last executing test programs: 8m22.563603946s ago: executing program 32 (id=72): r0 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 8m19.042020404s ago: executing program 1 (id=80): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000006100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$xdp(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0x0, 0x0}, 0x10) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') 8m17.203565484s ago: executing program 1 (id=83): r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x210100, 0x0) syz_open_pts(r0, 0x81) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'lo\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0xffffffff, "5e5c3446aa0ecd604c893eba3198600b1891109654fe9676d14574be70b6225c"}) 8m16.961849329s ago: executing program 33 (id=83): r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x210100, 0x0) syz_open_pts(r0, 0x81) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'lo\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0xffffffff, "5e5c3446aa0ecd604c893eba3198600b1891109654fe9676d14574be70b6225c"}) 8m8.406877851s ago: executing program 34 (id=96): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 5m7.327974989s ago: executing program 35 (id=306): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) openat$ocfs2_control(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex, 0x13, 0x1, 0xf, &(0x7f0000000440)=[0x0], 0x1, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x18, 0x54, 0x1, 0x70bd29, 0x2, {0x7, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc01c5869, &(0x7f0000000780)={r1, &(0x7f0000000680)='tls', 0x201, &(0x7f00000006c0)={@align, {0x100, 0x2, 0x8, 0xffffffffffffff00}}, 0x7, &(0x7f0000000700), &(0x7f0000000740)=0x2f7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r4, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r6}) 4m51.794871365s ago: executing program 36 (id=326): socket$netlink(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, 0x0, 0x0) 4m46.186678574s ago: executing program 37 (id=334): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x4, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0xa8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) ftruncate(0xffffffffffffffff, 0x80079a0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0xa, 0x0, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010100, @in6=@local, 0x18, 0x14, 0x2}]}, 0x38}, 0x1, 0x7}, 0x20040000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x38, 0x17, 0xa, 0xa04, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HOOK={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040010}, 0x800) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x3}, 0x14}}, 0x0) 4m27.420450986s ago: executing program 38 (id=341): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x78, &(0x7f00000023c0)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4623, 0xff, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7f}, @in6={0xa, 0x4e24, 0x3, @mcast1, 0xc}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r7 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r9, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x401}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x8, 0x2, 0x7fffffff, 0x84e1, 0x2f, 0x2006, 0x6, 0x8, 0x80ffa, 0x0, 0x0, 0x101, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x8efd, 0x0, 0x4, 0x800, 0xbc, 0x1, 0x67, 0x401, r6}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r11, 0x0, 0x100000000000000}, 0x38) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000000c0)=0x1, 0x4) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) ptrace$pokeuser(0x6, r12, 0x118, 0x137db) ptrace$pokeuser(0x6, r12, 0xfc, 0x6000003f) 3m36.465718114s ago: executing program 3 (id=403): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) listen(r0, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) r5 = open(&(0x7f0000000140)='./file1\x00', 0x145142, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) 3m36.257217759s ago: executing program 3 (id=404): mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000140)={0x0, 0x2, 0x1, 0x7f1}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x1) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x2) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x28000000) recvmmsg$unix(r5, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 3m34.839664225s ago: executing program 39 (id=405): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4060}, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) close_range(r2, 0xffffffffffffffff, 0x3f00000000000000) 3m34.777509311s ago: executing program 3 (id=407): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) close_range(r0, r0, 0x0) 3m34.668109657s ago: executing program 3 (id=408): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x800804, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3m34.463965871s ago: executing program 3 (id=410): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) close(r1) close(0xffffffffffffffff) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 3m30.995826145s ago: executing program 3 (id=414): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex, 0x13, 0x1, 0xf, &(0x7f0000000440)=[0x0], 0x1, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x18, 0x54, 0x1, 0x70bd29, 0x2, {0x7, r5}}, 0x18}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000780)={r2, &(0x7f0000000680)='tls', 0x201, &(0x7f00000006c0)={@align, {0x100, 0x2, 0x8, 0xffffffffffffff00}}, 0x7, &(0x7f0000000700), &(0x7f0000000740)=0x2f7}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@ifindex=r5, r3, 0xfe12bcd38ec9e455, 0x4, 0x0, @void, @value=r6, @void, @void, r4}, 0x20) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000004c0)={r7, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) 3m30.082742104s ago: executing program 40 (id=414): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex, 0x13, 0x1, 0xf, &(0x7f0000000440)=[0x0], 0x1, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x18, 0x54, 0x1, 0x70bd29, 0x2, {0x7, r5}}, 0x18}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000780)={r2, &(0x7f0000000680)='tls', 0x201, &(0x7f00000006c0)={@align, {0x100, 0x2, 0x8, 0xffffffffffffff00}}, 0x7, &(0x7f0000000700), &(0x7f0000000740)=0x2f7}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@ifindex=r5, r3, 0xfe12bcd38ec9e455, 0x4, 0x0, @void, @value=r6, @void, @void, r4}, 0x20) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000004c0)={r7, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) 3m17.285212002s ago: executing program 7 (id=499): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000280)={0x8, 0x7}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000100)={[{@usrquota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x9, 0xffffffffffffffff, r3) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000002, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000140)=0xff, r7, 0x0, 0x3, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3ff}, r7}}, 0x30) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(r4, 0xe) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x40000) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) 3m14.684991959s ago: executing program 7 (id=561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x54, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000300)={@any, 0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES8=r3], 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r6 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) pread64(r6, 0x0, 0x0, 0x1) 3m12.883881978s ago: executing program 7 (id=586): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000280)={0x8, 0x7}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000100)={[{@usrquota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]}) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x9, 0xffffffffffffffff, r3) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000002, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000140)=0xff, r7, 0x0, 0x3, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3ff}, r7}}, 0x30) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(r4, 0xe) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x40000) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) 3m11.954299001s ago: executing program 7 (id=603): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x800804, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3m11.890550012s ago: executing program 7 (id=605): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r0, &(0x7f0000006800)="10", 0x1) 3m8.442666915s ago: executing program 7 (id=690): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10000001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001"], 0xd0}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000031}, 0x4018000) 3m8.098821961s ago: executing program 41 (id=690): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10000001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001"], 0xd0}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000031}, 0x4018000) 2m52.048824015s ago: executing program 1 (id=342): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@multicast, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x800}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, &(0x7f0000000340)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 2m51.729710899s ago: executing program 1 (id=1020): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x800804, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2m51.368810367s ago: executing program 1 (id=1023): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = open(&(0x7f0000000140)='./file1\x00', 0x145142, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 2m50.371543321s ago: executing program 1 (id=1033): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000100)={0x3, 0x100, 0x94c0, 0x3e8685ed, 0x800, 0x6}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) r4 = syz_io_uring_setup(0x2c34, &(0x7f0000000240)={0x0, 0x59c4, 0x80, 0x1000, 0x9}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x9, 0x12) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000640)) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0xfc, 0x137db) ptrace$pokeuser(0x6, r9, 0xfc, 0x6000003f) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x804}, 0x8800) 2m49.673357838s ago: executing program 42 (id=1033): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000100)={0x3, 0x100, 0x94c0, 0x3e8685ed, 0x800, 0x6}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) r4 = syz_io_uring_setup(0x2c34, &(0x7f0000000240)={0x0, 0x59c4, 0x80, 0x1000, 0x9}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x9, 0x12) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000640)) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0xfc, 0x137db) ptrace$pokeuser(0x6, r9, 0xfc, 0x6000003f) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x804}, 0x8800) 2m45.12211665s ago: executing program 2 (id=1080): r0 = syz_open_dev$video(0x0, 0x3, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_DISEQC_SEND_MASTER_CMD(r2, 0x40076f3f, &(0x7f0000000040)={'\x00', 0xfffffffffffffe09}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000e7000000000000000000000018110000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bind$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x3c, 0x40, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x100000001, 0x202001) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x20}}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) 2m42.025331384s ago: executing program 2 (id=1110): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000280)={0x8, 0x7}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000100)={[{@usrquota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]}) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x9, 0xffffffffffffffff, r3) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000002, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000140)=0xff, r7, 0x0, 0x3, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3ff}, r7}}, 0x30) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(r4, 0xe) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x40000) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) 2m40.965967241s ago: executing program 2 (id=1114): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = open(&(0x7f0000000140)='./file1\x00', 0x145142, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 2m40.749676756s ago: executing program 2 (id=1117): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x800804, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2m40.373959471s ago: executing program 2 (id=1121): socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_setup(0x3, &(0x7f0000000180)=0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)=0x0) ioprio_get$pid(0x2, r5) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x6}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003040)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffe0, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) io_submit(r4, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x295442, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 2m39.428130285s ago: executing program 2 (id=1126): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10000001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001"], 0xd0}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) socket$nl_generic(0x10, 0x3, 0x10) 2m38.448631618s ago: executing program 43 (id=1126): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10000001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001"], 0xd0}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) socket$nl_generic(0x10, 0x3, 0x10) 2m36.584283016s ago: executing program 0 (id=1140): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000100)={0x3, 0x100, 0x94c0, 0x3e8685ed, 0x800, 0x6}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) r4 = syz_io_uring_setup(0x2c34, &(0x7f0000000240)={0x0, 0x59c4, 0x80, 0x1000, 0x9}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x9, 0x12) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000640)) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0xfc, 0x137db) ptrace$pokeuser(0x6, r9, 0xfc, 0x6000003f) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x804}, 0x8800) 2m34.978294116s ago: executing program 0 (id=1146): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000340)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x4, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0xa8) syz_usb_connect(0x1, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) ftruncate(0xffffffffffffffff, 0x80079a0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0xa, 0x0, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010100, @in6=@local, 0x18, 0x14, 0x2}]}, 0x38}, 0x1, 0x7}, 0x20040000) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x38, 0x17, 0xa, 0xa04, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HOOK={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040010}, 0x800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x3}, 0x14}}, 0x0) 2m30.573977944s ago: executing program 0 (id=1166): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = open(&(0x7f0000000140)='./file1\x00', 0x145142, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 2m30.498093065s ago: executing program 0 (id=1168): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x800804, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2m30.368016254s ago: executing program 0 (id=1169): quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0xffffffffffffffcc) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4060}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ff0003fff600005c9c80cf000000000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000bf91000000000000b70200008698aa308500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x80, &(0x7f00000006c0)=""/128, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x4000000, 0x0, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x3, 0x2, 0xa, 0x1}, {0x4, 0x4, 0x6, 0x7}, {0x5, 0x3, 0x7, 0xb}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0x100}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) 2m29.251227372s ago: executing program 0 (id=1189): syz_open_dev$usbfs(0x0, 0x77, 0x101000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65f, 0x0, 0x9, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r1, 0x4b04, 0xb277, 0x0, 0x0, 0x0) 2m28.979788732s ago: executing program 44 (id=1189): syz_open_dev$usbfs(0x0, 0x77, 0x101000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65f, 0x0, 0x9, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r1, 0x4b04, 0xb277, 0x0, 0x0, 0x0) 1m38.731659561s ago: executing program 5 (id=1452): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080c0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000780)={r2, &(0x7f0000000680)='tls', 0x201, &(0x7f00000006c0)={@align, {0x100, 0x2, 0x8, 0xffffffffffffff00}}, 0x7, &(0x7f0000000700), &(0x7f0000000740)=0x2f7}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@ifindex, r3, 0xfe12bcd38ec9e455, 0x4, 0x0, @void, @value=r4}, 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000004c0)={r6, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 1m38.474797093s ago: executing program 5 (id=1455): openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x210100, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'lo\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0xffffffff, "5e5c3446aa0ecd604c893eba3198600b1891109654fe9676d14574be70b6225c"}) 1m36.407178164s ago: executing program 5 (id=1457): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4060}, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 1m34.286548089s ago: executing program 5 (id=1458): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0x0, 0x0}, 0x10) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') 1m27.229961754s ago: executing program 5 (id=1470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0x42f, 0x870bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100e}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1m23.097008008s ago: executing program 5 (id=1474): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) poll(&(0x7f0000000a40)=[{0xffffffffffffffff, 0x2}], 0x1, 0x7f) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000200), 0x4) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 1m5.201204733s ago: executing program 45 (id=1474): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) poll(&(0x7f0000000a40)=[{0xffffffffffffffff, 0x2}], 0x1, 0x7f) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000200), 0x4) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 4.47095485s ago: executing program 8 (id=1601): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x4c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x3, 0xc, 0x1, 0x4}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x2}]}}]}, 0x4c}}, 0x24040004) 4.271866433s ago: executing program 4 (id=1603): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xc) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 4.002937684s ago: executing program 8 (id=1605): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x3, 0x6}) 3.770573994s ago: executing program 6 (id=1607): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="4015050000000500b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x97c, 0x0, 0x3}]}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x5, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x1ffffffffffffffc, 0xb3, 0x8d], 0x41000, 0x2010d3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r7, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) process_vm_writev(r1, &(0x7f0000001c80), 0x0, &(0x7f0000001d80), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0xd, 0xffffffffffffffff, 'id1\x00'}) ioctl$VIDIOC_ENUMOUTPUT(r8, 0xc0485630, &(0x7f0000000200)={0xfffffffd, "811fa6b4a79dbfda6da572630402c9e497d5a35274b3376ec030de7c7c9291cd", 0x0, 0x7, 0x5, 0x3000000, 0x8}) r9 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGFEATURE(r9, 0xc0404807, &(0x7f0000000000)={0x3, "ceed9d47f764deeebcda6eddf031d6b701e4c63d076c79c1a789634a569aa742481dc08de6ca5e7199aed315ebe7c568a06058830296ba6f95c50a6ade0eee5f"}) 3.701171272s ago: executing program 8 (id=1608): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.675681308s ago: executing program 8 (id=1609): r0 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.374864417s ago: executing program 8 (id=1611): r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1ff001, 0x8000, 0x7b, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x1c) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x300}) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000002c0), 0x4) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00'}) io_setup(0x4082, &(0x7f0000000380)=0x0) syz_io_uring_setup(0x1002945, &(0x7f0000001400)={0x0, 0x0, 0x10}, &(0x7f0000001480), &(0x7f00000014c0)) io_destroy(r3) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x4008000) 2.135213026s ago: executing program 9 (id=1612): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x24, 0x301, 0x70bd2b, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404c896}, 0x840) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x20) 2.027620846s ago: executing program 9 (id=1613): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "b52433a163b4ab1b040000000000000000000000020020000000000000b1fa321c2a59ccd55d363d325ac6bbbe944bc1600a4bbc73802d9646c92a56506d146d44ad4f9d6c47cb92e79d2f986dd2c934df"}, 0x5c) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xa, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 1.996722493s ago: executing program 9 (id=1614): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x100}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) 1.71314498s ago: executing program 8 (id=1615): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000300)={0xc, &(0x7f0000000380)={0x0, 0x9, 0x17, {0x17, 0x10, "c139aeec5247744c45ed80e3c1ea1a3e7910b35967"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.10515439s ago: executing program 4 (id=1616): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 1.046895689s ago: executing program 9 (id=1617): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 965.306682ms ago: executing program 6 (id=1618): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 863.527042ms ago: executing program 4 (id=1619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 839.366151ms ago: executing program 6 (id=1620): r0 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 663.908343ms ago: executing program 6 (id=1621): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x1) readv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000640)=""/221, 0xdd}], 0x1) 539.930526ms ago: executing program 9 (id=1622): r0 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) close_range(r0, 0xffffffffffffffff, 0x0) 532.487888ms ago: executing program 6 (id=1623): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "b52433a163b4ab1b040000000000000000000000020020000000000000b1fa321c2a59ccd55d363d325ac6bbbe944bc1600a4bbc73802d9646c92a56506d146d44ad4f9d6c47cb92e79d2f986dd2c934df"}, 0x5c) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xa, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 445.890885ms ago: executing program 4 (id=1624): r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 366.196209ms ago: executing program 9 (id=1625): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$proc_mixer(0xffffffffffffffff, 0x0, 0x34) close(0xffffffffffffffff) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x5, 0xe1, 0x81, 0x49, 0xd9, 0x40, 0x41, 0xfb, 0xfd, 0xc, 0x0, 0xfb, 0x3e, 0x8, 0x38}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x8000000, 0x8, 0x0, 0x4, 0x0, 0x7ffd], 0x1, 0x3c4210}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000001000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x8, 0x8a, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x700}) ioctl$FE_GET_PROPERTY(r3, 0x80086f53, &(0x7f0000000000)={0x32, &(0x7f0000000540)}) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x2182c2, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r7, 0x80044dff, 0x0) 270.76008ms ago: executing program 6 (id=1626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @local}, &(0x7f0000000140)=0xc) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200000034000480300001800b0001006c6f6f6b757000002000028008000440000000000900010073798431000000000800024000000008090001"], 0x88}}, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x24, 0xd, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="14d4b37ed38e"}) getsockopt$ax25_int(r5, 0x101, 0x5, &(0x7f0000000300), &(0x7f0000000380)=0x4) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x8000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1e}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xb0}}, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000280)=0x6c5, 0x4) getsockopt$inet6_int(r1, 0x29, 0x16, 0x0, &(0x7f0000000180)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[], 0x68}}, 0x0) 175.289696ms ago: executing program 4 (id=1627): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0xfffffffe, 0x0, &(0x7f00000000c0)) 0s ago: executing program 4 (id=1628): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4000000}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) kernel console output (not intermixed with