last executing test programs: 17m1.8799805s ago: executing program 32 (id=69): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 17m1.513983279s ago: executing program 33 (id=71): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x8094) 17m1.245127789s ago: executing program 34 (id=74): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xfe80, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000001980)="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", 0x1004}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432", 0x30}], 0x2, &(0x7f00000010c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0xff00) 16m36.98477271s ago: executing program 35 (id=164): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x20) 16m35.209315394s ago: executing program 36 (id=168): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_macvtap\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x7f, 0x3, 0x2, 0x8, 0x2, 0x9, 0x0, 0x0, 0x3, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x14e174135c0b86de) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}]}) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r5 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r5, 0x8955, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b4080000010200007311490000000000851000f343f4676c333d4c6c0cd6090002000000b7000000000000009500c209000000001600001200000000bd3d6b4469"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) 16m28.862438363s ago: executing program 37 (id=171): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) 16m23.261570703s ago: executing program 38 (id=187): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r2, r1, 0x2f}, 0x20) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020217f914001200002f1eaf", 0xe}, {0x0}], 0x2}, 0x200400c4) 16m22.827581924s ago: executing program 39 (id=189): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 16m12.922250317s ago: executing program 40 (id=193): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 16m5.794409231s ago: executing program 41 (id=199): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x6, 0x2, 0x7, 0x8000000000000001, 0x1}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$getown(r0, 0x9) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, 0x0) 14m59.761511758s ago: executing program 4 (id=325): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r1 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00008c7000/0x2000)=nil, 0x2000, 0x2000007, 0x10, r4, 0x5ee36000) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) 14m52.860642996s ago: executing program 2 (id=332): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r0, r0, 0x2f}, 0x20) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001000)={@cgroup=r0, r1, 0x2f, 0x10, 0x4, @void, @value=r0}, 0x20) 14m52.613339728s ago: executing program 2 (id=333): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) 14m51.328882813s ago: executing program 42 (id=305): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(0xffffffffffffffff, &(0x7f0000003800)=[{&(0x7f0000000100)="2e1221b23bb63f7f77d3df163e75963d86ddf06712e9000d2f8db0049d904972df48040000dbb8a10000", 0x2a}, {&(0x7f0000000240)="000001010000", 0x6}, {&(0x7f0000000080)="a43b2eaab400", 0x6}, {&(0x7f0000000280)="190000dca20b6c2755", 0x9}], 0x4) 14m51.252425197s ago: executing program 2 (id=338): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x325) ftruncate(r0, 0x6000000) 14m50.846083835s ago: executing program 2 (id=340): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 14m50.123455719s ago: executing program 2 (id=341): mlockall(0x6) r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000200)='m', 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x1, 0x6, @broadcast}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x14, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f00000003c0)=0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) write$snddsp(r2, &(0x7f0000000200), 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000180)={'comedi_parport\x00', [0x2000, 0x0, 0x4, 0x1, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x3, 0x3, 0xfffffff7, 0x400101, 0x6, 0x2, 0x0, 0x7f, 0x3, 0x40000003, 0x9, 0x4, 0x4, 0x20001e5b, 0x3, 0x2e66, 0x3, 0x6, 0x4006, 0x0, 0x3]}) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0xfff) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9, 0x12, r0, 0x80000000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0xffffffffdf003fff, 0x0) 14m48.383858907s ago: executing program 4 (id=343): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r0, r0, 0x2f}, 0x20) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001000)={@cgroup=r0, r1, 0x2f, 0x10, 0x4, @void, @value=r0}, 0x20) 14m48.227149381s ago: executing program 4 (id=344): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$mouse(&(0x7f0000000400), 0x80000000, 0x286883) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000008c0)="d8000000180081000181f782db4cb904021d0800ff007c05e8fe50a10a000500014002020c600e41b0001200ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a02000000ca9ec855eff0eb3f365d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505dba36efab70cdb67e8d1cc5c7b06b1eab31f7b05da962834cedde6fdfcf45add8e51ff159ca9680d0", 0xd8}], 0x1}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xaa00, 0x0) read$rfkill(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x7ff, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0xfffffffc, @mcast2}}}, 0x108) close_range(r1, 0xffffffffffffffff, 0x0) 14m46.530280606s ago: executing program 2 (id=347): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') pread64(r3, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 14m45.621628857s ago: executing program 43 (id=347): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') pread64(r3, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 14m45.572201375s ago: executing program 4 (id=350): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 14m45.125424926s ago: executing program 44 (id=345): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 14m45.108334513s ago: executing program 4 (id=353): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r0, r0, 0x2f}, 0x20) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001000)={@cgroup=r0, r1, 0x2f, 0x10, 0x4, @void, @value=r0}, 0x20) 14m41.485519379s ago: executing program 4 (id=355): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40a21, 0x23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) 14m41.122627494s ago: executing program 45 (id=355): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40a21, 0x23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) 14m40.15421541s ago: executing program 0 (id=357): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) gettid() ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000200)={0x9, 0x2, 0x0, 'queue1\x00', 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 14m40.046929765s ago: executing program 0 (id=358): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xaad80) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x4, 0x84) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, &(0x7f00000000c0)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r3, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000500)=""/94, 0x5e}], 0x2, 0x5775, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) r4 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x400, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d2b984b30c50997d3bef409ff2176fd7afe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa501c50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0xfffffffa, 0x6, 0x14, 0x1, "94ba406075c3e07887e9061d8d0a0686c374b8ae5b924bba74286a226b245db0760fcdb7cacf56b15fedb2623d2d2c345b4cb0b5b3e0c3cee141270a91ee86d6", "2730851dc19ac633364ca56b3040de115815af0b5731f87c755f981ba5fefc38", [0xda, 0x5]}) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x85) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0x29, 0xa}, 0x20) 14m38.129271658s ago: executing program 0 (id=359): mount$fuse(0x0, 0x0, 0x0, 0x1040010, 0xfffffffffffffffc) 14m38.072199519s ago: executing program 0 (id=360): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 14m37.899776784s ago: executing program 0 (id=361): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r1 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00008c7000/0x2000)=nil, 0x2000, 0x2000007, 0x10, r4, 0x5ee36000) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) 14m36.781048143s ago: executing program 0 (id=362): socket$inet6_tcp(0xa, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000016050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a3200000000"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 14m36.616076556s ago: executing program 46 (id=362): socket$inet6_tcp(0xa, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000016050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a3200000000"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 14m15.612833367s ago: executing program 6 (id=364): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = socket$inet6(0xa, 0x3, 0xff) userfaultfd(0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x1000, @empty, 0x5}, 0x1c) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) close(r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000002c0)=@nfc={0x27, r4, 0x0, 0x4}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000340)="8955112ff8b0a6ab877a1fc16930e8fe5c11c391b458de987aabee5c5285612afa1c10f3cd450d5414ebd70f2f85baf455f4324bb443bb0d40e6a852c6afd187a888f64a92d8cce3ee548941ec08d382c404d3eb282233c742458deb89fc36e55b24856a1dd1", 0x66}, {&(0x7f0000000480)="ca21659d6079a54ba01d3bc819514b7e235935ddcfb413372867ae70c71c52a82ceba01c787f728c8511d74341b30762f9b357e480db43b0b65e9f90a538ce5f2f9c94c21dd67663793d0415beb4a81ea5260c480678d78e199ae05f9edf2721f119a0de1dc68cca50ebed9e9f33b854c7c255285807cc37f1023754ebbe1b579ba23bff5470e0e56ee95ef4a4841b1ceb6f22f11bf0b6a960c4da29605b509eb04da7d6c85d4de606380c4be6e8ef793bd74dc47648de2d33b5b4", 0xbb}, {&(0x7f0000000540)="bb2ecf099cc2f6e52a364816ed57d7aa0406b9d4c9801e379ec3c27d822d7d48e7dca86599c4561eea09d12fa475af7e61f4ce150bca4cb9b5aaa2fbc8b53f923b409942535ca715689ff7a48adfc2e340c27e199d581cfb32c2fb35e39e2533601366663a6819f13d8b2a0d594ef795b278f14b450a95854d986deb1b99e35b7e0168e2633efdf49d", 0x89}], 0x3}, 0x4c800) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000240)) syz_open_procfs(0x0, 0x0) r5 = socket(0x21, 0x803, 0x3) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_channels={0x3d, 0xffffffff, 0xfffffff9, 0x0, 0x4, 0x2}}) r6 = epoll_create(0xfffffff8) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000001}) epoll_wait(r6, &(0x7f0000000140)=[{}], 0x1, 0x800) pwrite64(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_SETFLAGS(r7, 0x40186f40, &(0x7f0000000440)=0x1f) preadv(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) 14m13.599388404s ago: executing program 6 (id=365): socket$kcm(0x21, 0x2, 0xa) userfaultfd(0x80001) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 14m11.649318883s ago: executing program 6 (id=366): r0 = socket(0x40000000015, 0x5, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80000) 14m11.196169096s ago: executing program 6 (id=367): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 14m10.945882511s ago: executing program 6 (id=368): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r1 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mmap(&(0x7f00008c7000/0x2000)=nil, 0x2000, 0x2000007, 0x10, r4, 0x5ee36000) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) 14m6.573378143s ago: executing program 6 (id=372): syz_open_dev$sg(0x0, 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x48000, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000340)={0x0, {0xffffffff, 0x8}}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000180)) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x10, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r3 = socket(0x10, 0x3, 0x0) connect$bt_sco(r3, &(0x7f0000000000), 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) open_by_handle_at(r3, &(0x7f00000001c0)=@reiserfs_4={0x10, 0x4, {0x3, 0x1, 0xb9, 0x14}}, 0x1) r4 = userfaultfd(0x80001) ioctl$XFS_IOC_EXCHANGE_RANGE(r4, 0x40285881, &(0x7f00000003c0)={r3, 0x0, 0x3bde, 0x6, 0x8000000000000000, 0xf}) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 14m6.350149794s ago: executing program 47 (id=372): syz_open_dev$sg(0x0, 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x48000, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000340)={0x0, {0xffffffff, 0x8}}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000180)) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x10, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r3 = socket(0x10, 0x3, 0x0) connect$bt_sco(r3, &(0x7f0000000000), 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) open_by_handle_at(r3, &(0x7f00000001c0)=@reiserfs_4={0x10, 0x4, {0x3, 0x1, 0xb9, 0x14}}, 0x1) r4 = userfaultfd(0x80001) ioctl$XFS_IOC_EXCHANGE_RANGE(r4, 0x40285881, &(0x7f00000003c0)={r3, 0x0, 0x3bde, 0x6, 0x8000000000000000, 0xf}) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 9m39.621302419s ago: executing program 8 (id=1049): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b700009100000000", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9m37.597024952s ago: executing program 8 (id=1053): close(0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa402, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000961) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 9m36.187037454s ago: executing program 8 (id=1055): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 9m34.379751825s ago: executing program 8 (id=1062): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0xf184, 0x2) 9m31.387187664s ago: executing program 8 (id=1070): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) fanotify_init(0xf00, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000240)={0x8, 'bridge0\x00', {'veth1_vlan\x00'}, 0x8}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x8000) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000180)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r6, 0xcccccccc}) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r6], &(0x7f0000000200), &(0x7f00000000c0)=[r7], &(0x7f0000000040), 0x0, 0x300}) 9m31.248733816s ago: executing program 5 (id=1072): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 9m29.719817224s ago: executing program 8 (id=1074): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000001080)) syz_io_uring_setup(0xaa, &(0x7f0000000080)={0x0, 0x91c1, 0x800, 0x1, 0x3}, &(0x7f0000000440)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000340)) syz_io_uring_modify_offsets$generic(r3, r4, 0x2c, 0x10000) flock(0xffffffffffffffff, 0x8) eventfd2(0xba6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x807c29d458ae167a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 9m29.168396918s ago: executing program 5 (id=1076): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0xfffffffd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xff}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x1c, 0x3, 0x1000f4) io_setup(0x7d, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000c80)="1876d433b8c266f9be2253e7c12fc9ea10343a19c358547a9357a174911e926c57b51eab3d0a4a2297653ac0c62201010000881a8789adddd1ca89ebd8632972a4f65ad1505ed06b6785508eb1dee994d18b084ef189ce72b079ed03ef849c46e3dedf604c01fae7c32f782dd9a45993a0798444d6ba181f2546b88893bf12575b27c1af55a55c55ca8855d5dc89db3e110430d10f429cc423ff64acc9fdb59a76caf809ce3c954f8a9618ebe5c3253e888feae6cc381ecb4a64085e24c48cf5ae9c5125d58d78ab2b70ec9216b42cf69b0cd34aa9a9b8e32e1841f19a7d38ce8de4d6d24b1a239ccfbb0935e4db5f50c9b8ebdf158eb582b914857522de035110521a268d3fa0888ebd65ab713338b2fa1029851d62af03f2bcf6034cf0287f10c84c967bae32a79fbf90122d41a622c0fa8a0fae4ffa55df5ec7ebb0708dbb6148f2cde6d128018a0efa8598fa29ac80c6642d52c6f6b979e8fe5e1fbe7615ca1bc31f2bc541b3f67f129a490900000004ab65b661139a2d66fbe14888b28fb681b11cd33e07a04cee7fa46193218553971e41d0eaed454f6b4520963c5d21b889764986530174051ddeca7547b3aeb0ed720e20099fbeec90859a9f22b9229f72fb45e62fb2c7048099eb484edac92717591a6467c38af94b14d4bf366d5fb232c24bc8a9d5361dd979a98ff5ea6a331cf27110b4457301454119173622e1ddef43e79842b3dcbce701ec9195770fd820823cd45fe00baa87d3000000000000570d", 0x223}], 0x1) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="96", 0x1}]) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000180)=0xe0000) 9m25.621754819s ago: executing program 5 (id=1081): close(0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa402, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000961) socket$l2tp(0x2, 0x2, 0x73) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 9m24.281266806s ago: executing program 5 