last executing test programs: 15.379774222s ago: executing program 0 (id=60): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b99"], 0x14}], 0x1}, 0x0) 14.676867772s ago: executing program 4 (id=61): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 13.513544623s ago: executing program 3 (id=63): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000a858100000c000000b700000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) 11.066880895s ago: executing program 4 (id=64): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0xe5061a720755e5cf) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_PBUF_RING(0x0, 0x9, 0x1, 0x4000010, 0xffffffffffffffff, 0x866ad84c) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x6837, 0x100, 0x3, 0x2a4}, 0x0, 0x4, 0x0, &(0x7f0000002540)) read$FUSE(0xffffffffffffffff, &(0x7f0000000bc0)={0x2020}, 0x2020) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x101c80) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) close(r3) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4014}, 0x4080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000009060102f0ffffff00000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 10.974934994s ago: executing program 1 (id=65): socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20008001, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 10.956930411s ago: executing program 2 (id=66): r0 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x80001, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r2, 0x0, 0x0, 0x0, 0x0, 0x2, r2}]) mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000d40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x48000) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r4, 0x186a0, 0x0) lseek(r4, 0x249f0, 0x0) 10.929007716s ago: executing program 3 (id=67): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 10.816838469s ago: executing program 0 (id=68): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x0, 0x2, 0x1b}, &(0x7f0000000200), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @local, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7800, 0x8, 0x9, 0x1}}) unshare(0x26020480) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r3, 0x540b, 0x1) 10.720748718s ago: executing program 3 (id=69): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x7a}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x4044044) syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ftruncate(r7, 0x4a8e) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INTERRUPT(r7, &(0x7f00000028c0)={0x10, 0xfffffffffffffff5}, 0x8e4a) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) accept4(r7, &(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000340)=0x80, 0x80800) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000000e80)={0x0, 0x0, {}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000000a80)={r10, 0x4, 0x9}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r11, 0x0) pipe(&(0x7f0000000080)) 10.655634962s ago: executing program 1 (id=70): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) 9.404389515s ago: executing program 2 (id=71): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2) r11 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r13, 0x4018620d, &(0x7f0000000100)) r14 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r15 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) dup3(r15, r14, 0x80000) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) lseek(r12, 0x851, 0x0) syz_ublk_setup_queues(r10, r9, &(0x7f0000000540)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r3}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x1af, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x20, 0x1, 0x2db, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r10, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r8, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, &(0x7f0000000180)) r16 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r16, &(0x7f0000001280), 0x0, 0x40000003, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 9.361114993s ago: executing program 0 (id=72): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') fchdir(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfa85, 0x80000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r2, &(0x7f0000000280)='net/ip_vs_stats\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4008000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) 7.445362982s ago: executing program 3 (id=73): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x3f) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac0300000000000085000000330000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.120290184s ago: executing program 1 (id=74): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf2503000000140001800d0001006574683a6772653000000000f6c94d75fe8775ae3d4f743785d429492200525363d6e0a5cbe34135fac2e8c29539740f8f4662a40a4c7029dce81d26d73b8213eff1a27f2935d72965bcbf217ce8f8c2002168a00a8308c534024c47157190dc7d7292617a0abf3be09f6b2a6f858d20bdb02b4478bad3b404fab78daa1ca74a926742cbc3d9ec5efabdd1c06e91298374d35500e075ef3639835c4498b42d715bce4a4c4e343c9cfc1bbdef94fc8cae038a06b451d2f0b7849638e0748e37da6a0c78f05c0b10efc04f2e82f9cb88eddb47d1da16d6b4ffb5b080cd324a5af5fe31126be17d31186c2d3bce6413fb45d1155ea7"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 6.091568206s ago: executing program 2 (id=75): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp6\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/253, 0xfd}], 0x1, 0x7, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000a80)={0x11, 