last executing test programs: 1m51.225705062s ago: executing program 5 (id=20): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) syz_usb_connect(0x3, 0x50, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, &(0x7f0000000280), &(0x7f0000000140)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x1015c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80000, 0x10080000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x80000, 0x100003, 0x125}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9c4, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x55, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c082, 0xa, 0x20002f6}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) 1m49.501913002s ago: executing program 5 (id=25): migrate_pages(0x0, 0x6fb8, 0x0, &(0x7f0000000300)=0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) add_key(0x0, 0x0, &(0x7f00000008c0)="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", 0x184, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="0b05", 0x2, 0x200408c4, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 1m46.153096093s ago: executing program 5 (id=31): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 1m45.374161497s ago: executing program 5 (id=32): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xfffffffe) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 1m43.750204124s ago: executing program 5 (id=36): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001080)=@mangle={'mangle\x00', 0x64, 0x6, 0x588, 0x1b8, 0x428, 0x1b8, 0x2e0, 0x0, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080)=0x8, 0x4) r2 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22091406, &(0x7f0000000440)={[{@dioread_lock}, {@quota}, {@delalloc}, {@block_validity}, {@nolazytime}, {@nojournal_checksum, 0x2e}, {@nombcache}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x800}}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x64eb2000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) getdents64(0xffffffffffffffff, 0x0, 0x0) 1m41.781871641s ago: executing program 5 (id=38): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff808500000004000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000080005400000000198000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c6f00000000000000000000000000002000000010"], 0x128}}, 0x0) 1m26.127177131s ago: executing program 32 (id=38): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff808500000004000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000080005400000000198000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c6f00000000000000000000000000002000000010"], 0x128}}, 0x0) 28.268412546s ago: executing program 6 (id=164): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r4, &(0x7f0000000100)=""/9, 0xfffffd87) 25.784819797s ago: executing program 6 (id=168): io_uring_setup(0x3a45, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff", @ANYRES8], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 21.086995818s ago: executing program 3 (id=179): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 19.659696554s ago: executing program 2 (id=182): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x8b) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_open_procfs(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa0042, 0x0) copy_file_range(r1, 0x0, r1, &(0x7f0000000040)=0x8, 0x2, 0x0) 19.629611021s ago: executing program 3 (id=183): r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x639) readv(r2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000002c0)={{0x4002, 0x6, 0x59, 0x0, 'syz0\x00', 0x2000006}, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 19.252682113s ago: executing program 3 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount(&(0x7f0000000400)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1, 0x20) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000700), 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)="24c30ae33238b456e785615f5fd1609490d43f3942b23d65817539521e36020099b5133caafc6987ad52cd0000470322c49418cecc5a45f45056fc8615a0153b5b741309e0dcc23c0459133be105abd819668d8a41ce0b71c8632e878fb65b6c232f9aa109010000000000000059cbcaecd32a039c9f7bb2396cbe43f544c747b7561a4b71573a6ea8804a934d7a84", 0x8f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) close(r4) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) 19.170144799s ago: executing program 2 (id=185): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0xff81, @none}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r5, &(0x7f0000000100)=""/9, 0xfffffd87) 17.172308008s ago: executing program 2 (id=186): syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x2c, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0xa18000, &(0x7f0000000180)={[{@jqfmt_vfsv1}, {@nodelalloc}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@stripe={'stripe', 0x3d, 0x5}}, {@dioread_lock}]}, 0xfc, 0x573, &(0x7f0000000400)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002900)={0x11, 0x22, &(0x7f0000002500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @alu={0x4, 0x1, 0xb, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0xc, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002640)='GPL\x00', 0xa, 0xcf, &(0x7f0000002680)=""/207, 0x40f00, 0x6b, '\x00', r1, 0x0, r0, 0x8, &(0x7f0000002780)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000027c0)={0x5, 0x5, 0x57, 0x3}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000002800)=[r0, 0x1, r0], &(0x7f0000002840)=[{0x3, 0x4, 0x10, 0x9}, {0x5, 0x3, 0xd, 0x7}, {0x2, 0x2, 0x7, 0x9}, {0x3, 0x4, 0x1, 0x5}, {0x0, 0x5, 0x8, 0xc}, {0x5, 0x5, 0xe, 0x8}, {0x5, 0x2, 0x9, 0x2}, {0x2, 0x1, 0x1, 0x9}, {0x0, 0x1, 0x7, 0x8}, {0x2, 0x1, 0xa, 0x6}], 0x10, 0x8}, 0x94) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r3 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_control_io$uac3(r3, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000140)={[{@numtail}, {@uni_xlate}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@fat=@quiet}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@fat=@flush}, {@uni_xlate}, {@utf8}, {@numtail}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp864'}}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_usb_control_io(r3, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xc000) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xffda}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x2}], 0x1, 0x40002122, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}, 0x2}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="1ea840abc98cd515716ec91298b29dc7707407bc42e1aa63fb", 0x19}, {&(0x7f0000000140)="809b534e8cb3afe6673299be9941a2f637524f8da5eac7748529db31e9beec55c93cdbaa8a8d46aa0f21034f9a7a89cec2fefab2f6081f72c8abf39085028ee56f7b2675529be0eadfa19eee6d2007ed3ba952e48847bb024edfba5caccea63a2140b51f83b45dbe77642fa6542b714a702e14ed2e", 0x75}], 0x2, 0x0, 0x0, 0x4000}, 0x0) 16.226639753s ago: executing program 3 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x0, &(0x7f00000008c0)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x400}) 14.250051889s ago: executing program 6 (id=192): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = timerfd_create(0x8, 0x800) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xfe37, 0x0) read$msr(r1, &(0x7f0000000780)=""/102400, 0x19000) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x40104d04, &(0x7f0000000900)) ptrace$pokeuser(0x6, r3, 0x358, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a00000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0x85, &(0x7f0000000140)=""/133}, 0x80) 12.88376147s ago: executing program 1 (id=196): r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x639) readv(r2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000002c0)={{0x4002, 0x6, 0x59, 0x0, 'syz0\x00', 0x2000006}, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 12.430595385s ago: executing program 1 (id=198): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, ','}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_sa={0x2, 0x1, 0x0, 0xfd, 0x0, 0x9, 0x7}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x793, 0xfffff801, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1}}]}, 0x80}, 0x1, 0x7}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x106f) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg2\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x14) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0) 9.484063706s ago: executing program 3 (id=200): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount(&(0x7f0000000400)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x20) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000700), 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)="24c30ae33238b456e785615f5fd1609490d43f3942b23d65817539521e36020099b5133caafc6987ad52cd0000470322c49418cecc5a45f45056fc8615a0153b5b741309e0dcc23c0459133be105abd819668d8a41ce0b71c8632e878fb65b6c232f9aa109010000000000000059cbcaecd32a039c9f7bb2396cbe43f544c747b7561a4b71573a6ea8804a934d7a84", 0x8f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) close(r4) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) 9.470803818s ago: executing program 4 (id=201): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r0, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)={0x0, 0xb, 0xa9a}, 0x8) 9.075800663s ago: executing program 4 (id=203): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) syz_usb_connect(0x3, 