptor read/64, error -71 [ 1108.012593][T11150] usb usb10-port1: attempt power cycle [ 1108.029713][T18382] jffs2: notice: (18382) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1110.301020][T11150] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1110.331545][T11150] usb 10-1: device descriptor read/8, error -71 [ 1112.268097][ T4434] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.317843][ T4434] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.756556][ T4434] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.800977][ T4434] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.016235][ T4434] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1113.056697][ T4434] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.688413][ T4434] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1114.600196][ T4434] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.778987][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.785475][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.321292][ T4434] tipc: Disabling bearer [ 1118.350478][ T4434] tipc: Left network mode [ 1123.009330][T18463] blktrace: Concurrent blktraces are not allowed on loop10 [ 1123.179635][T18485] jffs2: notice: (18485) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1133.341146][ T4434] device hsr_slave_0 left promiscuous mode [ 1134.019399][ T4434] device hsr_slave_1 left promiscuous mode [ 1134.134593][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1134.157219][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1134.231945][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1134.239498][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1134.342180][ T4434] device bridge_slave_1 left promiscuous mode [ 1134.348397][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.427829][ T4434] device bridge_slave_0 left promiscuous mode [ 1134.461142][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.671573][ T4434] device veth1_macvtap left promiscuous mode [ 1134.709273][ T4434] device veth0_macvtap left promiscuous mode [ 1134.801060][ T4434] device veth1_vlan left promiscuous mode [ 1135.479550][ T4434] device veth0_vlan left promiscuous mode [ 1137.078610][T18606] svc: failed to register lockdv1 RPC service (errno 111). [ 1137.402301][T18614] fuse: Bad value for 'group_id' [ 1141.271144][T14659] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1142.656417][T14659] usb 10-1: Using ep0 maxpacket: 32 [ 1142.664735][T14659] usb 10-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1142.700989][T14659] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1142.739208][T14659] usb 10-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice= 0.40 [ 1142.758985][T14659] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.776424][T14659] usb 10-1: Product: syz [ 1142.784850][T14659] usb 10-1: Manufacturer: syz [ 1142.791320][T14659] usb 10-1: SerialNumber: syz [ 1143.050732][T14659] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input31 [ 1143.135748][T14659] usb 10-1: USB disconnect, device number 17 [ 1144.623469][T18657] fuse: Bad value for 'group_id' [ 1148.165538][ T4434] team0 (unregistering): Port device team_slave_1 removed [ 1149.842443][ T4434] team0 (unregistering): Port device team_slave_0 removed [ 1150.424193][ T4434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1150.770546][ T4434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1150.933279][T18698] svc: failed to register lockdv1 RPC service (errno 111). [ 1153.339372][ T4434] bond0 (unregistering): Released all slaves [ 1153.403530][T18722] fuse: Bad value for 'group_id' [ 1157.967186][T18752] ip_tables: iptables: counters copy to user failed while replacing table [ 1158.059371][T18753] loop9: detected capacity change from 0 to 1024 [ 1159.004008][T12976] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1159.015710][T12976] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1159.041648][T12976] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1159.059716][T14588] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1159.068926][T14588] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1159.076843][T14588] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1159.211422][T18765] input: syz1 as /devices/virtual/input/input32 [ 1160.391762][T18765] FAULT_INJECTION: forcing a failure. [ 1160.391762][T18765] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1160.503399][T18765] CPU: 0 PID: 18765 Comm: syz.9.3518 Not tainted syzkaller #0 [ 1160.510967][T18765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1160.521042][T18765] Call Trace: [ 1160.524317][T18765] [ 1160.527236][T18765] dump_stack_lvl+0x188/0x24e [ 1160.531923][T18765] ? show_regs_print_info+0x12/0x12 [ 1160.537119][T18765] ? load_image+0x410/0x410 [ 1160.541625][T18765] ? is_dynamic_key+0x260/0x260 [ 1160.546480][T18765] should_fail_ex+0x390/0x4c0 [ 1160.551177][T18765] get_futex_key+0x1a6/0xe70 [ 1160.555768][T18765] ? futex_setup_timer+0xc0/0xc0 [ 1160.560705][T18765] futex_wait_setup+0xb8/0x270 [ 1160.565474][T18765] ? futex_wait_multiple+0x970/0x970 [ 1160.570783][T18765] futex_wait+0x1cb/0x640 [ 1160.575122][T18765] ? futex_wait_setup+0x270/0x270 [ 1160.580166][T18765] do_futex+0x310/0x320 [ 1160.584330][T18765] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1160.590222][T18765] ? uinput_release+0x50/0x50 [ 1160.594977][T18765] __se_sys_futex+0x381/0x410 [ 1160.599664][T18765] ? __x64_sys_futex+0xf0/0xf0 [ 1160.604432][T18765] ? __x64_sys_futex+0x1d/0xf0 [ 1160.609191][T18765] do_syscall_64+0x4c/0xa0 [ 1160.613611][T18765] ? clear_bhb_loop+0x60/0xb0 [ 1160.618394][T18765] ? clear_bhb_loop+0x60/0xb0 [ 1160.623073][T18765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1160.628975][T18765] RIP: 0033:0x7fabf999fb19 [ 1160.633388][T18765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.653101][T18765] RSP: 002b:00007fabf7bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1160.661521][T18765] RAX: ffffffffffffffda RBX: 00007fabf9c25fa8 RCX: 00007fabf999fb19 [ 1160.669502][T18765] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fabf9c25fa8 [ 1160.677469][T18765] RBP: 