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}}, 0x841fa2e66efa8cfe) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x1, 0x8, 0xb01, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4048010}, 0x4) 9m19.646221416s ago: executing program 5 (id=1094): close(0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa402, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000961) socket$l2tp(0x2, 0x2, 0x73) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 9m18.001059069s ago: executing program 5 (id=1096): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r2, 0x0, 0x7}, 0x38) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x9, 0x0, 0xffffffff, 0x7fffffff}}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0x1, 0x103, 0x5, {0xb7f, 0x8100000, 0x1, 0xf4b}}) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000001c0)={0x9, 0x7ff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) r3 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x8, 0x9, 0x0, 0x5, 0x7]}, &(0x7f0000000180)=0x54) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x6, 0x102, 0x4, {0x6, 0x7, 0xc, 0xa688}}) 9m14.634004709s ago: executing program 48 (id=1074): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000001080)) syz_io_uring_setup(0xaa, &(0x7f0000000080)={0x0, 0x91c1, 0x800, 0x1, 0x3}, &(0x7f0000000440)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000340)) syz_io_uring_modify_offsets$generic(r3, r4, 0x2c, 0x10000) flock(0xffffffffffffffff, 0x8) eventfd2(0xba6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x807c29d458ae167a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 9m2.329217221s ago: executing program 49 (id=1096): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r2, 0x0, 0x7}, 0x38) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x9, 0x0, 0xffffffff, 0x7fffffff}}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0x1, 0x103, 0x5, {0xb7f, 0x8100000, 0x1, 0xf4b}}) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000001c0)={0x9, 0x7ff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) r3 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x8, 0x9, 0x0, 0x5, 0x7]}, &(0x7f0000000180)=0x54) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x6, 0x102, 0x4, {0x6, 0x7, 0xc, 0xa688}}) 6m10.13552202s ago: executing program 9 (id=1348): syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r3, 0xd) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$netlink(0x10, 0x3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) 6m8.603220707s ago: executing program 9 (id=1349): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) connect$inet(r4, 0x0, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0xf00) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = syz_open_dev$swradio(&(0x7f0000000440), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000000)={0xb, @pix_mp={0x38305343, 0x2, 0x20303159, 0x6, 0x1, [{0x4}, {0x4, 0x8073}, {0x4, 0x7}, {0x6, 0x4}, {0xfffffff9, 0x10000}, {0x10, 0x6}, {0x8, 0x8}, {0x2, 0x5}], 0x66, 0x9, 0x2, 0x3, 0x5}}) sendmsg$nl_route(r0, 0x0, 0x40040) 6m7.234146986s ago: executing program 9 (id=1351): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) timer_create(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0xc, 0x59565955, 0x2, 0x6, 0x6, 0x5, 0xa6e, 0x0, 0x2, 0x2, 0x5}}) fsopen(&(0x7f0000000040)='virtiofs\x00', 0x0) 6m4.992769387s ago: executing program 9 (id=1355): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r1, 0x5452, &(0x7f0000001840)=0x5d4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) 6m2.512159347s ago: executing program 9 (id=1358): syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r3, 0xd) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)={0x20002015}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$netlink(0x10, 0x3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) 6m1.148295477s ago: executing program 9 (id=1360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3d5c2000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x40033, 0xffffffffffffffff, 0x1000000) 5m45.52031813s ago: executing program 50 (id=1360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3d5c2000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x40033, 0xffffffffffffffff, 0x1000000) 26.644369673s ago: executing program 3 (id=1812): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000030000000000000010000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b00010000000109040000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create1(0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x60242) pselect6(0x40, &(0x7f0000000240)={0x0, 0x9, 0x1ff, 0x7d, 0x0, 0x8000, 0xffffffffffffffb6, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x2, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 25.870667152s ago: executing program 7 (id=1813): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 24.910531945s ago: executing program 7 (id=1815): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000007440)={0x2020}, 0x2020) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 24.017859976s ago: executing program 7 (id=1816): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r1, 0x5452, &(0x7f0000001840)=0x5d4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) 23.463899304s ago: executing program 3 (id=1817): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000440)='p', 0x1, 0x24008810, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x40800) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 23.342506537s ago: executing program 3 (id=1819): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c) 23.282680443s ago: executing program 3 (id=1820): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000040)={0x7, 0xfffffff8, 0xe5, 0x81, 0x9, 0x2}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r8, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) r9 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r9, 0xc0485630, &(0x7f0000000100)={0x1, "39f0fe4ce3202112398d33700c4455cec9acc39ba4c172b849aea3960f589bcb", 0x0, 0x7, 0xf}) recvfrom(r6, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xd0f, 0x50bd2f, 0xfffffffc, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x73}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x3004408c) 22.497131651s ago: executing program 1 (id=1821): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x20008000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff00003e400000000000000000000003000000000200000002"], 0x0, 0x56}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, 0x0, 0x7, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000003e40)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000000100)="c48a570389e85e8182", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.779507883s ago: executing program 3 (id=1822): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x42, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x80080, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@fowner_lt}, {@subj_role={'subj_role', 0x3d, 'overlay\x00'}}], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r3, 0x0, 0x0) lseek(r3, 0x7fff, 0x0) 21.604064702s ago: executing program 7 (id=1823): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 20.648867765s ago: executing program 7 (id=1824): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x68, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x12, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) 19.703986509s ago: executing program 1 (id=1825): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000030000000000000010000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b00010000000109040000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create1(0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x60242) pselect6(0x40, &(0x7f0000000240)={0x0, 0x9, 0x1ff, 0x7d, 0x0, 0x8000, 0xffffffffffffffb6, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x2, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 19.443541296s ago: executing program 7 (id=1826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x13, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r4, 0x107, 0x9, 0x0, 0x0) 18.583103357s ago: executing program 3 (id=1827): fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x48}], 0x2) 16.671773763s ago: executing program 1 (id=1828): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000440)='p', 0x1, 0x24008810, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x40800) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 15.802517785s ago: executing program 1 (id=1829): userfaultfd(0x1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 14.885205674s ago: executing program 1 (id=1830): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) 14.863957929s ago: executing program 1 (id=1831): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r1, 0x5452, &(0x7f0000001840)=0x5d4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) 4.519429994s ago: executing program 51 (id=1826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x13, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r4, 0x107, 0x9, 0x0, 0x0) 3.520994825s ago: executing program 52 (id=1827): fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x48}], 0x2) 0s ago: executing program 53 (id=1831): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r1, 0x5452, &(0x7f0000001840)=0x5d4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) kernel console output (not intermixed with test programs): [ 625.940263][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 625.940288][ T36] audit: type=1800 audit(1781553460.466:39): pid=11991 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.1167" name="file0" dev="overlay" ino=1013 res=0 errno=0 [ 627.572814][ T3363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.656556][ T3363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.714439][ T3363] bond0 (unregistering): Released all slaves [ 627.756290][ T4918] Bluetooth: hci1: command tx timeout [ 628.505060][T12023] syzkaller0: entered promiscuous mode [ 628.505087][T12023] syzkaller0: entered allmulticast mode [ 628.564281][T12023] tipc: Enabled bearer , priority 0 [ 629.825966][ T4918] Bluetooth: hci1: command tx timeout [ 630.060140][ T5607] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 630.061435][ T5607] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 630.061739][ T5607] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 630.062571][ T5607] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 630.063271][ T5607] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 630.657840][T12022] tipc: Resetting bearer [ 631.634296][T12022] tipc: Disabling bearer [ 631.766425][ T5720] tipc: Node number set to 1266163410 [ 631.838969][ T36] audit: type=1326 audit(1781553466.366:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12031 comm="syz.7.1176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a996ce59 code=0x7fc00000 [ 631.906041][ T5607] Bluetooth: hci1: command tx timeout [ 632.146139][ T5607] Bluetooth: hci6: command tx timeout [ 632.396806][ T3363] hsr_slave_0: left promiscuous mode [ 632.440716][ T3363] hsr_slave_1: left promiscuous mode [ 632.441390][ T3363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.441413][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.504947][ T3363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.504973][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.629211][ T3363] veth1_macvtap: left promiscuous mode [ 632.629303][ T3363] veth0_macvtap: left promiscuous mode [ 632.629457][ T3363] veth1_vlan: left promiscuous mode [ 632.629563][ T3363] veth0_vlan: left promiscuous mode [ 633.239825][T12058] usb usb8: usbfs: process 12058 (syz.9.1181) did not claim interface 0 before use [ 634.042610][ T5607] Bluetooth: hci1: command tx timeout [ 634.225864][ T5607] Bluetooth: hci6: command tx timeout [ 636.189387][ T36] audit: type=1326 audit(1781553470.726:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12078 comm="syz.7.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a996ce59 code=0x7fc00000 [ 636.191020][ T3363] team0 (unregistering): Port device team_slave_1 removed [ 636.309262][ T3363] team0 (unregistering): Port device team_slave_0 removed [ 636.315890][ T5607] Bluetooth: hci6: command tx timeout [ 638.007795][T12077] tipc: Enabling of bearer rejected, failed to enable media [ 638.126083][T12085] syzkaller0: entered promiscuous mode [ 638.126108][T12085] syzkaller0: entered allmulticast mode [ 638.386379][ T5607] Bluetooth: hci6: command tx timeout [ 638.580563][T12107] syzkaller0: entered promiscuous mode [ 638.580589][T12107] syzkaller0: entered allmulticast mode [ 639.097478][ T36] audit: type=1800 audit(1781553473.636:42): pid=12125 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.1197" name="file0" dev="overlay" ino=989 res=0 errno=0 [ 640.777965][T12145] tipc: Enabling of bearer rejected, failed to enable media [ 641.767459][ T5720] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 641.935859][ T5720] usb 8-1: Using ep0 maxpacket: 16 [ 641.940879][ T5720] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 641.940999][ T5720] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.941421][ T5720] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.941450][ T5720] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 641.941493][ T5720] usb 8-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 641.941520][ T5720] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.023513][ T5720] usb 8-1: config 0 descriptor?? [ 643.361252][ T36] audit: type=1326 audit(1781553477.896:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12146 comm="syz.1.1199" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3560d9ce59 code=0x7fc00000 [ 643.521160][ T5720] input: HID 0458:5013 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5013.000B/input/input17 [ 643.635611][ T5720] input: HID 0458:5013 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5013.000B/input/input18 [ 643.669330][T12153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.698877][T12153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.739644][ T5264] 8021q: adding VLAN 0 to HW filter on device eth10 [ 643.762495][ T5720] kye 0003:0458:5013.000B: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.7-1/input0 [ 644.020681][ T7697] usb 8-1: USB disconnect, device number 10 [ 645.944956][T12163] fido_id[12163]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 646.539684][T12172] tipc: Enabled bearer , priority 0 [ 647.858259][ T5264] 8021q: adding VLAN 0 to HW filter on device eth11 [ 648.069515][T12170] tipc: Disabling bearer [ 648.188004][T11998] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.188128][T11998] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.188321][T11998] bridge_slave_0: entered allmulticast mode [ 648.190124][T11998] bridge_slave_0: entered promiscuous mode [ 648.503051][T11998] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.503406][T11998] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.504061][T11998] bridge_slave_1: entered allmulticast mode [ 648.536424][T11998] bridge_slave_1: entered promiscuous mode [ 648.621716][T12038] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.622251][T12038] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.622594][T12038] bridge_slave_0: entered allmulticast mode [ 648.625219][T12038] bridge_slave_0: entered promiscuous mode [ 648.658488][T11998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.659065][T12038] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.659522][T12038] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.659995][T12038] bridge_slave_1: entered allmulticast mode [ 648.662355][T12038] bridge_slave_1: entered promiscuous mode [ 648.703444][T11998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.785201][T12038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.804502][T11998] team0: Port device team_slave_0 added [ 648.820044][T12038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.825352][T11998] team0: Port device team_slave_1 added [ 649.554437][T12038] team0: Port device team_slave_0 added [ 649.561496][T11998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.561515][T11998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.561547][T11998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.610816][T12038] team0: Port device team_slave_1 added [ 649.611799][T11998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.611814][T11998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.611848][T11998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.997682][ T36] audit: type=1326 audit(1781553485.536:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12228 comm="syz.7.1213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a996ce59 code=0x7fc00000 [ 