0x50, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000751000/0xe000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000754000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000140)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x1015c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80000, 0x10080000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x80000, 0x100003, 0x125}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9c4, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x55, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c082, 0xa, 0x20002f6}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) 7.436912099s ago: executing program 6 (id=204): io_setup(0x80, &(0x7f0000000040)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000040)={'virt_wifi0\x00', @random="a1a938559e11"}) ioctl(r0, 0x8b2d, &(0x7f0000000040)) add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) memfd_create(&(0x7f0000000480)='[tP\vx\'\xa5)\x1a\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x1c\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb:(\xb5\xe1jW\xd6\x91\x82\t%\x80|\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\x16\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02B\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc8}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110) 7.408068931s ago: executing program 0 (id=205): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x30, 0x30}, {0x0, 0x7f, 0x7, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x8c854}, 0x80) syz_emit_ethernet(0xadf, &(0x7f0000000e80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4186dd6535eacc0aa93200fe8000000000000000000000000000bb00"/48], 0x0) 7.331064647s ago: executing program 0 (id=206): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40008, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xa) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x70, 0xd8, 0x0, {0xff0f000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_mr_cache\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x5c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x24008095}, 0x4004084) io_setup(0x8, &(0x7f0000000540)=0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_submit(r5, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x4c, r4, 0x1, 0x70bd2d, 0x4, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7}}]}, 0x4c}}, 0x4040) r6 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000140)="01154e0001000011221e445588fbca010001", 0x12, 0x4044015, &(0x7f0000000040)={0x11, 0x0, r7, 0x0, 0x0, 0x0}, 0x14) pread64(r2, &(0x7f0000000480)=""/96, 0x60, 0x7fff) 7.305162886s ago: executing program 4 (id=207): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/48, 0x30}, {&(0x7f0000000a80)=""/4088, 0xff8}, {&(0x7f0000000240)=""/117, 0x75}, {&(0x7f00000006c0)=""/227, 0xe3}, {&(0x7f0000003980)=""/4092, 0xffc}, {&(0x7f00000009c0)=""/126, 0x7e}], 0x6}, 0x20002022) 7.220736683s ago: executing program 1 (id=208): migrate_pages(0x0, 0x6fb8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) add_key(0x0, 0x0, &(0x7f00000008c0)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035594030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c6666c41653fa204279796b2a5c4789c32d74657374697e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603751d230418301621579ea780142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101", 0x184, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80000) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendto$inet6(r2, &(0x7f0000000000)="0b05", 0x2, 0x200408c4, 0x0, 0x0) 7.03667903s ago: executing program 4 (id=209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6.161858724s ago: executing program 6 (id=210): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000a000110000000000000000000500000a44000000010a010400000000000000000a000004090001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0x50}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x80000000, @vifc_lcl_addr=@remote, @loopback}, 0x10) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000120001030000000000000000000000004e22ff0f00000000000000000000e000"/56, @ANYRES32=0x0, @ANYBLOB="0000000000000000fffffff00000000004000300"], 0x50}}, 0x0) 6.016339106s ago: executing program 2 (id=211): userfaultfd(0x1) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x21e) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) ioctl$int_in(r0, 0x40000000af01, 0x0) listns(&(0x7f00000000c0)={0x20, 0x0, 0xc, 0x4000000, 0x0, 0x3}, 0x0, 0xf4240, 0x0) 5.871681361s ago: executing program 0 (id=212): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@deltfilter={0x2c, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x14}}, 0x2) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.826027034s ago: executing program 1 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x0, &(0x7f00000008c0)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x400}) 4.160591178s ago: executing program 1 (id=214): mount(&(0x7f0000000440)=@rnullb, &(0x7f0000000380)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x80002, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') mount(0x0, 0x0, &(0x7f0000000800)='rpc_pipefs\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) write$eventfd(r3, &(0x7f0000000240), 0x8) openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x207, 0x2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 3.53812384s ago: executing program 2 (id=215): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r0, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)={0x0, 0xb, 0xa9a}, 0x8) 3.496928539s ago: executing program 0 (id=216): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x368, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x186}, &(0x7f00000010c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8000, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x1, 0x0, 0x315}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 3.48371131s ago: executing program 6 (id=217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = timerfd_create(0x8, 0x800) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xfe37, 0x0) read$msr(r1, &(0x7f0000000780)=""/102400, 0x19000) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x40104d04, &(0x7f0000000900)) ptrace$pokeuser(0x6, r3, 0x358, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a00000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0x85, &(0x7f0000000140)=""/133}, 0x80) 2.996843017s ago: executing program 2 (id=218): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0xff81, @none}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r5, &(0x7f0000000100)=""/9, 0xfffffd87) 2.90872906s ago: executing program 4 (id=219): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x402000784853bb, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x1ff) 2.76674086s ago: executing program 3 (id=220): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.081953209s ago: executing program 4 (id=221): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x10, &(0x7f0000000040)=ANY=[], 0x1, 0x6c1, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1', 0x1) r4 = socket$inet6(0xa, 0x80002, 0x0) setpriority(0x1, r1, 0x5) setsockopt$sock_linger(r4, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r4, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001b000100000000000000000001010000180004"], 0x2c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x6880, 0x0) 1.023812313s ago: executing program 0 (id=222): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0x36, 0x9, 0x33fb1dc717048ae0}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) 227.546325ms ago: executing program 0 (id=223): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x368, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x186}, &(0x7f00000010c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8000, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x1, 0x0, 0x315}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 0s ago: executing program 1 (id=224): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.15' (ED25519) to the list of known hosts. [ 78.797701][ T5598] cgroup: Unknown subsys name 'net' [ 78.909769][ T5598] cgroup: Unknown subsys name 'cpuset' [ 78.918203][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.350216][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.782350][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.792535][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.800091][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.808210][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.817628][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.901170][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.912163][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.919560][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.927913][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.935589][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.989350][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.997481][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.004949][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.014367][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.023896][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.082159][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.090143][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.098568][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.106592][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.114083][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.224319][ T5637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.244115][ T4927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.251786][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.254789][ T4927] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.255565][ T4927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.256788][ T4927] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.257763][ T4927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.261726][ T4927] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.262097][ T4927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.263881][ T4927] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.062165][ T832] cfg80211: failed to load regulatory.db [ 86.866203][ T5617] Bluetooth: hci0: command tx timeout [ 87.014706][ T5617] Bluetooth: hci1: command tx timeout [ 87.036976][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.037123][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.037306][ T5616] bridge_slave_0: entered allmulticast mode [ 87.054116][ T5616] bridge_slave_0: entered promiscuous mode [ 87.094802][ T5617] Bluetooth: hci2: command tx timeout [ 87.127654][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.135469][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.143141][ T5616] bridge_slave_1: entered allmulticast mode [ 87.151567][ T5616] bridge_slave_1: entered promiscuous mode [ 87.184712][ T5617] Bluetooth: hci3: command tx timeout [ 87.282813][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.335043][ T5617] Bluetooth: hci5: command tx timeout [ 87.335061][ T4927] Bluetooth: hci4: command tx timeout [ 87.370019][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.556687][ T5616] team0: Port device team_slave_0 added [ 87.591101][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.591293][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.591485][ T5624] bridge_slave_0: entered allmulticast mode [ 87.593543][ T5624] bridge_slave_0: entered promiscuous mode [ 87.615272][ T5616] team0: Port device team_slave_1 added [ 87.676833][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.676968][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.677116][ T5624] bridge_slave_1: entered allmulticast mode [ 87.679788][ T5624] bridge_slave_1: entered promiscuous mode [ 87.710634][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.714945][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.715103][ T5620] bridge_slave_0: entered allmulticast mode [ 87.717492][ T5620] bridge_slave_0: entered promiscuous mode [ 87.772727][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.772763][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.772821][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.775571][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.775684][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.775852][ T5620] bridge_slave_1: entered allmulticast mode [ 87.779306][ T5620] bridge_slave_1: entered promiscuous mode [ 87.879885][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.879931][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.879962][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.885106][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.953800][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.968275][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.003689][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.004822][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.004967][ T5628] bridge_slave_0: entered allmulticast mode [ 88.007457][ T5628] bridge_slave_0: entered promiscuous mode [ 88.014533][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.072379][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.072579][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.072721][ T5635] bridge_slave_0: entered allmulticast mode [ 88.074855][ T5635] bridge_slave_0: entered promiscuous mode [ 88.077862][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.077971][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.078384][ T5635] bridge_slave_1: entered allmulticast mode [ 88.080601][ T5635] bridge_slave_1: entered promiscuous mode [ 88.081978][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.082103][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.082504][ T5628] bridge_slave_1: entered allmulticast mode [ 88.086603][ T5628] bridge_slave_1: entered promiscuous mode [ 88.154400][ T5620] team0: Port device team_slave_0 added [ 88.158639][ T5620] team0: Port device team_slave_1 added [ 88.173174][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.173350][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.173490][ T5636] bridge_slave_0: entered allmulticast mode [ 88.175617][ T5636] bridge_slave_0: entered promiscuous mode [ 88.222691][ T5624] team0: Port device team_slave_0 added [ 88.232214][ T5616] hsr_slave_0: entered promiscuous mode [ 88.236117][ T5616] hsr_slave_1: entered promiscuous mode [ 88.251553][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.251686][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.252179][ T5636] bridge_slave_1: entered allmulticast mode [ 88.254245][ T5636] bridge_slave_1: entered promiscuous mode [ 88.277619][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.283117][ T5624] team0: Port device team_slave_1 added [ 88.316523][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.320664][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.367422][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.367455][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.368429][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.373923][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.378088][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.422128][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.422148][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.422178][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.425904][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.425920][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.425951][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.430315][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.449308][ T5628] team0: Port device team_slave_0 added [ 88.472336][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.472356][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.472387][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.558194][ T5628] team0: Port device team_slave_1 added [ 88.597883][ T5636] team0: Port device team_slave_0 added [ 88.606970][ T5635] team0: Port device team_slave_0 added [ 88.657226][ T5636] team0: Port device team_slave_1 added [ 88.665302][ T5635] team0: Port device team_slave_1 added [ 88.679250][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.679293][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.679332][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.747631][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.747687][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.747738][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.767819][ T5620] hsr_slave_0: entered promiscuous mode [ 88.768990][ T5620] hsr_slave_1: entered promiscuous mode [ 88.769902][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 88.769976][ T5620] Cannot create hsr debugfs directory [ 88.794739][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.794760][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.794791][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.797211][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.797227][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.797257][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.934825][ T5617] Bluetooth: hci0: command tx timeout [ 88.936585][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.936617][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.936647][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.958915][ T5624] hsr_slave_0: entered promiscuous mode [ 88.960069][ T5624] hsr_slave_1: entered promiscuous mode [ 88.960991][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 88.961012][ T5624] Cannot create hsr debugfs directory [ 88.983522][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.983549][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.983580][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.023247][ T5636] hsr_slave_0: entered promiscuous mode [ 89.025365][ T5636] hsr_slave_1: entered promiscuous mode [ 89.026206][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 89.026227][ T5636] Cannot create hsr debugfs directory [ 89.094718][ T5617] Bluetooth: hci1: command tx timeout [ 89.139860][ T5628] hsr_slave_0: entered promiscuous mode [ 89.145876][ T5628] hsr_slave_1: entered promiscuous mode [ 89.146713][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 89.146735][ T5628] Cannot create hsr debugfs directory [ 89.174983][ T5617] Bluetooth: hci2: command tx timeout [ 89.257343][ T5617] Bluetooth: hci3: command tx timeout [ 89.291336][ T5635] hsr_slave_0: entered promiscuous mode [ 89.292410][ T5635] hsr_slave_1: entered promiscuous mode [ 89.293196][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 89.293217][ T5635] Cannot create hsr debugfs directory [ 89.414718][ T5617] Bluetooth: hci5: command tx timeout [ 89.414827][ T5617] Bluetooth: hci4: command tx