00007fabf9c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1160.685436][T18765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1160.693426][T18765] R13: 00007fabf9c26038 R14: 00007fff722f5a40 R15: 00007fff722f5b28 [ 1160.701433][T18765] [ 1161.130635][T18759] rxe_eth0 speed is unknown, defaulting to 1000 [ 1161.141127][T14588] Bluetooth: hci1: command 0x0409 tx timeout [ 1163.169031][ T4411] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.211019][T14588] Bluetooth: hci1: command 0x041b tx timeout [ 1163.529685][ T4411] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.615685][ T7] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1163.787826][ T4411] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.875082][ T7] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.906578][ T7] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1163.947231][ T7] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1164.035637][ T7] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1164.058298][ T7] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.087845][ T7] usb 9-1: config 0 descriptor?? [ 1164.188709][ T4411] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.243266][T18759] chnl_net:caif_netlink_parms(): no params data found [ 1164.518801][ T7] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1164.531645][ T7] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1164.547968][ T7] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1164.558111][ T7] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1164.566019][ T7] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1164.573794][ T7] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1164.592923][ T7] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 1164.632453][T18759] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.634313][ T7] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1164.640626][T18759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.717224][T18759] device bridge_slave_0 entered promiscuous mode [ 1164.797110][T18759] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.817376][T18759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.859822][T18759] device bridge_slave_1 entered promiscuous mode [ 1164.959314][T18759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.997659][ T5793] usb 9-1: USB disconnect, device number 9 [ 1165.039828][T18759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1165.135042][T18759] team0: Port device team_slave_0 added [ 1165.147804][T18759] team0: Port device team_slave_1 added [ 1165.197958][T18759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.219405][T18816] fido_id[18816]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1165.224175][T18759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1165.291112][T14588] Bluetooth: hci1: command 0x040f tx timeout [ 1166.621098][T18759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1166.721300][T18831] ip_tables: iptables: counters copy to user failed while replacing table [ 1167.002516][T18759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1167.009535][T18759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1167.371055][T14588] Bluetooth: hci1: command 0x0419 tx timeout [ 1168.061239][T18759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1168.276418][T18843] loop1: detected capacity change from 0 to 1024 [ 1169.113187][T18759] device hsr_slave_0 entered promiscuous mode [ 1169.140037][T18759] device hsr_slave_1 entered promiscuous mode [ 1169.208321][T18759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1169.257774][T18759] Cannot create hsr debugfs directory [ 1172.137748][T18878] ip_tables: iptables: counters copy to user failed while replacing table [ 1177.213449][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.219943][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.487546][T18759] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1180.653889][ T4411] device hsr_slave_0 left promiscuous mode [ 1180.688790][ T4411] device hsr_slave_1 left promiscuous mode [ 1180.781184][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1180.788763][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1180.898962][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1180.915514][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1181.005305][ T4411] device bridge_slave_1 left promiscuous mode [ 1181.014949][ T4411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.264631][ T4411] device bridge_slave_0 left promiscuous mode [ 1183.310653][ T4411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.540891][ T4411] device veth1_macvtap left promiscuous mode [ 1183.547420][ T4411] device veth0_macvtap left promiscuous mode [ 1184.471123][ T4411] device veth1_vlan left promiscuous mode [ 1184.476965][ T4411] device veth0_vlan left promiscuous mode [ 1186.689976][T18961] ip_tables: iptables: counters copy to user failed while replacing table [ 1188.549391][T18968] loop9: detected capacity change from 0 to 1024 [ 1189.399941][T18986] input: syz1 as /devices/virtual/input/input33 [ 1189.427599][T18986] FAULT_INJECTION: forcing a failure. [ 1189.427599][T18986] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.504341][T18986] CPU: 1 PID: 18986 Comm: syz.8.3561 Not tainted syzkaller #0 [ 1189.511993][T18986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1189.522099][T18986] Call Trace: [ 1189.525373][T18986] [ 1189.528301][T18986] dump_stack_lvl+0x188/0x24e [ 1189.532986][T18986] ? show_regs_print_info+0x12/0x12 [ 1189.538180][T18986] ? load_image+0x410/0x410 [ 1189.542692][T18986] ? __lock_acquire+0x7ea0/0x7ea0 [ 1189.547747][T18986] ? kernel_text_address+0x9c/0xd0 [ 1189.552869][T18986] should_fail_ex+0x390/0x4c0 [ 1189.557578][T18986] should_failslab+0x5/0x20 [ 1189.562082][T18986] slab_pre_alloc_hook+0x59/0x300 [ 1189.567133][T18986] ? string+0x257/0x290 [ 1189.571326][T18986] ? kasprintf+0xdf/0x130 [ 1189.575900][T18986] __kmem_cache_alloc_node+0x4f/0x270 [ 1189.581282][T18986] ? kasprintf+0xdf/0x130 [ 1189.585612][T18986] __kmalloc_node_track_caller+0xa0/0x240 [ 1189.591330][T18986] kvasprintf+0xe8/0x1a0 [ 1189.595573][T18986] ? bust_spinlocks+0xd0/0xd0 [ 1189.600284][T18986] kasprintf+0xdf/0x130 [ 1189.604450][T18986] ? widen_string+0x3b/0x2b0 [ 1189.609072][T18986] ? kvasprintf_const+0x240/0x240 [ 1189.614100][T18986] ? kobject_uevent_env+0x890/0x890 [ 1189.619333][T18986] ? input_dev_release_keys+0x170/0x170 [ 1189.624956][T18986] device_get_devnode+0x157/0x290 [ 1189.630039][T18986] dev_uevent+0x162/0x740 [ 1189.634438][T18986] ? dev_uevent_name+0xa0/0xa0 [ 1189.639199][T18986] ? kobject_get_path+0x1a2/0x220 [ 1189.644218][T18986] kobject_uevent_env+0x45b/0x890 [ 1189.649237][T18986] device_add+0xac2/0x1050 [ 1189.653653][T18986] cdev_device_add+0x19d/0x340 [ 1189.658541][T18986] evdev_connect+0x350/0x3f0 [ 1189.664622][T18986] input_register_device+0xd91/0x12d0 [ 1189.670202][T18986] uinput_create_device+0x53e/0x680 [ 1189.675431][T18986] uinput_ioctl_handler+0x7a0/0x13d0 [ 1189.680721][T18986] ? uinput_release+0x50/0x50 [ 1189.685497][T18986] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1189.690548][T18986] ? security_file_ioctl+0x7c/0xa0 [ 1189.695657][T18986] ? uinput_poll+0x120/0x120 [ 1189.700252][T18986] __se_sys_ioctl+0xfa/0x170 [ 1189.704871][T18986] do_syscall_64+0x4c/0xa0 [ 1189.709404][T18986] ? clear_bhb_loop+0x60/0xb0 [ 1189.714091][T18986] ? clear_bhb_loop+0x60/0xb0 [ 1189.718781][T18986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1189.724672][T18986] RIP: 0033:0x7fcd1379fb19 [ 1189.729076][T18986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.748776][T18986] RSP: 002b:00007fcd145e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1189.757288][T18986] RAX: ffffffffffffffda RBX: 00007fcd13a25fa0 RCX: 00007fcd1379fb19 [ 1189.765672][T18986] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 1189.773684][T18986] RBP: 00007fcd13837b70 R08: 0000000000000000 R09: 0000000000000000 [ 1189.781657][T18986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1189.789708][T18986] R13: 00007fcd13a26038 R14: 00007fcd13a25fa0 R15: 00007ffea368dcc8 [ 1189.797706][T18986] [ 1189.820732][T18988] ip_tables: iptables: counters copy to user failed while replacing table [ 1194.918301][T19007] ip_tables: iptables: counters copy to user failed while replacing table [ 1197.148579][T19020] loop5: detected capacity change from 0 to 1024 [ 1197.311245][T19022] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1198.925080][T19034] input: syz1 as /devices/virtual/input/input34 [ 1198.995765][T19034] FAULT_INJECTION: forcing a failure. [ 1198.995765][T19034] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.056653][T19034] CPU: 1 PID: 19034 Comm: syz.1.3569 Not tainted syzkaller #0 [ 1199.064180][T19034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1199.074362][T19034] Call Trace: [ 1199.077664][T19034] [ 1199.080619][T19034] dump_stack_lvl+0x188/0x24e [ 1199.085668][T19034] ? show_regs_print_info+0x12/0x12 [ 1199.090903][T19034] ? load_image+0x410/0x410 [ 1199.095441][T19034] ? __might_sleep+0xd0/0xd0 [ 1199.100057][T19034] ? __lock_acquire+0x7ea0/0x7ea0 [ 1199.105121][T19034] should_fail_ex+0x390/0x4c0 [ 1199.109858][T19034] should_failslab+0x5/0x20 [ 1199.114377][T19034] slab_pre_alloc_hook+0x59/0x300 [ 1199.120479][T19034] ? netlink_has_listeners+0x73/0x3d0 [ 1199.125961][T19034] kmem_cache_alloc_node+0x5a/0x310 [ 1199.131288][T19034] ? add_uevent_var+0x27c/0x460 [ 1199.136184][T19034] ? __alloc_skb+0xf9/0x7d0 [ 1199.140753][T19034] __alloc_skb+0xf9/0x7d0 [ 1199.145120][T19034] alloc_uevent_skb+0x7d/0x230 [ 1199.149884][T19034] kobject_uevent_net_broadcast+0x2e6/0x530 [ 1199.155787][T19034] kobject_uevent_env+0x555/0x890 [ 1199.160930][T19034] device_add+0xac2/0x1050 [ 1199.165376][T19034] cdev_device_add+0x19d/0x340 [ 1199.170154][T19034] evdev_connect+0x350/0x3f0 [ 1199.174766][T19034] input_register_device+0xd91/0x12d0 [ 1199.180156][T19034] uinput_create_device+0x53e/0x680 [ 1199.185358][T19034] uinput_ioctl_handler+0x7a0/0x13d0 [ 1199.190643][T19034] ? uinput_release+0x50/0x50 [ 1199.195329][T19034] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1199.200270][T19034] ? security_file_ioctl+0x7c/0xa0 [ 1199.205396][T19034] ? uinput_poll+0x120/0x120 [ 1199.209983][T19034] __se_sys_ioctl+0xfa/0x170 [ 1199.214581][T19034] do_syscall_64+0x4c/0xa0 [ 1199.219004][T19034] ? clear_bhb_loop+0x60/0xb0 [ 1199.223686][T19034] ? clear_bhb_loop+0x60/0xb0 [ 1199.228384][T19034] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1199.234301][T19034] RIP: 0033:0x7fba9a19fb19 [ 1199.238933][T19034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1199.258998][T19034] RSP: 002b:00007fba983f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1199.267513][T19034] RAX: ffffffffffffffda RBX: 00007fba9a425fa0 RCX: 00007fba9a19fb19 [ 1199.275488][T19034] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 1199.283489][T19034] RBP: 00007fba9a237b70 R08: 0000000000000000 R09: 0000000000000000 [ 1199.291474][T19034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1199.299445][T19034] R13: 00007fba9a426038 R14: 00007fba9a425fa0 R15: 00007ffced0f9bb8 [ 1199.307530][T19034] [ 1203.820750][T19055] input: syz1 as /devices/virtual/input/input35 [ 1206.444702][ T4411] team0 (unregistering): Port device team_slave_1 removed [ 1206.855359][ T4411] team0 (unregistering): Port device team_slave_0 removed [ 1209.463279][ T4411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1209.514628][T19083] input: syz1 as /devices/virtual/input/input36 [ 1209.532856][T19083] FAULT_INJECTION: forcing a failure. [ 1209.532856][T19083] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1209.561059][T19085] input: syz1 as /devices/virtual/input/input37 [ 1209.582681][T19083] CPU: 0 PID: 19083 Comm: syz.8.3583 Not tainted syzkaller #0 [ 1209.590292][T19083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1209.600379][T19083] Call Trace: [ 1209.603676][T19083] [ 1209.606625][T19083] dump_stack_lvl+0x188/0x24e [ 1209.611338][T19083] ? show_regs_print_info+0x12/0x12 [ 1209.616565][T19083] ? load_image+0x410/0x410 [ 1209.621098][T19083] ? verify_lock_unused+0x140/0x140 [ 1209.626318][T19083] should_fail_ex+0x390/0x4c0 [ 1209.631005][T19083] get_futex_key+0x1a6/0xe70 [ 1209.635602][T19083] ? futex_setup_timer+0xc0/0xc0 [ 1209.640548][T19083] futex_wake+0x123/0x4f0 [ 1209.644885][T19083] ? futex_wake_mark+0x150/0x150 [ 