656.340077][T12038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.341384][T12038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.345245][T12038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.441617][ T5264] 8021q: adding VLAN 0 to HW filter on device eth12 [ 656.561351][T11998] hsr_slave_0: entered promiscuous mode [ 656.565258][T11998] hsr_slave_1: entered promiscuous mode [ 656.580074][T11998] debugfs: 'hsr0' already exists in 'hsr' [ 656.580099][T11998] Cannot create hsr debugfs directory [ 656.584023][T12038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.584042][T12038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.584073][T12038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.781634][T12038] hsr_slave_0: entered promiscuous mode [ 656.782631][T12038] hsr_slave_1: entered promiscuous mode [ 656.783388][T12038] debugfs: 'hsr0' already exists in 'hsr' [ 656.783409][T12038] Cannot create hsr debugfs directory [ 657.643499][ T3363] bridge_slave_1: left allmulticast mode [ 657.643531][ T3363] bridge_slave_1: left promiscuous mode [ 657.643779][ T3363] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.787158][ T3363] bridge_slave_0: left allmulticast mode [ 657.787192][ T3363] bridge_slave_0: left promiscuous mode [ 657.787383][ T3363] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.931110][T12304] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 657.931192][T12304] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 658.236206][ T3363] bridge_slave_1: left allmulticast mode [ 658.236237][ T3363] bridge_slave_1: left promiscuous mode [ 658.236471][ T3363] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.087649][ T3363] bridge_slave_0: left allmulticast mode [ 659.087681][ T3363] bridge_slave_0: left promiscuous mode [ 659.087935][ T3363] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.524640][T12321] 9p: Bad value for 'rfdno' [ 660.486579][ T3363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.536512][ T3363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.597118][ T3363] bond0 (unregistering): Released all slaves [ 660.827084][ T3363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.877164][ T3363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.937122][ T3363] bond0 (unregistering): Released all slaves [ 661.132338][T12289] tipc: Started in network mode [ 661.132372][T12289] tipc: Node identity 6ec599cb4112, cluster identity 4711 [ 661.132488][T12289] tipc: Enabled bearer , priority 0 [ 661.328223][T12316] syzkaller0: entered promiscuous mode [ 661.328258][T12316] syzkaller0: entered allmulticast mode [ 661.437924][T12277] tipc: Disabling bearer [ 662.083834][ T3363] hsr_slave_0: left promiscuous mode [ 662.109781][ T3363] hsr_slave_1: left promiscuous mode [ 662.110502][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.142853][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.176084][ T3363] hsr_slave_0: left promiscuous mode [ 664.202401][ T3363] hsr_slave_1: left promiscuous mode [ 664.204348][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.333961][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.177240][ T3363] team0 (unregistering): Port device team_slave_1 removed [ 668.054764][ T3363] team0 (unregistering): Port device team_slave_0 removed [ 668.468722][ T3363] team0 (unregistering): Port device team_slave_1 removed [ 668.561518][ T3363] team0 (unregistering): Port device team_slave_0 removed [ 668.943935][T12398] tipc: Enabled bearer , priority 0 [ 669.076970][ T5607] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 669.114045][T12404] syzkaller0: entered promiscuous mode [ 669.114073][T12404] syzkaller0: entered allmulticast mode [ 674.633182][ T5607] Bluetooth: hci2: unexpected event for opcode 0x080c [ 674.713939][T12397] tipc: Resetting bearer [ 675.963081][T12397] tipc: Disabling bearer [ 676.074799][ T7697] tipc: Node number set to 802658763 [ 677.937128][ T7697] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 678.340570][ T7697] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 678.340613][ T7697] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 678.340647][ T7697] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 678.340676][ T7697] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 678.340723][ T7697] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 678.340753][ T7697] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.426301][ T7697] usb 10-1: config 0 descriptor?? [ 678.987481][ T7697] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 683.243462][ T5741] usb 10-1: reset high-speed USB device number 16 using dummy_hcd [ 685.987635][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.309563][ T7697] usb 10-1: USB disconnect, device number 16 [ 691.690652][T12558] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 691.694336][T12558] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 691.720130][T12558] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 691.827890][T12558] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 691.833241][T12558] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 692.214253][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 692.227580][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 692.227928][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 692.230672][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 692.294422][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 693.905750][ T5607] Bluetooth: hci3: command tx timeout [ 694.385867][ T5607] Bluetooth: hci5: command tx timeout [ 694.868113][ T5741] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 695.242114][ T5741] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 695.242304][ T5741] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 695.242429][ T5741] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 695.242760][ T5741] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 695.243527][ T5741] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 695.243812][ T5741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.430458][ T5741] usb 2-1: config 0 descriptor?? [ 695.927448][ T5741] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 695.996241][ T5607] Bluetooth: hci3: command tx timeout [ 696.466895][ T5607] Bluetooth: hci5: command tx timeout [ 697.248739][ T5720] usb 2-1: USB disconnect, device number 13 [ 698.011785][ T3363] bridge_slave_1: left allmulticast mode [ 698.011825][ T3363] bridge_slave_1: left promiscuous mode [ 698.012011][ T3363] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.065787][ T5607] Bluetooth: hci3: command tx timeout [ 698.672626][ T5607] Bluetooth: hci5: command tx timeout [ 698.722164][T12646] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 699.008117][ T3363] bridge_slave_0: left allmulticast mode [ 699.008188][ T3363] bridge_slave_0: left promiscuous mode [ 699.166357][ T3363] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.156000][ T5607] Bluetooth: hci3: command tx timeout [ 700.742381][T12558] Bluetooth: hci5: command tx timeout [ 702.606331][ T3363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.646564][ T3363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.677837][ T3363] bond0 (unregistering): Released all slaves [ 703.313290][T12679] fuse: Bad value for 'group_id' [ 703.313312][T12679] fuse: Bad value for 'group_id' [ 703.358171][T12681] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 703.655460][ T3363] hsr_slave_0: left promiscuous mode [ 703.699012][ T3363] hsr_slave_1: left promiscuous mode [ 703.700712][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.803583][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.877346][ T3363] team0 (unregistering): Port device team_slave_1 removed [ 705.807327][ T3363] team0 (unregistering): Port device team_slave_0 removed [ 706.716246][T12695] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1291'. [ 707.843178][T12721] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 711.083986][T12753] netlink: 436 bytes leftover after parsing attributes in process `syz.7.1304'. [ 712.210632][T12564] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.210720][T12564] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.210854][T12564] bridge_slave_0: entered allmulticast mode [ 712.240344][T12564] bridge_slave_0: entered promiscuous mode [ 712.253370][T12557] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.253469][T12557] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.253656][T12557] bridge_slave_0: entered allmulticast mode [ 712.282856][T12557] bridge_slave_0: entered promiscuous mode [ 712.295097][T12564] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.295184][T12564] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.295391][T12564] bridge_slave_1: entered allmulticast mode [ 712.320630][T12564] bridge_slave_1: entered promiscuous mode [ 712.333925][T12557] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.334020][T12557] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.334187][T12557] bridge_slave_1: entered allmulticast mode [ 712.360262][T12557] bridge_slave_1: entered promiscuous mode [ 712.755134][T12564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.771840][T12557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.039592][T12564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.404023][T12557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.951630][T12564] team0: Port device team_slave_0 added [ 713.971764][T12557] team0: Port device team_slave_0 added [ 713.996013][T12564] team0: Port device team_slave_1 added [ 714.005018][T12557] team0: Port device team_slave_1 added [ 714.373039][ T3363] bridge_slave_1: left allmulticast mode [ 714.373069][ T3363] bridge_slave_1: left promiscuous mode [ 714.373270][ T3363] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.624083][ T3363] bridge_slave_0: left allmulticast mode [ 714.624112][ T3363] bridge_slave_0: left promiscuous mode [ 714.624333][ T3363] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.946165][T12558] Bluetooth: hci1: command 0xfc11 tx timeout [ 714.946397][ T5607] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 716.621490][ T3363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.700029][ T3363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.746870][ T3363] bond0 (unregistering): Released all slaves [ 718.120730][T12564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.120749][T12564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.120782][T12564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.125366][T12557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.125383][T12557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.125415][T12557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.163945][ T5264] 8021q: adding VLAN 0 to HW filter on device eth21 [ 718.170381][T12564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.170401][T12564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.170422][T12564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.452929][T12557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.453161][T12557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.453454][T12557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.876205][ T3363] hsr_slave_0: left promiscuous mode [ 718.897710][ T3363] hsr_slave_1: left promiscuous mode [ 718.900380][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.921165][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.462697][T12833] netlink: 'syz.9.1321': attribute type 10 has an invalid length. [ 721.599128][ T3363] team0 (unregistering): Port device team_slave_1 removed [ 721.623884][ T3363] team0 (unregistering): Port device team_slave_0 removed [ 722.806497][T12833] syz_tun: entered promiscuous mode [ 722.826595][T12833] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 723.022202][T12867] Mount JFS Failure: -22 [ 723.022231][T12867] jfs_mount failed w/return code = -22 [ 725.968602][T12564] hsr_slave_0: entered promiscuous mode [ 725.971851][T12564] hsr_slave_1: entered promiscuous mode [ 725.992171][ T5264] 8021q: adding VLAN 0 to HW filter on device eth22 [ 726.309213][T12557] hsr_slave_0: entered promiscuous mode [ 726.327598][T12557] hsr_slave_1: entered promiscuous mode [ 726.328235][T12557] debugfs: 'hsr0' already exists in 'hsr' [ 726.328256][T12557] Cannot create hsr debugfs directory [ 729.436539][T12557] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 729.494765][T12557] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 729.507369][T12557] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 729.648022][T12557] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 729.653236][T12557] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 729.813223][T12557] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 729.839260][T12557] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 731.156094][T12557] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 731.284329][T12917] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 731.584394][T12564] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 731.721702][T12564] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 731.724588][T12564] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 732.818758][T12564] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 732.824956][ T5264] 8021q: adding VLAN 0 to HW filter on device eth23 [ 732.865691][T12564] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 732.890222][T12564] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 732.893770][T12564] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 733.111497][T12564] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 733.421929][T12557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.492336][T12557] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.539180][ T210] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.539778][ T210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.577964][T12564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.605771][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.606611][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.761716][T12564] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.817997][ T3286] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.818090][ T3286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.876740][ T3286] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.876825][ T3286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.419944][T12557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.594949][T12557] veth0_vlan: entered promiscuous mode [ 735.673947][T12557] veth1_vlan: entered promiscuous mode [ 735.985764][T12557] veth0_macvtap: entered promiscuous mode [ 736.024442][T12557] veth1_macvtap: entered promiscuous mode [ 736.146110][T12557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.232671][T12557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.297473][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.301215][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.301264][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.301302][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.816457][ T7697] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 736.976161][ T7697] usb 2-1: Using ep0 maxpacket: 8 [ 736.981661][ T7697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 736.982281][ T7697] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 736.982470][ T7697] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 736.982900][ T7697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.058426][ T7697] usb 2-1: config 0 descriptor?? [ 737.473840][ T5264] 8021q: adding VLAN 0 to HW filter on device eth24 [ 737.534769][ T7697] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 737.535428][ T7697] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 737.537705][ T7697] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 737.544514][ T7697] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 737.553655][ T7697] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 737.564854][ T7697] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 737.564895][ T7697] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 737.564932][ T7697] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 737.613447][ T7697] lenovo 0003:17EF:6047.000E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 737.906593][ T7697] lenovo 0003:17EF:6047.000E: Failed to switch middle button: -71 [ 737.909207][ T7697] lenovo 0003:17EF:6047.000E: Fn-lock setting failed: -71 [ 737.911582][ T7697] lenovo 0003:17EF:6047.000E: Sensitivity setting failed: -71 [ 737.984891][ T7697] usb 2-1: USB disconnect, device number 14 [ 738.059066][T12990] fido_id[12990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 