timeout [ 89.750511][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.763920][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.765115][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.777261][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.802409][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.812480][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.815165][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.823531][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.953326][ T5620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.963412][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.964380][ T5620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.976094][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.979468][ T5620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.991633][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.000203][ T5620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.008010][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.097663][ T5624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.108313][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.119850][ T5624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.129948][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.140953][ T5624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.151567][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.152724][ T5624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.161805][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.260438][ T5628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.271865][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.287054][ T5628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.298697][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.305518][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.316792][ T5628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.321861][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.343375][ T5628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.353935][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.402204][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.454507][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.454985][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.490369][ T5636] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.500475][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.508056][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.508183][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.526450][ T5636] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.538516][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.539968][ T5636] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.551147][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.567588][ T5636] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.580577][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.592423][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.683481][ T5635] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.693566][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.697766][ T5635] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.710279][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.738328][ T5635] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.748402][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.749352][ T5635] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.762532][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.795342][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.825840][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.857119][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.857237][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.886103][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.886284][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.969373][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.977890][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.024998][ T5617] Bluetooth: hci0: command tx timeout [ 91.033390][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.033544][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.075875][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.076036][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.098290][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.149251][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.149420][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.177955][ T5617] Bluetooth: hci1: command tx timeout [ 91.201174][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.201296][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.255430][ T5617] Bluetooth: hci2: command tx timeout [ 91.258309][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.334881][ T5617] Bluetooth: hci3: command tx timeout [ 91.387832][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.451502][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.478040][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.504814][ T5617] Bluetooth: hci4: command tx timeout [ 91.504832][ T4927] Bluetooth: hci5: command tx timeout [ 91.538031][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.538159][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.554396][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.554532][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.557922][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.558034][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.604348][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.604482][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.116001][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.757393][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.009003][ T5620] veth0_vlan: entered promiscuous mode [ 93.073159][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.095249][ T4927] Bluetooth: hci0: command tx timeout [ 93.108648][ T5620] veth1_vlan: entered promiscuous mode [ 93.255506][ T4927] Bluetooth: hci1: command tx timeout [ 93.295626][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.345126][ T4927] Bluetooth: hci2: command tx timeout [ 93.356480][ T5616] veth0_vlan: entered promiscuous mode [ 93.360755][ T5620] veth0_macvtap: entered promiscuous mode [ 93.367892][ T5620] veth1_macvtap: entered promiscuous mode [ 93.398431][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.415485][ T4927] Bluetooth: hci3: command tx timeout [ 93.446436][ T5616] veth1_vlan: entered promiscuous mode [ 93.453906][ T5628] veth0_vlan: entered promiscuous mode [ 93.467791][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.484227][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.500449][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.518699][ T5628] veth1_vlan: entered promiscuous mode [ 93.576826][ T5617] Bluetooth: hci4: command tx timeout [ 93.582364][ T4927] Bluetooth: hci5: command tx timeout [ 93.726833][ T2999] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.742096][ T5628] veth0_macvtap: entered promiscuous mode [ 93.744165][ T5624] veth0_vlan: entered promiscuous mode [ 93.750721][ T5616] veth0_macvtap: entered promiscuous mode [ 93.780127][ T5616] veth1_macvtap: entered promiscuous mode [ 93.795538][ T161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.797986][ T161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.803651][ T5628] veth1_macvtap: entered promiscuous mode [ 93.828287][ T5624] veth1_vlan: entered promiscuous mode [ 93.846421][ T5635] veth0_vlan: entered promiscuous mode [ 93.888823][ T5635] veth1_vlan: entered promiscuous mode [ 93.928162][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.928238][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.958901][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.986241][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.990177][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.034427][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.034476][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.046070][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.068050][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.074877][ T3015] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.075870][ T3015] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.075917][ T3015] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.137241][ T2999] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.137349][ T2999] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.186999][ T5635] veth0_macvtap: entered promiscuous mode [ 94.203614][ T5636] veth0_vlan: entered promiscuous mode [ 94.210794][ T5620] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.212162][ T5635] veth1_macvtap: entered promiscuous mode [ 94.224913][ T3015] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.226468][ T142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.226519][ T142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.252661][ T5624] veth0_macvtap: entered promiscuous mode [ 94.285267][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.285321][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.288570][ T5624] veth1_macvtap: entered promiscuous mode [ 94.367562][ T5636] veth1_vlan: entered promiscuous mode [ 