1209.649817][T19083] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1209.655447][T19083] ? mutex_unlock+0x10/0x10 [ 1209.659952][T19083] do_futex+0x2e2/0x320 [ 1209.664108][T19083] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1209.670003][T19083] ? uinput_release+0x50/0x50 [ 1209.674690][T19083] __se_sys_futex+0x381/0x410 [ 1209.679373][T19083] ? __x64_sys_futex+0xf0/0xf0 [ 1209.684161][T19083] ? __x64_sys_futex+0x1d/0xf0 [ 1209.688928][T19083] do_syscall_64+0x4c/0xa0 [ 1209.693381][T19083] ? clear_bhb_loop+0x60/0xb0 [ 1209.698065][T19083] ? clear_bhb_loop+0x60/0xb0 [ 1209.702749][T19083] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1209.708648][T19083] RIP: 0033:0x7fcd1379fb19 [ 1209.713074][T19083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.732856][T19083] RSP: 002b:00007fcd145e10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1209.741272][T19083] RAX: ffffffffffffffda RBX: 00007fcd13a25fa8 RCX: 00007fcd1379fb19 [ 1209.749242][T19083] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcd13a25fac [ 1209.757221][T19083] RBP: 00007fcd13a25fa0 R08: 001d1abc6948f88c R09: 0000000000000000 [ 1209.765309][T19083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1209.773292][T19083] R13: 00007fcd13a26038 R14: 00007ffea368dbe0 R15: 00007ffea368dcc8 [ 1209.781388][T19083] [ 1209.838486][T19085] FAULT_INJECTION: forcing a failure. [ 1209.838486][T19085] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.915703][T19085] CPU: 1 PID: 19085 Comm: syz.9.3586 Not tainted syzkaller #0 [ 1209.923192][T19085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1209.933356][T19085] Call Trace: [ 1209.936633][T19085] [ 1209.939575][T19085] dump_stack_lvl+0x188/0x24e [ 1209.944399][T19085] ? show_regs_print_info+0x12/0x12 [ 1209.949719][T19085] ? load_image+0x410/0x410 [ 1209.954254][T19085] ? __might_sleep+0xd0/0xd0 [ 1209.958871][T19085] ? __lock_acquire+0x7ea0/0x7ea0 [ 1209.963968][T19085] should_fail_ex+0x390/0x4c0 [ 1209.968659][T19085] should_failslab+0x5/0x20 [ 1209.973171][T19085] slab_pre_alloc_hook+0x59/0x300 [ 1209.978190][T19085] ? netlink_has_listeners+0x73/0x3d0 [ 1209.983562][T19085] kmem_cache_alloc_node+0x5a/0x310 [ 1209.988769][T19085] ? add_uevent_var+0x27c/0x460 [ 1209.993613][T19085] ? __alloc_skb+0xf9/0x7d0 [ 1209.998291][T19085] __alloc_skb+0xf9/0x7d0 [ 1210.002615][T19085] alloc_uevent_skb+0x7d/0x230 [ 1210.007373][T19085] kobject_uevent_net_broadcast+0x2e6/0x530 [ 1210.013260][T19085] kobject_uevent_env+0x555/0x890 [ 1210.018276][T19085] device_add+0xac2/0x1050 [ 1210.022715][T19085] cdev_device_add+0x19d/0x340 [ 1210.027485][T19085] evdev_connect+0x350/0x3f0 [ 1210.032081][T19085] input_register_device+0xd91/0x12d0 [ 1210.037483][T19085] uinput_create_device+0x53e/0x680 [ 1210.042674][T19085] uinput_ioctl_handler+0x7a0/0x13d0 [ 1210.047953][T19085] ? uinput_release+0x50/0x50 [ 1210.052625][T19085] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1210.057567][T19085] ? security_file_ioctl+0x7c/0xa0 [ 1210.062685][T19085] ? uinput_poll+0x120/0x120 [ 1210.067266][T19085] __se_sys_ioctl+0xfa/0x170 [ 1210.072000][T19085] do_syscall_64+0x4c/0xa0 [ 1210.076422][T19085] ? clear_bhb_loop+0x60/0xb0 [ 1210.081198][T19085] ? clear_bhb_loop+0x60/0xb0 [ 1210.085965][T19085] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1210.091950][T19085] RIP: 0033:0x7fabf999fb19 [ 1210.096391][T19085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1210.116006][T19085] RSP: 002b:00007fabf7bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1210.124591][T19085] RAX: ffffffffffffffda RBX: 00007fabf9c25fa0 RCX: 00007fabf999fb19 [ 1210.132567][T19085] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 1210.140644][T19085] RBP: 00007fabf9a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1210.148626][T19085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1210.156605][T19085] R13: 00007fabf9c26038 R14: 00007fabf9c25fa0 R15: 00007fff722f5b28 [ 1210.164675][T19085] [ 1210.441896][ T4411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1211.873105][T19093] svc: failed to register lockdv1 RPC service (errno 111). [ 1218.871775][T19116] fuse: Unknown parameter 'grou00000000000000000000' [ 1219.340363][T14272] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1219.351980][T14272] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1219.362361][T14272] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1219.388151][T14272] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1219.401807][T14272] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1219.409127][T14272] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1221.965164][T14272] Bluetooth: hci5: command 0x0409 tx timeout [ 1224.012794][T14272] Bluetooth: hci5: command 0x041b tx timeout [ 1224.116000][ T4411] bond0 (unregistering): Released all slaves [ 1224.862852][T18759] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1224.916675][T19120] rxe_eth0 speed is unknown, defaulting to 1000 [ 1224.954014][T19147] svc: failed to register lockdv1 RPC service (errno 111). [ 1226.695044][T14272] Bluetooth: hci5: command 0x040f tx timeout [ 1226.808686][T19162] jffs2: notice: (19162) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1227.454538][T19120] chnl_net:caif_netlink_parms(): no params data found [ 1227.658032][T19170] fuse: Unknown parameter 'grou00000000000000000000' [ 1228.902034][T14272] Bluetooth: hci5: command 0x0419 tx timeout [ 1229.257684][T19182] loop1: detected capacity change from 0 to 1024 [ 1230.122831][T19120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.141227][T19120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.178584][T19120] device bridge_slave_0 entered promiscuous mode [ 1230.244742][T19120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.269616][T19120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.311112][T19120] device bridge_slave_1 entered promiscuous mode [ 1230.414374][T19120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1230.457391][T19120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1230.643116][T19120] team0: Port device team_slave_0 added [ 1230.696433][T19120] team0: Port device team_slave_1 added [ 