0xf9, &(0x7f0000000980)="ed3ffaaee757b2cd0ee092f1063a9eeeb21b038a1fdc3a899e2b4dbd65a62b8aa9925307f5f739eb68714a2e99c1ae402c41dc29f1cd8f5ee78cb61c1df53301be009b228e2a008843313493ea4c36f5c2f9ed9c318e6dda5d255701eb589ac2f5a64976b798a4fceff277808a3d2fb84f5852e1075ad4b5bec1126d58f686e0e6117b3eedb53e9e53823064a67cc3f131c72c614ac16a052322966df0fac02a2a2674e1d04fb2ed354d499ad02b5529d8dbdfd8ce9a24b54683460a135d40bf6f85af17af750c7d2a2c4f909b9fb2de590432b12750aad767aa49076117bf42e20b88664941ddd5a8b1f10a29901aa195e43e532545df9d5f"}) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000340)='./file0\x00', 0x4) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') socket$inet6_sctp(0xa, 0x801, 0x84) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 5.914976292s ago: executing program 4 (id=76): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x3f) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac030000000000008500000033000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.539634139s ago: executing program 2 (id=77): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x4) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000080)={&(0x7f00000006c0)=[{0xe7f, 0x2401, 0x33, &(0x7f00000005c0)="13792ffeb295d2d6fb53daced10b9a12b93d8e2822cf82379b32a37243b65c142efa19056c40f96a96703fa3bb954df4cd9559"}], 0x1}) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x67e, 0xa9e7, 0x3, &(0x7f0000000040)={[0x2]}, 0x8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffffffffffc, 0x2) 4.432213176s ago: executing program 0 (id=78): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./cfg/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) write(r1, &(0x7f0000000130)='0x0200\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) kexec_load(0x800, 0x9, &(0x7f00000019c0)=[{&(0x7f00000002c0)="6cb41888dee9ee63", 0x8, 0x7737, 0xffffffc0}, {&(0x7f0000000340)="68fb1304cab79ac6d59c0e4e30e5d527ea5223bcd042c27d66e5adea62ee2a74b6fe24771b51210cc20f1b395243d7681a4ec86cd997817a018264c77c9421f3a779fece3896dcbe7fd061f1fd5a7dcf423ad5a2cbfd9d39d9d9cbe14815bd828c8adc889e65b7d28bbda202761ee80ffb1cbef951249333f7f5faf5a54e8f7babd4e367c03d383b60efb6ec539c7053", 0x90, 0x7, 0x8}, {&(0x7f0000000480)="4238f895f0a02fe6ff3954d039d549253835ad13a71241099de081abfe88f0b48d55a30c839ea31e722b1f2c9a0c528bd61e23490c3d68a2a053439b617f65e0bf2ebac24efaebffcd84cc02387cd032ac55695672ce29b6e06730e35474bcb7e75de63f57f2b4fdaa1c94368c673a1bc2fa90f8ba3a0bac4675372f93a16e14", 0x80, 0x7fffffff, 0xffffffff}, {&(0x7f0000000540)="b854d3de260b10e04312279a8b8a8a692871fc94519b7a2e7efe0b41952a962fd8e86ec5dcba41b93493287da05ccedc2e59627d68925dbce4d9bfe8a0f7d7afccc4ce822c5c79bcaf31fb93f4089abe394cdc25ad9320057acd7cb0121d82d4a9332bd2d9b55377706b134ab375c759a09d6cef429ccbba4fbe71ade7531c21c17c11f53df17cff77dfdce318e605b14844aacb8fa3048669afc0e4dfe02a32b63e32bc4a295c04b6241fbe50bad41dd6de529dd166a4bb", 0xb8, 0x4, 0xa8b}, {&(0x7f0000000700)="285b8dc238f5fe406c766157fab0aa8b092a7bc2f179c73d8d1990f0b0bf758ca0a94834", 0x24, 0x8, 0xafc8}, {&(0x7f0000000740)="82e01f5710289ccbc4216e82163abd9e823a40af1257fc08a89225b5d7572092794c19e208302ee4325705a7edd12f003e63d31239a021db42039a4ad25db96b8df16ece4c149d73fee8c35fc950b0fe141ebe32e29848a2a974fcf8dd3bd7a158c69050629b32367a56e6e40d35d562522aee7ac9bc568d46b932c095d96e0cd90407c39eb05b650ea7", 0x8a, 0x7fffffff, 0xd}, {&(0x7f0000000800)="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", 0x1000, 0x7, 0xffff}, {&(0x7f0000001800)="fc4218387f050932c40bcc0b480509aef6792b42c4474432085d12ca64c10156cb0459274dbf73efb82e98b7012e12e3344c07444db874cff9f4f7acf2fc", 0x3e, 0x1, 0x10001}, {&(0x7f0000001900)="a473ce463598eb862cc7f14e1c88d49d7da9b6b1c6e17753838699d41f19082f1a5a09388cd91a488fe5dc5a130decd9b51d822ab919a1059abf4d7c1753118624945688b82eab53f48670aa97dd19a2908c2fc112034499f6e7f4b89d0acc34fb4d331fe9a0894cabb52211dc63a3f6605965157984f3db8e826730a11bc0f573119572de6350e9040c912308e7500752d480c19dcc6aae5fffaf4d90b34b3ff2d16f351961", 0xa6, 0x8, 0x9}], 0x3e0001) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00') 4.010167606s ago: executing program 3 (id=79): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) 3.865618595s ago: executing program 1 (id=80): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.843097742s ago: executing program 4 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) 2.775623365s ago: executing program 0 (id=82): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000080)={&(0x7f00000006c0)=[{0xe7f, 0x2401, 0x33, &(0x7f00000005c0)="13792ffeb295d2d6fb53daced10b9a12b93d8e2822cf82379b32a37243b65c142efa19056c40f96a96703fa3bb954df4cd9559"}], 0x1}) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x67e, 0xa9e7, 0x3, &(0x7f0000000040)={[0x2]}, 0x8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffffffffffc, 0x2) 2.762899186s ago: executing program 1 (id=83): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.687641795s ago: executing program 4 (id=84): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xa0, &(0x7f0000000200)=""/160, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_icmp(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x40090) 2.669510546s ago: executing program 3 (id=85): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000001680)={0x46, 0x9, 0x0, 0x7, 0x4, 0x0, [{0x8, 0x6, 0xe5}, {0xf, 0x7fffffff, 0x40000000, '\x00', 0x1000}, {0x800, 0x5, 0xfffffffffffffff6, '\x00', 0x300}, {0x7}]}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000500)=0xffff0080) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x49811, 0x49851}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) sendto$packet(r2, &(0x7f0000000400)="05", 0x1, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0x3) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8]}, 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB]) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) syz_io_uring_setup(0x80002f00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x7f}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc\x00', 0x1ff) r10 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r10, &(0x7f0000000e00)='* ', 