94.387533][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.652909][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.661145][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.675944][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.692274][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.781801][ T5844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.782089][ T5844] block nbd0: Unsupported socket: should be TCP or UNIX. [ 94.993377][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.002827][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.309463][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.398743][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.398797][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.482019][ T5636] veth0_macvtap: entered promiscuous mode [ 95.485503][ T142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.485554][ T142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.485598][ T142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.485640][ T142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.485683][ T142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.485724][ T142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.485766][ T142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.485809][ T142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.489396][ T939] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 95.601831][ T5636] veth1_macvtap: entered promiscuous mode [ 95.763315][ T939] usb 2-1: unable to get BOS descriptor or descriptor too short [ 95.763466][ T939] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 95.809639][ T939] usb 2-1: config 2 has an invalid interface number: 8 but max is 0 [ 95.819675][ T939] usb 2-1: config 2 has no interface number 0 [ 95.827847][ T939] usb 2-1: config 2 interface 8 has no altsetting 0 [ 95.850405][ T939] usb 2-1: string descriptor 0 read error: -22 [ 95.860588][ T939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.147114][ T939] usbtest 2-1:2.8: Linux user mode ISO test driver [ 96.154854][ T939] usbtest 2-1:2.8: low-speed {control} tests [ 96.242976][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.243036][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.254764][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.510620][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.872039][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.872081][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.881802][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.881865][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.964746][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.964783][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.055699][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.060951][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.152868][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.152906][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.319530][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.328280][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.406010][ T5860] loop3: detected capacity change from 0 to 512 [ 97.562086][ T25] usb 2-1: USB disconnect, device number 2 [ 97.620823][ T5863] Zero length message leads to an empty skb [ 98.348823][ T5867] xt_hashlimit: size too large, truncated to 1048576 [ 98.445744][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.445791][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.275287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.739930][ T5883] 9p: Bad value for 'wfdno' [ 102.904905][ T5731] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.474934][ T5731] usb 2-1: Using ep0 maxpacket: 8 [ 103.482528][ T5731] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 103.483662][ T5731] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.483691][ T5731] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.483734][ T5731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.575324][ T5731] usb 2-1: config 0 descriptor?? [ 104.377536][ T5903] 9p: Bad value for 'wfdno' [ 105.804755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.126351][ T44] Process accounting resumed [ 107.166383][ T5752] usb 2-1: USB disconnect, device number 3 [ 108.493838][ T5938] xt_hashlimit: size too large, truncated to 1048576 [ 109.701104][ T5936] loop3: detected capacity change from 0 to 1024 [ 109.746259][ T5936] EXT4-fs (loop3): invalid inodes per group: 150994976 [ 110.166083][ T5752] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.476737][ T5752] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 110.480422][ T5752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 110.480459][ T5752] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.480506][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.510345][ T5752] usb 4-1: config 0 descriptor?? [ 110.763175][ T5936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.773311][ T5936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.832026][ T5936] loop3: detected capacity change from 0 to 256 [ 112.438206][ T5960] loop5: detected capacity change from 0 to 512 [ 113.484847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 113.895090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 114.082174][ T30] audit: type=1800 audit(1788443903.536:2): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.30" name="bus" dev="ramfs" ino=9523 res=0 errno=0 [ 114.384811][ T5752] usbhid 4-1:0.0: can't add hid device: -71 [ 114.384944][ T5752] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 114.390129][ T5752] usb 4-1: USB disconnect, device number 2 [ 117.168919][ T44] Process accounting resumed [ 119.169310][ T5992] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 119.169359][ T5992] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 119.177264][ T5992] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 119.177287][ T5992] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 120.755105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 121.575135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 123.724983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.135024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 126.695160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 127.736396][ T6026] xt_hashlimit: size too large, truncated to 1048576 [ 129.440439][ T44] Process accounting resumed [ 131.183043][ T5617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 131.194317][ T5617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 131.204531][ T5617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 131.218428][ T5617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 131.316259][ T5617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 132.841630][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.841744][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.563378][ T5617] Bluetooth: hci6: command tx timeout [ 135.574749][ T5617] Bluetooth: hci6: command tx timeout [ 136.459257][ T3015] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.750022][ T3015] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.796252][ T44] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 136.907607][ T3015] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.961195][ T44] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 136.973660][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.973747][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.727537][ T5617] Bluetooth: hci6: command tx timeout [ 138.011336][ T3015] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.319098][ T6070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.319563][ T6070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.380690][ T9] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 138.380747][ T9] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 138.380792][ T9] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 138.380824][ T9] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 138.380855][ T9] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 138.380886][ T9] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 138.380917][ T9] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 138.380948][ T9] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 138.476213][ T9] hid-generic 0000:0000:0001.0001: hidraw0: HID v0.10 Device [syz0] on syz1 [ 138.545312][ T44] usbhid 4-1:1.0: can't add hid device: -71 [ 138.545469][ T44] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 138.620383][ T44] usb 4-1: USB disconnect, device number 3 [ 138.850240][ T6084] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 138.858346][ T6084] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 138.868420][ T6084] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 138.871204][ T6084] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 138.916295][ T6082] fido_id[6082]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 139.260645][ T3015] bridge_slave_1: left allmulticast mode [ 139.260726][ T3015] bridge_slave_1: left promiscuous mode [ 139.262722][ T3015] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.332761][ T3015] bridge_slave_0: left allmulticast mode [ 139.337602][ T3015] bridge_slave_0: left promiscuous mode [ 139.337851][ T3015] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.552832][ T30] audit: type=1800 audit(1788443929.006:3): pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.55" name="bus" dev="ramfs" ino=9681 res=0 errno=0 [ 139.815820][ T5617] Bluetooth: hci6: command tx timeout [ 140.055073][ T5752] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 140.399121][ T5752] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 140.446231][ T5752] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.446310][ T5752] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.446384][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.397051][ T5752] wacom 0003:056A:033B.0002: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 141.421265][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.71'. [ 141.422041][ T6109] block nbd0: Unsupported socket: should be TCP or UNIX. [ 141.457332][ T5752] wacom 0003:056A:033B.0002: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 141.504219][ T5752] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.0002/input/input5 [ 141.680726][ T5752] usb 4-1: USB disconnect, device number 4 [ 141.695268][ T5773] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 141.857669][ T6110] fido_id[6110]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 141.861227][ T5773] usb 5-1: unable to get BOS descriptor or descriptor too short [ 141.861277][ T5773] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 141.877235][ T5773] usb 5-1: config 2 has an invalid interface number: 8 but max is 0 [ 141.877262][ T5773] usb 5-1: config 2 has no interface number 0 [ 141.877294][ T5773] usb 5-1: config 2 interface 8 has no altsetting 0 [ 141.883940][ T5773] usb 5-1: string descriptor 0 read error: -22 [ 141.884080][ T5773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.012319][ T5773] usbtest 5-1:2.8: Linux user mode ISO test driver [ 142.012371][ T5773] usbtest 5-1:2.8: low-speed {control} tests [ 142.355727][ T3015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.396172][ T3015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.422633][ T3015] bond0 (unregistering): Released all slaves [ 144.853241][ T5730] usb 5-1: USB disconnect, device number 2 [ 146.380665][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 146.993635][ T10] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 146.993695][ T10] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 146.996603][ T10] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 146.996629][ T10] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 146.996660][ T10] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 146.996683][ T10] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 146.996706][ T10] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 146.996729][ T10] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 149.734948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 150.462203][ T10] hid-generic 0000:0000:0001.0003: hidraw0: HID v0.10 Device [syz0] on syz1 [ 151.637224][ T3015] hsr_slave_0: left promiscuous mode [ 151.646096][ T3015] hsr_slave_1: left promiscuous mode [ 151.647214][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.647281][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.672300][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.688711][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.847688][ T3015] veth1_macvtap: left promiscuous mode [ 151.847773][ T3015] veth0_macvtap: left promiscuous mode [ 151.848014][ T3015] veth1_vlan: left promiscuous mode [ 151.848271][ T3015] veth0_vlan: left promiscuous mode [ 151.865240][ T6171] fido_id[6171]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 154.289501][ T3015] team0 (unregistering): Port device team_slave_1 removed [ 155.062661][ T3015] team0 (unregistering): Port device team_slave_0 removed [ 156.816647][ T5730] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 156.897676][ T44] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 156.995407][ T5730] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 157.007323][ T5730] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.018595][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.055453][ T44] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 157.066816][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.078119][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.088971][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.150823][ T5730] usb 2-1: can't set config #1, error -71 [ 157.187273][ T5730] usb 2-1: USB disconnect, device number 4 [ 157.343346][ T6226] netlink: 60 bytes leftover after parsing attributes in process `syz.1.97'. [ 157.454097][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 157.474338][ T6227] netlink: 60 bytes leftover after parsing attributes in process `syz.1.97'. [ 157.560156][ T44] wacom 0003:056A:033B.0004: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 157.591258][ T44] wacom 0003:056A:033B.0004: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 157.636334][ T44] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.0004/input/input8 [ 157.738837][ T44] usb 4-1: USB disconnect, device number 5 [ 157.935957][ T5731] Process accounting resumed [ 159.445804][ T6236] fido_id[6236]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 159.502912][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.513424][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.522128][ T6035] bridge_slave_0: entered allmulticast mode [ 159.599388][ T6035] bridge_slave_0: entered promiscuous mode [ 159.626507][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.648266][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.648479][ T6035] bridge_slave_1: entered allmulticast mode [ 159.679162][ T6035] bridge_slave_1: entered promiscuous mode [ 159.978324][ T6035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.004074][ T6035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.450579][ T6035] team0: Port device team_slave_0 added [ 161.489022][ T6035] team0: Port device team_slave_1 added [ 162.706023][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.706069][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.706119][ T6035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.780054][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.798970][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.799044][ T6035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.311411][ T6035] hsr_slave_0: entered promiscuous mode [ 163.317748][ T6035] hsr_slave_1: entered promiscuous mode [ 163.322790][ T6035] debugfs: 'hsr0' already exists in 'hsr' [ 163.322836][ T6035] Cannot create hsr debugfs directory [ 165.793558][ T6303] loop3: detected capacity change from 0 to 256 [ 165.887424][ T6035] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 165.898208][ T6303] vfat: Unknown parameter 'iocha~—YÒëZÊürset' [ 166.266300][ T6303] zram0: detected capacity change from 0 to 20480 [ 166.421297][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.433142][ T6035] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 166.511143][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 166.513940][ T6035] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 167.008900][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.024077][ T6035] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 167.050418][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.059485][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 167.194181][ T6320] binder: 6318:6320 ioctl c0306201 0 returned -14 [ 167.366912][ T6323] jffs2: notice: (6323) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 167.556428][ T6331] bridge0: port 3(syz_tun) entered blocking state [ 167.563781][ T6331] bridge0: port 3(syz_tun) entered disabled state [ 167.573394][ T6331] syz_tun: entered allmulticast mode [ 167.601536][ T6331] syz_tun: entered promiscuous mode [ 167.611931][ T6331] bridge0: port 3(syz_tun) entered blocking state [ 167.612132][ T6331] bridge0: port 3(syz_tun) entered forwarding state [ 167.640809][ T6333] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 167.655176][ T5731] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 167.738685][ T6035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.805358][ T5731] usb 3-1: Using ep0 maxpacket: 32 [ 167.807708][ T5731] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 167.811111][ T5731] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 167.811139][ T5731] usb 3-1: config 0 has no interface number 0 [ 167.811182][ T5731] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.811213][ T5731] usb 3-1: config 0 interface 85 has no altsetting 0 [ 167.826319][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.826349][ T5731] usb 3-1: Product: syz [ 167.826367][ T5731] usb 3-1: Manufacturer: syz [ 167.826384][ T5731] usb 3-1: SerialNumber: syz [ 167.891034][ T6035] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.903517][ T5731] usb 3-1: config 0 descriptor?? [ 167.959128][ T6139] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.959286][ T6139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.061807][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.061955][ T6139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.702394][ T5731] appletouch 3-1:0.85: Failed to request geyser raw mode [ 168.710042][ T5731] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 169.156268][ T5731] usb 3-1: USB disconnect, device number 2 [ 171.266875][ T6367] loop1: detected capacity change from 0 to 256 [ 171.278997][ T6367] vfat: Unknown parameter 'iocha~—YÒëZÊürset' [ 171.519703][ T6367] zram: Cannot change disksize for initialized device [ 173.084682][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 173.235508][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 