1230.900678][T19120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1231.611388][T19120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1231.638299][T19120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1231.697432][T19120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1231.735211][T19120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.937142][T19120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1234.447368][T19120] device hsr_slave_0 entered promiscuous mode [ 1234.509360][T19120] device hsr_slave_1 entered promiscuous mode [ 1234.542377][T19120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1234.542382][T19223] input: syz1 as /devices/virtual/input/input38 [ 1234.550095][T19120] Cannot create hsr debugfs directory [ 1234.620891][T19226] input: syz1 as /devices/virtual/input/input39 [ 1234.654766][T19226] FAULT_INJECTION: forcing a failure. [ 1234.654766][T19226] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.688236][T19226] CPU: 1 PID: 19226 Comm: syz.8.3609 Not tainted syzkaller #0 [ 1234.696019][T19226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1234.706109][T19226] Call Trace: [ 1234.709411][T19226] [ 1234.712366][T19226] dump_stack_lvl+0x188/0x24e [ 1234.717094][T19226] ? show_regs_print_info+0x12/0x12 [ 1234.722330][T19226] ? load_image+0x410/0x410 [ 1234.726873][T19226] ? __might_sleep+0xd0/0xd0 [ 1234.731504][T19226] ? __lock_acquire+0x7ea0/0x7ea0 [ 1234.736654][T19226] should_fail_ex+0x390/0x4c0 [ 1234.741374][T19226] should_failslab+0x5/0x20 [ 1234.745909][T19226] slab_pre_alloc_hook+0x59/0x300 [ 1234.750978][T19226] ? netlink_has_listeners+0x73/0x3d0 [ 1234.756398][T19226] kmem_cache_alloc_node+0x5a/0x310 [ 1234.761901][T19226] ? add_uevent_var+0x27c/0x460 [ 1234.766820][T19226] ? __alloc_skb+0xf9/0x7d0 [ 1234.771370][T19226] __alloc_skb+0xf9/0x7d0 [ 1234.775753][T19226] alloc_uevent_skb+0x7d/0x230 [ 1234.780656][T19226] kobject_uevent_net_broadcast+0x2e6/0x530 [ 1234.786677][T19226] kobject_uevent_env+0x555/0x890 [ 1234.791739][T19226] device_add+0xac2/0x1050 [ 1234.796327][T19226] cdev_device_add+0x19d/0x340 [ 1234.801154][T19226] evdev_connect+0x350/0x3f0 [ 1234.805886][T19226] input_register_device+0xd91/0x12d0 [ 1234.811304][T19226] uinput_create_device+0x53e/0x680 [ 1234.816536][T19226] uinput_ioctl_handler+0x7a0/0x13d0 [ 1234.821848][T19226] ? uinput_release+0x50/0x50 [ 1234.826652][T19226] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1234.831626][T19226] ? security_file_ioctl+0x7c/0xa0 [ 1234.836780][T19226] ? uinput_poll+0x120/0x120 [ 1234.841392][T19226] __se_sys_ioctl+0xfa/0x170 [ 1234.846025][T19226] do_syscall_64+0x4c/0xa0 [ 1234.850482][T19226] ? clear_bhb_loop+0x60/0xb0 [ 1234.855555][T19226] ? clear_bhb_loop+0x60/0xb0 [ 1234.860359][T19226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1234.866301][T19226] RIP: 0033:0x7fcd1379fb19 [ 1234.870737][T19226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1234.890560][T19226] RSP: 002b:00007fcd145e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1234.899063][T19226] RAX: ffffffffffffffda RBX: 00007fcd13a25fa0 RCX: 00007fcd1379fb19 [ 1234.907334][T19226] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 1234.915421][T19226] RBP: 00007fcd13837b70 R08: 0000000000000000 R09: 0000000000000000 [ 1234.924203][T19226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1234.932206][T19226] R13: 00007fcd13a26038 R14: 00007fcd13a25fa0 R15: 00007ffea368dcc8 [ 1234.940237][T19226] [ 1234.943334][ C1] vkms_vblank_simulate: vblank timer overrun [ 1236.483705][T19246] fuse: Unknown parameter 'grou00000000000000000000' [ 1237.938126][T19265] fuse: Unknown parameter 'group_i00000000000000000000' [ 1238.662948][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.669855][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.166111][T19285] jffs2: notice: (19285) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1243.164734][ T32] device hsr_slave_0 left promiscuous mode [ 1243.181236][ T32] device hsr_slave_1 left promiscuous mode [ 1243.278037][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1243.321646][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1243.351610][ T32] device bridge_slave_1 left promiscuous mode [ 1243.357945][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.415737][ T32] device bridge_slave_0 left promiscuous mode [ 1243.454372][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.458763][T19333] ip_tables: iptables: counters copy to user failed while replacing table [ 1247.504185][ T32] team0 (unregistering): Port device team_slave_1 removed [ 1248.073443][ T32] team0 (unregistering): Port device team_slave_0 removed [ 1248.332340][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.765681][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.144482][T19336] blktrace: Concurrent blktraces are not allowed on loop18 [ 1251.515041][ T32] bond0 (unregistering): Released all slaves [ 1251.778978][T19120] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1252.415000][T19120] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1252.948078][T19120] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1253.020426][T19120] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1253.395015][T19120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1255.681532][T15810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1255.691526][T15810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1255.724621][T19120] 8021q: adding VLAN 0 to HW filter on device team0 [ 1255.774834][T15810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1255.811748][T15810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1255.841797][T15810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.848934][T15810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1255.972517][T19405] ip_tables: iptables: counters copy to user failed while replacing table [ 