0x2) 2.428902876s ago: executing program 1 (id=86): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) r5 = dup3(r2, r4, 0x80000) r6 = dup(r5) pwrite64(r2, &(0x7f0000000040)="46f4b58982ede3e19e", 0x9, 0x4) read(r6, &(0x7f00000014c0)=""/4096, 0x1000) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000080)={&(0x7f00000006c0)=[{0xe7f, 0x2401, 0x33, &(0x7f00000005c0)="13792ffeb295d2d6fb53daced10b9a12b93d8e2822cf82379b32a37243b65c142efa19056c40f96a96703fa3bb954df4cd9559"}], 0x1}) timer_settime(r3, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r1, 0x0, &(0x7f000009de80), 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7b, 0xa840, 0x1, 0x34b}, 0x0, &(0x7f0000000600), &(0x7f0000000140)) io_uring_enter(r8, 0x67e, 0xa9e7, 0x3, &(0x7f0000000040)={[0x2]}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffffffffffc, 0x2) 2.314645612s ago: executing program 4 (id=87): socket$netlink(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe8000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x0, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x3e, {0x81, 0x5}, 0x77}, 0x1) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x40) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c00024000000000000000010900030003000000000000001400000011"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0xa00965, 0x2}) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x97, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 0x10}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000440)={r2, r2, 0x8, 0x0, 0x0, 0x6, 0x5, 0x10cf, 0x5, 0x8b, 0x3, 0x1, 'syz0\x00'}) shutdown(r2, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.732540316s ago: executing program 0 (id=88): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') fchdir(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfa85, 0x80000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r2, &(0x7f0000000280)='net/ip_vs_stats\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4008000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) 1.730559348s ago: executing program 2 (id=89): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp6\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/253, 0xfd}], 0x1, 0x7, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000a80)={0x11, 0xf9, &(0x7f0000000980)="ed3ffaaee757b2cd0ee092f1063a9eeeb21b038a1fdc3a899e2b4dbd65a62b8aa9925307f5f739eb68714a2e99c1ae402c41dc29f1cd8f5ee78cb61c1df53301be009b228e2a008843313493ea4c36f5c2f9ed9c318e6dda5d255701eb589ac2f5a64976b798a4fceff277808a3d2fb84f5852e1075ad4b5bec1126d58f686e0e6117b3eedb53e9e53823064a67cc3f131c72c614ac16a052322966df0fac02a2a2674e1d04fb2ed354d499ad02b5529d8dbdfd8ce9a24b54683460a135d40bf6f85af17af750c7d2a2c4f909b9fb2de590432b12750aad767aa49076117bf42e20b88664941ddd5a8b1f10a29901aa195e43e532545df9d5f"}) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000340)='./file0\x00', 0x4) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 0s ago: executing program 2 (id=90): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 91.366573][ T5574] cgroup: Unknown subsys name 'net' [ 91.587610][ T5574] cgroup: Unknown subsys name 'cpuset' [ 91.641551][ T5574] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.514069][ T5574] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.734589][ T9] cfg80211: failed to load regulatory.db [ 96.188553][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.230583][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.241823][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.276301][ T5590] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.288917][ T5590] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.311306][ T5590] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.324749][ T5590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.345210][ T5590] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.346118][ T5591] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.368213][ T5599] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.368836][ T5599] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.369998][ T5599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.381670][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.387883][ T5599] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.390357][ T5599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.391136][ T5599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.399948][ T5595] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.407040][ T5595] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.408851][ T5595] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.418156][ T5595] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.432611][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.454306][ T5602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.482125][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.517164][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.519334][ T4903] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.522766][ T4903] Bluetooth: hci1: command tx timeout [ 98.522893][ T4903] Bluetooth: hci2: command tx timeout [ 98.611094][ T5602] Bluetooth: hci3: command tx timeout [ 98.611208][ T5602] Bluetooth: hci4: command tx timeout [ 98.611287][ T5602] Bluetooth: hci0: command tx timeout [ 98.945219][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.946096][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.946234][ T5588] bridge_slave_0: entered allmulticast mode [ 98.948329][ T5588] bridge_slave_0: entered promiscuous mode [ 99.019950][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.020051][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.020208][ T5588] bridge_slave_1: entered allmulticast mode [ 99.037990][ T5588] bridge_slave_1: entered promiscuous mode [ 