738.766928][T13000] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 738.984855][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.984880][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.051457][T12564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.213812][ T5828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.213828][ T5828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.388942][T12564] veth0_vlan: entered promiscuous mode [ 740.418037][T12564] veth1_vlan: entered promiscuous mode [ 741.482368][T12564] veth0_macvtap: entered promiscuous mode [ 741.511500][T12564] veth1_macvtap: entered promiscuous mode [ 742.067466][T12564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.102501][T12564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.160856][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.161058][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.161247][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.161411][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.401141][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1353'. [ 745.695761][ T5741] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 745.990271][ T5741] usb 2-1: Using ep0 maxpacket: 16 [ 746.383258][ T5741] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 746.383293][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.383315][ T5741] usb 2-1: Product: syz [ 746.383331][ T5741] usb 2-1: Manufacturer: syz [ 746.383347][ T5741] usb 2-1: SerialNumber: syz [ 746.454488][ T5741] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 747.430296][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.453357][ T5741] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 747.500930][T12876] udevd[12876]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 749.107968][ T5781] usb 2-1: USB disconnect, device number 15 [ 750.274361][ T3286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.274384][ T3286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.478560][ T3286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.478586][ T3286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.996116][T12558] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 751.996716][T12558] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 751.997799][T12558] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 751.998733][T12558] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 752.001203][T12558] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 753.632983][T13131] syzkaller0: entered promiscuous mode [ 753.633368][T13131] syzkaller0: entered allmulticast mode [ 754.066515][T12558] Bluetooth: hci1: command tx timeout [ 756.583451][T12558] Bluetooth: hci1: command tx timeout [ 758.962501][T12558] Bluetooth: hci1: command tx timeout [ 761.036246][ T5607] Bluetooth: hci1: command tx timeout [ 761.147958][T13200] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 761.698775][T13112] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.699491][T13112] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.699679][T13112] bridge_slave_0: entered allmulticast mode [ 761.703160][T13112] bridge_slave_0: entered promiscuous mode [ 761.737586][T13112] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.737672][T13112] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.741208][T13112] bridge_slave_1: entered allmulticast mode [ 761.773705][T13112] bridge_slave_1: entered promiscuous mode [ 763.896423][T13112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.937448][T13112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.217650][T13112] team0: Port device team_slave_0 added [ 764.223681][T13112] team0: Port device team_slave_1 added [ 764.341586][T13112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.341606][T13112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.341640][T13112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.397426][T13112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.397447][T13112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.397483][T13112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.751375][T13112] hsr_slave_0: entered promiscuous mode [ 764.752424][T13112] hsr_slave_1: entered promiscuous mode [ 764.753094][T13112] debugfs: 'hsr0' already exists in 'hsr' [ 764.753116][T13112] Cannot create hsr debugfs directory [ 766.007014][T12558] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 766.008842][T12558] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 766.009496][T12558] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 766.011024][T12558] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 766.014065][T12558] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 766.932732][ T5994] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.011046][T13257] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 768.255703][T12558] Bluetooth: hci5: command tx timeout [ 770.305921][T12558] Bluetooth: hci5: command tx timeout [ 771.315771][ T5781] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 771.495448][ T5781] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.495508][ T5781] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 771.499798][ T5781] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 771.499835][ T5781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.567447][ T5781] usb 4-1: config 0 descriptor?? [ 771.595123][ T5781] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 772.399989][T12558] Bluetooth: hci5: command tx timeout [ 774.319001][T12586] usb 4-1: USB disconnect, device number 3 [ 774.466195][ T5607] Bluetooth: hci5: command tx timeout [ 774.548018][ T5994] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.026519][T13239] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.029995][T13239] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.034265][T13239] bridge_slave_0: entered allmulticast mode [ 779.086990][T13239] bridge_slave_0: entered promiscuous mode [ 779.483888][ T5994] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.568894][T13239] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.569672][T13239] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.572068][T13239] bridge_slave_1: entered allmulticast mode [ 779.618541][T13239] bridge_slave_1: entered promiscuous mode [ 780.010980][T13239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.076361][T13239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.548316][ T5994] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.039160][T13239] team0: Port device team_slave_0 added [ 782.045581][T13239] team0: Port device team_slave_1 added [ 785.661098][T13239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.661118][T13239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.661151][T13239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.695975][ T5720] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 785.728305][T13239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.728326][T13239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.728359][T13239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.870987][ T5720] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.871044][ T5720] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 785.871088][ T5720] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 785.871115][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.923856][ T5720] usb 2-1: config 0 descriptor?? [ 785.951177][T13239] hsr_slave_0: entered promiscuous mode [ 785.954473][ T5720] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 785.961486][T13239] hsr_slave_1: entered promiscuous mode [ 785.982839][T13239] debugfs: 'hsr0' already exists in 'hsr' [ 785.982954][T13239] Cannot create hsr debugfs directory [ 788.578475][T13049] usb 2-1: USB disconnect, device number 16 [ 797.764791][ T5994] bridge_slave_1: left allmulticast mode [ 797.764838][ T5994] bridge_slave_1: left promiscuous mode [ 797.765512][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.357501][ T5994] bridge_slave_0: left allmulticast mode [ 798.357532][ T5994] bridge_slave_0: left promiscuous mode [ 798.361388][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.441645][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.479917][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.500238][ T5994] bond0 (unregistering): Released all slaves [ 801.925984][ T5741] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 802.055962][ T5720] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 802.078871][ T5741] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.080079][ T5741] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 802.080128][ T5741] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 802.081096][ T5741] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.137954][ T5741] usb 8-1: config 0 descriptor?? [ 802.147573][ T5741] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 802.210008][ T5720] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 802.210066][ T5720] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 802.210298][ T5720] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 802.210371][ T5720] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 802.210399][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.287235][ T5720] usbtmc 4-1:16.0: bulk endpoints not found [ 803.084259][ T5607] Bluetooth: unknown link type 56 [ 803.084301][ T5607] Bluetooth: hci2: connection err: -111 [ 804.979442][ T5741] usb 8-1: USB disconnect, device number 11 [ 805.864062][ T5720] usb 4-1: USB disconnect, device number 4 [ 808.928182][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 812.920342][ T5994] hsr_slave_0: left promiscuous mode [ 812.996821][ T5994] hsr_slave_1: left promiscuous mode [ 813.005603][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.019374][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.095744][T13591] Mount JFS Failure: -22 [ 813.095757][T13591] jfs_mount failed w/return code = -22 [ 813.224038][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.224067][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.640825][ T5994] veth1_macvtap: left promiscuous mode [ 813.641986][ T5994] veth0_macvtap: left promiscuous mode [ 813.644071][ T5994] veth1_vlan: left promiscuous mode [ 813.655745][ T5994] veth0_vlan: left promiscuous mode [ 813.883335][T12558] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 813.883958][T12558] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 813.884406][T12558] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 813.909785][T12558] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 813.911281][T12558] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 815.985733][ T5607] Bluetooth: hci6: command tx timeout [ 816.007043][ T5781] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 816.025771][ T5741] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 816.066080][ T5607] Bluetooth: hci3: command 0x0406 tx timeout [ 816.184171][ T5741] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.184203][ T5741] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 816.184860][ T5781] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 816.184905][ T5781] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 816.184931][ T5781] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 816.185082][ T5741] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 816.185110][ T5741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.185538][ T5781] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 816.185578][ T5781] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.294906][ T5741] usb 4-1: config 0 descriptor?? [ 816.310672][ T5781] usbtmc 8-1:16.0: bulk endpoints not found [ 816.529758][ T5741] usb 4-1: string descriptor 0 read error: -71 [ 816.551628][ T5741] usb 4-1: USB disconnect, device number 5 [ 818.076207][T12558] Bluetooth: hci6: command tx timeout [ 818.496411][ T5994] team0 (unregistering): Port device team_slave_1 removed [ 818.520569][ T5741] usb 8-1: USB disconnect, device number 12 [ 818.558522][ T5994] team0 (unregistering): Port device team_slave_0 removed [ 819.868817][T13646] Mount JFS Failure: -22 [ 819.868845][T13646] jfs_mount failed w/return code = -22 [ 820.145752][T12558] Bluetooth: hci6: command tx timeout [ 822.534336][T12558] Bluetooth: hci6: command tx timeout [ 824.160219][ T5741] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 824.370423][ T5741] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 824.370594][ T5741] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 824.370639][ T5741] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 824.370672][ T5741] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.420756][ T5741] usb 8-1: config 0 descriptor?? [ 824.440760][ T5741] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 825.222449][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 825.222948][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 825.223636][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 825.224986][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 825.234018][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 827.161899][ T7697] usb 8-1: USB disconnect, device number 13 [ 827.276665][T12558] Bluetooth: hci1: command tx timeout [ 827.412085][T13712] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 827.412133][T13712] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 827.555750][ T5741] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 827.707754][ T5741] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 827.707799][ T5741] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 827.707825][ T5741] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 827.707870][ T5741] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 827.707897][ T5741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.770394][ T5741] usbtmc 2-1:16.0: bulk endpoints not found [ 829.346706][T12558] Bluetooth: hci1: command tx timeout [ 829.481847][T13597] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.483609][T13597] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.495561][T13597] bridge_slave_0: entered allmulticast mode [ 829.524907][T13597] bridge_slave_0: entered promiscuous mode [ 829.601980][T13597] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.602304][T13597] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.603672][T13597] bridge_slave_1: entered allmulticast mode [ 829.639829][T13597] bridge_slave_1: entered promiscuous mode [ 830.063612][T13597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.266419][T13597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.393724][T13742] syzkaller0: entered promiscuous mode [ 830.393754][T13742] syzkaller0: entered allmulticast mode [ 831.081011][ T5720] usb 2-1: USB disconnect, device number 17 [ 831.425841][ T5607] Bluetooth: hci1: command tx timeout [ 831.896459][T13597] team0: Port device team_slave_0 added [ 832.086156][T13760] fuse: Bad value for 'rootmode' [ 833.412806][T13597] team0: Port device team_slave_1 added [ 833.515877][ T5607] Bluetooth: hci1: command tx timeout [ 835.128380][T13085] bond0: (slave syz_tun): Releasing backup interface [ 835.248413][T13787] tipc: Enabling of bearer rejected, failed to enable media [ 835.260199][ T5720] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 835.428634][ T5720] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 835.428830][ T5720] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 835.428876][ T5720] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 835.428903][ T5720] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.457478][ T5720] usb 8-1: config 0 descriptor?? [ 835.516117][ T5720] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 835.639909][T13597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.639929][T13597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.641269][T13597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.696699][T13597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.696721][T13597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.696754][T13597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.793820][T13597] hsr_slave_0: entered promiscuous mode [ 835.794952][T13597] hsr_slave_1: entered promiscuous mode [ 838.795023][ T5741] usb 8-1: USB disconnect, device number 14 [ 839.076113][T13816] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 839.076738][T13816] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 841.153276][ T8411] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 841.170668][T13827] fuse: Bad value for 'rootmode' [ 841.311687][ T8411] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 841.311871][ T8411] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 841.312016][ T8411] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 841.312217][ T8411] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 841.312396][ T8411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.600253][ T8411] usbtmc 4-1:16.0: bulk endpoints not found [ 843.009012][ T5994] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.303059][T13597] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 843.364568][T13597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 843.440373][T13597] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 843.670210][T13597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 843.674436][T13684] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.675137][T13684] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.676634][T13684] bridge_slave_0: entered allmulticast mode [ 843.724121][T13684] bridge_slave_0: entered promiscuous mode [ 844.088648][ T5994] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.126623][T13597] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 844.161375][T13597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 844.163519][T13684] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.164122][T13684] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.165339][T13684] bridge_slave_1: entered allmulticast mode [ 844.204175][T13684] bridge_slave_1: entered promiscuous mode [ 844.261943][T13597] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 844.291097][T13597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 845.602311][ T5994] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.158228][T13684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.280428][T13684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.394109][T13865] overlayfs: missing 'lowerdir' [ 846.435336][T13684] team0: Port device team_slave_0 added [ 846.453783][T13684] team0: Port device team_slave_1 added [ 846.549162][T13684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.549182][T13684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.549215][T13684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.871146][T13684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.871342][T13684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.871702][T13684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.019037][T13597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.681862][T13684] hsr_slave_0: entered promiscuous mode [ 848.696050][T13684] hsr_slave_1: entered promiscuous mode [ 848.703199][T13684] debugfs: 'hsr0' already exists in 'hsr' [ 848.703224][T13684] Cannot create hsr debugfs directory [ 849.503571][ T5741] usb 4-1: USB disconnect, device number 6 [ 849.924019][ T5994] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.131047][T13597] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.616711][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.617647][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.761568][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.761678][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.969258][ T36] audit: type=1326 audit(1781553685.486:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13914 comm="syz.3.1487" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225b02ce59 code=0x7fc00000 [ 854.061592][ T5994] bridge_slave_1: left allmulticast mode [ 854.061621][ T5994] bridge_slave_1: left promiscuous mode [ 854.061804][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.528368][T13954] overlayfs: missing 'lowerdir' [ 854.745867][ T8411] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 854.894049][ T5994] bridge_slave_0: left allmulticast mode [ 854.894080][ T5994] bridge_slave_0: left promiscuous mode [ 854.910543][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.917768][ T8411] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 854.917802][ T8411] usb 8-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 854.917827][ T8411] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 854.917884][ T8411] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 854.917911][ T8411] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.014608][ T8411] usbtmc 8-1:16.0: bulk endpoints not found [ 855.999528][ T5994] bridge_slave_1: left allmulticast mode [ 855.999574][ T5994] bridge_slave_1: left promiscuous mode [ 855.999746][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.680836][ T5994] bridge_slave_0: left allmulticast mode [ 856.680867][ T5994] bridge_slave_0: left promiscuous mode [ 856.681081][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.722007][T13049] usb 8-1: USB disconnect, device number 15 [ 856.845971][ T5994] bridge_slave_1: left allmulticast mode [ 856.846002][ T5994] bridge_slave_1: left promiscuous mode [ 856.846182][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.929749][ T5994] bridge_slave_0: left allmulticast mode [ 856.929813][ T5994] bridge_slave_0: left promiscuous mode [ 856.930635][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.709328][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 858.756398][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.790793][ T5994] bond0 (unregistering): Released all slaves [ 859.037916][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.076433][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.129261][ T5994] bond0 (unregistering): Released all slaves [ 859.347002][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.406596][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.437675][ T5994] bond0 (unregistering): Released all slaves [ 859.917348][T13980] IPv6: NLM_F_CREATE should be specified when creating new route [ 859.917435][T13980] netlink: 'syz.1.1500': attribute type 1 has an invalid length. [ 860.309189][T13684] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 861.851175][T13684] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 861.878019][T13684] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 862.144243][T13684] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 862.181612][T13684] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 862.277586][T13684] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 862.297312][T13684] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 862.402701][T13684] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 865.456201][ T5741] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 865.554734][T13684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.605792][ T5741] usb 8-1: Using ep0 maxpacket: 8 [ 865.608798][ T5741] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 865.608836][ T5741] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 865.608879][ T5741] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 865.608905][ T5741] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.627807][ T5741] usb 8-1: config 0 descriptor?? [ 865.929819][ T5994] hsr_slave_0: left promiscuous mode [ 865.987600][ T5994] hsr_slave_1: left promiscuous mode [ 865.990941][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 865.991421][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.063813][ T5741] lenovo 0003:17EF:6047.000F: unknown main item tag 0x0 [ 866.063855][ T5741] lenovo 0003:17EF:6047.000F: unknown main item tag 0x0 [ 866.063886][ T5741] lenovo 0003:17EF:6047.000F: unknown main item tag 0x0 [ 866.063917][ T5741] lenovo 0003:17EF:6047.000F: unknown main item tag 0x0 [ 866.063947][ T5741] lenovo 0003:17EF:6047.000F: unknown main item tag 0x0 [ 866.063977][ T5741] lenovo 0003:17EF:6047.000F: unknown main item tag 0x0 [ 866.064007][ T5741] lenovo 0003:17EF:6047.000F: unknown main item tag 0x0 [ 866.064046][ T5741] lenovo 0003:17EF:6047.000F: unknown main item tag 0x0 [ 866.081239][ T5741] lenovo 0003:17EF:6047.000F: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.7-1/input0 [ 866.333319][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.333346][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.472955][ T5741] lenovo 0003:17EF:6047.000F: Failed to switch middle button: -71 [ 866.473324][ T5741] lenovo 0003:17EF:6047.000F: Fn-lock setting failed: -71 [ 866.479159][ T5741] lenovo 0003:17EF:6047.000F: Sensitivity setting failed: -71 [ 866.504524][ T5741] usb 8-1: USB disconnect, device number 16 [ 866.641971][ T5994] hsr_slave_0: left promiscuous mode [ 866.676606][ T5994] hsr_slave_1: left promiscuous mode [ 866.677314][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.305195][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.719136][T14061] netlink: 'syz.7.1509': attribute type 1 has an invalid length. [ 867.867842][ T5994] hsr_slave_0: left promiscuous mode [ 867.934853][ T5994] hsr_slave_1: left promiscuous mode [ 867.935536][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.012405][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.097197][ T5994] veth1_macvtap: left promiscuous mode [ 868.097264][ T5994] veth0_macvtap: left promiscuous mode [ 868.097399][ T5994] veth1_vlan: left promiscuous mode [ 868.097493][ T5994] veth0_vlan: left promiscuous mode [ 868.165892][ T5741] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 868.367836][ T5741] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 868.368005][ T5741] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 868.368037][ T5741] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 868.368064][ T5741] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 868.368109][ T5741] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 868.368136][ T5741] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.376787][ T5741] usb 8-1: config 0 descriptor?? [ 868.832018][ T5994] team0 (unregistering): Port device team_slave_1 removed [ 868.845850][ T5741] usbhid 8-1:0.0: can't add hid device: -71 [ 868.845984][ T5741] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 868.859204][ T5741] usb 8-1: USB disconnect, device number 17 [ 868.877841][ T5994] team0 (unregistering): Port device team_slave_0 removed [ 870.314778][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.426911][ T5994] team0 (unregistering): Port device team_slave_1 removed [ 870.448155][ T5994] team0 (unregistering): Port device team_slave_0 removed [ 870.768162][ T5994] team0 (unregistering): Port device team_slave_1 removed [ 870.800466][ T5994] team0 (unregistering): Port device team_slave_0 removed [ 871.054036][T14079] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1513'. [ 872.003601][T13684] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.012284][T13597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.041248][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.041338][ T5930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.139548][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.139643][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.660377][T13597] veth0_vlan: entered promiscuous mode [ 872.916867][T13049] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 873.068706][T13049] usb 8-1: Using ep0 maxpacket: 8 [ 873.074581][T13049] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 873.074621][T13049] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 873.074664][T13049] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 873.074700][T13049] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.082916][T13049] usb 8-1: config 0 descriptor?? [ 873.615360][T14107] IPv6: NLM_F_CREATE should be specified when creating new route [ 873.615445][T14107] netlink: 'syz.3.1518': attribute type 1 has an invalid length. [ 873.834486][T13049] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 873.834527][T13049] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 873.834560][T13049] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 873.834591][T13049] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 873.834621][T13049] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 873.834652][T13049] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 873.834682][T13049] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 873.834712][T13049] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 873.856052][T13049] lenovo 0003:17EF:6047.0010: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.7-1/input0 [ 873.903029][T14111] tipc: Enabled bearer , priority 0 [ 874.198940][T13049] lenovo 0003:17EF:6047.0010: Failed to switch middle button: -71 [ 874.202360][T13049] lenovo 0003:17EF:6047.0010: Fn-lock setting failed: -71 [ 874.205719][T13049] lenovo 0003:17EF:6047.0010: Sensitivity setting failed: -71 [ 874.255135][T13049] usb 8-1: USB disconnect, device number 18 [ 874.388814][T14116] fido_id[14116]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 874.507073][T12558] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 874.507462][T12558] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 874.508824][T12558] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 874.514767][T12558] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 874.519156][T12558] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 876.399529][T14105] tipc: Disabling bearer [ 876.545662][T12558] Bluetooth: hci0: command tx timeout [ 876.908579][T14150] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1524'. [ 878.626250][T12558] Bluetooth: hci0: command tx timeout [ 878.808822][ T5994] IPVS: stop unused estimator thread 0... [ 880.602883][T14176] netlink: 'syz.7.1528': attribute type 1 has an invalid length. [ 880.716211][T12558] Bluetooth: hci0: command tx timeout [ 881.883497][T13684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.109106][T14194] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1530'. [ 882.785741][T12558] Bluetooth: hci0: command tx timeout [ 883.706129][T14204] Mount JFS Failure: -22 [ 883.706143][T14204] jfs_mount failed w/return code = -22 [ 884.634001][T14235] tipc: Enabled bearer , priority 0 [ 884.762595][T14122] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.762742][T14122] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.771628][T14122] bridge_slave_0: entered allmulticast mode [ 884.801703][T14122] bridge_slave_0: entered promiscuous mode [ 884.828494][T14122] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.832724][T14122] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.842286][T14122] bridge_slave_1: entered allmulticast mode [ 884.871764][T14122] bridge_slave_1: entered promiscuous mode [ 886.202385][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 886.202949][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 886.203604][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 886.205692][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 886.235328][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 886.820365][T14224] tipc: Disabling bearer [ 887.378332][T14122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.870557][T14122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.305718][T12558] Bluetooth: hci5: command tx timeout [ 889.928827][ T5994] bridge_slave_1: left allmulticast mode [ 889.928859][ T5994] bridge_slave_1: left promiscuous mode [ 889.929047][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.195351][ T5994] bridge_slave_0: left allmulticast mode [ 890.195383][ T5994] bridge_slave_0: left promiscuous mode [ 890.208892][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.386171][T12558] Bluetooth: hci5: command tx timeout [ 890.460606][T14297] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1540'. [ 892.465719][T12558] Bluetooth: hci5: command tx timeout [ 893.149214][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.211167][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.938738][ T5994] bond0 (unregistering): Released all slaves [ 894.545889][T12558] Bluetooth: hci5: command tx timeout [ 895.214402][T14122] team0: Port device team_slave_0 added [ 895.248805][T14122] team0: Port device team_slave_1 added [ 895.998344][ T5994] hsr_slave_0: left promiscuous mode [ 896.048279][ T5994] hsr_slave_1: left promiscuous mode [ 896.048994][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.138672][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.271299][ T5994] veth0_vlan: left promiscuous mode [ 897.439382][ T5994] team0 (unregistering): Port device team_slave_1 removed [ 897.642753][ T5994] team0 (unregistering): Port device team_slave_0 removed [ 899.430251][T14122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.430270][T14122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.430303][T14122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 900.021310][T14122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.021334][T14122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.021368][T14122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.521003][T14122] hsr_slave_0: entered promiscuous mode [ 900.537134][T14122] hsr_slave_1: entered promiscuous mode [ 