1256.711382][T15810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1256.767955][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1256.839019][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1256.886928][T15084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.894135][T15084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1256.959005][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1256.996215][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1257.079620][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1257.123188][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1257.151926][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1257.589384][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1257.846895][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1257.971769][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1258.025729][T19120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1258.081893][T19120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1258.115161][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1258.167511][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1258.204418][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1259.571704][T19422] jffs2: notice: (19422) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1260.488916][T19446] loop5: detected capacity change from 0 to 1024 [ 1260.571478][T19224] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1260.972296][T19120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1260.979490][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1261.011211][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1261.104934][T15169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1261.124185][T15169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1261.233256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1261.242462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1261.274252][T19120] device veth0_vlan entered promiscuous mode [ 1261.286777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1261.322252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1261.355635][T19120] device veth1_vlan entered promiscuous mode [ 1261.597464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1261.631393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1261.671862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1261.710843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1261.753275][T19120] device veth0_macvtap entered promiscuous mode [ 1261.794614][T19120] device veth1_macvtap entered promiscuous mode [ 1262.109314][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1262.127118][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1262.371896][T19120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1262.401006][T19120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.410871][T19120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1262.450886][T19120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.487402][T19120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1263.591018][T19120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.611109][T19120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1263.641011][T19120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.548208][T19120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1264.563802][T14833] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1264.627974][T14833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1264.797323][T19120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.856227][T19120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.921013][T19120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.991101][T19120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.037193][T19120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.113751][T19120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.145358][T19120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.200987][T19120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.279515][T19120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1265.480253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1266.148843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1266.224448][T19120] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.305678][T19120] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.341018][T19120] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.368075][T19120] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.939663][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.954784][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.011851][T19516] ip_tables: iptables: counters copy to user failed while replacing table [ 1269.025910][T15205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1269.106313][T15205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.131089][T15205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.160590][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1273.002421][T19551] loop1: detected capacity change from 0 to 1024 [ 1279.441419][T19611] jffs2: notice: (19611) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1284.730952][ T956] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1300.094903][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.101635][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.971491][T19773] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1304.251214][T14272] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1314.522031][ T26] audit: type=1800 audit(1794183923.329:217): pid=19842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3706" name="idVendor" dev="configfs" ino=124574 res=0 errno=0 [ 1316.113373][ T26] audit: type=1800 audit(1794183924.959:218): pid=19852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3703" name="idVendor" dev="configfs" ino=124584 res=0 errno=0 [ 1318.851915][T19872] input: syz1 as /devices/virtual/input/input40 [ 1321.510747][ T26] audit: type=1800 audit(1794183930.359:219): pid=19889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3708" name="idVendor" dev="configfs" ino=124622 res=0 errno=0 [ 1335.843861][T19985] loop9: detected capacity change from 0 to 1024 [ 1336.118358][T14272] Bluetooth: Wrong link type (-71) [ 1341.231055][T11150] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1343.130998][T14272] Bluetooth: hci5: command 0x0406 tx timeout [ 1349.004523][ T26] audit: type=1800 audit(1794183957.859:220): pid=20079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3739" name="idVendor" dev="configfs" ino=126071 