99.242401][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.242703][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.242904][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.243080][ T5589] bridge_slave_0: entered allmulticast mode [ 99.245335][ T5589] bridge_slave_0: entered promiscuous mode [ 99.292852][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.292962][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.293090][ T5593] bridge_slave_0: entered allmulticast mode [ 99.294771][ T5593] bridge_slave_0: entered promiscuous mode [ 99.356566][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.356811][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.357003][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.357122][ T5589] bridge_slave_1: entered allmulticast mode [ 99.358913][ T5589] bridge_slave_1: entered promiscuous mode [ 99.401881][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.402001][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.402218][ T5593] bridge_slave_1: entered allmulticast mode [ 99.404024][ T5593] bridge_slave_1: entered promiscuous mode [ 99.473946][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.474149][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.474257][ T5585] bridge_slave_0: entered allmulticast mode [ 99.475940][ T5585] bridge_slave_0: entered promiscuous mode [ 99.512038][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.512146][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.512499][ T5596] bridge_slave_0: entered allmulticast mode [ 99.514278][ T5596] bridge_slave_0: entered promiscuous mode [ 99.562591][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.562681][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.562806][ T5585] bridge_slave_1: entered allmulticast mode [ 99.564702][ T5585] bridge_slave_1: entered promiscuous mode [ 99.598828][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.598933][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.599764][ T5596] bridge_slave_1: entered allmulticast mode [ 99.609779][ T5596] bridge_slave_1: entered promiscuous mode [ 99.627119][ T5588] team0: Port device team_slave_0 added [ 99.630279][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.660366][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.682987][ T5588] team0: Port device team_slave_1 added [ 99.685635][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.713537][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.772186][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.795541][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.834470][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.857614][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.858548][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.858557][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.858573][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.868130][ T5589] team0: Port device team_slave_0 added [ 99.931616][ T5593] team0: Port device team_slave_0 added [ 99.949604][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.949615][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.949647][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.956143][ T5589] team0: Port device team_slave_1 added [ 100.006982][ T5593] team0: Port device team_slave_1 added [ 100.053383][ T5585] team0: Port device team_slave_0 added [ 100.073571][ T5596] team0: Port device team_slave_0 added [ 100.098583][ T5585] team0: Port device team_slave_1 added [ 100.120680][ T5596] team0: Port device team_slave_1 added [ 100.127768][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.127780][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.127801][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.177265][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.177277][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.177296][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.255035][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.255046][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.255063][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.291968][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.292014][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.292075][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.394253][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.394266][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.394283][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.601133][ T4903] Bluetooth: hci2: command tx timeout [ 100.601169][ T4903] Bluetooth: hci1: command tx timeout [ 100.681951][ T4903] Bluetooth: hci4: command tx timeout [ 100.681986][ T4903] Bluetooth: hci3: command tx timeout [ 100.682864][ T5602] Bluetooth: hci0: command tx timeout [ 100.982863][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.982876][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.982896][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.990691][ T5588] hsr_slave_0: entered promiscuous mode [ 101.003791][ T5588] hsr_slave_1: entered promiscuous mode [ 101.044853][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.044895][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.044980][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.056653][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.056696][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.056757][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.244708][ T5589] hsr_slave_0: entered promiscuous mode [ 101.245793][ T5589] hsr_slave_1: entered promiscuous mode [ 101.246559][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 101.246652][ T5589] Cannot create hsr debugfs directory [ 101.268398][ T5593] hsr_slave_0: entered promiscuous mode [ 101.281502][ T5593] hsr_slave_1: entered promiscuous mode [ 101.282251][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 