900.924238][T14389] syzkaller0: entered promiscuous mode [ 900.924263][T14389] syzkaller0: entered allmulticast mode [ 901.004902][T14389] tipc: Started in network mode [ 901.004935][T14389] tipc: Node identity 76227c62a3de, cluster identity 4711 [ 901.005095][T14389] tipc: Enabled bearer , priority 0 [ 901.484577][T14387] tipc: Resetting bearer [ 903.077631][T14387] tipc: Disabling bearer [ 903.244768][ T8411] tipc: Node number set to 3590093922 [ 907.172218][T14257] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.172305][T14257] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.174536][T14257] bridge_slave_0: entered allmulticast mode [ 907.220670][T14257] bridge_slave_0: entered promiscuous mode [ 907.244770][T14257] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.244866][T14257] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.252549][T14257] bridge_slave_1: entered allmulticast mode [ 907.279070][T14257] bridge_slave_1: entered promiscuous mode [ 908.683567][T14257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.234381][T14257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.711884][T14257] team0: Port device team_slave_0 added [ 909.766075][T14257] team0: Port device team_slave_1 added [ 910.325938][T14257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.325958][T14257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.325992][T14257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.375383][T14257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.375400][T14257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.375433][T14257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.751612][T14257] hsr_slave_0: entered promiscuous mode [ 910.762789][T14257] hsr_slave_1: entered promiscuous mode [ 910.776233][T14257] debugfs: 'hsr0' already exists in 'hsr' [ 910.776257][T14257] Cannot create hsr debugfs directory [ 910.782142][T14122] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 910.848725][T14122] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 910.878958][T14486] tipc: Enabling of bearer rejected, failed to enable media [ 910.934811][T14122] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 911.039378][T14122] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 911.060099][T14122] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 911.133391][T14122] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 911.274545][T14122] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 911.788151][T14122] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 913.789337][ T5994] bridge_slave_1: left allmulticast mode [ 913.789370][ T5994] bridge_slave_1: left promiscuous mode [ 913.789558][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.172756][ T5994] bridge_slave_0: left allmulticast mode [ 914.172786][ T5994] bridge_slave_0: left promiscuous mode [ 914.173003][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.331059][T14546] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1570'. [ 917.097523][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 917.146704][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 917.177488][ T5994] bond0 (unregistering): Released all slaves [ 917.206596][T14573] tipc: Enabling of bearer rejected, failed to enable media [ 918.583799][T14122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.625347][T14122] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.636750][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.637591][ T5930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.689174][ T8919] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.689256][ T8919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.886736][ T5994] hsr_slave_0: left promiscuous mode [ 918.926391][ T5994] hsr_slave_1: left promiscuous mode [ 918.929056][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.186010][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 921.139037][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1586'. [ 921.942637][ T5741] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 921.996854][ T5994] team0 (unregistering): Port device team_slave_1 removed [ 922.511361][ T5741] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 922.511565][ T5741] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 922.511687][ T5741] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 922.511818][ T5741] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 922.512222][ T5741] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 922.512312][ T5741] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.667078][ T5741] usb 8-1: config 0 descriptor?? [ 922.722812][ T5994] team0 (unregistering): Port device team_slave_0 removed [ 922.866523][T14636] tipc: Enabled bearer , priority 10 [ 923.319025][ T5741] usbhid 8-1:0.0: can't add hid device: -71 [ 923.319122][ T5741] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 923.347535][ T5741] usb 8-1: USB disconnect, device number 19 [ 924.460531][T14655] tipc: Enabling of bearer rejected, failed to enable media [ 924.524408][T14660] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1592'. [ 926.481385][T14678] Mount JFS Failure: -22 [ 926.481403][T14678] jfs_mount failed w/return code = -22 [ 927.337416][T14689] syzkaller0: entered promiscuous mode [ 927.337443][T14689] syzkaller0: entered allmulticast mode [ 927.379318][T14689] tipc: Enabled bearer , priority 0 [ 927.415069][T14688] tipc: Resetting bearer [ 927.538373][T14688] tipc: Disabling bearer [ 929.401077][T14711] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 929.405701][ T5781] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 929.575781][ T5781] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 929.575820][ T5781] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 929.575850][ T5781] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 929.575875][ T5781] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 929.575918][ T5781] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 929.575943][ T5781] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.653273][ T5781] usb 8-1: config 0 descriptor?? [ 929.834455][T14257] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 929.890009][T14257] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 929.893951][T14257] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 929.964752][T14257] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 929.977439][T14257] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 930.143238][T14257] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 930.172615][T14257] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 930.274637][ T5781] usbhid 8-1:0.0: can't add hid device: -71 [ 930.274744][ T5781] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 930.308060][ T5781] usb 8-1: USB disconnect, device number 20 [ 930.786970][T14257] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 930.806788][T14720] tipc: Enabling of bearer rejected, failed to enable media [ 930.891010][T14122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.321882][T14122] veth0_vlan: entered promiscuous mode [ 931.385142][T14122] veth1_vlan: entered promiscuous mode [ 931.512217][T14257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.551565][T14122] veth0_macvtap: entered promiscuous mode [ 931.571234][T14122] veth1_macvtap: entered promiscuous mode [ 931.607551][T14257] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.634999][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.635083][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.674830][T14122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 931.702977][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.703062][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.728808][T14122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 931.748406][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.797467][ T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.799172][ T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.801887][ T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.803175][ T42] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.908626][T14758] tipc: Enabling of bearer rejected, failed to enable media [ 932.530035][ T5994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.530059][ T5994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.729985][ T210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.730009][ T210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.385032][T14792] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 937.343671][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 937.344015][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 937.344637][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 937.351237][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 937.351825][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 938.291023][T14257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.427312][ T5607] Bluetooth: hci1: command tx timeout [ 939.655850][T14257] veth0_vlan: entered promiscuous mode [ 941.647602][ T5607] Bluetooth: hci1: command tx timeout [ 943.666306][T12558] Bluetooth: hci1: command tx timeout [ 944.492996][T14862] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 945.382001][T14257] veth1_vlan: entered promiscuous mode [ 945.553673][T14257] veth0_macvtap: entered promiscuous mode [ 945.733395][T14257] veth1_macvtap: entered promiscuous mode [ 945.746248][T12558] Bluetooth: hci1: command tx timeout [ 945.894638][ T57] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.223470][T14878] syzkaller0: entered promiscuous mode [ 946.223496][T14878] syzkaller0: entered allmulticast mode [ 946.320157][T14884] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1622'. [ 946.327139][T14884] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1622'. [ 947.569767][ T5607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 947.571290][ T5607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 947.571592][ T5607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 947.573369][ T5607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 947.576587][ T5607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 949.665961][ T5607] Bluetooth: hci0: command tx timeout [ 951.365793][T12586] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 951.515631][T12586] usb 8-1: Using ep0 maxpacket: 32 [ 951.518496][T12586] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 951.518526][T12586] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 951.518549][T12586] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 951.518573][T12586] usb 8-1: config 1 has no interface number 0 [ 951.518615][T12586] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 951.518646][T12586] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 951.518688][T12586] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 951.518714][T12586] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.618223][T12586] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 951.744802][T12586] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 951.745755][ T5607] Bluetooth: hci0: command tx timeout [ 952.192436][T12586] usb 8-1: USB disconnect, device number 21 [ 952.194027][T12586] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 952.683655][ T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.329167][ T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.627327][ T57] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.826004][ T5607] Bluetooth: hci0: command tx timeout [ 953.966273][T14800] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.966362][T14800] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.966549][T14800] bridge_slave_0: entered allmulticast mode [ 953.974556][T14800] bridge_slave_0: entered promiscuous mode [ 954.189855][T14800] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.189941][T14800] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.190124][T14800] bridge_slave_1: entered allmulticast mode [ 954.194811][T14800] bridge_slave_1: entered promiscuous mode [ 954.318483][T14800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.339154][T14800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.414286][T14800] team0: Port device team_slave_0 added [ 954.428035][T14800] team0: Port device team_slave_1 added [ 954.493609][T14800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.493630][T14800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.493663][T14800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.551775][T14800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.551794][T14800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.551840][T14800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.068123][T14800] hsr_slave_0: entered promiscuous mode [ 955.082980][T14960] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1632'. [ 955.096441][T14800] hsr_slave_1: entered promiscuous mode [ 955.118124][T14800] debugfs: 'hsr0' already exists in 'hsr' [ 955.118149][T14800] Cannot create hsr debugfs directory [ 955.830557][T14966] Mount JFS Failure: -22 [ 955.830612][T14966] jfs_mount failed w/return code = -22 [ 955.911775][ T5607] Bluetooth: hci0: command tx timeout [ 958.553865][T14979] overlayfs: missing 'lowerdir' [ 959.052664][ T57] bridge_slave_1: left allmulticast mode [ 959.052695][ T57] bridge_slave_1: left promiscuous mode [ 959.052875][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.185781][ T5741] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 959.308630][ T57] bridge_slave_0: left allmulticast mode [ 959.308661][ T57] bridge_slave_0: left promiscuous mode [ 959.308847][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.354856][ T5741] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 959.354892][ T5741] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 959.354937][ T5741] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 959.354964][ T5741] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.950675][T14995] fuse: Bad value for 'rootmode' [ 961.412332][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.550337][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.609005][ T5741] usb 8-1: usb_control_msg returned -71 [ 961.609047][ T5741] usbtmc 8-1:16.0: can't read capabilities [ 961.611631][ T57] bond0 (unregistering): Released all slaves [ 961.682329][ T5741] usb 8-1: USB disconnect, device number 22 [ 961.820957][T15002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1646'. [ 962.481290][T15009] netlink: 'syz.3.1645': attribute type 21 has an invalid length. [ 962.481315][T15009] IPv6: NLM_F_CREATE should be specified when creating new route [ 967.624709][T15040] fuse: Bad value for 'rootmode' [ 975.887963][T15096] fuse: Bad value for 'rootmode' [ 976.120275][T15100] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1665'. [ 978.996379][ T57] hsr_slave_0: left promiscuous mode [ 979.059064][ T57] hsr_slave_1: left promiscuous mode [ 979.062731][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 979.062758][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 979.155507][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 979.155534][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 979.425109][T15120] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input22 [ 983.821473][ T57] veth1_macvtap: left promiscuous mode [ 983.821539][ T57] veth0_macvtap: left promiscuous mode [ 983.821674][ T57] veth1_vlan: left promiscuous mode [ 983.821953][ T57] veth0_vlan: left promiscuous mode [ 986.477387][ T57] team0 (unregistering): Port device team_slave_1 removed [ 986.519106][ T57] team0 (unregistering): Port device team_slave_0 removed [ 989.196150][T14897] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.203870][T14897] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.242984][T14897] bridge_slave_0: entered allmulticast mode [ 989.484956][T14897] bridge_slave_0: entered promiscuous mode [ 989.766389][T14897] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.766486][T14897] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.766678][T14897] bridge_slave_1: entered allmulticast mode [ 989.797698][T14897] bridge_slave_1: entered promiscuous mode [ 990.070166][T14897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.354670][T14897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.354754][T14800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 990.604715][T14800] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 990.700769][T14800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 990.925283][T14800] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 992.265885][T14800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 993.198746][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.231564][T14800] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 