last executing test programs: 28m51.413090043s ago: executing program 32 (id=45): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 27m32.094744829s ago: executing program 33 (id=178): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x4, 0xffffffff9673e35d]}}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7, 0xcccccccc}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000200), &(0x7f00000000c0)=[r8], &(0x7f0000000040), 0x0, 0x300}) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) r9 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r9, &(0x7f0000000400)=[{{&(0x7f0000000100)=@ieee802154, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x104}}], 0x1, 0x4000880) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) 27m11.186996581s ago: executing program 34 (id=205): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 26m41.008167109s ago: executing program 35 (id=245): syz_open_dev$MSR(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 15m25.590156676s ago: executing program 36 (id=910): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m41.200744912s ago: executing program 37 (id=1243): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) chown(&(0x7f0000000200)='./cgroup/cgroup.procs\x00', 0xee01, 0x0) 8m45.456897543s ago: executing program 38 (id=1420): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x12, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) pipe2(0x0, 0x80000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockname$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x8040480) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) recvmmsg(r3, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) 6m36.83429339s ago: executing program 7 (id=1703): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x541}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000280)={0x6031, 0x4}) r2 = io_uring_setup(0x1b79, &(0x7f0000000040)={0x0, 0xefc8, 0x1f480, 0xfffffffd, 0x80332}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) syz_emit_ethernet(0x0, 0x0, 0x0) 6m34.063762192s ago: executing program 7 (id=1707): r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6c00000000102c010000000000fc64ef7c00000000000000ff020000000000000000000000000001ff"], 0x0) recvmmsg(r0, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10102, 0x0) 6m32.585622578s ago: executing program 7 (id=1710): bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x196ab2b893913bf0, {{0x41, 0x1}}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb3", 0x5) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 6m30.611750703s ago: executing program 7 (id=1714): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x3e2}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, 0x0, r2, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 6m28.650918473s ago: executing program 7 (id=1719): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, 0x0, 0x0, 0x0}, 0x0) 6m23.864706409s ago: executing program 7 (id=1728): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r7, 0x200, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xf, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) fsopen(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6m8.72216339s ago: executing program 1 (id=1759): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x34, r1, 0x629, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000104}, 0x40) 6m7.276813029s ago: executing program 39 (id=1728): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r7, 0x200, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xf, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) fsopen(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6m3.539243021s ago: executing program 1 (id=1766): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@newsa={0x19c, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@private=0xa0100fe, 0x0, 0xecdf, 0x0, 0x0, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x1000000, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0x1, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x60, 0x2, {{'cbc(camellia)\x00'}, 0xc0, "6e000b000000002000000000190000000000feffff7f0000"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x19c}}, 0x44050) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/223], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r8 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x3d1, {0x9, 0x21, 0xfffe}}}, &(0x7f0000000040)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair(0x2c, 0x1, 0x8, 0x0) ioctl$HIDIOCGFEATURE(r8, 0xc0404807, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x5a1b5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004804}, 0x40000) 5m57.872675946s ago: executing program 1 (id=1780): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38000000180001002cbd7000fedbdf2502000000fc01c80900270000060015000200000014001680100008800c000180"], 0x38}}, 0x0) 5m54.97496416s ago: executing program 1 (id=1783): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x220) 5m53.901286623s ago: executing program 1 (id=1784): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x5, 0x81, 0x0, 0x9, 0xe, 0x5, 0x2, 0x1, 0x1, 0x6, 0x5, 0x0, 0x1af2, 0x3, 0x8, 0xf, 0xf4, 0x9, '\x00', 0x5, 0x8}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x80000000001, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x5, 0x0, 0x2000000000000, 0x7, 0x2, 0x1, 0x8], 0x40000, 0x256cbcd3ff66022f}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m52.726510417s ago: executing program 1 (id=1788): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe4000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fe5000/0x3000)=nil, 0x0}, 0x68) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) 5m50.293046373s ago: executing program 40 (id=1788): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe4000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fe5000/0x3000)=nil, 0x0}, 0x68) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) 4m37.281175783s ago: executing program 4 (id=1925): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x11f, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x10000000}, @fda={0x66646185, 0x6, 0x0, 0x26}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 4m36.481462537s ago: executing program 4 (id=1926): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x21c1, &(0x7f0000000340)={0x0, 0xca23, 0x200, 0xfffffff7, 0x58}, &(0x7f0000000300), &(0x7f0000ff4000), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m34.489049461s ago: executing program 4 (id=1931): memfd_create(&(0x7f0000000400)='-B\xd5N4:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip\tD\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc8<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGUOMX\x164\xec\x06i\x85\x93\x87YB.e\xea2|A\x95\x05\xc3\x11\xde\xa0\x14*4\x83J\xa1\xddc\xde\x91 sO\xfb\xcc\r\xa8\x05\xa3\xab\xe6\xb5\xe4\x8b\x128\xa8\x05\xf9\f\xb4\x97\x1c\x82\xfd\x80O\x00\x00\x00\x00\x00\x00\x00V\x9a\xaf\xe3\xaees&\xa5\xf4\xa9\xae8\x00\xdd\xba\x11\xa5\xf98\xffH3\xfeL\x95C\x80\xce*ob\x03m\xcfs()\xba\x98\xd5\xfa\x93\x1aU\f\x87\xa7\x9c9\x8c%\a\x880/Nl\xdb\x11Z5\xaa\x88$\xfdRQO\xec\x14\x9d\\q\xaeYv\xae6\a\x03%=\x12\xb1}\xd5\x82O\x9f\xc7\xc2\x89\x12\n\x9e\xc5\xb3\xdd\xdf\xfa\b\x8f\xc0\xfe\xfc\x02\xae\xce\xfe\xc1\xeaNe\xb9R\xadC\x94\x1f\x1b[g\x13\xca\xe4\xb5}\xa4r\x8c\xablp\t\xb2\x03\"\xb2\"\xa8\xde\xfe\xff@\xc7\x13\xfd\xe7%\xdf\xbb\x1f\xf6\x10\x87\xf3\xe4\'\xe61\xf7`u\xce\xd8Q\r\x19\x92\x84\x1a\"\xb3\xab\x89l\xc6\xd3h\x1fm\x98\x8f\x80\x95\xbc\x84\xad\xd3\x98\x81\x1c\xbe\f\xc4\xbb\xf1)@\x8d\f\x01\x9e\xaf\xce', 0x1) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, 0x0) 4m33.40541736s ago: executing program 4 (id=1934): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000040)="0b03fe", 0x3, 0x4040, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 4m31.602315942s ago: executing program 4 (id=1937): timer_create(0x2, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x7, 0x0, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x44040200) 4m28.155194276s ago: executing program 4 (id=1946): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(xeta)\x00'}, 0x58) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2d, 0xf00, 0x0, 0x2000000}, 0xb, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48d0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)}], 0x1}, 0x4004045) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x20, &(0x7f00000008c0)={&(0x7f0000000780)=""/45, 0x2d, 0x0, &(0x7f00000007c0)=""/212, 0xd4}}, 0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendfile(r3, r4, 0x0, 0x7ffff006) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/174, 0xae, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000140)=0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b"], 0x28}}, 0x0) 4m10.665811153s ago: executing program 41 (id=1946): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(xeta)\x00'}, 0x58) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2d, 0xf00, 0x0, 0x2000000}, 0xb, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48d0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)}], 0x1}, 0x4004045) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x20, &(0x7f00000008c0)={&(0x7f0000000780)=""/45, 0x2d, 0x0, &(0x7f00000007c0)=""/212, 0xd4}}, 0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendfile(r3, r4, 0x0, 0x7ffff006) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/174, 0xae, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000140)=0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b"], 0x28}}, 0x0) 3m18.668790788s ago: executing program 2 (id=2078): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x880) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc07e, 0xc300, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x20) 3m16.49937733s ago: executing program 2 (id=2084): r0 = socket(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsmount(r1, 0x1, 0x0) setpriority(0x1, 0xffffffffffffffff, 0xae8) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0x201}], 0x1, 0x20, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0xc0040, 0x2c) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, 0x0, 0x40814) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x1, 0x88000) sendmsg$nl_route(r4, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) 3m14.9972051s ago: executing program 2 (id=2087): socket$inet6(0xa, 0x1, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc4) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@can={{0x2, 0x0, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "985300"}, 0x10}}, 0xd209f6d814827b17) read(r0, &(0x7f0000002fc0)=""/52, 0x34) 3m9.193286987s ago: executing program 2 (id=2102): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x35c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x80000000, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e32, @remote}}}, 0x108) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0xd) 3m7.98900986s ago: executing program 2 (id=2105): r0 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r1 = dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x1162, &(0x7f0000002380)={0x0, 0x2fd9, 0x1046}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000300)={0x3, r1, 'id1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x2008004) clock_settime(0x2, &(0x7f0000000080)={0x77359400}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003}, 0x38) socket$kcm(0x10, 0x2, 0x10) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x4d, 0x63e, 0x1, 0x2, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x27ff, 0xcdb, 0xba3, 0x9, 0x0, {0x8, 0xffffffdf}, 0xd0, 0x9}}) 3m1.9890414s ago: executing program 2 (id=2117): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffeff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x800, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020601010000000000000000010000001400078008001240000000050500140009000000050005000a0000000900020073797a31000000000500040000000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r5 = dup3(r3, r2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x8083) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b, 0x20000000000}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r7 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000800)=[@free_buffer={0x40086303, r7}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fda={0x66646185, 0x4, 0x1, 0x34}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x11}}, &(0x7f0000000680)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) 2m45.457083066s ago: executing program 42 (id=2117): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffeff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x800, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020601010000000000000000010000001400078008001240000000050500140009000000050005000a0000000900020073797a31000000000500040000000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r5 = dup3(r3, r2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x8083) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b, 0x20000000000}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r7 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000800)=[@free_buffer={0x40086303, r7}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fda={0x66646185, 0x4, 0x1, 0x34}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x11}}, &(0x7f0000000680)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) 1m54.05688114s ago: executing program 3 (id=2242): r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x322}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m52.393909826s ago: executing program 3 (id=2247): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x3, 0x3}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x8) r2 = landlock_create_ruleset(&(0x7f0000000280)={0x4224}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x81) 1m51.014828778s ago: executing program 3 (id=2251): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendto(r0, &(0x7f0000000200)="4d411150", 0x4, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000004140)=""/4095, 0xfff}], 0x1}, 0x5}], 0x1, 0x102, 0x0) 1m49.926175382s ago: executing program 3 (id=2254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c0102030109021200010000"], 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m44.739968055s ago: executing program 3 (id=2262): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r1, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, 0x0, 0x80) sendmmsg(r3, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000100)={r1, r2, 0x0, 0x0, 0xfffffffffffffffe}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="221004000000fb5b1ff5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) 1m40.747130848s ago: executing program 3 (id=2269): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001cc0)) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) 1m20.247604365s ago: executing program 43 (id=2269): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001cc0)) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) 40.838719118s ago: executing program 9 (id=2356): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) getrusage(0x1, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000000)={'virt_wifi0\x00', @random='\x00\x00 \x00'}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0xed, 0x0, 0x4, 0x0, 0x1, 0x6}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000080)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) 36.518985185s ago: executing program 9 (id=2364): socket$netlink(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x161d21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4c840) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 36.048393523s ago: executing program 9 (id=2366): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x8000000000000001, 0x1c1280) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 35.45642605s ago: executing program 9 (id=2368): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x220) 34.561676688s ago: executing program 9 (id=2372): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683d, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x700, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00"], 0x48) 33.868761531s ago: executing program 5 (id=2375): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000042000100fffffffffddbdf250200000004003880100001800c00c80002"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273", 0x7, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 33.39346093s ago: executing program 9 (id=2376): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x158, 0x1a, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8, [0x8]}}]}, 0x158}}, 0x24000058) 30.204728834s ago: executing program 44 (id=2376): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x158, 0x1a, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8, [0x8]}}]}, 0x158}}, 0x24000058) 30.159729713s ago: executing program 5 (id=2378): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x8000000000000001, 0x1c1280) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 29.597902971s ago: executing program 5 (id=2380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14}}, 0x78}}, 0x0) 28.846877748s ago: executing program 5 (id=2381): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x220) 27.858383711s ago: executing program 5 (id=2382): creat(0x0, 0x1cc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x24048004}, 0x4000) 27.144778918s ago: executing program 5 (id=2384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x30040084) close(r0) 24.305117985s ago: executing program 45 (id=2384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x30040084) close(r0) 16.571177795s ago: executing program 8 (id=2399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x24dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0xfff2, 0xffff}, {0x2, 0xc}}}, 0x24}}, 0x44040) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x64, 0x43, 0x8, 0x20, @loopback, @remote, 0x9, 0x8, 0x2, 0x7f}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x1, 0xfa, 0x1, 0x21, @empty, @mcast1, 0x8, 0x20, 0x80000001, 0x7}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xdc, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x0, 0x1c8, 0x130, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12.190492125s ago: executing program 8 (id=2403): syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x240040d4) r0 = io_uring_setup(0x7fb, &(0x7f0000000040)={0x0, 0xc8e2, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) io_uring_enter(r0, 0x2219, 0x7721, 0x17, 0x0, 0x0) 11.099904429s ago: executing program 8 (id=2404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c0102030109021200010000"], 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.750981088s ago: executing program 0 (id=2407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14}}, 0x78}}, 0x0) 8.464615824s ago: executing program 0 (id=2408): syz_usb_connect$uac2(0x1, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x33, &(0x7f0000000340)=@string={0x33, 0x3, "e19f7e91bbeaa056d29faa2b62910a68a6e6cd3b56f17a95cc52dd2594c39718f9475c084c66af8b37c76074f59e3d8dc1"}}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newnexthop={0x1c, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x40000) r0 = socket(0x11, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b844100d5432f"], 0xdd12}], 0x1}, 0x20040890) 8.158502454s ago: executing program 8 (id=2409): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x80}) r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x0, 0x3, 0xb, 0x8, "77f15ef6983d2e9e4cea7f3567bf701fa00d6a39ad4b3eb72544d4c1ba33b030"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) close(r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioprio_get$uid(0x0, 0xee00) r3 = syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000080)=@ethtool_channels={0x3d, 0xffffffff, 0xfffffff9, 0x0, 0x4, 0x2}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefffffffddbdf25fe889637429010eb0f82000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000000c0)="9590dacb137c4ea911e3eb71e91c930d", 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x100000f, 0x10, 0xffffffffffffffff, 0x7a84d000) socket$can_bcm(0x1d, 0x2, 0x2) 8.022314689s ago: executing program 6 (id=2410): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x40, 0x107, 0x70bd2b, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c6}, @nested={0x4, 0x1}, @typed={0x4, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x44094}, 0xc000) 7.55946991s ago: executing program 6 (id=2411): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(0x0, 0x8000000000000001, 0x1c1280) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 7.485832152s ago: executing program 0 (id=2412): syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x240040d4) r0 = io_uring_setup(0x7fb, &(0x7f0000000040)={0x0, 0xc8e2, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x17, 0x0, 0x0) 7.137396101s ago: executing program 6 (id=2413): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.816369378s ago: executing program 0 (id=2414): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.158538124s ago: executing program 8 (id=2415): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) close(0x3) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r1}) epoll_create1(0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"}) write$tun(r2, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x2, 0x2, 0x14, 0x7}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 3.155917834s ago: executing program 6 (id=2416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14}}, 0x78}}, 0x0) 2.747540037s ago: executing program 0 (id=2417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c0102030109021200010000"], 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.685656642s ago: executing program 6 (id=2418): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x1b2084a, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000500)={0x50, 0x0, 0xfffffffffffffff4, {0x7, 0x29, 0x1007, 0x12510421, 0x3, 0x4, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cec}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="0200000001000300000000000400030000000000100006000000000020"], 0x24, 0x2) 1.740099234s ago: executing program 8 (id=2419): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,coherency=full,resv_level=00000000000000000000\x00\x00\x00\x00\x00\x00\x00\x00ocks,coherency=full,inode64,\x00'], 0x1, 0x4421, &(0x7f0000004500)="$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") io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) 1.311650599s ago: executing program 6 (id=2420): syz_mount_image$jfs(&(0x7f0000000180), &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3200012, &(0x7f0000000280)=ANY=[], 0xff, 0x61ea, &(0x7f0000002c40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x101c) 0s ago: executing program 0 (id=2421): syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@metadata_ratio}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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") r0 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) kernel console output (not intermixed with test programs): 770835][ T24] usb 5-1: Product: syz [ 1557.798364][ T24] usb 5-1: Manufacturer: syz [ 1557.829115][ T24] usb 5-1: SerialNumber: syz [ 1557.999844][ T5682] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1558.092218][ T5682] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1558.168692][ T24] usb 5-1: palm_os_3_probe - error -32 getting connection information [ 1558.177268][ T5682] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1558.228515][ T24] visor 5-1:1.0: probe with driver visor failed with error -32 [ 1558.288032][ T5682] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1558.332693][T14814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1717'. [ 1558.507089][ T24] usb 5-1: USB disconnect, device number 6 [ 1558.614637][ T5682] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1558.679902][ T5682] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1558.769537][ T5682] usb 8-1: Manufacturer: syz [ 1558.811765][ T5682] usb 8-1: config 0 descriptor?? [ 1559.510762][ T5682] hid_parser_main: 17 callbacks suppressed [ 1559.510859][ T5682] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 1559.667399][ T5682] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 1560.185577][ T5682] usb 8-1: USB disconnect, device number 4 [ 1561.594466][T14849] fido_id[14849]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1561.976012][T12426] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1562.237454][T12426] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1562.284261][T12426] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1562.301968][T12426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.340645][T12426] usb 5-1: Product: syz [ 1562.352973][T12426] usb 5-1: Manufacturer: syz [ 1562.369307][T12426] usb 5-1: SerialNumber: syz [ 1562.451431][T12426] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1562.974975][T14855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1563.021142][T14855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1563.056909][T12426] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1563.099352][T12426] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1563.130662][T12426] usb 5-1: media controller created [ 1563.397478][T12426] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1563.721377][T14873] fuse: Bad value for 'fd' [ 1565.158856][T12426] usb 5-1: USB disconnect, device number 7 [ 1569.487780][T14929] fuse: Invalid rootmode [ 1571.009063][T14940] tipc: Started in network mode [ 1571.047380][T14940] tipc: Node identity 12bcb348ccaf, cluster identity 4711 [ 1571.127206][T14940] tipc: Enabled bearer , priority 2 [ 1571.201211][T14943] netdevsim netdevsim6 €Â: renamed from netdevsim0 [ 1571.358119][T14943] tipc: Disabling bearer [ 1572.878198][T12355] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.407134][T12355] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.878738][T12355] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.271113][T12355] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.897141][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1574.920074][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1575.284955][T12355] bridge_slave_1: left allmulticast mode [ 1575.353014][T12355] bridge_slave_1: left promiscuous mode [ 1575.416221][T12355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.429536][T14982] fuse: Invalid rootmode [ 1575.501539][T12355] bridge_slave_0: left allmulticast mode [ 1575.530479][T12355] bridge_slave_0: left promiscuous mode [ 1575.579643][T12355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.603625][T12944] IPVS: starting estimator thread 0... [ 1579.291261][T15004] IPVS: using max 240 ests per chain, 12000 per kthread [ 1580.894255][T12355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1581.094964][T12355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1581.225190][T12355] bond0 (unregistering): Released all slaves [ 1582.375195][T14339] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1582.389659][T14339] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1582.401391][T14339] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1582.417730][T14339] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1582.433296][T14339] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1582.616554][T15026] netlink: 'syz.9.1767': attribute type 2 has an invalid length. [ 1583.784593][T15037] fuse: Invalid rootmode [ 1584.362041][T12355] hsr_slave_0: left promiscuous mode [ 1584.403769][T12355] hsr_slave_1: left promiscuous mode [ 1584.466060][T12355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1584.531528][T12355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1584.588548][T12355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1584.600740][T12355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1584.616591][T11827] Bluetooth: hci4: command tx timeout [ 1584.842684][T12355] veth1_macvtap: left promiscuous mode [ 1584.908334][T12355] veth0_macvtap: left promiscuous mode [ 1584.944522][T12355] veth1_vlan: left promiscuous mode [ 1584.987957][T12355] veth0_vlan: left promiscuous mode [ 1586.839488][T11827] Bluetooth: hci4: command tx timeout [ 1588.786070][T12355] team0 (unregistering): Port device team_slave_1 removed [ 1588.992449][T12355] team0 (unregistering): Port device team_slave_0 removed [ 1589.070994][T11827] Bluetooth: hci4: command tx timeout [ 1589.575941][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1589.750690][T15079] netlink: 'syz.1.1780': attribute type 2 has an invalid length. [ 1589.796642][ T24] usb 7-1: config 0 has no interfaces? [ 1589.889006][ T24] usb 7-1: config 0 has no interfaces? [ 1589.945484][ T24] usb 7-1: config 0 has no interfaces? [ 1589.965047][ T24] usb 7-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 1590.027101][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.112290][ T24] usb 7-1: config 0 descriptor?? [ 1591.089720][ T7337] usb 7-1: USB disconnect, device number 19 [ 1591.287932][T11827] Bluetooth: hci4: command tx timeout [ 1592.066929][T11827] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1592.075765][T11827] Bluetooth: hci3: Injecting HCI hardware error event [ 1592.083178][T11827] Bluetooth: hci3: hardware error 0x00 [ 1592.618172][T12355] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.079638][T12355] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.454309][T12355] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.714222][T12355] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.361908][T11827] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1595.032017][T12355] bridge_slave_1: left allmulticast mode [ 1595.060649][T12355] bridge_slave_1: left promiscuous mode [ 1595.085771][T12355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.119056][T12355] bridge_slave_0: left allmulticast mode [ 1595.138018][T12355] bridge_slave_0: left promiscuous mode [ 1595.181331][T12355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.413115][T14339] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1596.426821][T14339] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1596.437592][T14339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1596.458852][T14339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1596.476094][T14339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1596.611776][T12355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1596.639490][T12355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1596.704984][T12355] bond0 (unregistering): Released all slaves [ 1596.815158][T15137] netlink: 'syz.9.1792': attribute type 2 has an invalid length. [ 1596.915475][T15117] ipvlan2: entered promiscuous mode [ 1596.961467][T15117] team0: Device ipvlan2 failed to register rx_handler [ 1597.354053][T12827] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1597.555345][T12827] usb 5-1: config 0 has no interfaces? [ 1597.598644][T12827] usb 5-1: config 0 has no interfaces? [ 1597.635080][T12827] usb 5-1: config 0 has no interfaces? [ 1597.658094][T12827] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 1597.721413][T12827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.786228][T12827] usb 5-1: config 0 descriptor?? [ 1598.337901][T12426] usb 5-1: USB disconnect, device number 8 [ 1598.361062][T12355] hsr_slave_0: left promiscuous mode [ 1598.402886][T12355] hsr_slave_1: left promiscuous mode [ 1598.418133][T12355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1598.448658][T12355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1598.478683][T12355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1598.488993][T12355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1598.549311][T12355] veth1_macvtap: left promiscuous mode [ 1598.580321][T12355] veth0_macvtap: left promiscuous mode [ 1598.587284][T12355] veth1_vlan: left promiscuous mode [ 1598.601647][T12355] veth0_vlan: left promiscuous mode [ 1598.636243][T11827] Bluetooth: hci0: command tx timeout [ 1600.859152][T11827] Bluetooth: hci0: command tx timeout [ 1600.960084][T12355] team0 (unregistering): Port device team_slave_1 removed [ 1601.078368][T12355] team0 (unregistering): Port device team_slave_0 removed [ 1602.950966][T15216] netlink: 'syz.6.1803': attribute type 2 has an invalid length. [ 1602.980034][T15021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.007050][T15021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1603.039339][T15021] bridge_slave_0: entered allmulticast mode [ 1603.061961][T15021] bridge_slave_0: entered promiscuous mode [ 1603.081162][T11827] Bluetooth: hci0: command tx timeout [ 1603.144739][T15021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1603.205320][T15021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1603.240016][T15021] bridge_slave_1: entered allmulticast mode [ 1603.286049][T15021] bridge_slave_1: entered promiscuous mode [ 1603.749713][T12355] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.841363][T15021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1604.003094][T15021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1604.033032][T12355] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.321026][T12426] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1604.529747][T12355] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.564970][T12426] usb 5-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1604.598603][T12426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.618362][T15021] team0: Port device team_slave_0 added [ 1604.641630][T12426] usb 5-1: Product: syz [ 1604.658427][T12426] usb 5-1: Manufacturer: syz [ 1604.678550][T12426] usb 5-1: SerialNumber: syz [ 1604.693781][T15021] team0: Port device team_slave_1 added [ 1604.919824][T12355] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.170301][T15021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1605.226542][T15021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1605.304329][T11827] Bluetooth: hci0: command tx timeout [ 