101.282271][ T5593] Cannot create hsr debugfs directory [ 101.384154][ T5585] hsr_slave_0: entered promiscuous mode [ 101.385152][ T5585] hsr_slave_1: entered promiscuous mode [ 101.385846][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 101.385863][ T5585] Cannot create hsr debugfs directory [ 101.417645][ T5596] hsr_slave_0: entered promiscuous mode [ 101.418819][ T5596] hsr_slave_1: entered promiscuous mode [ 101.419514][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 101.419532][ T5596] Cannot create hsr debugfs directory [ 102.340784][ T5588] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.394621][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.399572][ T5588] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.436275][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.438529][ T5588] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.475312][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.498945][ T5588] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.516220][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.622626][ T5593] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.656691][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.677593][ T5593] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.691205][ T4903] Bluetooth: hci1: command tx timeout [ 102.691237][ T4903] Bluetooth: hci2: command tx timeout [ 102.716128][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.719969][ T5593] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.754882][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.761183][ T5590] Bluetooth: hci4: command tx timeout [ 102.773047][ T4903] Bluetooth: hci3: command tx timeout [ 102.773134][ T5590] Bluetooth: hci0: command tx timeout [ 102.795302][ T5593] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.825523][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.008064][ T5585] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.034577][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.040733][ T5585] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.088665][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.100688][ T5585] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.124961][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.156787][ T5585] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.196219][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.342123][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.374284][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.390290][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.414776][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.420418][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.466763][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.484957][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.510083][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.545192][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.720782][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.729479][ T5589] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.764499][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.779307][ T5589] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.807846][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.823579][ T5589] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.845970][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.858507][ T5589] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.885664][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.921955][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.922100][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.998637][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.018072][ T1509] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.018304][ T1509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.117375][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.157400][ T3286] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.157548][ T3286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.208492][ T3286] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.208611][ T3286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.238432][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.353209][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.425524][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.425730][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.457788][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.477896][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.478046][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.616687][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.633136][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.688778][ T1509] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.688984][ T1509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.768159][ T5590] Bluetooth: hci2: command tx timeout [ 104.768188][ T5590] Bluetooth: hci1: command tx timeout [ 104.784171][ T1509] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.784296][ T1509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.815005][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.842208][ T4903] Bluetooth: hci0: command tx timeout [ 104.842240][ T4903] Bluetooth: hci3: command tx timeout [ 104.842263][ T4903] Bluetooth: hci4: command tx timeout [ 104.889726][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.889919][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.966697][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.980130][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.619316][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.464416][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.600587][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.815477][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.818034][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.846477][ T5588] veth0_vlan: entered promiscuous mode [ 106.858589][ T5593] veth0_vlan: entered promiscuous mode [ 106.915491][ T5588] veth1_vlan: entered promiscuous mode [ 106.920319][ T5593] veth1_vlan: entered promiscuous mode [ 106.974813][ T5585] veth0_vlan: entered promiscuous mode [ 107.019506][ T5585] veth1_vlan: entered promiscuous mode [ 107.103666][ T5596] veth0_vlan: entered promiscuous mode [ 107.110313][ T5589] veth0_vlan: entered promiscuous mode [ 107.124063][ T5588] veth0_macvtap: entered promiscuous mode [ 107.128062][ T5593] veth0_macvtap: entered promiscuous mode [ 107.153348][ T5588] veth1_macvtap: entered promiscuous mode [ 107.169371][ T5593] veth1_macvtap: entered promiscuous mode [ 107.185771][ T5596] veth1_vlan: entered promiscuous mode [ 107.199062][ T5589] veth1_vlan: entered promiscuous mode [ 107.238849][ T5585] veth0_macvtap: entered promiscuous mode [ 107.277524][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.279635][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.310007][ T5585] veth1_macvtap: entered promiscuous mode [ 107.330077][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.340165][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.408781][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.432056][ T5596] veth0_macvtap: entered promiscuous mode [ 107.510611][ T5589] veth0_macvtap: entered promiscuous mode [ 107.526650][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.547638][ T5596] veth1_macvtap: entered promiscuous mode [ 107.619582][ T5589] veth1_macvtap: entered promiscuous mode [ 107.972069][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.004555][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.106014][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.106044][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.107767][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.138499][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.341937][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.341955][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.478442][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.478460][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.053470][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.053492][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.184611][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.184628][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.306291][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.306309][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.581874][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.581899][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.682385][ T1022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.689580][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.689596][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.824012][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.824033][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.952575][ T1022] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.953512][ T1509] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.953664][ T1509] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.953914][ T1509] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.954102][ T1509] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.954283][ T1509] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.954451][ T1509] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.986258][ T1509] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.499951][ T5786] binder: 5780:5786 ioctl c0306201 200000000040 returned -22 [ 110.515022][ T5786] ublk0: read batch cmd buffer failed [ 110.515148][ T5786] ublk0: read batch cmd buffer failed [ 111.760053][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.760076][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.989186][ T5794] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 112.377723][ T5794] cramfs: wrong magic [ 112.482833][ T5796] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7'. [ 113.721988][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.722038][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.722076][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.722114][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.722151][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.722188][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.722236][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.722356][ T3332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.722774][ T3286] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.722814][ T3286] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.722851][ T3286] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.306990][ T5819] tipc: Started in network mode [ 115.307007][ T5819] tipc: Node identity , cluster identity 4711 [ 115.307022][ T5819] tipc: Failed to obtain node identity [ 115.307049][ T5819] tipc: Enabling of bearer rejected, failed to enable media [ 116.964398][ T5705] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 120.545207][ T5705] usb 4-1: device descriptor read/all, error -71 [ 123.179914][ T5878] Invalid ELF header magic: != ELF [ 123.189562][ T5878] ======================================================= [ 123.189562][ T5878] WARNING: The mand mount option has been deprecated and [ 123.189562][ T5878] and is ignored by this kernel. Remove the mand [ 123.189562][ T5878] option from the mount to silence this warning. [ 123.189562][ T5878] ======================================================= [ 123.247873][ T5891] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 123.371780][ T5889] binder: 5881:5889 ioctl c0306201 