test programs): Bluetooth: hci0: command tx timeout [ 384.764586][ T58] bridge_slave_1: left allmulticast mode [ 384.764614][ T58] bridge_slave_1: left promiscuous mode [ 384.787322][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.867270][ T58] bridge_slave_0: left allmulticast mode [ 384.867296][ T58] bridge_slave_0: left promiscuous mode [ 384.867507][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.340792][ T1229] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 386.289004][ T1229] usb 9-1: no configurations [ 386.289022][ T1229] usb 9-1: can't read configurations, error -22 [ 386.427232][ T1229] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 386.601266][ T1229] usb 9-1: no configurations [ 386.601283][ T1229] usb 9-1: can't read configurations, error -22 [ 386.601661][ T1229] usb usb9-port1: attempt power cycle [ 386.798630][ T5805] Bluetooth: hci0: command tx timeout [ 386.820301][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.926668][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.975957][ T1229] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 386.981207][ T58] bond0 (unregistering): Released all slaves [ 386.999741][ T1229] usb 9-1: no configurations [ 386.999759][ T1229] usb 9-1: can't read configurations, error -22 [ 387.196428][ T1229] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 387.215267][ T3082] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.217381][ T1229] usb 9-1: no configurations [ 387.217398][ T1229] usb 9-1: can't read configurations, error -22 [ 387.217773][ T1229] usb usb9-port1: unable to enumerate USB device [ 387.270528][ T7862] veth0_macvtap: entered promiscuous mode [ 387.460931][ T7862] veth1_macvtap: entered promiscuous mode [ 388.875896][ T5805] Bluetooth: hci0: command tx timeout [ 390.955842][ T5805] Bluetooth: hci0: command tx timeout [ 391.321050][ T7963] chnl_net:caif_netlink_parms(): no params data found [ 391.375055][ T7862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.635793][ T1229] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 391.685067][ T7862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.729148][ T3082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.729163][ T3082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.816566][ T1229] usb 9-1: Using ep0 maxpacket: 8 [ 391.838440][ T1229] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 391.838475][ T1229] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 391.838489][ T1229] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 391.838502][ T1229] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 391.838514][ T1229] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 391.838525][ T1229] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.838559][ T1229] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 391.838570][ T1229] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.427917][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.516616][ T1229] usb 9-1: usb_control_msg returned -32 [ 392.516665][ T1229] usbtmc 9-1:16.0: can't read capabilities [ 392.897422][ T1229] usb 9-1: USB disconnect, device number 6 [ 393.180810][ T58] hsr_slave_0: left promiscuous mode [ 394.185722][ T58] hsr_slave_1: left promiscuous mode [ 394.186743][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.186778][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.696726][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.696751][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.191570][ T58] veth1_macvtap: left promiscuous mode [ 395.191671][ T58] veth0_macvtap: left promiscuous mode [ 395.191916][ T58] veth1_vlan: left promiscuous mode [ 395.192078][ T58] veth0_vlan: left promiscuous mode [ 395.958344][ T8087] random: crng reseeded on system resumption [ 396.185883][ T8086] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 396.185900][ T8086] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 396.225832][ T8086] vhci_hcd vhci_hcd.0: Device attached [ 396.495953][ T5870] usb 50-1: SetAddress Request (2) to port 0 [ 396.496003][ T5870] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 398.876734][ T58] team0 (unregistering): Port device team_slave_1 removed [ 398.956479][ T58] team0 (unregistering): Port device team_slave_0 removed [ 399.203284][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.216151][ T7963] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.216274][ T7963] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.216442][ T7963] bridge_slave_0: entered allmulticast mode [ 399.242412][ T7963] bridge_slave_0: entered promiscuous mode [ 399.255813][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.273028][ T7963] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.273136][ T7963] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.273292][ T7963] bridge_slave_1: entered allmulticast mode [ 399.274748][ T7963] bridge_slave_1: entered promiscuous mode [ 399.298362][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.303184][ T3035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.303203][ T3035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.410589][ T8088] vhci_hcd: connection reset by peer [ 399.422366][ T12] vhci_hcd vhci_hcd.8: stop threads [ 399.422391][ T12] vhci_hcd vhci_hcd.8: release socket [ 399.422465][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 399.578016][ T7963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.639101][ T7963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.844908][ T7963] team0: Port device team_slave_0 added [ 399.983245][ T7963] team0: Port device team_slave_1 added [ 401.597123][ T5870] usb 50-1: device descriptor read/8, error -110 [ 402.007165][ T5870] usb usb50-port1: attempt power cycle [ 403.067250][ T5870] usb usb50-port1: unable to enumerate USB device [ 403.237988][ T7963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.238006][ T7963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.238074][ T7963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.444865][ T7963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.444884][ T7963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.445183][ T7963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.473457][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.473477][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.672140][ T7963] hsr_slave_0: entered promiscuous mode [ 404.685185][ T7963] hsr_slave_1: entered promiscuous mode [ 404.685903][ T7963] debugfs: 'hsr0' already exists in 'hsr' [ 404.685926][ T7963] Cannot create hsr debugfs directory [ 404.845290][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.845309][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.125016][ T8163] 9pnet_virtio: no channels available for device syz [ 405.321716][ T8164] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 405.322413][ T8164] overlayfs: overlapping lowerdir path [ 408.526342][ T8173] bridge0: port 3(erspan0) entered blocking state [ 408.526447][ T8173] bridge0: port 3(erspan0) entered disabled state [ 408.526650][ T8173] erspan0: entered allmulticast mode [ 408.528970][ T8173] erspan0: entered promiscuous mode [ 408.529973][ T8173] bridge0: port 3(erspan0) entered blocking state [ 408.530070][ T8173] bridge0: port 3(erspan0) entered forwarding state [ 408.995709][ T36] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 409.146020][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 409.186861][ T36] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 409.186895][ T36] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 409.186908][ T36] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 409.186975][ T36] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 409.218779][ T36] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 409.218807][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.218824][ T36] usb 4-1: Product: syz [ 409.218836][ T36] usb 4-1: Manufacturer: syz [ 409.218857][ T36] usb 4-1: SerialNumber: syz [ 409.266982][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 409.433847][ T8189] binder: 8187:8189 ioctl c0306201 0 returned -14 [ 409.460951][ T36] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input8 [ 409.795768][ T36] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 409.795811][ T36] (id 0x00) [ 409.932614][ T36] rc_core: IR keymap rc-imon-pad not found [ 409.932635][ T36] Registered IR keymap rc-empty [ 409.932800][ T36] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 409.932810][ T36] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 409.949335][ T36] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 409.952425][ T36] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input9 [ 410.012412][ T36] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:2> initialized [ 410.159306][ T8201] syz.7.367 uses obsolete (PF_INET,SOCK_PACKET) [ 410.947447][ T8216] ======================================================= [ 410.947447][ T8216] WARNING: The mand mount option has been deprecated and [ 410.947447][ T8216] and is ignored by this kernel. Remove the mand [ 410.947447][ T8216] option from the mount to silence this warning. [ 410.947447][ T8216] ======================================================= [ 411.361158][ T58] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.804679][ T8195] imon:send_packet: task interrupted [ 411.804837][ T8195] imon:send_packet: packet tx failed (-512) [ 411.805004][ T8195] imon:vfd_write: send packet #1 failed [ 412.031985][ T809] usb 4-1: USB disconnect, device number 2 [ 417.099169][ T58] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.259001][ T8276] 9pnet_fd: Insufficient options for proto=fd [ 418.610343][ T37] audit: type=1326 audit(1773487438.746:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8263 comm="syz.7.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dc8fc799 code=0x7fc00000 [ 418.625357][ T37] audit: type=1326 audit(1773487438.866:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8263 comm="syz.7.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4dc89db19 code=0x7fc00000 [ 419.318184][ T58] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.013344][ T8299] netlink: 32 bytes leftover after parsing attributes in process `syz.8.382'. [ 420.015293][ T8299] netlink: 32 bytes leftover after parsing attributes in process `syz.8.382'. [ 421.100145][ T58] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.495874][ T8317] netlink: 168 bytes leftover after parsing attributes in process `syz.7.387'. [ 421.517374][ T37] audit: type=1326 audit(1773487441.756:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8309 comm="syz.7.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dc8fc799 code=0x7fc00000 [ 421.526872][ T8317] 9p: Bad value for 'rfdno' [ 421.645891][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 421.896650][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 422.088522][ T31] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 422.088584][ T31] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 422.088604][ T31] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 422.088625][ T31] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 422.090692][ T37] audit: type=1326 audit(1773487442.336:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8309 comm="syz.7.