1605.331112][T15021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1605.378854][T15021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1605.388380][T15021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1605.444489][T15021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1606.488612][ T5232] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1606.661462][T12355] bridge_slave_1: left allmulticast mode [ 1606.683732][T12355] bridge_slave_1: left promiscuous mode [ 1606.702149][T12355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.769912][T12355] bridge_slave_0: left allmulticast mode [ 1606.800150][T12355] bridge_slave_0: left promiscuous mode [ 1606.832723][T12355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.041156][T12426] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 1607.064311][T12426] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1607.131841][T12426] usb 5-1: USB disconnect, device number 9 [ 1607.152532][T12827] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1607.335674][T12827] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1607.388029][T12827] usb 7-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1607.425836][T12827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.455603][T12827] usb 7-1: config 0 descriptor?? [ 1607.517962][T12355] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1607.552237][T12355] ip6gretap1 (unregistering): left allmulticast mode [ 1608.083244][T12355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1608.153339][T12355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1608.201372][T12355] bond0 (unregistering): Released all slaves [ 1608.292616][T12355] bond1 (unregistering): left allmulticast mode [ 1608.336937][T12355] bond1 (unregistering): left promiscuous mode [ 1608.396426][T12355] team0: Port device macvlan2 removed [ 1608.436726][T12355] bond1 (unregistering): Released all slaves [ 1608.535854][ T5746] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1608.771446][T15021] hsr_slave_0: entered promiscuous mode [ 1608.771488][ T5746] usb 5-1: config 0 has no interfaces? [ 1608.805700][ T5746] usb 5-1: config 0 has no interfaces? [ 1608.810989][T15021] hsr_slave_1: entered promiscuous mode [ 1608.824268][T15253] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1809'. [ 1608.829849][ T5746] usb 5-1: config 0 has no interfaces? [ 1608.844133][T15021] debugfs: 'hsr0' already exists in 'hsr' [ 1608.850745][T15021] Cannot create hsr debugfs directory [ 1608.855396][ T5746] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 1608.875781][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.892408][T15228] ipvlan2: entered promiscuous mode [ 1608.920059][ T5746] usb 5-1: config 0 descriptor?? [ 1608.933896][T15228] team0: Device ipvlan2 failed to register rx_handler [ 1609.474930][T12827] usbhid 7-1:0.0: can't add hid device: -71 [ 1609.489793][T12827] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1609.530829][T12827] usb 7-1: USB disconnect, device number 20 [ 1609.724506][ T5679] usb 5-1: USB disconnect, device number 10 [ 1610.013912][T12355] hsr_slave_0: left promiscuous mode [ 1610.040979][T12355] hsr_slave_1: left promiscuous mode [ 1610.053886][T12355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1610.076886][T12355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1610.089207][T12355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1610.105361][T12355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1610.129998][T12355] veth1_macvtap: left promiscuous mode [ 1610.136080][T12355] veth0_macvtap: left promiscuous mode [ 1610.145993][T12355] veth1_vlan: left promiscuous mode [ 1610.151611][T12355] veth0_vlan: left promiscuous mode [ 1610.404254][T15261] fuse: Unknown parameter 'user_id00000000000000000000' [ 1610.620336][T15263] binder: 15262:15263 ioctl 4018620d 0 returned -22 [ 1611.190569][T12355] team0 (unregistering): Port device team_slave_1 removed [ 1611.249738][T12355] team0 (unregistering): Port device team_slave_0 removed [ 1612.650689][T15282] netlink: 'syz.6.1820': attribute type 2 has an invalid length. [ 1612.672319][T15145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.691911][T15145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.709932][T15145] bridge_slave_0: entered allmulticast mode [ 1612.739278][T15145] bridge_slave_0: entered promiscuous mode [ 1613.060997][T15286] binder: 15285:15286 ioctl 4018620d 0 returned -22 [ 1613.138278][T15145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1613.146057][T15145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.160104][T15145] bridge_slave_1: entered allmulticast mode [ 1613.207330][T15145] bridge_slave_1: entered promiscuous mode [ 1613.806894][T15145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1613.882940][T15145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1614.333060][T15145] team0: Port device team_slave_0 added [ 1614.394278][T15297] fuse: Unknown parameter 'user_id00000000000000000000' [ 1614.533284][T15145] team0: Port device team_slave_1 added [ 1614.722745][T15145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1614.730862][T15145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1614.776262][T15145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1614.801277][T15145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1614.810025][T15145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1614.838331][T12827] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1614.853385][T15145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1615.058252][T12827] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1615.099021][T12827] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1615.132943][T12827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.183032][T12827] usb 5-1: config 0 descriptor?? [ 1615.488748][T15021] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1615.588021][T15021] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1615.686491][T15145] hsr_slave_0: entered promiscuous mode [ 1615.752037][T15145] hsr_slave_1: entered promiscuous mode [ 1615.791151][T15021] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1615.891490][T15021] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1615.999352][T15280] ipvlan2: entered promiscuous mode [ 1616.093591][T15280] team0: Device ipvlan2 failed to register rx_handler [ 1616.229351][T15021] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1616.261524][T12827] usbhid 5-1:0.0: can't add hid device: -71 [ 1616.278669][T15317] binder: BINDER_SET_CONTEXT_MGR already set [ 1616.287397][T12827] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1616.296382][T15021] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1616.303792][T15317] binder: 15316:15317 ioctl 4018620d 200000000040 returned -16 [ 1616.322189][T12827] usb 5-1: USB disconnect, device number 11 [ 1616.344686][T15315] netlink: 'syz.6.1829': attribute type 2 has an invalid length. [ 1616.405799][ T5232] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1616.539058][T15021] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1616.595133][T15021] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1619.779661][T15335] fuse: Unknown parameter 'user_id00000000000000000000' [ 1620.838130][T15343] binder: BINDER_SET_CONTEXT_MGR already set [ 1620.850798][T15343] binder: 15342:15343 ioctl 4018620d 200000000040 returned -16 [ 1620.991584][T15021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1621.153792][T15145] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1621.186305][T15145] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1621.200366][T15345] netlink: 'syz.4.1840': attribute type 2 has an invalid length. [ 1621.217114][T15145] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1621.256650][T15145] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1621.286554][T15145] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1621.338462][T15145] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1621.387798][T15145] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1621.460800][T15145] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1621.583939][T15021] 8021q: adding VLAN 0 to HW filter on device team0 [ 1621.784574][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 1621.792412][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1621.841461][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 1621.849044][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1624.341849][T12827] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1624.548409][T12827] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1624.620378][T12827] usb 7-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1624.644545][T12827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.683952][T12827] usb 7-1: config 0 descriptor?? [ 1625.253568][T15349] ipvlan2: entered promiscuous mode [ 1625.289357][T15349] team0: Device ipvlan2 failed to register rx_handler [ 1625.413980][T12827] usbhid 7-1:0.0: can't add hid device: -71 [ 1625.434580][T12827] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1625.488153][T12827] usb 7-1: USB disconnect, device number 21 [ 1625.557444][T15145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1625.604702][T15371] fuse: Bad value for 'fd' [ 1625.728347][T15145] 8021q: adding VLAN 0 to HW filter on device team0 [ 1625.799152][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.806822][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1625.912961][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.920641][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1627.002601][T15381] binder: BINDER_SET_CONTEXT_MGR already set [ 1627.032560][T15381] binder: 15380:15381 ioctl 4018620d 200000000040 returned -16 [ 1627.643221][T15021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1627.819364][T15387] netlink: 'syz.9.1851': attribute type 2 has an invalid length. [ 1630.199968][T15021] veth0_vlan: entered promiscuous mode [ 1631.105791][T15021] veth1_vlan: entered promiscuous mode [ 1632.166011][T15021] veth0_macvtap: entered promiscuous mode [ 1632.261754][T15021] veth1_macvtap: entered promiscuous mode [ 1632.324255][T15425] fuse: Bad value for 'fd' [ 1632.538878][T15021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1632.737598][T15145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1632.818059][T15428] binder: 15427:15428 ioctl c0306201 0 returned -14 [ 1632.824900][T15021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1633.033609][ T1109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.073073][ T1109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.141205][ T1109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.189630][ T1109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.002334][T15145] veth0_vlan: entered promiscuous mode [ 1634.170981][T15145] veth1_vlan: entered promiscuous mode [ 1634.735969][T15145] veth0_macvtap: entered promiscuous mode [ 1634.905140][T15145] veth1_macvtap: entered promiscuous mode [ 1635.221178][T15145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1635.392648][T15145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1635.613979][ T6388] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.645383][ T6388] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.711468][ T6388] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.767480][ T6388] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.954312][T15453] netlink: 'syz.6.1862': attribute type 2 has an invalid length. [ 1640.536275][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1640.543657][T15491] binder: 15489:15491 ioctl c0306201 0 returned -14 [ 1640.551612][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1641.844977][T15517] netlink: 'syz.9.1871': attribute type 2 has an invalid length. [ 1644.161637][T14339] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1644.174484][T14339] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1644.188394][T14339] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1644.210324][T14339] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1644.233473][T14339] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1645.023146][ T6388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1645.077900][ T6388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1645.275301][T15555] binder: 15554:15555 ioctl c0306201 0 returned -14 [ 1645.435907][ T6388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1645.486613][ T6388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1646.434882][T14339] Bluetooth: hci2: command tx timeout [ 1646.720561][ T78] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1647.721908][ T78] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.473923][ T78] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.563083][T15580] fuse: Unknown parameter 'user_id00000000000000000000' [ 1648.690418][T14339] Bluetooth: hci2: command tx timeout [ 1649.094568][ T78] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.327761][ T78] bridge_slave_1: left allmulticast mode [ 1650.369988][ T78] bridge_slave_1: left promiscuous mode [ 1650.418212][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.507967][ T78] bridge_slave_0: left allmulticast mode [ 1650.544054][ T78] bridge_slave_0: left promiscuous mode [ 1650.570170][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.869967][T14339] Bluetooth: hci2: command tx timeout [ 1652.203639][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1652.309095][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1652.392567][ T78] bond0 (unregistering): Released all slaves [ 1652.403060][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 1652.403133][ T29] audit: type=1326 audit(1781444815.852:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15621 comm="syz.6.1891" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb139ce59 code=0x7ffc0000 [ 1652.566359][ T29] audit: type=1326 audit(1781444815.889:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15621 comm="syz.6.1891" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb139ce59 code=0x7ffc0000 [ 1653.114493][T14339] Bluetooth: hci2: command tx timeout [ 1653.264670][ T29] audit: type=1326 audit(1781444815.973:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15621 comm="syz.6.1891" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb139ce59 code=0x7ffc0000 [ 1653.292178][ T29] audit: type=1326 audit(1781444815.992:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15621 comm="syz.6.1891" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb139ce59 code=0x7ffc0000 [ 1654.328826][ T78] hsr_slave_0: left promiscuous mode [ 1654.332043][ T29] audit: type=1326 audit(1781444816.002:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15621 comm="syz.6.1891" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3cb139ce59 code=0x7ffc0000 [ 1654.417077][ T78] hsr_slave_1: left promiscuous mode [ 1654.519298][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1654.561805][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1654.659475][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1654.753412][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1655.022864][ T78] veth1_macvtap: left promiscuous mode [ 1655.077619][ T78] veth0_macvtap: left promiscuous mode [ 1655.133332][ T78] veth1_vlan: left promiscuous mode [ 1655.193905][ T78] veth0_vlan: left promiscuous mode [ 1655.325605][ T29] audit: type=1326 audit(1781444816.002:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15621 comm="syz.6.1891" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb139ce59 code=0x7ffc0000 [ 1655.475449][ T29] audit: type=1326 audit(1781444816.039:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15621 comm="syz.6.1891" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3cb139ce59 code=0x7ffc0000 [ 1655.619685][ T29] audit: type=1326 audit(1781444816.011:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15621 comm="syz.6.1891" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb139ce59 code=0x7ffc0000 [ 1655.732548][ T29] audit: type=1326 audit(1781444816.095:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15621 comm="syz.6.1891" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb139ce59 code=0x7ffc0000 [ 1655.834667][ T29] audit: type=1326 audit(1781444816.095:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15621 comm="syz.6.1891" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb139ce59 code=0x7ffc0000 [ 1656.016684][T15642] fuse: Unknown parameter 'user_id00000000000000000000' [ 1657.918168][ T78] team0 (unregistering): Port device team_slave_1 removed [ 1658.059257][ T78] team0 (unregistering): Port device team_slave_0 removed [ 1659.920812][ T5746] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1660.106187][ T5746] usb 1-1: Using ep0 maxpacket: 32 [ 1660.142061][ T5746] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1660.185287][ T5746] usb 1-1: config 0 has no interface number 0 [ 1660.216473][ T5746] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1660.230348][ T5746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.265443][ T5746] usb 1-1: Product: syz [ 1660.279019][ T5746] usb 1-1: Manufacturer: syz [ 1660.295969][ T5746] usb 1-1: SerialNumber: syz [ 1660.334120][ T5746] usb 1-1: config 0 descriptor?? [ 1660.457971][T15696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1905'. [ 1660.522193][T15694] veth0: entered promiscuous mode [ 1660.841262][ T5746] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1660.883721][ T5746] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1662.508345][T15545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1662.565554][T15545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.605595][T15545] bridge_slave_0: entered allmulticast mode [ 1662.642286][T15545] bridge_slave_0: entered promiscuous mode [ 1662.725812][T15545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1662.759513][T15545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.802082][T15545] bridge_slave_1: entered allmulticast mode [ 1662.860355][T15705] netlink: 'syz.4.1907': attribute type 1 has an invalid length. [ 1662.878437][T15545] bridge_slave_1: entered promiscuous mode [ 1663.145523][ T5746] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 1663.203170][ T5746] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1663.298565][ T5746] usb 1-1: USB disconnect, device number 3 [ 1663.425702][T15712] fuse: Unknown parameter 'user_id00000000000000000000' [ 1663.709276][T15705] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1663.848627][T15545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1663.983509][T15545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1664.495401][T15545] team0: Port device team_slave_0 added [ 1664.640428][T15545] team0: Port device team_slave_1 added [ 1664.945959][T15545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1664.979354][T15545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1665.066880][T15545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1665.130374][T15545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1665.177961][T15545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1665.250077][T15545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1665.853366][T15545] hsr_slave_0: entered promiscuous mode [ 1665.886868][T15545] hsr_slave_1: entered promiscuous mode [ 1665.913459][T15545] debugfs: 'hsr0' already exists in 'hsr' [ 1665.943551][T15545] Cannot create hsr debugfs directory [ 1669.071047][T15778] fuse: Bad value for 'fd' [ 1669.782893][T15545] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1669.868004][T15545] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1669.943179][T15545] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1670.009110][T15545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1670.023041][T15545] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1670.077823][T15545] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1670.111505][T15545] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1670.182823][T15545] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1671.670535][T15545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1671.898209][T15545] 8021q: adding VLAN 0 to HW filter on device team0 [ 1672.022293][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.029850][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1672.207418][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.214993][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1675.270870][T15843] fuse: Bad value for 'fd' [ 1675.389314][T15847] usb usb8: usbfs: process 15847 (syz.0.1941) did not claim interface 0 before use [ 1677.643702][T15545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1678.232699][T15545] veth0_vlan: entered promiscuous mode [ 1678.361750][T15545] veth1_vlan: entered promiscuous mode [ 1680.711703][T15880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.721251][T15880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.762105][T15880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1683.024027][T15880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1684.766607][T15926] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1686.663313][T15937] netlink: 7 bytes leftover after parsing attributes in process `syz.9.1956'. [ 1686.713146][ T14] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.752073][ T14] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.859292][ T14] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.909525][ T14] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.021810][T15545] veth0_macvtap: entered promiscuous mode [ 1687.193981][T15545] veth1_macvtap: entered promiscuous mode [ 1687.513523][T15545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1687.704422][T15545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1687.869062][ T7619] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.911109][ T7619] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.964475][T11564] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.000969][T11564] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.308892][T15970] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1962'. [ 1693.763230][ T5746] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1694.057606][ T5746] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.110952][ T5746] usb 10-1: config 0 has no interfaces? [ 1694.152910][ T5746] usb 10-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 1694.214151][ T5746] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.294289][ T5746] usb 10-1: config 0 descriptor?? [ 1694.403418][T16001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1967'. [ 1694.970570][T15994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1695.080823][T15994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1695.443576][ T7337] usb 10-1: USB disconnect, device number 15 [ 1695.756323][ T7619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1695.775957][ T7619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1696.137876][ T7619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1696.197215][ T7619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1696.644747][T11827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1696.674827][T11827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1696.684443][T11827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1696.728286][T11827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1696.747131][T11827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1699.001130][T14339] Bluetooth: hci4: command tx timeout [ 1700.438317][T16044] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1974'. [ 1701.222684][T14339] Bluetooth: hci4: command tx timeout [ 1703.452193][T14339] Bluetooth: hci4: command tx timeout [ 1703.948413][ T7337] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1704.011640][ T14] bridge_slave_1: left allmulticast mode [ 1704.041811][ T14] bridge_slave_1: left promiscuous mode [ 1704.082964][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1704.172704][ T7337] usb 10-1: Using ep0 maxpacket: 32 [ 1704.174810][ T14] bridge_slave_0: left allmulticast mode [ 1704.252054][ T14] bridge_slave_0: left promiscuous mode [ 1704.271923][ T7337] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.288011][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.354070][ T7337] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1704.446234][ T7337] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1704.513152][ T7337] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.585429][ T7337] usb 10-1: config 0 descriptor?? [ 1704.790320][ T7337] hub 10-1:0.0: USB hub found [ 1704.992594][ T7337] hub 10-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1705.228533][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1705.303007][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1705.367647][ T14] bond0 (unregistering): Released all slaves [ 1705.662203][ T7337] hid-generic 0003:046D:C31C.0009: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.9-1/input0 [ 1705.678116][T14339] Bluetooth: hci4: command tx timeout [ 1706.204862][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1706.211827][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1707.461252][ T14] hsr_slave_0: left promiscuous mode [ 1707.528054][ T14] hsr_slave_1: left promiscuous mode [ 1707.589044][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1707.675068][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1707.956359][ T5746] usb 10-1: USB disconnect, device number 16 [ 1709.328860][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1709.468766][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1711.294881][T16016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.340825][T16016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.378740][T16016] bridge_slave_0: entered allmulticast mode [ 1711.427375][T16016] bridge_slave_0: entered promiscuous mode [ 1711.514880][T16016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.548858][T16016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.593958][T16016] bridge_slave_1: entered allmulticast mode [ 1711.628962][T16016] bridge_slave_1: entered promiscuous mode [ 1712.107627][T16016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1712.206593][T16016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1712.626474][T16016] team0: Port device team_slave_0 added [ 1712.679648][T16016] team0: Port device team_slave_1 added [ 1712.946780][T16016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1712.986149][T16016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.104373][T16016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1713.193505][T16016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1713.230727][T16016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.355729][T16016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1713.566649][T16143] tipc: Started in network mode [ 1713.600383][T16143] tipc: Node identity 5ef4d028110a, cluster identity 4711 [ 1713.650660][T16143] tipc: Enabled bearer , priority 0 [ 1713.709145][T16145] syzkaller0: entered promiscuous mode [ 1713.734125][T16145] syzkaller0: entered allmulticast mode [ 1714.122873][ T7337] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1714.238644][T16016] hsr_slave_0: entered promiscuous mode [ 1714.274023][T16016] hsr_slave_1: entered promiscuous mode [ 1714.316171][T16016] debugfs: 'hsr0' already exists in 'hsr' [ 1714.327754][ T7337] usb 3-1: Using ep0 maxpacket: 16 [ 1714.340216][T16016] Cannot create hsr debugfs directory [ 1714.378337][ T7337] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1714.435130][ T7337] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1714.464541][ T7337] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1714.493191][ T7337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.515410][ T7337] usb 3-1: Product: syz [ 1714.537857][ T7337] usb 3-1: Manufacturer: syz [ 1714.554438][ T7337] usb 3-1: SerialNumber: syz [ 1714.589519][ T7337] usb 3-1: config 0 descriptor?? [ 1714.931401][T16140] tipc: Resetting bearer [ 1714.963272][ T7337] tipc: Node number set to 1342099496 [ 1715.000221][ T7337] usb 3-1: USB disconnect, device number 5 [ 1715.130461][T16138] tipc: Resetting bearer [ 1715.133990][T16155] binder: 16153:16155 ioctl 4018620d 0 returned -22 [ 1715.201784][T16138] tipc: Disabling bearer [ 1717.888093][T16016] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1717.987201][T16016] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1718.022666][T16016] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1718.124787][T16016] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1718.167177][T16016] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1718.245551][T16016] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1718.289304][T16016] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1718.391447][T16016] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1719.029358][T16196] binder: 16194:16196 ioctl 4018620d 0 returned -22 [ 1719.703285][T16016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1719.929344][T16016] 8021q: adding VLAN 0 to HW filter on device team0 [ 1720.039820][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.047439][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1720.196833][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.204433][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1724.308506][T16255] binder: 16253:16255 ioctl 4018620d 0 returned -22 [ 1725.014618][T16016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1725.665954][T16016] veth0_vlan: entered promiscuous mode [ 1725.791374][T16016] veth1_vlan: entered promiscuous mode [ 1726.198218][T16016] veth0_macvtap: entered promiscuous mode [ 1726.269295][T16016] veth1_macvtap: entered promiscuous mode [ 1726.562916][T16016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1726.679210][T16016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1726.823491][ T34] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.851826][ T34] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.925010][ T34] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.957979][ T34] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.226198][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 1728.226275][ T29] audit: type=1326 audit(1781444886.823:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16291 comm="syz.6.2031" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb139ce59 code=0x7ffc0000 [ 1728.395492][ T29] audit: type=1326 audit(1781444886.832:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16291 comm="syz.6.2031" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb139ce59 code=0x7ffc0000 [ 1728.521915][ T29] audit: type=1326 audit(1781444886.841:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16291 comm="syz.6.2031" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3cb139ce59 code=0x7ffc0000 [ 1728.678871][ T29] audit: type=1326 audit(1781444886.841:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16291 comm="syz.6.2031" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb139ce59 code=0x7ffc0000 [ 1728.800536][ T29] audit: type=1326 audit(1781444886.879:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16291 comm="syz.6.2031" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3cb139ce59 code=0x7ffc0000 [ 1728.935757][ T29] audit: type=1326 audit(1781444886.841:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16291 comm="syz.6.2031" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb139ce59 code=0x7ffc0000 [ 1729.065256][ T29] audit: type=1326 audit(1781444886.888:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16291 comm="syz.6.2031" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb139ce59 code=0x7ffc0000 [ 1729.229289][ T29] audit: type=1326 audit(1781444886.888:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16291 comm="syz.6.2031" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3cb139ce59 code=0x7ffc0000 [ 1729.794283][T16311] binder: 16310:16311 ioctl c0306201 0 returned -14 [ 1730.294420][T11827] Bluetooth: hci0: command 0x0406 tx timeout [ 1734.052270][ T7619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1734.093894][ T7619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1734.399727][ T8663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1734.457578][ T8663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.154117][T16372] syz_tun: entered allmulticast mode [ 1735.273278][T16372] pim6reg: entered allmulticast mode [ 1735.340868][T16373] binder: 16370:16373 ioctl c0306201 0 returned -14 [ 1736.111706][T14339] Bluetooth: hci2: unexpected cc 0x2007 length: 1 < 2 [ 1736.712582][T16383] syzkaller0: entered promiscuous mode [ 1736.805838][T16383] syzkaller0: entered allmulticast mode [ 1737.808712][T16394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2051'. [ 1739.820182][T15913] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1740.023876][T15913] usb 4-1: Using ep0 maxpacket: 32 [ 1740.069445][T15913] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1740.114459][T15913] usb 4-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config [ 1740.212978][T15913] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 1740.269806][T15913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.294593][T15913] usb 4-1: Product: syz [ 1740.310300][T15913] usb 4-1: Manufacturer: syz [ 1740.331500][T15913] usb 4-1: SerialNumber: syz [ 1741.608693][T15913] comedi comedi5: Wrong number of endpoints [ 1741.660170][T15913] dt9812 4-1:244.0: driver 'dt9812' failed to auto-configure device. [ 1741.816818][T15913] usb 4-1: USB disconnect, device number 40 [ 1742.161389][T16440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2065'. [ 1742.524624][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1742.751114][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1742.796537][ T24] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1742.834035][ T24] usb 4-1: config 0 has no interface number 0 [ 1742.884695][ T24] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1742.934438][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.983802][ T24] usb 4-1: Product: syz [ 1743.013067][ T24] usb 4-1: Manufacturer: syz [ 