173.246321][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.246391][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.620572][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 174.090946][ T6401] jffs2: notice: (6401) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 174.134828][ T10] usbhid 1-1:1.0: can't add hid device: -71 [ 174.141054][ T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 174.158023][ T10] usb 1-1: USB disconnect, device number 2 [ 174.256525][ T6035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.562782][ T6416] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 176.466247][ T30] audit: type=1800 audit(1788443964.913:4): pid=6391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.132" name="bus" dev="ramfs" ino=11055 res=0 errno=0 [ 177.187317][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 177.286530][ T6035] veth0_vlan: entered promiscuous mode [ 177.465382][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 177.479741][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 177.491879][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 177.502204][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 177.518471][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.203005][ T10] usb 4-1: Product: syz [ 178.203065][ T10] usb 4-1: Manufacturer: syz [ 178.203090][ T10] usb 4-1: SerialNumber: syz [ 178.218682][ T10] usb 4-1: config 0 descriptor?? [ 178.264522][ T6035] veth1_vlan: entered promiscuous mode [ 178.395162][ T6035] veth0_macvtap: entered promiscuous mode [ 178.423041][ T6035] veth1_macvtap: entered promiscuous mode [ 178.490146][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.533141][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.560560][ T10] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 178.605586][ T6126] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.606253][ T6126] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.606301][ T6126] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.630237][ T6453] 9p: Bad value for 'wfdno' [ 178.639689][ T6126] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.780810][ T6126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.780887][ T6126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.804492][ T10] usb 4-1: USB disconnect, device number 6 [ 178.882266][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.882317][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.514649][ T5730] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 180.844962][ T5738] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 181.343578][ T5730] usb 3-1: not running at top speed; connect to a high speed hub [ 181.343663][ T5730] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 181.409485][ T5738] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 181.510435][ T30] audit: type=1800 audit(1788443969.973:5): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.142" name="bus" dev="ramfs" ino=11123 res=0 errno=0 [ 181.645281][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.645336][ T5730] usb 3-1: Product: syz [ 181.645373][ T5730] usb 3-1: Manufacturer: syz [ 181.645397][ T5730] usb 3-1: SerialNumber: syz [ 181.830695][ T5738] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.830784][ T5738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.001777][ T5730] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 182.044933][ T5730] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 182.076827][ T5730] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 182.088321][ T5730] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 182.102739][ T5730] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 182.367403][ C1] usb 3-1: malformed indat packet [ 182.367678][ C1] usb 3-1: malformed indat packet [ 182.367952][ C1] usb 3-1: malformed indat packet [ 182.368203][ C1] usb 3-1: malformed indat packet [ 182.368463][ C1] usb 3-1: malformed indat packet [ 182.368707][ C1] usb 3-1: malformed indat packet [ 182.368972][ C1] usb 3-1: malformed indat packet [ 182.426400][ T6490] netlink: 'syz.3.154': attribute type 16 has an invalid length. [ 182.434304][ T6490] netlink: 'syz.3.154': attribute type 17 has an invalid length. [ 182.869784][ T44] usb 3-1: USB disconnect, device number 3 [ 183.002848][ T5738] usbhid 2-1:1.0: can't add hid device: -71 [ 183.003046][ T5738] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 183.417079][ T5738] usb 2-1: USB disconnect, device number 5 [ 183.645841][ T44] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 183.709963][ T44] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 183.747256][ T44] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 183.773604][ T44] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 183.784951][ T44] keyspan 3-1:1.0: device disconnected [ 190.714996][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 190.776317][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 190.948222][ T6554] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 190.966675][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 190.981007][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.992118][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.353386][ T10] usbhid 4-1:1.0: can't add hid device: -71 [ 193.360950][ T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 193.373314][ T10] usb 4-1: USB disconnect, device number 7 [ 193.576424][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.769595][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.829606][ T30] audit: type=1800 audit(1788443982.293:6): pid=6549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.170" name="bus" dev="ramfs" ino=11695 res=0 errno=0 [ 196.116431][ T44] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 196.279739][ T6593] ======================================================= [ 196.279739][ T6593] WARNING: The mand mount option has been deprecated and [ 196.279739][ T6593] and is ignored by this kernel. Remove the mand [ 196.279739][ T6593] option from the mount to silence this warning. [ 196.279739][ T6593] ======================================================= [ 196.342195][ T44] usb 5-1: not running at top speed; connect to a high speed hub [ 196.342265][ T44] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 196.397598][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.397654][ T44] usb 5-1: Product: syz [ 196.397703][ T44] usb 5-1: Manufacturer: syz [ 196.397728][ T44] usb 5-1: SerialNumber: syz [ 196.479817][ T44] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 196.507216][ T44] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 196.524790][ T44] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 196.585304][ T44] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 196.616168][ T44] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 196.669190][ C1] usb 5-1: malformed indat packet [ 196.669630][ C1] usb 5-1: malformed indat packet [ 196.669899][ C1] usb 5-1: malformed indat packet [ 196.670163][ C1] usb 5-1: malformed indat packet [ 196.670422][ C1] usb 5-1: malformed indat packet [ 196.670687][ C1] usb 5-1: malformed indat packet [ 196.670966][ C1] usb 5-1: malformed indat packet [ 198.568388][ T5730] usb 5-1: USB disconnect, device number 3 [ 198.636312][ T44] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 198.646079][ T5730] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 198.676116][ T5730] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 198.705095][ T5730] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 198.726382][ T5730] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 198.741709][ T5730] keyspan 5-1:1.0: device disconnected [ 198.795637][ T44] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 198.809158][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 198.824724][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 198.824759][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 198.848862][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.857172][ T44] usb 7-1: Product: syz [ 198.857198][ T44] usb 7-1: Manufacturer: syz [ 198.857216][ T44] usb 7-1: SerialNumber: syz [ 198.882071][ T44] usb 7-1: config 0 descriptor?? [ 199.200004][ T44] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 199.337437][ T44] usb 7-1: USB disconnect, device number 2 [ 201.080052][ T6627] futex_wake_op: syz.0.190 tries to shift op by 144; fix this program [ 202.536149][ T6645] MTRR 1 not used [ 203.014715][ T5752] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 204.174231][ T5752] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 204.193493][ T5752] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.193566][ T5752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.026641][ T5752] wacom 0003:056A:033B.0005: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 205.082529][ T5752] wacom 0003:056A:033B.0005: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 205.106982][ T5752] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0005/input/input12 [ 205.190782][ T6649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.222281][ T6649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.251982][ T6666] 9pnet_fd: Insufficient options for proto=fd [ 205.524055][ T5738] usb 1-1: USB disconnect, device number 3 [ 205.659765][ T6667] fido_id[6667]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 206.010792][ T6669] loop2: detected capacity