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4dc89db19 code=0x7fc00000 [ 422.467253][ T31] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 422.467281][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.467298][ T31] usb 4-1: Product: syz [ 422.467311][ T31] usb 4-1: Manufacturer: syz [ 422.467323][ T31] usb 4-1: SerialNumber: syz [ 422.584080][ T8324] netlink: 32 bytes leftover after parsing attributes in process `syz.9.390'. [ 422.584256][ T8324] netlink: 32 bytes leftover after parsing attributes in process `syz.9.390'. [ 422.724461][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 422.734697][ T31] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input10 [ 422.872991][ T7963] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 422.966771][ T31] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 422.966790][ T31] (id 0x00) [ 423.015078][ T7963] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 423.054319][ T8324] netlink: 32 bytes leftover after parsing attributes in process `syz.9.390'. [ 423.054377][ T8324] netlink: 32 bytes leftover after parsing attributes in process `syz.9.390'. [ 423.132353][ T7963] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 423.147442][ T31] rc_core: IR keymap rc-imon-pad not found [ 423.147463][ T31] Registered IR keymap rc-empty [ 423.147538][ T31] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 423.147555][ T31] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 423.447431][ T31] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 423.451150][ T31] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input11 [ 424.171865][ T31] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:3> initialized [ 426.386773][ T8342] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 426.386835][ T8342] overlayfs: overlapping lowerdir path [ 427.636197][ T1229] usb 4-1: USB disconnect, device number 3 [ 428.828392][ T7963] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 428.963896][ T8372] comedi comedi0: Minor 8 could not be opened [ 429.218775][ T8371] bridge0: port 3(erspan0) entered disabled state [ 429.219001][ T8371] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.224393][ T8371] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.707134][ T8382] syzkaller0: entered promiscuous mode [ 429.707160][ T8382] syzkaller0: entered allmulticast mode [ 429.741786][ T58] bridge_slave_1: left allmulticast mode [ 429.741816][ T58] bridge_slave_1: left promiscuous mode [ 429.742052][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.846566][ T58] bridge_slave_0: left allmulticast mode [ 429.846586][ T58] bridge_slave_0: left promiscuous mode [ 429.846748][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.864131][ T8398] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 430.864600][ T8398] overlayfs: overlapping lowerdir path [ 432.746490][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.796311][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.837489][ T58] bond0 (unregistering): Released all slaves [ 433.360594][ T8410] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 433.360621][ T8410] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 433.362809][ T8410] vhci_hcd vhci_hcd.0: Device attached [ 433.367123][ T8410] random: crng reseeded on system resumption [ 433.676113][ T5860] usb 48-1: SetAddress Request (2) to port 0 [ 433.676164][ T5860] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 434.742591][ T8411] vhci_hcd: connection reset by peer [ 434.746045][ T3082] vhci_hcd vhci_hcd.7: stop threads [ 434.746067][ T3082] vhci_hcd vhci_hcd.7: release socket [ 434.746137][ T3082] vhci_hcd vhci_hcd.7: disconnect device [ 435.356780][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 435.378279][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 435.379291][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 435.380903][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 435.381301][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 435.605883][ T5883] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 435.763659][ T5883] usb 9-1: Using ep0 maxpacket: 32 [ 435.774879][ T5883] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 435.774939][ T5883] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 435.774961][ T5883] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 435.774984][ T5883] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 435.826959][ T5883] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 435.826987][ T5883] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.827006][ T5883] usb 9-1: Product: syz [ 435.827018][ T5883] usb 9-1: Manufacturer: syz [ 435.827031][ T5883] usb 9-1: SerialNumber: syz [ 435.880608][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 435.938447][ T5883] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input12 [ 435.988020][ T58] hsr_slave_0: left promiscuous mode [ 436.046141][ T58] hsr_slave_1: left promiscuous mode [ 436.047632][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.047703][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.106896][ T5883] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 436.106916][ T5883] (id 0x00) [ 436.108667][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.108691][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.213573][ T5883] rc_core: IR keymap rc-imon-pad not found [ 436.213596][ T5883] Registered IR keymap rc-empty [ 436.217298][ T5883] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 436.217320][ T5883] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 436.267444][ T58] veth1_macvtap: left promiscuous mode [ 436.268995][ T58] veth0_macvtap: left promiscuous mode [ 436.270826][ T58] veth1_vlan: left promiscuous mode [ 436.271081][ T58] veth0_vlan: left promiscuous mode [ 436.318441][ T5883] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 436.321738][ T5883] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input13 [ 436.350225][ T5883] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:7> initialized [ 436.575545][ T8428] imon:send_packet: packet tx failed (-71) [ 436.587262][ T5883] usb 9-1: USB disconnect, device number 7 [ 436.598914][ T8428] imon:vfd_write: send packet #0 failed [ 437.437143][ T5805] Bluetooth: hci3: command tx timeout [ 437.615028][ T58] team0 (unregistering): Port device team_slave_1 removed [ 437.686477][ T58] team0 (unregistering): Port device team_slave_0 removed [ 438.333283][ T8455] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 438.333309][ T8455] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 438.334824][ T8455] vhci_hcd vhci_hcd.0: Device attached [ 438.338909][ T8455] random: crng reseeded on system resumption [ 438.725790][ T5860] usb 48-1: device descriptor read/8, error -110 [ 438.848932][ T8456] vhci_hcd: connection closed [ 438.849496][ T1231] vhci_hcd vhci_hcd.8: stop threads [ 438.849512][ T1231] vhci_hcd vhci_hcd.8: release socket [ 438.851176][ T1231] vhci_hcd vhci_hcd.8: disconnect device [ 438.875993][ T809] usb 50-1: enqueue for inactive port 0 [ 439.116831][ T5860] usb usb48-port1: attempt power cycle [ 439.159964][ T7963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.288386][ T7963] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.380720][ T809] usb usb50-port1: attempt power cycle [ 439.384482][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.384680][ T1231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.494595][ T1231] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.525735][ T5805] Bluetooth: hci3: command tx timeout [ 439.545876][ T1231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.779709][ T5860] usb usb48-port1: unable to enumerate USB device [ 439.807440][ T8429] chnl_net:caif_netlink_parms(): no params data found [ 439.967370][ T809] usb usb50-port1: unable to enumerate USB device [ 440.008997][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.009062][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.348194][ T8429] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.348644][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.354397][ T8429] bridge_slave_0: entered allmulticast mode [ 441.368556][ T8429] bridge_slave_0: entered promiscuous mode [ 441.595817][ T5805] Bluetooth: hci3: command tx timeout [ 441.612777][ T8429] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.613177][ T8429] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.670896][ T8429] bridge_slave_1: entered allmulticast mode [ 441.729681][ T8429] bridge_slave_1: entered promiscuous mode [ 442.283223][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 442.286674][ T5118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 442.288056][ T5118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 442.289048][ T5118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 442.289968][ T5118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 442.539112][ T8429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.569672][ T8429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.047714][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 443.059069][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 443.060332][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 443.062264][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 443.068963][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 443.676415][ T5118] Bluetooth: hci3: command tx timeout [ 443.930695][ T8508] syz_tun: entered allmulticast mode [ 444.395781][ T5118] Bluetooth: hci1: command tx timeout [ 444.530455][ T8429] team0: Port device team_slave_0 added [ 444.540115][ T8508] syz_tun: left allmulticast mode [ 444.599751][ T8429] team0: Port device team_slave_1 added [ 444.798103][ T31] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 444.851123][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.955759][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 444.959986][ T31] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 444.960036][ T31] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 444.960061][ T31] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 444.960086][ T31] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 444.966381][ T31] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 444.966408][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.966425][ T31] usb 9-1: Product: syz [ 444.966438][ T31] usb 9-1: Manufacturer: syz [ 444.966450][ T31] usb 9-1: SerialNumber: syz [ 445.005394][ C1] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 445.018940][ T31] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input14 [ 445.096710][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.096727][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.096750][ T8429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.118769][ T5118] Bluetooth: hci5: command tx timeout [ 445.123546][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.123561][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.123587][ T8429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.216969][ T31] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 445.216989][ T31] (id 0x00) [ 445.315794][ T31] rc_core: IR keymap rc-imon-pad not found [ 445.315813][ T31] Registered IR keymap rc-empty [ 445.315888][ T31] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 445.315905][ T31] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 445.597304][ T31] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 445.600271][ T31] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input15 [ 445.617897][ T31] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:8> initialized [ 445.733324][ T8558] netlink: 32 bytes leftover after parsing attributes in process `syz.7.426'. [ 445.733748][ T8558] netlink: 32 bytes leftover after parsing attributes in process `syz.7.426'. [ 446.480337][ T5118] Bluetooth: hci1: command tx timeout [ 446.500268][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.571814][ T8558] netlink: 32 bytes leftover after parsing attributes in process `syz.7.426'. [ 446.571854][ T8558] netlink: 32 bytes leftover after parsing attributes in process `syz.7.426'. [ 447.149301][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.195698][ T5805] Bluetooth: hci5: command tx timeout [ 447.219432][ T8429] hsr_slave_0: entered promiscuous mode [ 447.220663][ T8429] hsr_slave_1: entered promiscuous mode [ 447.298909][ T8568] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 447.299018][ T8568] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 447.377065][ T8568] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 447.453638][ T8568] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 447.453734][ T8568] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 447.499437][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.559932][ T8568] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 447.624344][ T8568] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 447.631309][ T8568] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 447.717473][ T8568] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 447.784025][ T5883] usb 9-1: USB disconnect, device number 8 [ 447.824782][ T8568] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 447.824905][ T8568] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 447.854123][ T8490] chnl_net:caif_netlink_parms(): no params data found [ 447.909907][ T8568] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 448.030846][ T8568] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 448.032152][ T8568] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 448.151314][ T8568] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 448.663931][ T8609] netlink: 168 bytes leftover after parsing attributes in process `syz.7.435'. [ 448.734857][ T37] audit: type=1326 audit(1773487468.976:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8604 comm="syz.7.