998.284085][T14897] team0: Port device team_slave_0 added [ 998.716041][T14897] team0: Port device team_slave_1 added [ 998.837486][T14897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 998.837509][T14897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.837553][T14897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 998.843848][T14897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.843868][T14897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.843905][T14897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.326625][T14897] hsr_slave_0: entered promiscuous mode [ 999.328223][T14897] hsr_slave_1: entered promiscuous mode [ 999.738754][T15223] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 999.739121][T15223] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 999.739392][T15223] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 999.740535][T15223] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 999.741188][T15223] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1000.052066][T15230] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1682'. [ 1001.745660][T15223] Bluetooth: hci5: command tx timeout [ 1003.825795][T15223] Bluetooth: hci5: command tx timeout [ 1004.119675][T15263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1684'. [ 1004.575791][T15270] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 1005.757499][T15285] syzkaller0: entered promiscuous mode [ 1005.757527][T15285] syzkaller0: entered allmulticast mode [ 1005.905642][T15223] Bluetooth: hci5: command tx timeout [ 1006.575749][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1691'. [ 1006.575775][T15298] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1691'. [ 1006.576030][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1691'. [ 1006.576048][T15298] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1691'. [ 1006.681032][ T57] bridge_slave_1: left allmulticast mode [ 1006.681064][ T57] bridge_slave_1: left promiscuous mode [ 1006.681252][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.967596][ T57] bridge_slave_0: left allmulticast mode [ 1006.967624][ T57] bridge_slave_0: left promiscuous mode [ 1006.968900][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.018075][T15325] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1695'. [ 1007.648613][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1007.702289][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1007.852312][ T57] bond0 (unregistering): Released all slaves [ 1007.985769][T15223] Bluetooth: hci5: command tx timeout [ 1008.963973][T15339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1696'. [ 1008.998677][ T57] hsr_slave_0: left promiscuous mode [ 1009.055425][ T57] hsr_slave_1: left promiscuous mode [ 1009.061532][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.197392][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1011.002571][ T57] veth1_macvtap: left promiscuous mode [ 1011.002617][ T57] veth0_macvtap: left promiscuous mode [ 1011.002703][ T57] veth1_vlan: left promiscuous mode [ 1011.002765][ T57] veth0_vlan: left promiscuous mode [ 1011.271712][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1011.273560][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1011.273872][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1011.299705][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1011.300269][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1012.050207][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1012.089462][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1012.890679][T15222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.892265][T15222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.893385][T15222] bridge_slave_0: entered allmulticast mode [ 1012.901806][T15222] bridge_slave_0: entered promiscuous mode [ 1012.912979][T15222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.913084][T15222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.920609][T15222] bridge_slave_1: entered allmulticast mode [ 1012.928380][T15222] bridge_slave_1: entered promiscuous mode [ 1013.088253][T15222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.119011][T15222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.270538][T15222] team0: Port device team_slave_0 added [ 1013.290548][T15222] team0: Port device team_slave_1 added [ 1013.345744][ T5607] Bluetooth: hci1: command tx timeout [ 1013.888317][T15222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1013.888337][T15222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.888369][T15222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1013.942267][T15222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1013.942285][T15222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.942318][T15222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.191074][T15222] hsr_slave_0: entered promiscuous mode [ 1014.195932][T15222] hsr_slave_1: entered promiscuous mode [ 1014.212613][T15222] debugfs: 'hsr0' already exists in 'hsr' [ 1014.212638][T15222] Cannot create hsr debugfs directory [ 1014.401651][T15368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1700'. [ 1015.426143][ T5607] Bluetooth: hci1: command tx timeout [ 1016.625746][ T7697] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1016.729078][T15345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.730684][T15345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.730828][T15345] bridge_slave_0: entered allmulticast mode [ 1016.733762][T15345] bridge_slave_0: entered promiscuous mode [ 1016.774093][T15345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.774211][T15345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.785922][ T7697] usb 8-1: Using ep0 maxpacket: 32 [ 1016.795423][ T7697] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 1016.795454][ T7697] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1016.795477][ T7697] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1016.795502][ T7697] usb 8-1: config 1 has no interface number 0 [ 1016.808066][ T7697] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1016.808103][ T7697] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1016.808146][ T7697] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1016.808172][ T7697] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.864745][T15345] bridge_slave_1: entered allmulticast mode [ 1016.873799][T15345] bridge_slave_1: entered promiscuous mode [ 1017.505647][ T5607] Bluetooth: hci1: command tx timeout [ 1018.687187][ T7697] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 1019.585730][ T5607] Bluetooth: hci1: command tx timeout [ 1020.482536][T15345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.516862][T15345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.517530][ T7697] snd_usb_pod 8-1:1.1: set_interface failed [ 1020.517694][ T7697] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 1020.517825][ T7697] snd_usb_pod 8-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1020.578182][ T7697] usb 8-1: USB disconnect, device number 23 [ 1020.710641][T15345] team0: Port device team_slave_0 added [ 1020.721536][T15345] team0: Port device team_slave_1 added [ 1020.788875][T15345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.788896][T15345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.788928][T15345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.793187][T15345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.793205][T15345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.793238][T15345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.967358][T15345] hsr_slave_0: entered promiscuous mode [ 1020.968888][T15345] hsr_slave_1: entered promiscuous mode [ 1020.969485][T15345] debugfs: 'hsr0' already exists in 'hsr' [ 1020.969505][T15345] Cannot create hsr debugfs directory [ 1024.523251][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1703'. [ 1024.523279][T15429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1703'. [ 1024.523460][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1703'. [ 1024.523478][T15429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1703'. [ 1025.238449][T15452] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1708'. [ 1027.319551][T15476] syzkaller0: entered promiscuous mode [ 1027.319576][T15476] syzkaller0: entered allmulticast mode [ 1027.339175][T15476] tipc: Enabled bearer , priority 0 [ 1027.346171][T15476] tipc: Resetting bearer [ 1027.377086][T15472] tipc: Resetting bearer [ 1027.458481][T15472] tipc: Disabling bearer [ 1029.053423][T15488] Mount JFS Failure: -22 [ 1029.053519][T15488] jfs_mount failed w/return code = -22 [ 1031.802340][T15532] syzkaller0: entered promiscuous mode [ 1031.802367][T15532] syzkaller0: entered allmulticast mode [ 1031.835452][T15532] tipc: Enabled bearer , priority 0 [ 1031.860901][T15532] tipc: Resetting bearer [ 1033.066602][T15526] tipc: Resetting bearer [ 1033.267494][T15526] tipc: Disabling bearer [ 1035.100684][ T57] bridge_slave_1: left allmulticast mode [ 1035.100731][ T57] bridge_slave_1: left promiscuous mode [ 1035.100909][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.240953][ T57] bridge_slave_0: left allmulticast mode [ 1035.240982][ T57] bridge_slave_0: left promiscuous mode [ 1035.241163][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.589750][ T57] bridge_slave_1: left allmulticast mode [ 1035.589779][ T57] bridge_slave_1: left promiscuous mode [ 1035.589922][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.679089][ T57] bridge_slave_0: left allmulticast mode [ 1035.679113][ T57] bridge_slave_0: left promiscuous mode [ 1035.679229][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.821980][T15574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1727'. [ 1038.043914][T15586] evm: overlay not supported [ 1038.329897][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.363966][T15588] binder: 15587:15588 ioctl c0306201 200000000080 returned -14 [ 1038.364928][T15588] binder: 15587:15588 ioctl c0306201 2000000003c0 returned -14 [ 1038.382407][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.637809][ T57] bond0 (unregistering): Released all slaves [ 1040.646382][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1040.706223][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1040.767113][ T57] bond0 (unregistering): Released all slaves [ 1041.004650][T15599] syzkaller0: entered promiscuous mode [ 1041.004677][T15599] syzkaller0: entered allmulticast mode [ 1041.023961][T15599] tipc: Enabled bearer , priority 0 [ 1041.039771][T15599] tipc: Resetting bearer [ 1041.517466][T15598] tipc: Resetting bearer [ 1042.759680][ T7697] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1042.764066][T15598] tipc: Disabling bearer [ 1042.916835][ T7697] usb 2-1: Using ep0 maxpacket: 8 [ 1042.972971][T15635] binder: 15634:15635 ioctl c0306201 200000000080 returned -14 [ 1042.974215][T15635] binder: 15634:15635 ioctl c0306201 2000000003c0 returned -14 [ 1043.020961][ T7697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1043.021007][ T7697] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1043.021055][ T7697] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1043.021081][ T7697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.069876][ T7697] usb 2-1: config 0 descriptor?? [ 1043.486575][ T7697] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 1043.487718][ T7697] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 1043.487758][ T7697] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 1043.487789][ T7697] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 1043.487826][ T7697] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 1043.487858][ T7697] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 1043.487897][ T7697] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 1043.487928][ T7697] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 1043.499524][ T7697] lenovo 0003:17EF:6047.0011: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 1043.968928][ T7697] lenovo 0003:17EF:6047.0011: Failed to switch middle button: -71 [ 1043.970035][ T7697] lenovo 0003:17EF:6047.0011: Fn-lock setting failed: -71 [ 1043.971038][ T7697] lenovo 0003:17EF:6047.0011: Sensitivity setting failed: -71 [ 1044.007730][ T7697] usb 2-1: USB disconnect, device number 18 [ 1045.116790][ T57] hsr_slave_0: left promiscuous mode [ 1045.198259][ T57] hsr_slave_1: left promiscuous mode [ 1045.198943][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.101129][T15666] overlayfs: failed to resolve './file0': -2 [ 1046.107052][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.205874][ T57] hsr_slave_0: left promiscuous mode [ 1046.221746][ T57] hsr_slave_1: left promiscuous mode [ 1046.222438][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.239615][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.457047][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1046.474489][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1046.766300][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1046.796323][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1050.095604][ T5741] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1050.247941][ T5741] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1050.247980][ T5741] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1050.248010][ T5741] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1050.248035][ T5741] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1050.248078][ T5741] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1050.248104][ T5741] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.253957][ T5741] usb 8-1: config 0 descriptor?? [ 1050.705226][ T5741] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1051.612985][T15752] binder: 15751:15752 ioctl c0306201 200000000080 returned -14 [ 1051.614459][T15752] binder: 15751:15752 ioctl c0306201 2000000003c0 returned -14 [ 1052.187067][T15687] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1053.066123][ T7697] usb 8-1: USB disconnect, device number 24 [ 1054.110516][T15780] syzkaller0: entered promiscuous mode [ 1054.110541][T15780] syzkaller0: entered allmulticast mode [ 1054.280271][T15780] tipc: Enabled bearer , priority 0 [ 1054.295244][T15780] tipc: Resetting bearer [ 1054.629007][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.908342][T15778] tipc: Resetting bearer [ 1055.181270][T15778] tipc: Disabling bearer [ 1055.371773][ T5264] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1055.955121][T15803] overlayfs: missing 'lowerdir' [ 1056.013376][T15222] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1056.170018][T15222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1056.190945][T15222] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1056.238780][T15222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1056.265950][T15222] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1056.323015][T15222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1056.375690][T15222] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1056.450792][T15222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1057.419411][T15345] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1057.657563][T15345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1057.663647][T15345] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1059.256192][T15345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1059.292088][T15345] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1059.349351][T15345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1059.473556][T15345] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1059.564032][T15345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1059.899795][T15345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.933705][T15345] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.989047][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.995747][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.016521][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.016612][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.011114][T15223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1062.014889][T15223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1062.015347][T15223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1062.031425][T15223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1062.049727][T15223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1063.543862][T15345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.681104][ T7697] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1063.693560][ T7697] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1063.852321][T15904] fido_id[15904]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1064.144749][T15223] Bluetooth: hci0: command tx timeout [ 1064.178240][ T5264] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1065.605768][T15928] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1787'. [ 1066.145614][T15223] Bluetooth: hci0: command tx timeout [ 1067.619495][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1067.948687][T15345] veth0_vlan: entered promiscuous mode [ 1068.000139][ T7697] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1068.186930][ T7697] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1068.225743][T15223] Bluetooth: hci0: command tx timeout [ 1069.887157][T15345] veth1_vlan: entered promiscuous mode [ 1070.123046][T15860] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.123144][T15860] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.123312][T15860] bridge_slave_0: entered allmulticast mode [ 1070.151587][T15860] bridge_slave_0: entered promiscuous mode [ 1070.168201][T15860] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.168286][T15860] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.190229][T15860] bridge_slave_1: entered allmulticast mode [ 1070.193138][T15860] bridge_slave_1: entered promiscuous mode [ 1070.259301][T15860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.265245][T15860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.305794][T15223] Bluetooth: hci0: command tx timeout [ 1070.388679][T15860] team0: Port device team_slave_0 added [ 1070.404923][T15860] team0: Port device team_slave_1 added [ 1070.534818][T15860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.534837][T15860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.534870][T15860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.742848][T15860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.742868][T15860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.742898][T15860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.698233][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1071.701103][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1071.702423][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1071.713029][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1071.731808][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1071.852376][T15962] fido_id[15962]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1072.115638][ T5781] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1072.267565][ T5781] usb 4-1: Using ep0 maxpacket: 8 [ 1072.270690][ T5781] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.270739][ T5781] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1072.270767][ T5781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.323432][ T5781] usb 4-1: config 0 descriptor?? [ 1072.345228][ T5781] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 1073.800446][ T5264] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1073.825707][ T5607] Bluetooth: hci5: command tx timeout [ 1074.182649][T15860] hsr_slave_0: entered promiscuous mode [ 1074.193628][T15860] hsr_slave_1: entered promiscuous mode [ 1074.411161][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1799'. [ 1074.411188][T16022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1799'. [ 1074.411354][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1799'. [ 1074.411372][T16022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1799'. [ 1074.814679][ T7697] usb 4-1: USB disconnect, device number 7 [ 1074.959805][ T7725] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1074.989246][ T7725] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1075.267042][T16031] fido_id[16031]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1075.907291][T15223] Bluetooth: hci5: command tx timeout [ 1078.030717][T15223] Bluetooth: hci5: command tx timeout [ 1078.926312][T16036] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input24 [ 1080.325693][T15223] Bluetooth: hci5: command tx timeout [ 1082.731347][ T5264] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1083.174912][ T8411] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1083.182387][ T8411] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1083.545322][T15987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.553461][T15987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.553642][T15987] bridge_slave_0: entered allmulticast mode [ 1083.574747][T15987] bridge_slave_0: entered promiscuous mode [ 1083.598603][T15987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.598700][T15987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.598834][T15987] bridge_slave_1: entered allmulticast mode [ 1083.602205][T15987] bridge_slave_1: entered promiscuous mode [ 1083.678744][T15987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.684706][T15987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.743158][T15987] team0: Port device team_slave_0 added [ 1083.762064][T15987] team0: Port device team_slave_1 added [ 1084.114472][ T3363] bridge_slave_1: left allmulticast mode [ 1084.114503][ T3363] bridge_slave_1: left promiscuous mode [ 1084.114686][ T3363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.136299][ T7697] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1084.280437][ T3363] bridge_slave_0: left allmulticast mode [ 1084.280467][ T3363] bridge_slave_0: left promiscuous mode [ 1084.280647][ T3363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.307493][ T7697] usb 4-1: Using ep0 maxpacket: 8 [ 1084.309181][ T7697] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.309234][ T7697] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1084.309261][ T7697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.314655][ T7697] usb 4-1: config 0 descriptor?? [ 1084.365779][ T7697] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 1084.940845][ T3363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1085.136488][ T3363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1085.197241][ T3363] bond0 (unregistering): Released all slaves [ 1085.260781][ T5264] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1085.360944][T16120] syzkaller0: entered promiscuous mode [ 1085.360972][T16120] syzkaller0: entered allmulticast mode [ 1085.378945][T15987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.378963][T15987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.378996][T15987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.469043][T15987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.469062][T15987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.469095][T15987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.865302][T13049] usb 4-1: USB disconnect, device number 8 [ 1087.083296][ T3363] hsr_slave_0: left promiscuous mode [ 1087.121580][ T3363] hsr_slave_1: left promiscuous mode [ 1087.123277][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1087.340093][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.729096][ T3363] team0 (unregistering): Port device team_slave_1 removed [ 1087.755209][ T3363] team0 (unregistering): Port device team_slave_0 removed [ 1091.164074][ T5741] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1091.348566][ T5741] usb 2-1: Using ep0 maxpacket: 8 [ 1091.350104][ T5741] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.350148][ T5741] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1091.350175][ T5741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.353079][ T5741] usb 2-1: config 0 descriptor?? [ 1091.411508][ T5741] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 1093.739219][ T5741] usb 2-1: USB disconnect, device number 19 [ 1095.574018][T16212] binder: 16211:16212 ioctl c0306201 2000000003c0 returned -14 [ 1106.092961][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1106.094699][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1106.094951][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1106.095694][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1106.096205][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1107.057346][T15223] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1107.059037][T15223] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1107.059321][T15223] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1107.060493][T15223] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1107.097423][T15223] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1108.129711][T15223] Bluetooth: hci1: command tx timeout [ 1109.159606][T15223] Bluetooth: hci6: command tx timeout [ 1110.190161][T15223] Bluetooth: hci1: command tx timeout [ 1110.679167][ T5607] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1110.680547][ T5607] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1110.680797][ T5607] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1110.681518][ T5607] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1110.682044][ T5607] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1111.221422][ T5607] Bluetooth: hci6: command tx timeout [ 1112.263146][ T5607] Bluetooth: hci1: command tx timeout [ 1112.739449][ T5607] Bluetooth: hci7: command tx timeout [ 1113.285511][ T5607] Bluetooth: hci6: command tx timeout [ 1114.318243][ T5607] Bluetooth: hci1: command tx timeout [ 1114.796696][ T5607] Bluetooth: hci7: command tx timeout [ 1115.361478][ T5607] Bluetooth: hci6: command tx timeout [ 1115.671203][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.872449][ T5607] Bluetooth: hci7: command tx timeout [ 1118.941104][ T5607] Bluetooth: hci7: command tx timeout [ 1121.483504][T15223] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1121.483787][T15223] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1121.485489][T15223] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1121.486232][T15223] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1121.486703][T15223] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1123.561190][ T5607] Bluetooth: hci8: command tx timeout [ 1125.624236][ T5607] Bluetooth: hci8: command tx timeout [ 1127.707669][ T5607] Bluetooth: hci8: command tx timeout [ 1129.772160][ T5607] Bluetooth: hci8: command tx timeout [ 1131.206947][T15223] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1131.207226][T15223] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1131.222750][T15223] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1131.230907][T15223] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1131.231428][T15223] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1133.284502][T15223] Bluetooth: hci9: command tx timeout [ 1135.360542][T15223] Bluetooth: hci9: command tx timeout [ 1137.437092][T15223] Bluetooth: hci9: command tx timeout [ 1139.514298][T15223] Bluetooth: hci9: command tx timeout [ 1166.314092][ T5607] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1166.316007][ T5607] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1166.316285][ T5607] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1166.317048][ T5607] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1166.346419][ T5607] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1167.158730][ T5607] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1167.160486][ T5607] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1167.160756][ T5607] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1167.161476][ T5607] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1167.161953][ T5607] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1168.376955][T15223] Bluetooth: hci10: command tx timeout [ 1169.176765][T15223] Bluetooth: hci11: command tx timeout [ 1170.456678][T15223] Bluetooth: hci10: command tx timeout [ 1170.651662][ T5607] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1170.653438][ T5607] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1170.653706][ T5607] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1170.654433][ T5607] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1170.654904][ T5607] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1171.256489][ T5607] Bluetooth: hci11: command tx timeout [ 1172.536326][ T5607] Bluetooth: hci10: command tx timeout [ 1172.696055][ T5607] Bluetooth: hci12: command tx timeout [ 1173.336111][ T5607] Bluetooth: hci11: command tx timeout [ 1174.615941][ T5607] Bluetooth: hci10: command tx timeout [ 1174.775976][ T5607] Bluetooth: hci12: command tx timeout [ 1175.415735][ T5607] Bluetooth: hci11: command tx timeout [ 1176.855546][ T5607] Bluetooth: hci12: command tx timeout [ 1177.020949][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.935534][ T5607] Bluetooth: hci12: command tx timeout [ 1182.708460][T16279] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1182.708732][T16279] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1182.709029][T16279] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1182.709788][T16279] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1182.710246][T16279] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1184.214867][T16279] Bluetooth: hci0: command 0x0406 tx timeout [ 1184.784883][T16279] Bluetooth: hci13: command tx timeout [ 1186.854656][T16279] Bluetooth: hci13: command tx timeout [ 1188.944769][T16279] Bluetooth: hci13: command tx timeout [ 1191.014395][T16279] Bluetooth: hci13: command tx timeout [ 1192.406944][ T5607] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1192.408703][ T5607] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1192.410402][ T5607] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1192.411129][ T5607] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1192.411599][ T5607] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1193.204243][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1193.204261][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16 [ 1193.204291][ C0] rcu: (detected by 0, t=10502 jiffies, g=68013, q=12544 ncpus=2) [ 1193.204316][ C0] task:ktimers/0 state:R running task stack:24040 pid:16 tgid:16 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 1193.204383][ C0] Call Trace: [ 1193.204391][ C0] [ 1193.204401][ C0] sched_show_task+0x4aa/0x5f0 [ 1193.204584][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 1193.204632][ C0] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 1193.204685][ C0] ? wq_watchdog_touch+0xf9/0x160 [ 1193.204711][ C0] print_other_cpu_stall+0xf7b/0x1310 [ 1193.204732][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1193.204756][ C0] rcu_sched_clock_irq+0x93d/0x1050 [ 1193.204798][ C0] update_process_times+0x234/0x2d0 [ 1193.204833][ C0] tick_nohz_handler+0x38f/0x6b0 [ 1193.204894][ C0] ? rcu_is_watching+0x15/0xb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1193.204914][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1193.204934][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1193.204969][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1193.204988][ C0] __hrtimer_run_queues+0x3a0/0xaf0 [ 1193.205018][ C0] hrtimer_interrupt+0x44a/0x900 [ 1193.205050][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1193.205078][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1193.205151][ C0] [ 1193.205156][ C0] [ 1193.205161][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1193.205195][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1193.205249][ C0] Code: f7 e8 ed f1 85 f6 f7 c3 00 02 00 00 74 05 e8 e0 bc b1 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f4 12 78 f6 65 8b 05 dd af 2d 07 85 c0 74 18 5b 41 5e e9 01 3c [ 1193.205262][ C0] RSP: 0018:ffffc90000157ba8 EFLAGS: 00000206 [ 1193.205296][ C0] RAX: 0000000000000046 RBX: 0000000000000246 RCX: 0000000080000002 [ 1193.205307][ C0] RDX: 0000000000000000 RSI: ffffffff8b876980 RDI: 0000000000000001 [ 1193.205317][ C0] RBP: 1ffff11017105102 R08: ffffffff8f6833f7 R09: 1ffffffff1ed067e [ 1193.205328][ C0] R10: dffffc0000000000 R11: fffffbfff1ed067f R12: ffffffff892be0f0 [ 1193.205340][ C0] R13: ffff8880b8828440 R14: ffff8880b8828440 R15: ffff88806ad02440 [ 1193.205352][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1193.205442][ C0] __hrtimer_run_queues+0x2ee/0xaf0 [ 1193.205472][ C0] hrtimer_run_softirq+0x18f/0x260 [ 1193.205498][ C0] handle_softirqs+0x1d9/0x6c0 [ 1193.205526][ C0] run_ktimerd+0x69/0x100 [ 1193.205549][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1193.205601][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 1193.205626][ C0] kthread+0x388/0x470 [ 1193.205655][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1193.205677][ C0] ? __pfx_kthread+0x10/0x10 [ 1193.205691][ C0] ret_from_fork+0x514/0xb70 [ 1193.205745][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1193.205773][ C0] ? __switch_to+0xc89/0x1420 [ 1193.205797][ C0] ? __pfx_kthread+0x10/0x10 [ 1193.205811][ C0] ret_from_fork_asm+0x1a/0x30 [ 1193.205847][ C0] [ 1204.695905][T16291] Bluetooth: hci5: command 0x0406 tx timeout