200000000040 returned -22 [ 123.770970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.156009][ T5900] tipc: Started in network mode [ 126.156028][ T5900] tipc: Node identity , cluster identity 4711 [ 126.156042][ T5900] tipc: Failed to obtain node identity [ 126.156076][ T5900] tipc: Enabling of bearer rejected, failed to enable media [ 127.161484][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 129.552917][ T9] usb 3-1: device descriptor read/all, error -71 [ 132.946804][ T5927] tipc: Started in network mode [ 132.946857][ T5927] tipc: Node identity , cluster identity 4711 [ 132.946874][ T5927] tipc: Failed to obtain node identity [ 132.946948][ T5927] tipc: Enabling of bearer rejected, failed to enable media [ 133.561037][ T4903] Bluetooth: hci4: command 0x0405 tx timeout [ 134.370959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.538814][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.613629][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.786044][ T5943] Invalid ELF header magic: != ELF [ 138.630971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.660952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.210592][ T5947] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 139.525273][ T9] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 140.145082][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 140.424897][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 140.425086][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 140.425152][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.425228][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 140.425289][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 143.221506][ T9] usb 1-1: unable to read config index 1 descriptor/start: -71 [ 143.221549][ T9] usb 1-1: can't read configurations, error -71 [ 143.341058][ T5719] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 144.000757][ T5966] tipc: Started in network mode [ 144.014034][ T5966] tipc: Node identity , cluster identity 4711 [ 144.019794][ T5966] tipc: Failed to obtain node identity [ 144.019907][ T5966] tipc: Enabling of bearer rejected, failed to enable media [ 144.427807][ T5968] netlink: 88 bytes leftover after parsing attributes in process `syz.4.37'. [ 144.649103][ T5961] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 144.729185][ T5961] cramfs: wrong magic [ 144.858354][ T4903] Bluetooth: hci4: link tx timeout [ 144.863860][ T4903] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 145.245598][ T5698] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 145.247210][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 145.265683][ T4903] Bluetooth: hci4: link tx timeout [ 145.265701][ T4903] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 145.439866][ T5698] usb 3-1: device descriptor read/64, error -32 [ 145.731032][ T5698] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 145.898924][ T5698] usb 3-1: Using ep0 maxpacket: 8 [ 145.974822][ T5698] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 146.038700][ T5698] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 146.038788][ T5698] usb 3-1: config 0 has no interface number 0 [ 146.038961][ T5698] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 146.038988][ T5698] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 146.039052][ T5698] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.039132][ T5698] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 146.039285][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.971792][ T4903] Bluetooth: hci4: command 0x0405 tx timeout [ 147.709805][ T5698] usb 3-1: config 0 descriptor?? [ 148.270465][ T5698] usb 3-1: can't set config #0, error -71 [ 148.783398][ T5698] usb 3-1: USB disconnect, device number 5 [ 151.808788][ T6000] binder: 5997:6000 ioctl c0306201 0 returned -14 [ 152.391127][ T5914] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 152.542003][ T5914] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.544208][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.544240][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 152.544269][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 152.544299][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.544348][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.653963][ T5914] usb 2-1: config 0 descriptor?? [ 152.685786][ T6007] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.706142][ T6016] tipc: Started in network mode [ 152.706159][ T6016] tipc: Node identity , cluster identity 4711 [ 152.706174][ T6016] tipc: Failed to obtain node identity [ 152.706201][ T6016] tipc: Enabling of bearer rejected, failed to enable media [ 153.430945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.050518][ T6021] loop5: detected capacity change from 0 to 7 [ 154.328009][ T6021] Dev loop5: unable to read RDB block 7 [ 154.328159][ T6021] loop5: AHDI p1 p2 p3 [ 154.328188][ T6021] loop5: partition table partially beyond EOD, truncated [ 154.465569][ T6021] loop5: p1 start 1601398130 is beyond EOD, truncated [ 154.465641][ T6021] loop5: p2 start 1702059890 is beyond EOD, truncated [ 155.653841][ T5914] usbhid 2-1:0.0: can't add hid device: -71 [ 155.653937][ T5914] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 155.716928][ T5914] usb 2-1: USB disconnect, device number 3 [ 164.956393][ T6092] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 165.021341][ T6092] binder: 6089:6092 ioctl c0306201 200000000040 returned -22 [ 166.151898][ T6098] Invalid ELF header magic: != ELF [ 168.359706][ T6107] tipc: Started in network mode [ 168.359722][ T6107] tipc: Node identity , cluster identity 4711 [ 168.359736][ T6107] tipc: Failed to obtain node identity [ 168.359758][ T6107] tipc: Enabling of bearer rejected, failed to enable media [ 168.510817][ T6115] Invalid ELF header magic: != ELF [ 170.093735][ T5705] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 170.157630][ T6125] Zero length message leads to an empty skb [ 170.271949][ T5705] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 170.273484][ T5705] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 170.273537][ T5705] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 170.273566][ T5705] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 170.273592][ T5705] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 170.273619][ T5705] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 170.275140][ T5705] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 170.275196][ T5705] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 170.275225][ T5705] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 170.275260][ T5705] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 170.275287][ T5705] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 170.276722][ T5705] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 170.276772][ T5705] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 170.276800][ T5705] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 170.276827][ T5705] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 170.276862][ T5705] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 170.514662][ T5705] usb 3-1: string descriptor 0 read error: -22 [ 170.514859][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.968310][ T6134] overlayfs: missing 'lowerdir' [ 171.155433][ T5705] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 171.382784][ T6138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.83'. [ 171.765662][ T5576] usb 3-1: USB disconnect, device number 6 [ 172.032861][ T9] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 172.248696][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 172.265489][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 172.265538][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 172.265568][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 172.265584][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 172.265600][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 172.271183][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 172.271320][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 172.271382][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 172.271435][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 172.271502][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 172.338366][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 172.338507][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 172.338582][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 172.338644][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 172.338701][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 172.446900][ T9] usb 2-1: string descriptor 0 read error: -22 [ 172.447117][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.700956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 172.720956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 172.926377][ T6160] Invalid ELF header magic: != ELF [ 173.816585][ T9] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 174.286262][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3829 [ 174.286283][ C0] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 16, name: ktimers/0 [ 174.286301][ C0] preempt_count: 0, expected: 0 [ 174.286311][ C0] RCU nest depth: 2, expected: 0 [ 174.286330][ C0] 4 locks held by ktimers/0/16: [ 174.286343][ C0] #0: ffffffff8e059220 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 174.286418][ C0] #1: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 174.286474][ C0] #2: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 174.286557][ C0] #3: ffff888037068358 (sk_lock-AF_X25){+.+.}-{0:0}, at: x25_kill_by_neigh+0x134/0x2a0 [ 174.286654][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 174.286685][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.286707][ C0] Call Trace: [ 174.286720][ C0] [ 174.286730][ C0] dump_stack_lvl+0xe8/0x150 [ 174.286766][ C0] __might_resched+0x329/0x480 [ 174.286800][ C0] lock_sock_nested+0x56/0x130 [ 174.286837][ C0] x25_kill_by_neigh+0x134/0x2a0 [ 174.286870][ C0] ? x25_kill_by_neigh+0x2b/0x2a0 [ 174.286908][ C0] x25_lapb_receive_frame+0x1b0/0xfb0 [ 174.286934][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 174.286963][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 174.286994][ C0] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 174.287020][ C0] netif_receive_skb_core+0x2a6/0x2b0 [ 174.287059][ C0] lapbeth_napi_poll+0x45/0x90 [ 174.287086][ C0] __napi_poll+0xae/0x550 [ 174.287131][ C0] net_rx_action+0x621/0xd70 [ 174.287181][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 174.287245][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 174.287282][ C0] handle_softirqs+0x1d9/0x6c0 [ 174.287321][ C0] run_ktimerd+0x69/0x100 [ 174.287352][ C0] smpboot_thread_fn+0x57c/0xa80 [ 174.287385][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 174.287424][ C0] kthread+0x388/0x470 [ 174.287457][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 174.287485][ C0] ? __pfx_kthread+0x10/0x10 [ 174.287520][ C0] ret_from_fork+0x514/0xb70 [ 174.287559][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 174.287594][ C0] ? __switch_to+0xc89/0x1420 [ 174.287627][ C0] ? __pfx_kthread+0x10/0x10 [ 174.287670][ C0] ret_from_fork_asm+0x1a/0x30 [ 174.287725][ C0] [ 174.313054][ T6164] Invalid ELF header magic: != ELF [ 174.598930][ T6165] tipc: Started in network mode [ 174.598947][ T6165] tipc: Node identity , cluster identity 4711 [ 174.599076][ T6165] tipc: Failed to obtain node identity [ 174.599104][ T6165] tipc: Enabling of bearer rejected, failed to enable media [ 175.470280][ T9] usb 2-1: USB disconnect, device number 4