change from 0 to 1024 [ 206.027213][ T6669] EXT4-fs (loop2): invalid inodes per group: 150994976 [ 206.424747][ T5773] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 206.658891][ T5773] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 206.718937][ T5773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 206.719025][ T5773] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.744432][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.191376][ T5773] usb 3-1: config 0 descriptor?? [ 207.962414][ T6669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.026521][ T6669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.083332][ T6669] loop2: detected capacity change from 0 to 256 [ 208.254064][ T5773] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 208.264403][ T5773] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 208.272116][ T5773] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 208.279559][ T5773] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 208.287185][ T5773] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 208.295174][ T5773] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 208.307660][ T5773] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x3 [ 208.307718][ T5773] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x6 [ 208.307752][ T5773] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x6 [ 208.307791][ T5773] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x6 [ 208.307831][ T5773] kovaplus 0003:1E7D:2D50.0006: item fetching failed at offset 62/235 [ 208.308532][ T5773] kovaplus 0003:1E7D:2D50.0006: parse failed [ 208.308616][ T5773] kovaplus 0003:1E7D:2D50.0006: probe with driver kovaplus failed with error -22 [ 208.382311][ T6685] warning: `syz.6.204' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 208.492096][ T5738] usb 3-1: USB disconnect, device number 4 [ 209.506283][ T6707] lo: entered allmulticast mode [ 209.688843][ T6703] netlink: 36 bytes leftover after parsing attributes in process `syz.6.210'. [ 211.186269][ T6701] Bluetooth: hci2: command 0x0406 tx timeout [ 211.186404][ T6701] Bluetooth: hci0: command 0x0406 tx timeout [ 211.186478][ T6701] Bluetooth: hci3: command 0x0406 tx timeout [ 211.717250][ T6700] Bluetooth: hci4: command 0x0406 tx timeout [ 211.717379][ T6700] Bluetooth: hci1: command 0x0406 tx timeout [ 212.301918][ T6737] MTRR 1 not used [ 214.873461][ T6757] loop4: detected capacity change from 0 to 1024 [ 214.941962][ T6757] hfsplus: failed to load extents file [ 215.424654][ T2999] ------------[ cut here ]------------ [ 215.424696][ T2999] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 215.424729][ T2999] WARNING: net/mac80211/driver-ops.h:1723 at ieee80211_set_active_links+0x4a0/0x8a0, CPU#1: kworker/u8:8/2999 [ 215.449032][ T2999] Modules linked in: [ 215.454111][ T2999] CPU: 1 UID: 0 PID: 2999 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 215.463636][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 215.473746][ T2999] Workqueue: events_unbound cfg80211_wiphy_work [ 215.481414][ T2999] RIP: 0010:ieee80211_set_active_links+0x4ec/0x8a0 [ 215.488994][ T2999] Code: 01 00 00 48 85 c0 49 8d 87 c8 ec ff ff 4c 0f 44 e8 41 0f b6 04 1e 84 c0 0f 85 2d 01 00 00 41 8b 14 24 48 8b 7c 24 10 4c 89 ee <67> 48 0f b9 3a e9 20 fd ff ff e8 e5 a5 72 f6 90 0f 0b 90 e9 87 fd [ 215.508930][ T2999] RSP: 0018:ffffc9000e22f928 EFLAGS: 00010246 [ 215.515202][ T2999] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888031fcddc0 [ 215.523234][ T2999] RDX: 0000000000000000 RSI: ffff8881436ec120 RDI: ffffffff908c0fd0 [ 215.531348][ T2999] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000002 [ 215.539739][ T2999] R10: 0000000000000010 R11: 0000000000000000 R12: ffff8881436ed928 [ 215.547810][ T2999] R13: ffff8881436ec120 R14: 1ffff110286ddb25 R15: ffff8881436eec70 [ 215.556049][ T2999] FS: 0000000000000000(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 215.565067][ T2999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.571668][ T2999] CR2: 0000555578c60a38 CR3: 0000000076035000 CR4: 0000000000350ef0 [ 215.580575][ T2999] Call Trace: [ 215.583848][ T2999] [ 215.587384][ T2999] ieee80211_if_parse_active_links+0xe5/0x150 [ 215.593471][ T2999] ? __pfx_ieee80211_if_parse_active_links+0x10/0x10 [ 215.600338][ T2999] ? do_raw_spin_lock+0x12b/0x2f0 [ 215.605445][ T2999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.611113][ T2999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.616815][ T2999] wiphy_locked_debugfs_write_work+0xdd/0x120 [ 215.622916][ T2999] ? __pfx_ieee80211_if_write_sdata_handler+0x10/0x10 [ 215.629830][ T2999] cfg80211_wiphy_work+0x29e/0x420 [ 215.635009][ T2999] ? process_scheduled_works+0x97a/0x1630 [ 215.640754][ T2999] process_scheduled_works+0xc3d/0x1630 [ 215.646348][ T2999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.652003][ T2999] ? __pfx_process_scheduled_works+0x10/0x10 [ 215.658042][ T2999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.663692][ T2999] ? assign_work+0x3cf/0x5d0 [ 215.668347][ T2999] worker_thread+0xa47/0xfb0 [ 215.672987][ T2999] kthread+0x38b/0x480 [ 215.677127][ T2999] ? __pfx_worker_thread+0x10/0x10 [ 215.683343][ T2999] ? __pfx_kthread+0x10/0x10 [ 215.688587][ T2999] ret_from_fork+0x514/0xb70 [ 215.693185][ T2999] ? __pfx_ret_from_fork+0x10/0x10 [ 215.698368][ T2999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.703996][ T2999] ? __switch_to+0xc89/0x1420 [ 215.708721][ T2999] ? __pfx_kthread+0x10/0x10 [ 215.713304][ T2999] ret_from_fork_asm+0x1a/0x30 [ 215.718170][ T2999] [ 215.721203][ T2999] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 215.728479][ T2999] CPU: 1 UID: 0 PID: 2999 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 215.737937][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 215.747988][ T2999] Workqueue: events_unbound cfg80211_wiphy_work [ 215.754233][ T2999] Call Trace: [ 215.757501][ T2999] [ 215.760416][ T2999] vpanic+0x56d/0xa60 [ 215.764398][ T2999] ? __pfx__printk+0x10/0x10 [ 215.768979][ T2999] ? __pfx_vpanic+0x10/0x10 [ 215.773477][ T2999] ? is_bpf_text_address+0x292/0x2b0 [ 215.778766][ T2999] ? is_bpf_text_address+0x26/0x2b0 [ 215.783970][ T2999] panic+0xc5/0xd0 [ 215.787691][ T2999] ? __pfx_panic+0x10/0x10 [ 215.792110][ T2999] ? ret_from_fork_asm+0x1a/0x30 [ 215.797064][ T2999] __warn+0x315/0x4c0 [ 215.801043][ T2999] ? ieee80211_set_active_links+0x4a0/0x8a0 [ 215.806929][ T2999] ? ieee80211_set_active_links+0x4a0/0x8a0 [ 215.812813][ T2999] __report_bug+0x276/0x570 [ 215.817340][ T2999] ? ieee80211_set_active_links+0x4a0/0x8a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 215.823235][ T2999] ? __pfx___report_bug+0x10/0x10 [ 215.828275][ T2999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.833909][ T2999] ? ieee80211_set_active_links+0x4f1/0x8a0 [ 215.839804][ T2999] report_bug_entry+0x19b/0x290 [ 215.844652][ T2999] ? ieee80211_set_active_links+0x4ec/0x8a0 [ 215.850533][ T2999] ? ieee80211_set_active_links+0x4f1/0x8a0 [ 215.856415][ T2999] handle_bug+0xce/0x200 [ 215.860647][ T2999] exc_invalid_op+0x1a/0x50 [ 215.865134][ T2999] asm_exc_invalid_op+0x1a/0x20 [ 215.869970][ T2999] RIP: 0010:ieee80211_set_active_links+0x4ec/0x8a0 [ 215.876466][ T2999] Code: 01 00 00 48 85 c0 49 8d 87 c8 ec ff ff 4c 0f 44 e8 41 0f b6 04 1e 84 c0 0f 85 2d 01 00 00 41 8b 14 24 48 8b 7c 24 10 4c 89 ee <67> 48 0f b9 3a e9 20 fd ff ff e8 e5 a5 72 f6 90 0f 0b 90 e9 87 fd [ 215.896066][ T2999] RSP: 0018:ffffc9000e22f928 EFLAGS: 00010246 [ 215.902125][ T2999] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888031fcddc0 [ 215.910104][ T2999] RDX: 0000000000000000 RSI: ffff8881436ec120 RDI: ffffffff908c0fd0 [ 215.918065][ T2999] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000002 [ 215.926040][ T2999] R10: 0000000000000010 R11: 0000000000000000 R12: ffff8881436ed928 [ 215.934024][ T2999] R13: ffff8881436ec120 R14: 1ffff110286ddb25 R15: ffff8881436eec70 [ 215.942003][ T2999] ? ieee80211_set_active_links+0x492/0x8a0 [ 215.947925][ T2999] ieee80211_if_parse_active_links+0xe5/0x150 [ 215.953996][ T2999] ? __pfx_ieee80211_if_parse_active_links+0x10/0x10 [ 215.960679][ T2999] ? do_raw_spin_lock+0x12b/0x2f0 [ 215.965726][ T2999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.971358][ T2999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.976993][ T2999] wiphy_locked_debugfs_write_work+0xdd/0x120 [ 215.983065][ T2999] ? __pfx_ieee80211_if_write_sdata_handler+0x10/0x10 [ 215.989835][ T2999] cfg80211_wiphy_work+0x29e/0x420 [ 215.994946][ T2999] ? process_scheduled_works+0x97a/0x1630 [ 216.000661][ T2999] process_scheduled_works+0xc3d/0x1630 [ 216.006203][ T2999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.011849][ T2999] ? __pfx_process_scheduled_works+0x10/0x10 [ 216.017834][ T2999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.023472][ T2999] ? assign_work+0x3cf/0x5d0 [ 216.028069][ T2999] worker_thread+0xa47/0xfb0 [ 216.032696][ T2999] kthread+0x38b/0x480 [ 216.036754][ T2999] ? __pfx_worker_thread+0x10/0x10 [ 216.041855][ T2999] ? __pfx_kthread+0x10/0x10 [ 216.046432][ T2999] ret_from_fork+0x514/0xb70 [ 216.051017][ T2999] ? __pfx_ret_from_fork+0x10/0x10 [ 216.056123][ T2999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.061744][ T2999] ? __switch_to+0xc89/0x1420 [ 216.066420][ T2999] ? __pfx_kthread+0x10/0x10 [ 216.071003][ T2999] ret_from_fork_asm+0x1a/0x30 [ 216.075790][ T2999] [ 216.079053][ T2999] Kernel Offset: disabled [ 216.083364][ T2999] Rebooting in 86400 seconds..