res=0 errno=0 [ 1349.363523][ T4365] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1349.526820][T20083] blktrace: Concurrent blktraces are not allowed on loop0 [ 1350.001885][ T4365] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1350.003637][T20091] loop1: detected capacity change from 0 to 128 [ 1350.038950][ T4365] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1350.089831][ T4365] usb 1-1: Dual-Role OTG device on HNP port [ 1350.110143][ T4365] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 1350.140601][ T4365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.275005][ C0] ------------[ cut here ]------------ [ 1350.281287][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 1350.288513][ C0] WARNING: CPU: 0 PID: 956 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x27c/0x4d0 [ 1350.298561][ C0] Modules linked in: [ 1350.302463][ C0] CPU: 0 PID: 956 Comm: kworker/0:2 Not tainted syzkaller #0 [ 1350.309854][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1350.319933][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 1350.327227][ C0] RIP: 0010:usb_ep_enable+0x27c/0x4d0 [ 1350.332620][ C0] Code: 49 8b 0e 48 c7 c0 80 08 5e 8b 49 c7 c0 a0 08 5e 8b 4c 0f 44 c0 48 c7 c7 40 08 5e 8b 48 c7 c6 a9 84 85 8c 89 ea e8 e4 b3 d2 fa <0f> 0b e9 c4 fe ff ff e8 18 52 07 fb 49 bc 00 00 00 00 00 fc ff df [ 1350.352442][ C0] RSP: 0018:ffffc90000007768 EFLAGS: 00010046 [ 1350.358527][ C0] RAX: 324ef6653c55f500 RBX: ffff8881447c00e0 RCX: ffff888027391e00 [ 1350.366535][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1350.374518][ C0] RBP: 0000000000000081 R08: ffff8880b8c279db R09: 1ffff11017184f3b [ 1350.382579][ C0] R10: dffffc0000000000 R11: ffffed1017184f3c R12: dffffc0000000000 [ 1350.390558][ C0] R13: ffff8881447c010d R14: ffff8881447c00e8 R15: ffff88807d0edc3a [ 1350.398719][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1350.407643][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1350.414226][ C0] CR2: 000000110c3534ea CR3: 000000005f99a000 CR4: 00000000003506f0 [ 1350.422203][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1350.430168][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1350.438139][ C0] Call Trace: [ 1350.441419][ C0] [ 1350.444262][ C0] hidg_set_alt+0x126/0xa00 [ 1350.448888][ C0] ? usb_gadget_set_state+0x142/0x310 [ 1350.454263][ C0] set_config+0x6e8/0xf70 [ 1350.458595][ C0] composite_setup+0x194c/0x2b00 [ 1350.463561][ C0] configfs_composite_setup+0xc3/0x100 [ 1350.469038][ C0] dummy_timer+0x12ed/0x35d0 [ 1350.473732][ C0] ? mark_lock+0x94/0x320 [ 1350.478063][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 1350.483086][ C0] ? lock_chain_count+0x20/0x20 [ 1350.487969][ C0] ? dummy_free_streams+0x520/0x520 [ 1350.493193][ C0] __hrtimer_run_queues+0x522/0xc90 [ 1350.498476][ C0] ? dummy_free_streams+0x520/0x520 [ 1350.503680][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1350.508796][ C0] hrtimer_run_softirq+0x173/0x290 [ 1350.513930][ C0] handle_softirqs+0x291/0x910 [ 1350.518780][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1350.523643][ C0] ? do_softirq+0x210/0x210 [ 1350.528158][ C0] ? hrtimer_interrupt+0x775/0x980 [ 1350.533297][ C0] __irq_exit_rcu+0x13b/0x230 [ 1350.537972][ C0] ? irq_exit_rcu+0x20/0x20 [ 1350.542579][ C0] irq_exit_rcu+0x5/0x20 [ 1350.546826][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1350.552455][ C0] [ 1350.555379][ C0] [ 1350.558300][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1350.564280][ C0] RIP: 0010:curve25519_arch+0x1fac/0x5140 [ 1350.570067][ C0] Code: 0f 38 f6 01 c4 e2 b3 f6 59 28 66 4d 0f 38 f6 cd f3 4c 0f 38 f6 49 08 c4 62 ab f6 69 30 66 4c 0f 38 f6 d3 f3 4c 0f 38 f6 51 10 e2 a3 f6 41 38 66 4d 0f 38 f6 dd f3 4c 0f 38 f6 59 18 66 48 0f [ 1350.589672][ C0] RSP: 0018:ffffc90004da70e0 EFLAGS: 00000a46 [ 1350.595737][ C0] RAX: 65748021853aefd3 RBX: 0000000000000017 RCX: ffffc90004da7180 [ 1350.603712][ C0] RDX: 0000000000000026 RSI: ffffc90004da7260 RDI: 0000000000000000 [ 1350.611678][ C0] RBP: ffffc90004da7430 R08: dadf85766018c6be R09: abb9a9c6a1e7be2c [ 1350.619650][ C0] R10: 668de4af64014356 R11: 9ef65e68efc7914a R12: ffffc90004da72e0 [ 1350.627613][ C0] R13: 0000000000000006 R14: 4ec48997318292bf R15: ffffc90004da72e0 [ 1350.635631][ C0] ? fpu_copy_uabi_to_guest_fpstate+0x200/0x200 [ 1350.642015][ C0] ? _nh_avx2+0x30/0x30 [ 1350.646219][ C0] ? memset+0x1e/0x40 [ 1350.650207][ C0] ? message_ephemeral+0x287/0x310 [ 1350.655339][ C0] mix_dh+0xd1/0x290 [ 1350.659240][ C0] ? message_ephemeral+0x310/0x310 [ 1350.664366][ C0] ? memset+0x1e/0x40 [ 1350.668353][ C0] ? blake2s_final+0x13e/0x250 [ 1350.673118][ C0] wg_noise_handshake_consume_initiation+0x345/0xa80 [ 1350.679791][ C0] ? mark_lock+0x94/0x320 [ 1350.684167][ C0] ? mix_precomputed_dh+0x250/0x250 [ 1350.689380][ C0] ? kernel_fpu_begin_mask+0x3b0/0x4c0 [ 1350.694850][ C0] ? fpu_copy_uabi_to_guest_fpstate+0x200/0x200 [ 1350.701191][ C0] ? memset+0x1e/0x40 [ 1350.705172][ C0] ? blake2s_final+0x13e/0x250 [ 1350.709933][ C0] ? __crypto_memneq+0x3e/0x450 [ 1350.714785][ C0] ? wg_cookie_validate_packet+0x43e/0x580 [ 1350.720644][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1350.725499][ C0] wg_packet_handshake_receive_worker+0x66e/0x1070 [ 1350.732016][ C0] ? wg_packet_purge_staged_packets+0x200/0x200 [ 1350.738315][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1350.744361][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 1350.749401][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1350.754793][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1350.760709][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1350.765635][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1350.770882][ C0] ? process_one_work+0x7b4/0x1160 [ 1350.776017][ C0] process_one_work+0x8ab/0x1160 [ 1350.780983][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1350.786650][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1350.791692][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1350.797353][ C0] ? wq_worker_running+0x97/0x190 [ 1350.802394][ C0] worker_thread+0xaf5/0x12a0 [ 1350.807124][ C0] kthread+0x29d/0x330 [ 1350.811195][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1350.816329][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1350.821467][ C0] ret_from_fork+0x1f/0x30 [ 1350.825947][ C0] [ 1350.828972][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1350.836252][ C0] CPU: 0 PID: 956 Comm: kworker/0:2 Not tainted syzkaller #0 [ 1350.843619][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1350.853675][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 1350.860967][ C0] Call Trace: [ 1350.864244][ C0] [ 1350.867083][ C0] dump_stack_lvl+0x188/0x24e [ 1350.871859][ C0] ? memcpy+0x3c/0x60 [ 1350.875838][ C0] ? show_regs_print_info+0x12/0x12 [ 1350.881106][ C0] ? load_image+0x410/0x410 [ 1350.885613][ C0] panic+0x2d3/0x710 [ 1350.889546][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1350.894091][ C0] ? ret_from_fork+0x1f/0x30 [ 1350.898703][ C0] __warn+0x2f8/0x4f0 [ 1350.902687][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 1350.907482][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 1350.912272][ C0] report_bug+0x2ba/0x4f0 [ 1350.916681][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 1350.921450][ C0] handle_bug+0x3a/0x70 [ 1350.925599][ C0] exc_invalid_op+0x16/0x40 [ 1350.930111][ C0] asm_exc_invalid_op+0x16/0x20 [ 1350.934959][ C0] RIP: 0010:usb_ep_enable+0x27c/0x4d0 [ 1350.940330][ C0] Code: 49 8b 0e 48 c7 c0 80 08 5e 8b 49 c7 c0 a0 08 5e 8b 4c 0f 44 c0 48 c7 c7 40 08 5e 8b 48 c7 c6 a9 84 85 8c 89 ea e8 e4 b3 d2 fa <0f> 0b e9 c4 fe ff ff e8 18 52 07 fb 49 bc 00 00 00 00 00 fc ff df [ 1350.959935][ C0] RSP: 0018:ffffc90000007768 EFLAGS: 00010046 [ 1350.966003][ C0] RAX: 324ef6653c55f500 RBX: ffff8881447c00e0 RCX: ffff888027391e00 [ 1350.973990][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1350.981974][ C0] RBP: 0000000000000081 R08: ffff8880b8c279db R09: 1ffff11017184f3b [ 1350.989954][ C0] R10: dffffc0000000000 R11: ffffed1017184f3c R12: dffffc0000000000 [ 1350.997929][ C0] R13: ffff8881447c010d R14: ffff8881447c00e8 R15: ffff88807d0edc3a [ 1351.005921][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 1351.010702][ C0] hidg_set_alt+0x126/0xa00 [ 1351.015214][ C0] ? usb_gadget_set_state+0x142/0x310 [ 1351.020586][ C0] set_config+0x6e8/0xf70 [ 1351.024945][ C0] composite_setup+0x194c/0x2b00 [ 1351.029889][ C0] configfs_composite_setup+0xc3/0x100 [ 1351.035355][ C0] dummy_timer+0x12ed/0x35d0 [ 1351.039967][ C0] ? mark_lock+0x94/0x320 [ 1351.044302][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 1351.049325][ C0] ? lock_chain_count+0x20/0x20 [ 1351.054184][ C0] ? dummy_free_streams+0x520/0x520 [ 1351.059381][ C0] __hrtimer_run_queues+0x522/0xc90 [ 1351.064665][ C0] ? dummy_free_streams+0x520/0x520 [ 1351.069872][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1351.075129][ C0] hrtimer_run_softirq+0x173/0x290 [ 1351.080260][ C0] handle_softirqs+0x291/0x910 [ 1351.085023][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1351.089872][ C0] ? do_softirq+0x210/0x210 [ 1351.094369][ C0] ? hrtimer_interrupt+0x775/0x980 [ 1351.099487][ C0] __irq_exit_rcu+0x13b/0x230 [ 1351.104166][ C0] ? irq_exit_rcu+0x20/0x20 [ 1351.108764][ C0] irq_exit_rcu+0x5/0x20 [ 1351.113091][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1351.118813][ C0] [ 1351.121735][ C0] [ 1351.124704][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1351.130686][ C0] RIP: 0010:curve25519_arch+0x1fac/0x5140 [ 1351.136406][ C0] Code: 0f 38 f6 01 c4 e2 b3 f6 59 28 66 4d 0f 38 f6 cd f3 4c 0f 38 f6 49 08 c4 62 ab f6 69 30 66 4c 0f 38 f6 d3 f3 4c 0f 38 f6 51 10 e2 a3 f6 41 38 66 4d 0f 38 f6 dd f3 4c 0f 38 f6 59 18 66 48 0f [ 1351.156006][ C0] RSP: 0018:ffffc90004da70e0 EFLAGS: 00000a46 [ 1351.162104][ C0] RAX: 65748021853aefd3 RBX: 0000000000000017 RCX: ffffc90004da7180 [ 1351.170068][ C0] RDX: 0000000000000026 RSI: ffffc90004da7260 RDI: 0000000000000000 [ 1351.178030][ C0] RBP: ffffc90004da7430 R08: dadf85766018c6be R09: abb9a9c6a1e7be2c [ 1351.185996][ C0] R10: 668de4af64014356 R11: 9ef65e68efc7914a R12: ffffc90004da72e0 [ 1351.193980][ C0] R13: 0000000000000006 R14: 4ec48997318292bf R15: ffffc90004da72e0 [ 1351.201990][ C0] ? fpu_copy_uabi_to_guest_fpstate+0x200/0x200 [ 1351.208321][ C0] ? _nh_avx2+0x30/0x30 [ 1351.212600][ C0] ? memset+0x1e/0x40 [ 1351.216582][ C0] ? message_ephemeral+0x287/0x310 [ 1351.221706][ C0] mix_dh+0xd1/0x290 [ 1351.225600][ C0] ? message_ephemeral+0x310/0x310 [ 1351.230718][ C0] ? memset+0x1e/0x40 [ 1351.234692][ C0] ? blake2s_final+0x13e/0x250 [ 1351.239459][ C0] wg_noise_handshake_consume_initiation+0x345/0xa80 [ 1351.246154][ C0] ? mark_lock+0x94/0x320 [ 1351.250486][ C0] ? mix_precomputed_dh+0x250/0x250 [ 1351.255676][ C0] ? kernel_fpu_begin_mask+0x3b0/0x4c0 [ 1351.261130][ C0] ? fpu_copy_uabi_to_guest_fpstate+0x200/0x200 [ 1351.267372][ C0] ? memset+0x1e/0x40 [ 1351.271349][ C0] ? blake2s_final+0x13e/0x250 [ 1351.276104][ C0] ? __crypto_memneq+0x3e/0x450 [ 1351.280959][ C0] ? wg_cookie_validate_packet+0x43e/0x580 [ 1351.286798][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1351.291651][ C0] wg_packet_handshake_receive_worker+0x66e/0x1070 [ 1351.298251][ C0] ? wg_packet_purge_staged_packets+0x200/0x200 [ 1351.304503][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1351.310487][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 1351.315525][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1351.320893][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1351.326789][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1351.331635][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1351.336855][ C0] ? process_one_work+0x7b4/0x1160 [ 1351.341968][ C0] process_one_work+0x8ab/0x1160 [ 1351.346910][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1351.352626][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1351.357646][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1351.363189][ C0] ? wq_worker_running+0x97/0x190 [ 1351.368208][ C0] worker_thread+0xaf5/0x12a0 [ 1351.372901][ C0] kthread+0x29d/0x330 [ 1351.376962][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1351.381986][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1351.386829][ C0] ret_from_fork+0x1f/0x30 [ 1351.391258][ C0] [ 1351.394410][ C0] Kernel Offset: disabled [ 1351.398810][ C0] Rebooting in 86400 seconds..