1743.043015][ T24] usb 4-1: SerialNumber: syz [ 1743.097416][ T24] usb 4-1: config 0 descriptor?? [ 1743.174227][ T24] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1743.360956][T16453] syzkaller0: entered promiscuous mode [ 1743.391413][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1743.429243][T16453] syzkaller0: entered allmulticast mode [ 1743.501639][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1745.092217][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1745.101651][ T24] usb 4-1: USB disconnect, device number 41 [ 1745.157102][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1745.276879][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1745.365192][ T24] quatech2 4-1:0.51: device disconnected [ 1746.759494][T16488] syzkaller1: entered allmulticast mode [ 1747.742602][ T5232] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1748.754365][T15913] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1748.978020][T15913] usb 4-1: Using ep0 maxpacket: 32 [ 1749.008000][T15913] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1749.077755][T15913] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1749.137217][T15913] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1749.201859][T15913] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1749.296899][T15913] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1749.338860][T15913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.349050][T16515] syzkaller0: entered promiscuous mode [ 1749.389596][T15913] usb 4-1: Product: syz [ 1749.398111][T16515] syzkaller0: entered allmulticast mode [ 1749.408117][T15913] usb 4-1: Manufacturer: syz [ 1749.422965][T15913] usb 4-1: SerialNumber: syz [ 1749.499494][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1749.529525][T15913] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input23 [ 1749.759687][T15913] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1749.813583][T15913] (id 0x00) [ 1750.260890][T15913] rc_core: IR keymap rc-imon-pad not found [ 1750.289727][T15913] Registered IR keymap rc-empty [ 1750.328711][T15913] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1750.381927][T15913] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1750.482529][T15913] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 1750.550376][T15913] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input24 [ 1750.640158][T15913] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:42> initialized [ 1751.085586][T16539] usb 4-1: USB disconnect, device number 42 [ 1751.106748][T16511] imon:send_packet: packet tx failed (-71) [ 1751.180324][T16511] imon:vfd_write: send packet #1 failed [ 1754.246711][T16579] syzkaller0: entered promiscuous mode [ 1754.269609][T16579] syzkaller0: entered allmulticast mode [ 1757.108662][T16615] fuse: Bad value for 'fd' [ 1757.497681][ T5682] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1757.688603][ T5682] usb 7-1: Using ep0 maxpacket: 8 [ 1757.728610][ T5682] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1757.778396][ T5682] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1757.802775][ T5682] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.860134][ T5682] usb 7-1: config 0 descriptor?? [ 1758.197501][ T5682] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1758.755751][ T5682] usb 7-1: USB disconnect, device number 22 [ 1761.027438][T16655] syzkaller0: entered promiscuous mode [ 1761.124373][T16655] syzkaller0: entered allmulticast mode [ 1761.948909][ T5232] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1763.901152][T12944] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1764.149727][T12944] usb 4-1: too many configurations: 53, using maximum allowed: 8 [ 1764.351630][T12944] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1764.387888][T12944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.425421][T12944] usb 4-1: Product: syz [ 1764.457855][T12944] usb 4-1: Manufacturer: syz [ 1764.482287][T12944] usb 4-1: SerialNumber: syz [ 1764.662427][T16706] fuse: Bad value for 'fd' [ 1764.924212][T12944] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1764.966397][T12944] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1765.038953][T12944] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1765.104338][T12944] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1765.154160][T16706] No such timeout policy "syz1" [ 1765.211557][T12944] usb 4-1: USB disconnect, device number 43 [ 1766.022409][T12944] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1766.229989][T12944] usb 7-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1766.305215][T12944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.321694][T12944] usb 7-1: Product: syz [ 1766.331296][T12944] usb 7-1: Manufacturer: syz [ 1766.359051][T12944] usb 7-1: SerialNumber: syz [ 1766.429983][T12944] usb 7-1: config 0 descriptor?? [ 1766.499528][T12944] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1766.880483][T12944] sonixb 7-1:0.0: Error reading register 00: -71 [ 1766.965672][T12944] usb 7-1: USB disconnect, device number 23 [ 1768.126548][T16735] syzkaller0: entered promiscuous mode [ 1768.204598][T16735] syzkaller0: entered allmulticast mode [ 1768.386374][ T5232] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1771.896498][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1771.905720][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1776.972522][T16800] netlink: 'syz.3.2138': attribute type 2 has an invalid length. [ 1777.151969][T16800] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2138'. [ 1777.543197][T12944] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1777.801175][T12944] usb 7-1: Using ep0 maxpacket: 32 [ 1777.841427][T12944] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1777.883794][T12944] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1777.952889][T12944] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1777.989713][T12944] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1778.037165][T16810] syzkaller0: entered promiscuous mode [ 1778.041099][T12944] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1778.081984][T12944] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1778.117066][T16810] syzkaller0: entered allmulticast mode [ 1778.131403][T12944] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1778.172372][T12944] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.247946][ T5232] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1778.272512][T12944] usb 7-1: config 0 descriptor?? [ 1778.645201][T12944] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1778.789801][T12944] usb 7-1: USB disconnect, device number 24 [ 1778.854641][T12944] usblp0: removed [ 1779.305939][T12944] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1779.529433][T11827] Bluetooth: hci2: command 0x0406 tx timeout [ 1779.529571][T12944] usb 7-1: Using ep0 maxpacket: 32 [ 1779.597700][T12944] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1779.606959][T12944] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1779.622252][T12944] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1779.650326][T12944] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1779.671368][T12944] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1779.730973][T12944] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1779.817967][T12944] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1779.881393][T12944] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.006462][T12944] usb 7-1: config 0 descriptor?? [ 1780.322153][T12944] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1780.619166][T12944] usb 7-1: USB disconnect, device number 25 [ 1780.739217][T12944] usblp0: removed [ 1781.971318][T11827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1781.984030][T11827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1781.997716][T11827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1782.022007][T11827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1782.039691][T11827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1784.232595][T11827] Bluetooth: hci5: command tx timeout [ 1785.331246][ T5232] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1786.454069][T11827] Bluetooth: hci5: command tx timeout [ 1787.715613][T16875] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2153'. [ 1788.676781][T11827] Bluetooth: hci5: command tx timeout [ 1790.899548][T11827] Bluetooth: hci5: command tx timeout [ 1795.181278][ T5232] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1796.009262][T16832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.045662][T16832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.111597][T16832] bridge_slave_0: entered allmulticast mode [ 1796.192920][T16832] bridge_slave_0: entered promiscuous mode [ 1796.277632][T16832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.341890][T16832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.392439][T16832] bridge_slave_1: entered allmulticast mode [ 1796.455323][T16832] bridge_slave_1: entered promiscuous mode [ 1798.207500][T16832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1798.366896][T16832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1801.145383][T16832] team0: Port device team_slave_0 added [ 1801.207107][T16832] team0: Port device team_slave_1 added [ 1801.763453][T16832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1801.795564][T16832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1801.947799][T16832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1802.033362][T16832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1802.080793][T16832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1802.227003][T16832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1803.109841][T16832] hsr_slave_0: entered promiscuous mode [ 1803.155157][T16832] hsr_slave_1: entered promiscuous mode [ 1803.214377][T16832] debugfs: 'hsr0' already exists in 'hsr' [ 1803.237967][T16832] Cannot create hsr debugfs directory [ 1805.363619][ T5232] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1810.640248][T17025] syzkaller0: entered promiscuous mode [ 1810.703674][T17025] syzkaller0: entered allmulticast mode [ 1812.752154][T16832] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1812.833771][T16832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1812.854398][T16832] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1813.013342][T16832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1813.117608][ T5232] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1813.218553][T16832] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1813.427609][T16832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1813.439668][T16832] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1813.857046][T16832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1816.337011][T16832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1816.668770][T16832] 8021q: adding VLAN 0 to HW filter on device team0 [ 1816.875956][T16664] bridge0: port 1(bridge_slave_0) entered blocking state [ 1816.883608][T16664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1817.334257][T16659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.342013][T16659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1821.326349][ T5232] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1822.027897][T16539] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1822.080543][T17142] syzkaller0: entered promiscuous mode [ 1822.195886][T17142] syzkaller0: entered allmulticast mode [ 1822.307993][T16539] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1822.383533][T16539] usb 1-1: config 1 has an invalid interface number: 43 but max is 1 [ 1822.482511][T16539] usb 1-1: config 1 has no interface number 1 [ 1822.563831][T16539] usb 1-1: config 1 interface 0 altsetting 247 endpoint 0x4 has invalid maxpacket 600, setting to 64 [ 1822.648879][ T5682] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1822.692204][T16539] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1822.811417][T16539] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=f6.75 [ 1822.845597][T16539] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.887901][T16539] usb 1-1: Product: syz [ 1822.905149][ T5682] usb 4-1: Using ep0 maxpacket: 16 [ 1822.924857][T16539] usb 1-1: Manufacturer: syz [ 1822.953725][T16539] usb 1-1: SerialNumber: syz [ 1822.968443][ T5682] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1823.031152][ T5682] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1823.139705][ T5682] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1823.193919][ T5682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.227138][ T5682] usb 4-1: Product: syz [ 1823.246082][ T5682] usb 4-1: Manufacturer: syz [ 1823.277004][ T5682] usb 4-1: SerialNumber: syz [ 1823.307636][T16539] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1823.344213][ T5682] usb 4-1: config 0 descriptor?? [ 1823.360213][T16539] gspca_spca501: reg write: error -71 [ 1823.395843][T16539] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1823.417994][T16539] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 1823.554198][T16539] usb 1-1: USB disconnect, device number 4 [ 1823.752439][ T5682] usb 4-1: USB disconnect, device number 44 [ 1825.550500][T16832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1825.997704][T17184] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1828.068673][ T5232] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1828.785731][T11827] Bluetooth: hci4: command 0x0406 tx timeout [ 1829.385149][T17227] tipc: Enabled bearer , priority 0 [ 1829.441413][T17221] syzkaller0: entered promiscuous mode [ 1829.454188][T17221] syzkaller0: entered allmulticast mode [ 1829.705510][T16832] veth0_vlan: entered promiscuous mode [ 1829.800127][T15913] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1829.884637][T16832] veth1_vlan: entered promiscuous mode [ 1830.021347][T15913] usb 7-1: Using ep0 maxpacket: 16 [ 1830.045853][T15913] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1830.096500][T15913] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1830.145276][T15913] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1830.171588][T15913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.207606][T15913] usb 7-1: Product: syz [ 1830.221514][T15913] usb 7-1: Manufacturer: syz [ 1830.242199][T15913] usb 7-1: SerialNumber: syz [ 1830.280858][T15913] usb 7-1: config 0 descriptor?? [ 1830.305942][T16832] veth0_macvtap: entered promiscuous mode [ 1830.443949][T16832] veth1_macvtap: entered promiscuous mode [ 1830.568912][T17221] tipc: Resetting bearer [ 1830.615039][T15913] usb 7-1: USB disconnect, device number 26 [ 1830.689722][T17219] tipc: Resetting bearer [ 1830.738377][T17219] tipc: Disabling bearer [ 1830.868646][T16539] tipc: Node number set to 3725833032 [ 1830.915693][T16832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1831.059737][T16832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1831.236753][T16649] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.258596][T16649] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.322100][T16649] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.355919][T16649] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1836.385651][T17294] tipc: Started in network mode [ 1836.501164][T17294] tipc: Node identity fabb6cfacac6, cluster identity 4711 [ 1836.544662][T17294] tipc: Enabled bearer , priority 0 [ 1836.670443][T17292] syzkaller0: entered promiscuous mode [ 1836.707456][T17292] syzkaller0: entered allmulticast mode [ 1836.935732][ T5682] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1837.546915][ T5682] usb 4-1: Using ep0 maxpacket: 16 [ 1837.563180][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1837.582325][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1837.749203][T16539] tipc: Node number set to 813526266 [ 1837.926117][ T5682] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1837.978337][ T5682] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1838.128082][ T5682] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1838.141086][ T5682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.203737][ T5682] usb 4-1: Product: syz [ 1838.225873][ T5682] usb 4-1: Manufacturer: syz [ 1838.255927][ T5682] usb 4-1: SerialNumber: syz [ 1838.331905][ T5682] usb 4-1: config 0 descriptor?? [ 1838.666270][T17292] tipc: Resetting bearer [ 1838.756097][ T5682] usb 4-1: USB disconnect, device number 45 [ 1838.807798][T17312] xt_hashlimit: size too large, truncated to 1048576 [ 1838.830150][T17290] tipc: Resetting bearer [ 1839.226123][T17290] tipc: Disabling bearer [ 1839.680207][T16648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1839.744215][T16648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1840.116228][T16648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1840.196662][T16648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1842.096876][ T5682] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1842.299724][ T5682] usb 4-1: Using ep0 maxpacket: 16 [ 1842.428760][ T5682] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1842.474988][ T5682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.535296][ T5682] usb 4-1: Product: syz [ 1842.557505][ T5682] usb 4-1: Manufacturer: syz [ 1842.602877][ T5682] usb 4-1: SerialNumber: syz [ 1842.799232][ T5682] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1842.826383][ T5682] r8152-cfgselector 4-1: config 0 descriptor?? [ 1843.389736][ T5682] r8152-cfgselector 4-1: USB disconnect, device number 46 [ 1843.699746][T12944] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1843.946436][T12944] usb 1-1: Using ep0 maxpacket: 32 [ 1843.981037][T12944] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1844.039535][T12944] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1844.078915][T12944] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1844.121227][T12944] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1844.180314][T12944] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1844.212532][T12944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.230569][T12944] usb 1-1: Product: syz [ 1844.250454][T12944] usb 1-1: Manufacturer: syz [ 1844.266733][T12944] usb 1-1: SerialNumber: syz [ 1844.343785][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1844.382178][T12944] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input25 [ 1844.554346][T12944] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1844.580778][T12944] (id 0x00) [ 1845.089980][T12944] rc_core: IR keymap rc-imon-pad not found [ 1845.117992][T12944] Registered IR keymap rc-empty [ 1845.135841][T12944] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1845.170650][T12944] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1845.253943][T12944] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 1845.316549][T12944] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input26 [ 1845.393255][T12944] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:5> initialized [ 1846.322755][T17383] tipc: Enabled bearer , priority 0 [ 1846.426379][T17381] syzkaller0: entered promiscuous mode [ 1846.469403][T17381] syzkaller0: entered allmulticast mode [ 1846.766421][ T5682] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1846.960640][T15913] usb 1-1: USB disconnect, device number 5 [ 1846.990949][ T5682] usb 7-1: Using ep0 maxpacket: 16 [ 1847.025639][ T5682] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1847.072640][ T5682] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1847.170358][ T5682] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1847.239072][ T5682] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.294265][ T5682] usb 7-1: Product: syz [ 1847.326564][ T5682] usb 7-1: Manufacturer: syz [ 1847.361172][ T5682] usb 7-1: SerialNumber: syz [ 1847.364410][T12944] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1847.510319][ T5682] usb 7-1: config 0 descriptor?? [ 1847.736091][T17390] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1847.825486][T12944] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1847.838781][T17381] tipc: Resetting bearer [ 1847.858043][T12944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1847.877222][ T5682] usb 7-1: USB disconnect, device number 27 [ 1847.982500][T12944] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1848.021141][T17379] tipc: Resetting bearer [ 1848.075946][T12944] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1848.132591][T12944] usb 4-1: Manufacturer: syz [ 1848.168775][T17379] tipc: Disabling bearer [ 1848.214804][T12944] usb 4-1: config 0 descriptor?? [ 1848.865179][T12944] rc_core: IR keymap rc-hauppauge not found [ 1848.902159][T12944] Registered IR keymap rc-empty [ 1848.952826][T12944] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1849.026866][T12944] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input27 [ 1850.374189][T17416] netlink: 7 bytes leftover after parsing attributes in process `syz.9.2278'. [ 1855.239539][ T5682] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1855.466737][ T5682] usb 6-1: Using ep0 maxpacket: 32 [ 1855.547835][ T5682] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1855.638187][ T5682] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1855.728822][ T5682] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1855.812559][ T5682] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1855.920599][ T5682] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1855.964363][ T5682] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.007476][ T5682] usb 6-1: Product: syz [ 1856.071789][ T5682] usb 6-1: Manufacturer: syz [ 1856.102573][ T5682] usb 6-1: SerialNumber: syz [ 1856.242483][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1856.294000][ T5682] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input28 [ 1856.448378][ T5682] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1856.513624][ T5682] (id 0x00) [ 1856.749303][T17448] tipc: Started in network mode [ 1856.818395][T17448] tipc: Node identity 9255c279f3cd, cluster identity 4711 [ 1856.906440][T17448] tipc: Enabled bearer , priority 0 [ 1857.032568][T17450] syzkaller0: entered promiscuous mode [ 1857.088936][T17450] syzkaller0: entered allmulticast mode [ 1857.153022][ T5682] rc_core: IR keymap rc-imon-pad not found [ 1857.167659][ T5682] Registered IR keymap rc-empty [ 1857.192852][ T5682] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1857.269023][ T5682] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1857.279480][T16539] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1857.350897][ T5682] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc1 [ 1857.466835][ T5682] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc1/input29 [ 1857.482238][T16539] usb 10-1: Using ep0 maxpacket: 16 [ 1857.536364][T16539] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1857.605909][T16539] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1857.629773][ T5682] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:47> initialized [ 1857.680731][T16539] usb 10-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1857.736456][T16539] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.800189][T16539] usb 10-1: Product: syz [ 1857.822836][T16539] usb 10-1: Manufacturer: syz [ 1857.860775][T16539] usb 10-1: SerialNumber: syz [ 1857.945414][T16539] usb 10-1: config 0 descriptor?? [ 1858.100679][T16539] tipc: Node number set to 1637401209 [ 1858.290967][T17448] tipc: Resetting bearer [ 1858.403458][T16539] usb 10-1: USB disconnect, device number 17 [ 1858.499607][T17447] tipc: Resetting bearer [ 1858.605601][T17447] tipc: Disabling bearer [ 1858.640742][T12944] usb 6-1: USB disconnect, device number 47 [ 1859.589632][T16539] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1859.839219][T16539] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1859.877296][T16539] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1859.901089][T16539] usb 1-1: config 1 has no interface number 1 [ 1859.908130][T16539] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1859.999685][T16539] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1860.091791][T16539] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1860.160574][T16539] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.210777][T16539] usb 1-1: Product: syz [ 1860.244916][T16539] usb 1-1: Manufacturer: syz [ 1860.263979][T17471] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2292'. [ 1860.281055][T16539] usb 1-1: SerialNumber: syz [ 1860.363729][T17468] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1860.816763][T17468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1860.827588][T17468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1865.467153][T16539] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1865.524206][T16539] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1866.472701][T16539] usb 1-1: USB disconnect, device number 6 [ 1867.087115][T17494] loop5: detected capacity change from 0 to 6 [ 1867.170808][T17494] Dev loop5: unable to read RDB block 6 [ 1867.236714][T17494] loop5: unable to read partition table [ 1867.330485][T17494] loop5: partition table beyond EOD, truncated [ 1867.392684][T17494] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1867.417168][T12480] udevd[12480]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1867.767103][T15913] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1868.022076][T15913] usb 10-1: Using ep0 maxpacket: 16 [ 1868.144061][T15913] usb 10-1: config 7 has an invalid interface number: 152 but max is 0 [ 1868.227570][T15913] usb 10-1: config 7 descriptor has 1 excess byte, ignoring [ 1868.238246][T15913] usb 10-1: config 7 has no interface number 0 [ 1868.246945][T17507] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1868.256761][T15913] usb 10-1: config 7 interface 152 altsetting 190 endpoint 0x4 has an invalid bInterval 253, changing to 7 [ 1868.269324][T15913] usb 10-1: config 7 interface 152 altsetting 190 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1868.291980][T17507] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1868.299934][T15913] usb 10-1: config 7 interface 152 altsetting 190 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1868.311841][T15913] usb 10-1: config 7 interface 152 altsetting 190 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1868.326467][T17507] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1868.334336][T15913] usb 10-1: config 7 interface 152 has no altsetting 0 [ 1868.363839][T15913] usb 10-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=66.6d [ 1868.375664][T17507] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1868.393123][T15913] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.401794][T15913] usb 10-1: Product: syz [ 1868.407829][T15913] usb 10-1: Manufacturer: syz [ 1868.414000][T15913] usb 10-1: SerialNumber: syz [ 1868.420025][T17507] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1869.859528][T12944] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1869.935752][T17515] tipc: Enabled bearer , priority 0 [ 1870.044841][T17515] syzkaller0: entered promiscuous mode [ 1870.095297][T12944] usb 6-1: Using ep0 maxpacket: 32 [ 1870.105167][T17515] syzkaller0: entered allmulticast mode [ 1870.166492][T12944] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1870.196423][T17522] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2304'. [ 1870.205403][T12944] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1870.330388][T12944] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1870.345732][T12944] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1870.428167][T16539] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1870.520968][T12944] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1870.571052][T12944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.639558][T12944] usb 6-1: Product: syz [ 1870.660241][T11827] Bluetooth: hci2: command tx timeout [ 1870.667530][T16539] usb 7-1: Using ep0 maxpacket: 16 [ 1870.691602][T12944] usb 6-1: Manufacturer: syz [ 1870.747159][T12944] usb 6-1: SerialNumber: syz [ 1870.750177][T16539] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1870.846473][T16539] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1870.979765][T16539] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1871.030716][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1871.086071][T16539] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.093978][T12944] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input30 [ 1871.179158][T16539] usb 7-1: Product: syz [ 1871.222885][T16539] usb 7-1: Manufacturer: syz [ 1871.258528][T16539] usb 7-1: SerialNumber: syz [ 1871.325894][T12944] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1871.360973][T16539] usb 7-1: config 0 descriptor?? [ 1871.422305][T12944] (id 0x00) [ 1871.680246][T17515] tipc: Resetting bearer [ 1871.724363][T15913] usbtest 10-1:7.152: couldn't get endpoints, -71 [ 1871.729571][T16539] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1871.791897][T15913] usbtest 10-1:7.152: probe with driver usbtest failed with error -71 [ 1871.829918][ T5682] usb 7-1: USB disconnect, device number 28 [ 1871.957457][T17513] tipc: Resetting bearer [ 1872.038921][T15913] usb 10-1: USB disconnect, device number 18 [ 1872.071526][T16539] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1872.134010][T17513] tipc: Disabling bearer [ 1872.167392][T16539] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1872.233644][T16539] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1872.309214][T16539] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.409156][T16539] usb 1-1: config 0 descriptor?? [ 1872.443763][T12944] rc_core: IR keymap rc-imon-pad not found [ 1872.483843][T12944] Registered IR keymap rc-empty [ 1872.565430][T12944] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1872.725455][T12944] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1872.732127][T16539] ath6kl: Failed to submit usb control message: -71 [ 1872.806294][T16539] ath6kl: unable to send the bmi data to the device: -71 [ 1872.872543][T16539] ath6kl: Unable to send get target info: -71 [ 1872.882961][T11827] Bluetooth: hci2: command tx timeout [ 1872.940252][T16539] ath6kl: Failed to init ath6kl core: -71 [ 1873.004410][T16539] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1873.218569][T16539] usb 1-1: USB disconnect, device number 7 [ 1873.946965][T12944] imon:send_packet: packet tx failed (-71) [ 1874.026407][T12944] imon 6-1:155.0: remote input dev register failed [ 1874.045983][T12944] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 1874.353084][T12944] imon 6-1:155.0: unable to initialize intf0, err 0 [ 1874.436228][T12944] imon:imon_probe: failed to initialize context! [ 1874.474834][T12944] imon 6-1:155.0: unable to register, err -19 [ 1874.529809][T12944] usb 6-1: USB disconnect, device number 48 [ 1875.108510][T11827] Bluetooth: hci2: command tx timeout [ 1877.329870][T11827] Bluetooth: hci2: command tx timeout [ 1877.451940][T17571] netlink: 27 bytes leftover after parsing attributes in process `syz.9.2314'. [ 1879.927471][T17593] tipc: Enabled bearer , priority 0 [ 1880.238487][T17594] syzkaller0: entered promiscuous mode [ 1880.271675][T17594] syzkaller0: entered allmulticast mode [ 1880.620440][ T5682] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1880.846460][ T5682] usb 7-1: Using ep0 maxpacket: 16 [ 1880.911500][ T5682] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1880.970013][ T5682] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1881.065082][ T5682] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1881.130451][ T5682] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.218063][ T5682] usb 7-1: Product: syz [ 1881.253090][ T5682] usb 7-1: Manufacturer: syz [ 1881.302070][ T5682] usb 7-1: SerialNumber: syz [ 1881.381853][ T5682] usb 7-1: config 0 descriptor?? [ 1881.726628][T17590] tipc: Resetting bearer [ 1881.837152][T16539] usb 7-1: USB disconnect, device number 29 [ 1881.897208][ T5682] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1881.922371][T17588] tipc: Resetting bearer [ 1881.993829][T17588] tipc: Disabling bearer [ 1882.138250][ T5682] usb 10-1: Using ep0 maxpacket: 32 [ 1882.196627][ T5682] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1882.263099][ T5682] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1882.326040][ T5682] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1882.401406][ T5682] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1882.465768][ T5682] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1882.526521][ T5682] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.564674][ T5682] usb 10-1: Product: syz [ 1882.581444][ T5682] usb 10-1: Manufacturer: syz [ 1882.603273][ T5682] usb 10-1: SerialNumber: syz [ 1882.746017][ C1] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1882.775331][ T5682] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input32 [ 1882.959991][ T5682] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1883.006216][ T5682] (id 0x00) [ 1883.586784][T17506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1883.641383][T17506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1883.669941][T17506] bridge_slave_0: entered allmulticast mode [ 1883.692814][T17506] bridge_slave_0: entered promiscuous mode [ 1883.712119][ T5682] rc_core: IR keymap rc-imon-pad not found [ 1883.735813][ T5682] Registered IR keymap rc-empty [ 1883.763002][ T5682] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1883.830753][ T5682] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1883.908790][ T5682] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc1 [ 1883.958905][T17374] syz_tun (unregistering): left allmulticast mode [ 1883.999005][ T5682] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc1/input33 [ 1884.087768][ T5682] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:19> initialized [ 1884.217322][T17506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1884.274940][T17506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1884.294194][T15913] usb 4-1: USB disconnect, device number 47 [ 1884.328869][T17506] bridge_slave_1: entered allmulticast mode [ 1884.400116][T17506] bridge_slave_1: entered promiscuous mode [ 1885.245057][ T5682] usb 10-1: USB disconnect, device number 19 [ 1885.547486][T17506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1885.831348][T17506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1886.639121][T17639] netlink: 27 bytes leftover after parsing attributes in process `syz.9.2325'. [ 1886.705820][T17506] team0: Port device team_slave_0 added [ 1886.787789][T17506] team0: Port device team_slave_1 added [ 1887.225292][T17506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1887.275615][T17506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1887.444554][T17506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1887.571572][T16651] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1887.759025][T17506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1887.766099][T17506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1887.921486][T17506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1888.345802][T16651] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1888.862518][T16651] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.333613][T17506] hsr_slave_0: entered promiscuous mode [ 1889.385940][T17506] hsr_slave_1: entered promiscuous mode [ 1889.447695][T17506] debugfs: 'hsr0' already exists in 'hsr' [ 1889.476854][T17506] Cannot create hsr debugfs directory [ 1889.628053][T16651] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.529215][T16651] bridge_slave_1: left allmulticast mode [ 1892.564503][T16651] bridge_slave_1: left promiscuous mode [ 1892.616277][T16651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.658033][T16651] bridge_slave_0: left allmulticast mode [ 1892.703461][T16651] bridge_slave_0: left promiscuous mode [ 1892.746678][T16651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1893.522568][ T5679] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1893.688876][T16539] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1893.720689][ T5679] usb 10-1: Using ep0 maxpacket: 16 [ 1893.764387][ T5679] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1893.816900][ T5679] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1893.876986][ T5679] usb 10-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1893.903073][ T5679] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.923965][T16539] usb 1-1: Using ep0 maxpacket: 32 [ 1893.936049][ T5679] usb 10-1: Product: syz [ 1893.954843][ T5679] usb 10-1: Manufacturer: syz [ 1893.959670][T16539] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1893.959807][T16539] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1893.959950][T16539] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1893.960097][T16539] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1894.072211][T16539] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1894.124628][T16539] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.147318][T16539] usb 1-1: Product: syz [ 1894.149019][ T5679] usb 10-1: SerialNumber: syz [ 1894.161000][T16539] usb 1-1: Manufacturer: syz [ 1894.182631][T16539] usb 1-1: SerialNumber: syz [ 1894.231765][ T5679] usb 10-1: config 0 descriptor?? [ 1894.257271][T16651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1894.301219][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1894.349540][T16539] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input34 [ 1894.364452][T16651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1894.411720][T16651] bond0 (unregistering): Released all slaves [ 1894.511748][T16539] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1894.555545][T16539] (id 0x00) [ 1894.774758][T17671] tipc: Enabled bearer , priority 0 [ 1894.841084][T17673] syzkaller0: entered promiscuous mode [ 1894.882808][T17673] syzkaller0: entered allmulticast mode [ 1895.047827][T16651] tipc: Left network mode [ 1895.123612][T16539] rc_core: IR keymap rc-imon-pad not found [ 1895.161406][T16539] Registered IR keymap rc-empty [ 1895.188911][T16539] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1895.245154][T16539] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1895.326205][T16539] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 1895.427491][T16539] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input35 [ 1895.443061][T17682] tipc: Resetting bearer [ 1895.491925][T15913] usb 10-1: USB disconnect, device number 20 [ 1895.543468][T16539] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:8> initialized [ 1895.696867][T17665] tipc: Resetting bearer [ 1895.817354][T17665] tipc: Disabling bearer [ 1896.664931][T17708] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2336'. [ 1896.791425][T16539] usb 1-1: USB disconnect, device number 8 [ 1896.866027][T16651] hsr_slave_0: left promiscuous mode [ 1896.885189][T17709] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2336'. [ 1896.924392][T16651] hsr_slave_1: left promiscuous mode [ 1896.963857][T16651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1897.026727][T16651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1897.070915][T16651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1897.146342][T16651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1897.294993][T16651] veth1_macvtap: left promiscuous mode [ 1897.311313][T16651] veth0_macvtap: left promiscuous mode [ 1897.350301][T16651] veth1_vlan: left promiscuous mode [ 1897.368586][T16651] veth0_vlan: left promiscuous mode [ 1898.087161][T16651] pim6reg (unregistering): left allmulticast mode [ 1898.515410][T16651] team0 (unregistering): Port device team_slave_1 removed [ 1898.579186][T16651] team0 (unregistering): Port device team_slave_0 removed [ 1899.745761][T17506] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1899.833868][T17506] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1899.870265][T17506] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1899.958118][T17506] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1900.006397][T17506] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1900.102764][T17506] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1900.271094][T17506] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1900.321911][T17506] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1901.475766][T17758] tipc: Started in network mode [ 1901.497962][T17758] tipc: Node identity ce3139335622, cluster identity 4711 [ 1901.534078][T17758] tipc: Enabled bearer , priority 0 [ 1901.570183][T17760] syzkaller0: entered promiscuous mode [ 1901.593465][T17760] syzkaller0: entered allmulticast mode [ 1901.799801][T16539] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1901.952021][ T7802] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1901.996794][T16539] usb 7-1: Using ep0 maxpacket: 16 [ 1902.037769][T16539] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1902.058253][T17506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1902.065614][T16539] usb 7-1: config 0 has no interface number 0 [ 1902.096900][T16539] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1902.116275][T16539] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.138698][T16539] usb 7-1: Product: syz [ 1902.144195][ T7802] usb 1-1: Using ep0 maxpacket: 16 [ 1902.164645][T16539] usb 7-1: Manufacturer: syz [ 1902.175009][ T7802] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1902.192362][T16539] usb 7-1: SerialNumber: syz [ 1902.199575][ T7802] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1902.223385][T16539] usb 7-1: config 0 descriptor?? [ 1902.246847][ T7802] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1902.282802][ T7802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.302329][T17506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1902.315501][T16539] hub 7-1:0.132: bad descriptor, ignoring hub [ 1902.324241][T16539] hub 7-1:0.132: probe with driver hub failed with error -5 [ 1902.332103][ T7802] usb 1-1: Product: syz [ 1902.351983][ T7802] usb 1-1: Manufacturer: syz [ 1902.371279][ T7802] usb 1-1: SerialNumber: syz [ 1902.392123][T16539] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.132/input/input36 [ 1902.414185][T16649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1902.421874][T16649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1902.437027][ T7802] usb 1-1: config 0 descriptor?? [ 1902.551111][T16665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1902.558842][T16665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1902.761951][T17758] tipc: Resetting bearer [ 1902.818576][T15913] usb 1-1: USB disconnect, device number 9 [ 1902.861967][T12944] tipc: Node number set to 2551396659 [ 1902.893580][T17756] netlink: 'syz.6.2346': attribute type 2 has an invalid length. [ 1902.947794][T17757] tipc: Resetting bearer [ 1903.033704][T17757] tipc: Disabling bearer [ 1903.165156][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1903.183640][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1903.898819][T17775] syzkaller1: entered allmulticast mode [ 1904.873055][ T29] audit: type=1326 audit(1781445052.141:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17794 comm="syz.9.2356" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978899ce59 code=0x7ffc0000 [ 1904.873282][ T29] audit: type=1326 audit(1781445052.141:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17794 comm="syz.9.2356" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978899ce59 code=0x7ffc0000 [ 1904.891962][ T29] audit: type=1326 audit(1781445052.169:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17794 comm="syz.9.2356" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f978899ce59 code=0x7ffc0000 [ 1904.894758][ T29] audit: type=1326 audit(1781445052.169:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17794 comm="syz.9.2356" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978899ce59 code=0x7ffc0000 [ 1904.900248][ T29] audit: type=1326 audit(1781445052.169:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17794 comm="syz.9.2356" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978899ce59 code=0x7ffc0000 [ 1904.901718][ T29] audit: type=1326 audit(1781445052.178:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17794 comm="syz.9.2356" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f978899ce59 code=0x7ffc0000 [ 1904.907892][ T29] audit: type=1326 audit(1781445052.178:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17794 comm="syz.9.2356" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978899ce59 code=0x7ffc0000 [ 1904.921661][ T29] audit: type=1326 audit(1781445052.197:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17794 comm="syz.9.2356" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f978899ce59 code=0x7ffc0000 [ 1904.924128][ T29] audit: type=1326 audit(1781445052.197:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17794 comm="syz.9.2356" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978899ce59 code=0x7ffc0000 [ 1904.938057][ T29] audit: type=1326 audit(1781445052.207:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17794 comm="syz.9.2356" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f978899ce59 code=0x7ffc0000 [ 1905.319100][ T24] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 1905.510607][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1905.510771][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1905.542919][ T24] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1905.543069][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.543190][ T24] usb 10-1: Product: syz [ 1905.543310][ T24] usb 10-1: Manufacturer: syz [ 1905.543411][ T24] usb 10-1: SerialNumber: syz [ 1905.573943][ T24] usb 10-1: config 0 descriptor?? [ 1905.598500][ T24] hub 10-1:0.0: bad descriptor, ignoring hub [ 1905.598611][ T24] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1905.650054][ T24] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input37 [ 1906.790406][T15913] usb 7-1: USB disconnect, device number 30 [ 1907.224211][T17828] syzkaller1: entered promiscuous mode [ 1907.224310][T17828] syzkaller1: entered allmulticast mode [ 1907.967323][T15913] usb 10-1: USB disconnect, device number 21 [ 1907.992363][T17836] tipc: Enabled bearer , priority 0 [ 1908.185264][T17506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1908.375073][ T24] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1908.545560][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1908.560643][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1908.560774][ T24] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1908.599178][ T24] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1908.599331][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.599450][ T24] usb 7-1: Product: syz [ 1908.599571][ T24] usb 7-1: Manufacturer: syz [ 1908.599666][ T24] usb 7-1: SerialNumber: syz [ 1908.609614][ T24] usb 7-1: config 0 descriptor?? [ 1908.846625][T17836] tipc: Resetting bearer [ 1908.860058][T15913] usb 7-1: USB disconnect, device number 31 [ 1908.979269][T17835] tipc: Disabling bearer [ 1909.805072][T17859] syzkaller1: entered allmulticast mode [ 1910.397967][T17868] fuse: Bad value for 'group_id' [ 1910.441653][T17868] fuse: Bad value for 'group_id' [ 1911.466354][T17506] veth0_vlan: entered promiscuous mode [ 1911.676781][T17506] veth1_vlan: entered promiscuous mode [ 1912.523306][T17506] veth0_macvtap: entered promiscuous mode [ 1912.712759][T17506] veth1_macvtap: entered promiscuous mode [ 1913.153525][T17506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1913.376894][T17506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1913.569275][ T1144] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.621925][ T1144] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.680048][ T1144] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.723452][ T1144] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1915.560011][T17910] tipc: Enabled bearer , priority 0 [ 1915.917235][T16539] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1916.129313][T16539] usb 7-1: Using ep0 maxpacket: 16 [ 1916.165624][T16539] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1916.221336][T16539] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1916.277710][T16539] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1916.317545][T17507] Bluetooth: hci5: command 0x0406 tx timeout [ 1916.323028][T16539] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.378059][T16539] usb 7-1: Product: syz [ 1916.414098][T16539] usb 7-1: Manufacturer: syz [ 1916.447446][T16539] usb 7-1: SerialNumber: syz [ 1916.499542][T16539] usb 7-1: config 0 descriptor?? [ 1916.789221][T17910] tipc: Resetting bearer [ 1916.860730][T16539] usb 7-1: USB disconnect, device number 32 [ 1916.981436][T17924] fuse: Bad value for 'group_id' [ 1916.981642][T17909] tipc: Disabling bearer [ 1917.033397][T17924] fuse: Bad value for 'group_id' [ 1917.046058][T17507] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1917.059096][T17507] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1917.068653][T17507] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1917.113121][T17507] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1917.129889][T17507] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1918.267646][ T1144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1918.480908][ T1144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1918.728321][ T1144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1918.915498][ T1144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1919.389037][T17507] Bluetooth: hci1: command tx timeout [ 1919.886139][ T1144] bridge_slave_1: left allmulticast mode [ 1919.932471][ T1144] bridge_slave_1: left promiscuous mode [ 1919.963147][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1920.045184][ T1144] bridge_slave_0: left allmulticast mode [ 1920.076472][ T1144] bridge_slave_0: left promiscuous mode [ 1920.107836][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1921.078429][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1921.129585][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1921.168638][ T1144] bond0 (unregistering): Released all slaves [ 1921.612532][T17507] Bluetooth: hci1: command tx timeout [ 1921.811366][T16648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1921.848366][T16648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1922.358403][T11827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1922.367599][ T1144] hsr_slave_0: left promiscuous mode [ 1922.376006][T11827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1922.389439][T11827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1922.398606][ T1144] hsr_slave_1: left promiscuous mode [ 1922.415903][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1922.424694][T11827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1922.435436][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1922.449048][T11827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1922.460512][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1922.475464][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1922.574527][ T1144] veth1_macvtap: left promiscuous mode [ 1922.593191][ T1144] veth0_macvtap: left promiscuous mode [ 1922.599847][ T1144] veth1_vlan: left promiscuous mode [ 1922.612479][ T1144] veth0_vlan: left promiscuous mode [ 1923.266203][T17968] loop6: detected capacity change from 0 to 32768 [ 1923.359131][T17968] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1923.593524][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 1923.712790][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 1923.755434][T10867] ocfs2: Unmounting device (7,6) on (node local) [ 1923.835619][T17507] Bluetooth: hci1: command tx timeout [ 1924.469262][T17988] tipc: Enabled bearer , priority 0 [ 1924.529352][T16651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1924.591221][T16651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1924.691190][T17507] Bluetooth: hci4: command tx timeout [ 1924.827648][T16539] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1925.010131][T16539] usb 1-1: Using ep0 maxpacket: 16 [ 1925.071339][T16539] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1925.134651][T16539] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1925.196842][T16539] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1925.247873][T16539] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.286159][T16539] usb 1-1: Product: syz [ 1925.297883][T16539] usb 1-1: Manufacturer: syz [ 1925.319679][T16539] usb 1-1: SerialNumber: syz [ 1925.357186][T16539] usb 1-1: config 0 descriptor?? [ 1925.508234][T18007] netlink: 'syz.6.2392': attribute type 8 has an invalid length. [ 1925.726906][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880524c1400: rx timeout, send abort [ 1925.774662][T17986] tipc: Resetting bearer [ 1925.790931][T12944] usb 1-1: USB disconnect, device number 10 [ 1925.924370][T17985] tipc: Disabling bearer [ 1926.057552][T17507] Bluetooth: hci1: command tx timeout [ 1926.262040][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801a13f600: rx timeout, send abort [ 1926.805088][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801a13f600: abort rx timeout. Force session deactivation [ 1926.913230][T17507] Bluetooth: hci4: command tx timeout [ 1928.729825][T17926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1928.757488][T17926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1928.776102][T17926] bridge_slave_0: entered allmulticast mode [ 1928.833221][T17926] bridge_slave_0: entered promiscuous mode [ 1928.952022][T17926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1928.987007][T17926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1929.023156][T17926] bridge_slave_1: entered allmulticast mode [ 1929.064767][T17926] bridge_slave_1: entered promiscuous mode [ 1929.136066][T17507] Bluetooth: hci4: command tx timeout [ 1929.265847][T18056] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1929.410909][T17926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1929.583108][T16539] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1929.715139][T17926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1929.786990][T16539] usb 9-1: Using ep0 maxpacket: 32 [ 1929.830882][T16539] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1929.868691][T16539] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1929.925594][T16539] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1929.973395][T16539] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.042672][T16539] usb 9-1: config 0 descriptor?? [ 1930.114290][T17926] team0: Port device team_slave_0 added [ 1930.133014][T16539] hub 9-1:0.0: USB hub found [ 1930.202116][T17926] team0: Port device team_slave_1 added [ 1930.339650][T16539] hub 9-1:0.0: 1 port detected [ 1930.698453][T17926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1930.698453][T18068] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2401'. [ 1930.765457][T17926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1930.853466][T17926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1930.980271][T17926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1931.036948][T17926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1931.179291][T17926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1931.357116][T17507] Bluetooth: hci4: command tx timeout [ 1931.540624][T16539] hub 9-1:0.0: hub_hub_status failed (err = -32) [ 1931.588704][T16539] hub 9-1:0.0: config failed, can't get hub status (err -32) [ 1931.723435][T16539] usbhid 9-1:0.0: can't add hid device: -32 [ 1931.761614][T16539] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 1931.801758][T17975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1931.849413][T17975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1931.893644][T17975] bridge_slave_0: entered allmulticast mode [ 1931.928396][T17975] bridge_slave_0: entered promiscuous mode [ 1932.031154][T17975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1932.053872][T17975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1932.098882][T17975] bridge_slave_1: entered allmulticast mode [ 1932.136524][T17975] bridge_slave_1: entered promiscuous mode [ 1932.818903][T17926] hsr_slave_0: entered promiscuous mode [ 1932.881933][T17926] hsr_slave_1: entered promiscuous mode [ 1932.923652][T17926] debugfs: 'hsr0' already exists in 'hsr' [ 1932.964746][T17926] Cannot create hsr debugfs directory [ 1933.039930][T17975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1933.154397][T17975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1933.239792][T12944] usb 9-1: USB disconnect, device number 9 [ 1933.989272][T17975] team0: Port device team_slave_0 added [ 1934.186107][T17975] team0: Port device team_slave_1 added [ 1934.844474][T17975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1934.873771][T17975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1934.942119][T17975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1935.035865][T18092] syzkaller0: entered promiscuous mode [ 1935.051752][T18092] syzkaller0: entered allmulticast mode [ 1935.125736][T17975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1935.162678][T17975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1935.226224][T17975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1935.331967][T12944] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1935.504352][T12944] usb 9-1: Using ep0 maxpacket: 16 [ 1935.532785][T12944] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1935.587959][T12944] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1935.640491][T12944] usb 9-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1935.665281][T12944] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.693224][T12944] usb 9-1: Product: syz [ 1935.703326][T12944] usb 9-1: Manufacturer: syz [ 1935.715485][T12944] usb 9-1: SerialNumber: syz [ 1935.757429][T12944] usb 9-1: config 0 descriptor?? [ 1936.078218][T18100] syzkaller1: entered allmulticast mode [ 1936.158930][T12944] usb 9-1: USB disconnect, device number 10 [ 1936.455109][T17975] hsr_slave_0: entered promiscuous mode [ 1936.493971][T17975] hsr_slave_1: entered promiscuous mode [ 1936.504618][T17975] debugfs: 'hsr0' already exists in 'hsr' [ 1936.511666][T17975] Cannot create hsr debugfs directory [ 1937.802757][T12944] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 1937.965143][T17926] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1937.998155][T12944] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1938.038618][T17926] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1938.054944][T12944] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1938.067614][T17926] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1938.103399][T12944] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1938.112573][T17926] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1938.144924][T12944] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1938.159859][T12944] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.160920][T17926] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1938.187360][T12944] usb 9-1: Product: syz [ 1938.193923][T12944] usb 9-1: Manufacturer: syz [ 1938.216499][T12944] usb 9-1: SerialNumber: syz [ 1938.265349][T17926] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1938.266603][T12944] usb 9-1: config 0 descriptor?? [ 1938.321723][T18119] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1938.338342][T17926] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1938.429169][T17926] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1939.203182][T12944] rc_core: IR keymap rc-streamzap not found [ 1939.280686][T12944] Registered IR keymap rc-empty [ 1939.821271][T12944] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1940.451438][T12944] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input38 [ 1942.121511][T16539] usb 9-1: USB disconnect, device number 11 [ 1942.854272][T17975] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1942.953378][T17975] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1943.076448][T17975] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1943.136107][T17975] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1943.161447][T17975] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1943.192912][T17975] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1943.215418][T18154] syzkaller0: entered promiscuous mode [ 1943.225919][T18154] syzkaller0: entered allmulticast mode [ 1943.254419][T18146] syzkaller1: entered allmulticast mode [ 1943.357923][T17975] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1943.386661][T17975] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1943.550073][T16539] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1943.742648][T16539] usb 1-1: Using ep0 maxpacket: 16 [ 1943.794631][T16539] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1943.836807][T16539] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1943.885048][T16539] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1943.912500][T16539] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1943.950843][T16539] usb 1-1: Product: syz [ 1943.971629][T16539] usb 1-1: Manufacturer: syz [ 1943.989331][T16539] usb 1-1: SerialNumber: syz [ 1944.022142][T16539] usb 1-1: config 0 descriptor?? [ 1944.306966][T12827] usb 1-1: USB disconnect, device number 11 [ 1944.389088][T17926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1944.783787][T17926] 8021q: adding VLAN 0 to HW filter on device team0 [ 1944.923747][T17975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1944.956902][T16651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1944.964765][T16651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1945.142879][T16651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1945.150543][T16651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1945.292493][T17975] 8021q: adding VLAN 0 to HW filter on device team0 [ 1945.445268][T16648] bridge0: port 1(bridge_slave_0) entered blocking state [ 1945.452955][T16648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1945.620305][T16648] bridge0: port 2(bridge_slave_1) entered blocking state [ 1945.627923][T16648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1947.250330][T18166] loop6: detected capacity change from 0 to 32768 [ 1947.479869][T18166] ERROR: (device loop6): dtReadFirst: btstack overrun [ 1947.479869][T18166] [ 1947.549036][T18166] ERROR: (device loop6): remounting filesystem as read-only [ 1947.590010][T18166] btstack dump: [ 1947.618089][T18166] bn = 0, index = 0 [ 1947.648278][T18166] bn = 0, index = 0 [ 1947.680661][T18166] bn = 0, index = 0 [ 1947.708604][T18166] bn = 0, index = 0 [ 1947.743006][T18166] bn = 0, index = 0 [ 1947.765751][T18166] bn = 0, index = 0 [ 1947.788957][T18166] bn = 0, index = 0 [ 1947.819403][T18166] ===================================================== [ 1947.831931][T18166] BUG: KMSAN: uninit-value in BT_STACK_DUMP+0x5e5/0x600 [ 1947.841021][T18166] BT_STACK_DUMP+0x5e5/0x600 [ 1947.845984][T18166] dtReadFirst+0xc61/0xc90 [ 1947.850601][T18166] jfs_readdir+0x138d/0x5fc0 [ 1947.855411][T18166] wrap_directory_iterator+0xda/0x180 [ 1947.861456][T18166] shared_jfs_readdir+0x3d/0x50 [ 1947.866700][T18166] iterate_dir+0x459/0x630 [ 1947.871305][T18166] __se_sys_getdents64+0x17e/0x550 [ 1947.876746][T18166] __x64_sys_getdents64+0x97/0xe0 [ 1947.882261][T18166] x64_sys_call+0x2b6e/0x3ea0 [ 1947.887135][T18166] do_syscall_64+0x15d/0x3c0 [ 1947.892940][T18166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1947.899371][T18166] [ 1947.901768][T18166] Local variable btstack created at: [ 1947.907147][T18166] jfs_readdir+0xdd/0x5fc0 [ 1947.912057][T18166] wrap_directory_iterator+0xda/0x180 [ 1947.917639][T18166] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1947.920306][T18166] CPU: 0 UID: 0 PID: 18166 Comm: syz.6.2420 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 1947.931754][T18166] Tainted: [L]=SOFTLOCKUP [ 1947.940957][T18166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1947.954989][T18166] ===================================================== [ 1947.962549][T18166] Disabling lock debugging due to kernel taint [ 1948.038807][T18166] Kernel panic - not syncing: kmsan.panic set ... [ 1948.045410][T18166] CPU: 0 UID: 0 PID: 18166 Comm: syz.6.2420 Tainted: G B L syzkaller #0 PREEMPT(lazy) [ 1948.056578][T18166] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1948.062221][T18166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1948.072409][T18166] Call Trace: [ 1948.075795][T18166] [ 1948.078821][T18166] __dump_stack+0x26/0x30 [ 1948.083333][T18166] dump_stack_lvl+0x50/0x1c0 [ 1948.088103][T18166] ? dump_stack+0x12/0x25 [ 1948.092617][T18166] dump_stack+0x1e/0x25 [ 1948.096946][T18166] vpanic+0x7b4/0x1430 [ 1948.101243][T18166] panic+0x15d/0x160 [ 1948.105379][T18166] kmsan_report+0x31a/0x320 [ 1948.110090][T18166] ? __msan_warning+0x1b/0x30 [ 1948.114944][T18166] ? BT_STACK_DUMP+0x5e5/0x600 [ 1948.119899][T18166] ? dtReadFirst+0xc61/0xc90 [ 1948.124688][T18166] ? jfs_readdir+0x138d/0x5fc0 [ 1948.129643][T18166] ? wrap_directory_iterator+0xda/0x180 [ 1948.135402][T18166] ? shared_jfs_readdir+0x3d/0x50 [ 1948.140592][T18166] ? iterate_dir+0x459/0x630 [ 1948.145385][T18166] ? __se_sys_getdents64+0x17e/0x550 [ 1948.150899][T18166] ? __x64_sys_getdents64+0x97/0xe0 [ 1948.156320][T18166] ? x64_sys_call+0x2b6e/0x3ea0 [ 1948.161378][T18166] ? do_syscall_64+0x15d/0x3c0 [ 1948.166297][T18166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1948.172541][T18166] ? vprintk_emit+0xb60/0xba0 [ 1948.178182][T18166] ? vprintk_default+0x3f/0x50 [ 1948.183117][T18166] ? vprintk+0x36/0x50 [ 1948.187370][T18166] ? _printk+0x17e/0x1b0 [ 1948.191850][T18166] ? stack_depot_save_flags+0x610/0x790 [ 1948.197647][T18166] ? kmsan_get_metadata+0xf1/0x160 [ 1948.202988][T18166] __msan_warning+0x1b/0x30 [ 1948.207698][T18166] BT_STACK_DUMP+0x5e5/0x600 [ 1948.212494][T18166] dtReadFirst+0xc61/0xc90 [ 1948.217165][T18166] jfs_readdir+0x138d/0x5fc0 [ 1948.221963][T18166] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1948.228507][T18166] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1948.234554][T18166] ? kmsan_get_metadata+0xf1/0x160 [ 1948.239889][T18166] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1948.245936][T18166] ? __rcu_read_unlock+0x6c/0xd0 [ 1948.251091][T18166] ? aa_file_perm+0x4f0/0x2870 [ 1948.256094][T18166] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1948.262647][T18166] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1948.268931][T18166] ? kmsan_get_metadata+0xf1/0x160 [ 1948.274255][T18166] ? kmsan_get_metadata+0xf1/0x160 [ 1948.279593][T18166] ? kmsan_get_metadata+0xf1/0x160 [ 1948.284937][T18166] wrap_directory_iterator+0xda/0x180 [ 1948.290528][T18166] ? __pfx_jfs_readdir+0x10/0x10 [ 1948.295680][T18166] ? __pfx_shared_jfs_readdir+0x10/0x10 [ 1948.301403][T18166] shared_jfs_readdir+0x3d/0x50 [ 1948.306429][T18166] iterate_dir+0x459/0x630 [ 1948.311067][T18166] __se_sys_getdents64+0x17e/0x550 [ 1948.316394][T18166] ? __pfx_filldir64+0x10/0x10 [ 1948.321645][T18166] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1948.327688][T18166] __x64_sys_getdents64+0x97/0xe0 [ 1948.332947][T18166] x64_sys_call+0x2b6e/0x3ea0 [ 1948.337824][T18166] do_syscall_64+0x15d/0x3c0 [ 1948.342576][T18166] ? clear_bhb_loop+0x50/0xa0 [ 1948.347431][T18166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1948.353507][T18166] RIP: 0033:0x7f3cb139ce59 [ 1948.358056][T18166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1948.377842][T18166] RSP: 002b:00007f3cb21ab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1948.386423][T18166] RAX: ffffffffffffffda RBX: 00007f3cb1615fa0 RCX: 00007f3cb139ce59 [ 1948.394538][T18166] RDX: 000000000000101c RSI: 0000200000000f80 RDI: 0000000000000004 [ 1948.402611][T18166] RBP: 00007f3cb1432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1948.410682][T18166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1948.418753][T18166] R13: 00007f3cb1616038 R14: 00007f3cb1615fa0 R15: 00007fff68951058 [ 1948.426885][T18166] [ 1948.430179][T18166] Kernel Offset: disabled [ 1948.434565][T18166] Rebooting in 86400 seconds..