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dc8fc799 code=0x7fc00000 [ 449.178081][ T58] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.264528][ T8490] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.264638][ T8490] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.264780][ T8490] bridge_slave_0: entered allmulticast mode [ 449.274596][ T8490] bridge_slave_0: entered promiscuous mode [ 449.355880][ T5805] Bluetooth: hci2: command 0x0c1a tx timeout [ 449.373512][ T37] audit: type=1326 audit(1773487469.616:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8604 comm="syz.7.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4dc89db19 code=0x7fc00000 [ 449.518440][ T5805] Bluetooth: hci4: command 0x0c1a tx timeout [ 449.563535][ T8490] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.563654][ T8490] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.563860][ T8490] bridge_slave_1: entered allmulticast mode [ 449.569471][ T8490] bridge_slave_1: entered promiscuous mode [ 449.685654][ T5805] Bluetooth: hci3: command 0x0c1a tx timeout [ 449.835970][ T5805] Bluetooth: hci1: command 0x0419 tx timeout [ 449.878787][ T58] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.025939][ T5810] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 450.075723][ T5805] Bluetooth: hci5: command 0x0419 tx timeout [ 450.179003][ T5810] usb 8-1: config 0 has no interfaces? [ 450.179039][ T5810] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 450.179062][ T5810] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.183609][ T5810] usb 8-1: config 0 descriptor?? [ 450.281533][ T8490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.539636][ T58] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.592697][ T8490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.828772][ T8153] usb 8-1: USB disconnect, device number 2 [ 450.939973][ T8509] chnl_net:caif_netlink_parms(): no params data found [ 450.957900][ T8490] team0: Port device team_slave_0 added [ 451.123235][ T58] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.173492][ T8490] team0: Port device team_slave_1 added [ 451.379333][ T8490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.379349][ T8490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.379374][ T8490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.435729][ T5805] Bluetooth: hci2: command 0x0c1a tx timeout [ 451.557124][ T8490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.557145][ T8490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.557169][ T8490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.595851][ T5805] Bluetooth: hci4: command 0x0c1a tx timeout [ 451.597084][ T8712] netlink: 168 bytes leftover after parsing attributes in process `syz.7.482'. [ 451.618633][ T8712] 9p: Bad value for 'rfdno' [ 451.666539][ T37] audit: type=1326 audit(1773487471.916:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8704 comm="syz.7.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dc8fc799 code=0x7fc00000 [ 451.758407][ T5805] Bluetooth: hci3: command 0x0c1a tx timeout [ 451.854664][ T8509] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.854785][ T8509] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.855016][ T8509] bridge_slave_0: entered allmulticast mode [ 451.860438][ T8509] bridge_slave_0: entered promiscuous mode [ 451.921096][ T8509] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.921247][ T8509] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.921400][ T8509] bridge_slave_1: entered allmulticast mode [ 451.923433][ T8509] bridge_slave_1: entered promiscuous mode [ 451.935713][ T5805] Bluetooth: hci1: command 0x0419 tx timeout [ 452.085215][ T8490] hsr_slave_0: entered promiscuous mode [ 452.094019][ T8490] hsr_slave_1: entered promiscuous mode [ 452.095128][ T8490] debugfs: 'hsr0' already exists in 'hsr' [ 452.095153][ T8490] Cannot create hsr debugfs directory [ 452.166260][ T5805] Bluetooth: hci5: command 0x0419 tx timeout [ 452.204861][ T8509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.242301][ T37] audit: type=1326 audit(1773487472.486:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8704 comm="syz.7.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4dc89db19 code=0x7fc00000 [ 452.293634][ T8509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.338911][ T8429] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 452.428483][ T58] bridge_slave_1: left allmulticast mode [ 452.428510][ T58] bridge_slave_1: left promiscuous mode [ 452.428751][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.509602][ T58] bridge_slave_0: left allmulticast mode [ 452.509629][ T58] bridge_slave_0: left promiscuous mode [ 452.513199][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.600047][ T58] bridge_slave_1: left allmulticast mode [ 452.600074][ T58] bridge_slave_1: left promiscuous mode [ 452.600287][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.697301][ T58] bridge_slave_0: left allmulticast mode [ 452.697329][ T58] bridge_slave_0: left promiscuous mode [ 452.697612][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.530282][ T5805] Bluetooth: hci2: command 0x0c1a tx timeout [ 453.685880][ T5805] Bluetooth: hci4: command 0x0c1a tx timeout [ 453.759899][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.838257][ T5805] Bluetooth: hci3: command 0x0c1a tx timeout [ 453.846697][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.892808][ T58] bond0 (unregistering): Released all slaves [ 454.004020][ T5805] Bluetooth: hci1: command 0x0419 tx timeout [ 454.235747][ T5805] Bluetooth: hci5: command 0x0419 tx timeout [ 454.396469][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.476838][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.521729][ T58] bond0 (unregistering): Released all slaves [ 454.578501][ T8429] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 454.762391][ T8509] team0: Port device team_slave_0 added [ 454.772663][ T8429] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 454.831862][ T8509] team0: Port device team_slave_1 added [ 454.833812][ T8745] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 454.833991][ T8745] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 454.834154][ T8745] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 454.834329][ T8745] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 454.834500][ T8745] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 454.932463][ T8429] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 455.776604][ T8509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.776615][ T8509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.776629][ T8509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.784926][ T8890] syz_tun: entered allmulticast mode [ 455.863951][ T8509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.863962][ T8509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.863976][ T8509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.338931][ T8879] syz_tun: left allmulticast mode [ 456.876150][ T5118] Bluetooth: hci5: command 0x0419 tx timeout [ 456.876197][ T5118] Bluetooth: hci1: command 0x0419 tx timeout [ 456.876221][ T5118] Bluetooth: hci3: command 0x0c1a tx timeout [ 456.876246][ T5118] Bluetooth: hci4: command 0x0c1a tx timeout [ 456.876271][ T5118] Bluetooth: hci2: command 0x0c1a tx timeout [ 457.012140][ T8509] hsr_slave_0: entered promiscuous mode [ 457.013369][ T8509] hsr_slave_1: entered promiscuous mode [ 457.027532][ T8509] debugfs: 'hsr0' already exists in 'hsr' [ 457.027559][ T8509] Cannot create hsr debugfs directory [ 457.428929][ T8936] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 457.429149][ T8936] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 457.429306][ T8936] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 457.429467][ T8936] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 457.429629][ T8936] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 457.985976][ T58] hsr_slave_0: left promiscuous mode [ 458.016247][ T58] hsr_slave_1: left promiscuous mode [ 458.018380][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.018405][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.066980][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.067006][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.257747][ T58] hsr_slave_0: left promiscuous mode [ 458.295957][ T58] hsr_slave_1: left promiscuous mode [ 458.296961][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.296984][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.346688][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.346713][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.448868][ T58] veth1_macvtap: left promiscuous mode [ 458.448972][ T58] veth0_macvtap: left promiscuous mode [ 458.449213][ T58] veth1_vlan: left promiscuous mode [ 458.449380][ T58] veth0_vlan: left promiscuous mode [ 458.626114][ T58] veth1_macvtap: left promiscuous mode [ 458.626214][ T58] veth0_macvtap: left promiscuous mode [ 458.626453][ T58] veth1_vlan: left promiscuous mode [ 458.626616][ T58] veth0_vlan: left promiscuous mode [ 459.435748][ T5118] Bluetooth: hci5: command 0x0419 tx timeout [ 459.435785][ T5118] Bluetooth: hci1: command 0x0419 tx timeout [ 459.435809][ T5118] Bluetooth: hci3: command 0x0c1a tx timeout [ 459.435834][ T5118] Bluetooth: hci2: command 0x0c1a tx timeout [ 459.746486][ T58] team0 (unregistering): Port device team_slave_1 removed [ 459.806442][ T58] team0 (unregistering): Port device team_slave_0 removed [ 460.506424][ T58] team0 (unregistering): Port device team_slave_1 removed [ 460.556431][ T58] team0 (unregistering): Port device team_slave_0 removed [ 461.584024][ T8429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.614823][ T8490] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 461.649014][ T8490] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 461.889025][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 461.895867][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 461.904563][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 461.928296][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 461.929035][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 462.000228][ T8490] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 462.042913][ T8490] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 462.394808][ T8429] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.662229][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.662355][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.724225][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.724421][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.864123][ T8509] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 463.904108][ T9157] chnl_net:caif_netlink_parms(): no params data found [ 463.927865][ T8509] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 463.981114][ T8509] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 463.996568][ T5118] Bluetooth: hci0: command tx timeout [ 464.041848][ T8509] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 464.120357][ T8490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.932174][ T58] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.984057][ T9157] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.984176][ T9157] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.984412][ T9157] bridge_slave_0: entered allmulticast mode [ 464.993338][ T9157] bridge_slave_0: entered promiscuous mode [ 465.003130][ T9157] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.003304][ T9157] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.003481][ T9157] bridge_slave_1: entered allmulticast mode [ 465.007490][ T9157] bridge_slave_1: entered promiscuous mode [ 465.069604][ T8429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.106966][ T8490] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.134823][ T9157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.308916][ T58] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.341751][ T9157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.442439][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.442602][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.667593][ T58] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.722744][ T9157] team0: Port device team_slave_0 added [ 465.759382][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.759583][ T5095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.769597][ T9157] team0: Port device team_slave_1 added [ 466.022941][ T58] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.075778][ T5118] Bluetooth: hci0: command tx timeout [ 466.080622][ T9157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.080638][ T9157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.080661][ T9157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.092510][ T9157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.092525][ T9157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.092549][ T9157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.260152][ T9157] hsr_slave_0: entered promiscuous mode [ 466.261484][ T9157] hsr_slave_1: entered promiscuous mode [ 466.262478][ T9157] debugfs: 'hsr0' already exists in 'hsr' [ 466.262498][ T9157] Cannot create hsr debugfs directory [ 466.433468][ T8429] veth0_vlan: entered promiscuous mode [ 466.676777][ T8429] veth1_vlan: entered promiscuous mode [ 466.875047][ T58] bridge_slave_1: left allmulticast mode [ 466.875074][ T58] bridge_slave_1: left promiscuous mode [ 466.875307][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.957928][ T58] bridge_slave_0: left allmulticast mode [ 466.957947][ T58] bridge_slave_0: left promiscuous mode [ 466.958090][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.054059][ T58] bridge_slave_1: left allmulticast mode [ 467.054087][ T58] bridge_slave_1: left promiscuous mode [ 467.054322][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.137155][ T58] bridge_slave_0: left allmulticast mode [ 467.137184][ T58] bridge_slave_0: left promiscuous mode [ 467.137415][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.104229][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.156457][ T5118] Bluetooth: hci0: command tx timeout [ 468.176765][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.230681][ T58] bond0 (unregistering): Released all slaves [ 468.686548][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.767389][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.802501][ T58] bond0 (unregistering): Released all slaves [ 468.847035][ T8509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.298948][ T8509] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.862999][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.872073][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.169795][ T8429] veth0_macvtap: entered promiscuous mode [ 470.245944][ T5118] Bluetooth: hci0: command tx timeout [ 470.387746][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.388211][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.486944][ T8429] veth1_macvtap: entered promiscuous mode [ 470.712163][ T8490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.896467][ T58] hsr_slave_0: left promiscuous mode [ 470.937527][ T58] hsr_slave_1: left promiscuous mode [ 470.938482][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.938505][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.969088][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.969114][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.168489][ T58] hsr_slave_0: left promiscuous mode [ 471.207173][ T58] hsr_slave_1: left promiscuous mode [ 471.208211][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.256331][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.372006][ T58] veth1_macvtap: left promiscuous mode [ 471.372108][ T58] veth0_macvtap: left promiscuous mode [ 471.372349][ T58] veth1_vlan: left promiscuous mode [ 471.372524][ T58] veth0_vlan: left promiscuous mode [ 472.396732][ T58] team0 (unregistering): Port device team_slave_1 removed [ 472.456806][ T58] team0 (unregistering): Port device team_slave_0 removed [ 473.077181][ T58] team0 (unregistering): Port device team_slave_1 removed [ 473.137811][ T58] team0 (unregistering): Port device team_slave_0 removed [ 473.533620][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.615013][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.686714][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.692700][ T5095] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.705104][ T5095] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.738701][ T5095] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.914908][ T8490] veth0_vlan: entered promiscuous mode [ 474.114529][ T8490] veth1_vlan: entered promiscuous mode [ 474.245321][ T9157] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 474.283796][ T9157] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 474.338929][ T5095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.338957][ T5095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.341995][ T9157] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 474.408141][ T9157] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 474.533250][ T8509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.599170][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.599190][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.662927][ T8490] veth0_macvtap: entered promiscuous mode [ 474.717369][ T8490] veth1_macvtap: entered promiscuous mode [ 474.871185][ T8490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.884696][ T8509] veth0_vlan: entered promiscuous mode [ 474.919157][ T8490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.948235][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.948789][ T8509] veth1_vlan: entered promiscuous mode [ 474.953315][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.964930][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.001063][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.482571][ T9157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.520673][ T8509] veth0_macvtap: entered promiscuous mode [ 475.533576][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.533594][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.595488][ T8509] veth1_macvtap: entered promiscuous mode [ 475.659227][ T9821] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 475.660104][ T9821] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 475.664566][ T9821] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 475.664821][ T9821] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 475.665070][ T9821] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 475.665174][ T9821] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 475.735130][ T9821] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 475.751492][ T9157] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.762535][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.762553][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.805073][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.813269][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.956716][ T8509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.960987][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.961504][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.067018][ T8509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.242918][ T3082] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.283660][ T3082] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.298537][ T3082] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.299394][ T3082] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.124201][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.124221][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.465370][ T1231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.465390][ T1231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.684290][ T5118] Bluetooth: hci0: command 0x0c1a tx timeout [ 477.684305][ T5805] Bluetooth: hci5: command 0x0419 tx timeout [ 477.684333][ T5805] Bluetooth: hci1: command 0x0419 tx timeout [ 477.684354][ T5805] Bluetooth: hci3: command 0x0c1a tx timeout [ 477.684373][ T5805] Bluetooth: hci2: command 0x0c1a tx timeout [ 478.317330][ T9157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.349637][ T9863] fuse: Bad value for 'fd' [ 479.767558][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout [ 480.088396][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.560830][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.657473][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 480.663132][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 480.679860][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 480.695440][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 480.705437][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 480.825798][ T9157] veth0_vlan: entered promiscuous mode [ 481.104830][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.188540][ T9157] veth1_vlan: entered promiscuous mode [ 481.531048][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.843944][ T5118] Bluetooth: hci0: command 0x0c1a tx timeout [ 481.844506][ T9157] veth0_macvtap: entered promiscuous mode [ 482.004203][ T9157] veth1_macvtap: entered promiscuous mode [ 482.338073][ T58] bridge_slave_1: left allmulticast mode [ 482.338098][ T58] bridge_slave_1: left promiscuous mode [ 482.338316][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.440439][ T58] bridge_slave_0: left allmulticast mode [ 482.440467][ T58] bridge_slave_0: left promiscuous mode [ 482.440706][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.796931][ T5118] Bluetooth: hci4: command tx timeout [ 483.500251][T10013] Bluetooth: MGMT ver 1.23 [ 483.500293][T10013] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 483.726838][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.791986][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.828613][ T58] bond0 (unregistering): Released all slaves [ 483.898721][ T9157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.913074][ T5810] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 483.957934][ T9157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.056509][ T147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.060275][ T147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.062366][ T147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.068727][ T147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.101527][ T5810] usb 1-1: Using ep0 maxpacket: 32 [ 484.111444][ T5810] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 484.111496][ T5810] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 484.111519][ T5810] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 484.111551][ T5810] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 484.123449][ T5810] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 484.123475][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.123491][ T5810] usb 1-1: Product: syz [ 484.123503][ T5810] usb 1-1: Manufacturer: syz [ 484.123513][ T5810] usb 1-1: SerialNumber: syz [ 484.221804][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 484.225116][ T5810] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input16 [ 484.448394][ T5810] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 484.448415][ T5810] (id 0x00) [ 484.575701][ T5810] rc_core: IR keymap rc-imon-pad not found [ 484.575721][ T5810] Registered IR keymap rc-empty [ 484.575796][ T5810] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 484.575812][ T5810] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 484.646679][ T5810] imon:send_packet: packet tx failed (-71) [ 484.665850][ T5810] imon 1-1:155.0: remote input dev register failed [ 484.665998][ T5810] imon 1-1:155.0: imon_init_intf0: rc device setup failed [ 484.693193][ T9923] chnl_net:caif_netlink_parms(): no params data found [ 484.824656][ T5810] imon 1-1:155.0: unable to initialize intf0, err 0 [ 484.824678][ T5810] imon:imon_probe: failed to initialize context! [ 484.824690][ T5810] imon 1-1:155.0: unable to register, err -19 [ 484.879536][ T5118] Bluetooth: hci4: command tx timeout [ 484.914170][ T5810] usb 1-1: USB disconnect, device number 5 [ 485.653807][T10071] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 485.654002][T10071] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 485.654190][T10071] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 485.654358][T10071] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 485.654524][T10071] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 485.654592][T10071] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 485.724851][T10071] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 485.905909][ T58] hsr_slave_0: left promiscuous mode [ 485.959407][ T58] hsr_slave_1: left promiscuous mode [ 485.980487][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.983017][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.004842][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.004869][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.090682][ T58] veth1_macvtap: left promiscuous mode [ 486.090783][ T58] veth0_macvtap: left promiscuous mode [ 486.091025][ T58] veth1_vlan: left promiscuous mode [ 486.091194][ T58] veth0_vlan: left promiscuous mode [ 487.509807][ T58] team0 (unregistering): Port device team_slave_1 removed [ 487.586553][ T58] team0 (unregistering): Port device team_slave_0 removed [ 487.686223][ T5809] Bluetooth: hci4: command 0x0419 tx timeout [ 487.686465][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout [ 487.686495][ T5809] Bluetooth: hci1: command 0x0419 tx timeout [ 487.686521][ T5809] Bluetooth: hci3: command 0x0c1a tx timeout [ 487.686546][ T5809] Bluetooth: hci2: command 0x0c1a tx timeout [ 488.116442][T10129] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 488.116635][T10129] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 488.116809][T10129] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 488.116983][T10129] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 488.117167][T10129] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 488.501360][ T9923] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.501480][ T9923] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.501712][ T9923] bridge_slave_0: entered allmulticast mode [ 488.516664][ T9923] bridge_slave_0: entered promiscuous mode [ 488.746772][ T9923] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.746893][ T9923] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.747122][ T9923] bridge_slave_1: entered allmulticast mode [ 488.749592][ T9923] bridge_slave_1: entered promiscuous mode [ 488.761925][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.761947][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.057517][ T9923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.102324][ T9923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.185927][ T1919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.185948][ T1919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.258685][T10159] fuse: Unknown parameter 'use00000000000000000000' [ 489.299537][ T9923] team0: Port device team_slave_0 added [ 489.318100][ T9923] team0: Port device team_slave_1 added [ 489.478257][ T9923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.478274][ T9923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.478299][ T9923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.556498][ T9923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.556545][ T9923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.556577][ T9923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.764513][ T9923] hsr_slave_0: entered promiscuous mode [ 489.773694][ T9923] hsr_slave_1: entered promiscuous mode [ 489.774557][ T9923] debugfs: 'hsr0' already exists in 'hsr' [ 489.774579][ T9923] Cannot create hsr debugfs directory [ 490.159307][ T5118] Bluetooth: hci0: command 0x0c1a tx timeout [ 490.159346][ T5118] Bluetooth: hci1: command 0x0419 tx timeout [ 490.159369][ T5118] Bluetooth: hci2: command 0x0c1a tx timeout [ 490.159416][ T5809] Bluetooth: hci4: command 0x0419 tx timeout [ 492.013143][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 492.041113][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 492.049664][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 492.060471][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 492.073167][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 492.235821][ T5805] Bluetooth: hci4: command 0x0419 tx timeout [ 492.314947][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.894964][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.391120][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.155825][ T5805] Bluetooth: hci3: command tx timeout [ 494.315737][ T5805] Bluetooth: hci4: command 0x0419 tx timeout [ 496.236682][ T5805] Bluetooth: hci3: command tx timeout [ 496.794954][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.873456][ T58] bridge_slave_1: left allmulticast mode [ 497.873535][ T58] bridge_slave_1: left promiscuous mode [ 497.873781][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.965445][ T58] bridge_slave_0: left allmulticast mode [ 497.965472][ T58] bridge_slave_0: left promiscuous mode [ 497.967505][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.097318][T10304] comedi comedi0: Minor 8 could not be opened [ 498.318657][ T5805] Bluetooth: hci3: command tx timeout [ 499.359350][T10323] fuse: Unknown parameter 'user_id00000000000000000000' [ 499.767971][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.847070][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.894315][ T58] bond0 (unregistering): Released all slaves [ 499.938188][T10300] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.956572][T10300] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.486152][ T5805] Bluetooth: hci3: command tx timeout [ 500.929261][T10195] chnl_net:caif_netlink_parms(): no params data found [ 501.339726][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 501.345373][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 501.361417][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 501.372183][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 501.376268][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 501.444076][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.444117][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.707696][ T9923] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 501.769465][ T9923] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 502.015781][ T58] hsr_slave_0: left promiscuous mode [ 502.055855][ T58] hsr_slave_1: left promiscuous mode [ 502.056900][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.056924][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.136476][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.136495][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.274084][ T58] veth1_macvtap: left promiscuous mode [ 502.274147][ T58] veth0_macvtap: left promiscuous mode [ 502.274286][ T58] veth1_vlan: left promiscuous mode [ 502.274377][ T58] veth0_vlan: left promiscuous mode [ 503.445968][ T5805] Bluetooth: hci1: command tx timeout [ 503.566602][ T58] team0 (unregistering): Port device team_slave_1 removed [ 503.633129][ T58] team0 (unregistering): Port device team_slave_0 removed [ 503.896542][ T9923] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 504.004028][ T9923] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 504.118091][T10195] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.118250][T10195] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.118452][T10195] bridge_slave_0: entered allmulticast mode [ 504.120952][T10195] bridge_slave_0: entered promiscuous mode [ 504.165574][T10195] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.166160][T10195] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.166367][T10195] bridge_slave_1: entered allmulticast mode [ 504.202714][T10195] bridge_slave_1: entered promiscuous mode [ 504.328789][T10195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.361142][T10195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.476863][T10195] team0: Port device team_slave_0 added [ 504.496106][T10195] team0: Port device team_slave_1 added [ 504.687263][T10486] No control pipe specified [ 504.742027][T10195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.742042][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.742067][T10195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.827252][T10195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.827267][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.827288][T10195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.513393][T10195] hsr_slave_0: entered promiscuous mode [ 505.514791][T10195] hsr_slave_1: entered promiscuous mode [ 505.516817][ T5805] Bluetooth: hci1: command tx timeout [ 506.543517][T10375] chnl_net:caif_netlink_parms(): no params data found [ 508.056662][T10375] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.056849][T10375] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.057375][T10375] bridge_slave_0: entered allmulticast mode [ 508.089388][T10375] bridge_slave_0: entered promiscuous mode [ 508.150335][T10375] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.150484][T10375] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.150707][T10375] bridge_slave_1: entered allmulticast mode [ 508.185839][T10375] bridge_slave_1: entered promiscuous mode [ 508.260804][ T5805] Bluetooth: hci1: command tx timeout [ 509.072454][T10375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.143758][T10375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.807311][T10375] team0: Port device team_slave_0 added [ 509.812735][T10375] team0: Port device team_slave_1 added [ 510.081331][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.161952][ T9923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.325871][ T5805] Bluetooth: hci1: command tx timeout [ 510.403653][T10375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.403669][T10375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.403695][T10375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.621370][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.712161][T10375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.712177][T10375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.712203][T10375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.155952][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.388129][T10375] hsr_slave_0: entered promiscuous mode [ 511.389413][T10375] hsr_slave_1: entered promiscuous mode [ 511.390289][T10375] debugfs: 'hsr0' already exists in 'hsr' [ 511.390311][T10375] Cannot create hsr debugfs directory [ 511.619480][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.704107][ T9923] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.859816][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.859950][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.101058][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.101188][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.999581][T10195] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 514.071875][ T58] bridge_slave_1: left allmulticast mode [ 514.071902][ T58] bridge_slave_1: left promiscuous mode [ 514.072147][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.147345][ T58] bridge_slave_0: left allmulticast mode [ 514.147373][ T58] bridge_slave_0: left promiscuous mode [ 514.147646][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.236418][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.316406][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.359088][ T58] bond0 (unregistering): Released all slaves [ 515.408025][T10195] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 515.475557][T10195] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 515.765012][T10195] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 518.036039][ T58] hsr_slave_0: left promiscuous mode [ 518.085936][ T58] hsr_slave_1: left promiscuous mode [ 518.087055][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.087079][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.137101][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.137127][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.222538][ T58] veth1_macvtap: left promiscuous mode [ 518.222643][ T58] veth0_macvtap: left promiscuous mode [ 518.222889][ T58] veth1_vlan: left promiscuous mode [ 518.223056][ T58] veth0_vlan: left promiscuous mode [ 519.529043][ T1665] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 519.616305][ T58] team0 (unregistering): Port device team_slave_1 removed [ 519.664935][ T58] team0 (unregistering): Port device team_slave_0 removed [ 519.675943][ T1665] usb 5-1: Using ep0 maxpacket: 32 [ 519.679213][ T1665] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.679237][ T1665] usb 5-1: config 0 has no interfaces? [ 519.681459][ T1665] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 519.681503][ T1665] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.681521][ T1665] usb 5-1: Product: syz [ 519.681533][ T1665] usb 5-1: Manufacturer: syz [ 519.681544][ T1665] usb 5-1: SerialNumber: syz [ 519.689221][ T1665] usb 5-1: config 0 descriptor?? [ 520.350485][ T9923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.654151][T10375] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 520.728759][T10195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.733331][T10375] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 520.810051][T10375] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 520.876131][T10375] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 521.063122][T10195] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.092662][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.092891][ T5095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.095306][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.095432][ T5095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.493063][ T9923] veth0_vlan: entered promiscuous mode [ 521.577737][ T9923] veth1_vlan: entered promiscuous mode [ 521.675519][T10375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.776899][T10375] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.823933][ T1919] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.824114][ T1919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.855094][ T9923] veth0_macvtap: entered promiscuous mode [ 521.883624][ T1919] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.883753][ T1919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.916531][T10195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.923385][ T9923] veth1_macvtap: entered promiscuous mode [ 522.087568][ T9923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.124091][ T9923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.197340][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.203790][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.208782][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.209273][ T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.239213][ T5883] usb 5-1: USB disconnect, device number 15 [ 523.726140][ T1919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.726156][ T1919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.389813][ T1919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.389834][ T1919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.316905][T10375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.324402][T10195] veth0_vlan: entered promiscuous mode [ 525.412354][T10195] veth1_vlan: entered promiscuous mode [ 526.272830][T10195] veth0_macvtap: entered promiscuous mode [ 526.276884][T10195] veth1_macvtap: entered promiscuous mode [ 526.377281][T10195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.446926][T10195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.519915][ T5095] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.521020][ T5095] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.521238][ T5095] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.526445][ T5095] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.518835][ T1919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.518854][ T1919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.619495][T11090] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 527.621835][T11090] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 527.624156][T11090] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 527.624673][T11090] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 527.624753][T11090] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 527.719967][T11090] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 527.762148][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.762166][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.837232][T11090] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 527.837314][T11090] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 527.978772][T11090] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 528.065964][T10375] veth0_vlan: entered promiscuous mode [ 528.123745][T10375] veth1_vlan: entered promiscuous mode [ 528.440882][T10375] veth0_macvtap: entered promiscuous mode [ 528.459582][T10375] veth1_macvtap: entered promiscuous mode [ 528.553319][T10375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.611640][T10375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.673211][ T156] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.688802][ T156] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.689712][ T156] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.689914][ T156] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.352864][ T1231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.352886][ T1231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.747554][ T5809] Bluetooth: hci3: command 0x0c1a tx timeout [ 529.759248][ T5809] Bluetooth: hci4: command 0x0419 tx timeout [ 529.759288][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout [ 529.759315][ T5809] Bluetooth: hci2: command 0x0c1a tx timeout [ 529.795048][ T1919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.795069][ T1919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.916249][ T5805] Bluetooth: hci1: command 0x0c1a tx timeout [ 530.860226][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 530.918245][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 530.920887][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 530.922210][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 530.923228][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 530.932034][T11171] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1415'. [ 530.998390][ T37] audit: type=1326 audit(1773487551.246:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11170 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac93b7c799 code=0x7fc00000 [ 530.998438][ T37] audit: type=1326 audit(1773487551.246:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11170 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac93b7c799 code=0x7fc00000 [ 530.998461][ T37] audit: type=1326 audit(1773487551.246:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11170 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac93b7c799 code=0x7fc00000 [ 530.998481][ T37] audit: type=1326 audit(1773487551.246:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11170 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac93b7c799 code=0x7fc00000 [ 530.998502][ T37] audit: type=1326 audit(1773487551.246:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11170 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac93b7c799 code=0x7fc00000 [ 530.998522][ T37] audit: type=1326 audit(1773487551.246:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11170 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac93b7c799 code=0x7fc00000 [ 530.998543][ T37] audit: type=1326 audit(1773487551.246:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11170 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac93b7c799 code=0x7fc00000 [ 530.998563][ T37] audit: type=1326 audit(1773487551.246:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11170 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac93b7c799 code=0x7fc00000 [ 530.998583][ T37] audit: type=1326 audit(1773487551.246:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11170 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac93b7c799 code=0x7fc00000 [ 530.998604][ T37] audit: type=1326 audit(1773487551.246:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11170 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac93b7c799 code=0x7fc00000 [ 531.825752][ T5883] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 531.859636][ T5805] Bluetooth: hci3: command 0x0c1a tx timeout [ 532.075924][ T5883] usb 7-1: Using ep0 maxpacket: 32 [ 532.078042][ T5883] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 532.080605][ T5883] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 532.080630][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.080725][ T5883] usb 7-1: Product: syz [ 532.080740][ T5883] usb 7-1: Manufacturer: syz [ 532.080752][ T5883] usb 7-1: SerialNumber: syz [ 532.531860][ T5805] Bluetooth: hci1: command 0x0c1a tx timeout [ 532.849592][ T5883] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 532.849691][ T5883] imon 7-1:155.0: unable to initialize intf0, err -19 [ 532.849706][ T5883] imon:imon_probe: failed to initialize context! [ 532.849718][ T5883] imon 7-1:155.0: unable to register, err -19 [ 533.036103][ T5805] Bluetooth: hci5: command tx timeout [ 533.116925][T11197] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 533.117117][T11197] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 533.153512][T11197] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 533.154030][T11197] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 533.154878][T11197] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 533.154936][T11197] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 533.352254][T11197] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 533.745730][ T5883] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 533.900384][ T5883] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.900451][ T5883] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 533.903059][ T5883] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 533.903086][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 533.903104][ T5883] usb 6-1: Product: syz [ 533.903116][ T5883] usb 6-1: Manufacturer: syz [ 533.903136][ T5883] usb 6-1: SerialNumber: syz [ 534.225750][ T5095] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.495323][T10832] usb 6-1: USB disconnect, device number 4 [ 534.776120][T10832] usb 7-1: USB disconnect, device number 2 [ 534.784454][ T5095] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.195709][ T5809] Bluetooth: hci4: command 0x0419 tx timeout [ 535.195751][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout [ 535.205737][ T5805] Bluetooth: hci5: command 0x040f tx timeout [ 535.206049][ T5805] Bluetooth: hci1: command 0x0c1a tx timeout [ 535.206078][ T5805] Bluetooth: hci3: command 0x0c1a tx timeout [ 535.443446][ T5095] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.544398][ T5860] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 535.930734][ T5860] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.930765][ T5860] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 535.944101][ T5860] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 535.944119][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 535.944129][ T5860] usb 6-1: Product: syz [ 535.950108][ T5860] usb 6-1: Manufacturer: syz [ 535.950127][ T5860] usb 6-1: SerialNumber: syz [ 536.104050][T11248] bridge0: port 3(erspan0) entered blocking state [ 536.104112][T11248] bridge0: port 3(erspan0) entered disabled state [ 536.104271][T11248] erspan0: entered allmulticast mode [ 536.257182][T11248] erspan0: entered promiscuous mode [ 536.257596][T11248] bridge0: port 3(erspan0) entered blocking state [ 536.257659][T11248] bridge0: port 3(erspan0) entered forwarding state [ 536.326071][T11176] chnl_net:caif_netlink_parms(): no params data found [ 536.664067][ T5860] usb 6-1: USB disconnect, device number 5 [ 536.699556][ T5095] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.279282][ T5809] Bluetooth: hci5: command 0x040f tx timeout [ 539.136208][T11176] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.136330][T11176] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.136562][T11176] bridge_slave_0: entered allmulticast mode [ 539.145320][T11176] bridge_slave_0: entered promiscuous mode [ 539.206647][T11176] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.206757][T11176] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.206991][T11176] bridge_slave_1: entered allmulticast mode [ 539.209305][T11176] bridge_slave_1: entered promiscuous mode [ 539.355764][ T5809] Bluetooth: hci5: command 0x040f tx timeout [ 539.390181][T11176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.402951][T11176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.506724][T11176] team0: Port device team_slave_0 added [ 539.510233][T11176] team0: Port device team_slave_1 added [ 539.694294][T11281] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 539.694555][T11281] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 539.694795][T11281] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 539.695049][T11281] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 539.695328][T11281] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 539.877929][T11176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.877996][T11176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.878022][T11176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.975034][T11176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.975051][T11176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.975076][T11176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.121807][ T5809] Bluetooth: hci5: command 0x040f tx timeout [ 542.121850][ T5809] Bluetooth: hci1: command 0x0c1a tx timeout [ 542.121877][ T5809] Bluetooth: hci3: command 0x0c1a tx timeout [ 542.121903][ T5809] Bluetooth: hci4: command 0x0419 tx timeout [ 542.122898][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout [ 543.705861][ T5095] erspan0: left allmulticast mode [ 543.705879][ T5095] erspan0: left promiscuous mode [ 543.706025][ T5095] bridge0: port 3(erspan0) entered disabled state [ 544.303965][ T5805] Bluetooth: hci5: command 0x040f tx timeout [ 544.702444][ T5095] bridge_slave_1: left allmulticast mode [ 544.702474][ T5095] bridge_slave_1: left promiscuous mode [ 544.702722][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.758052][ T5095] bridge_slave_0: left allmulticast mode [ 545.758074][ T5095] bridge_slave_0: left promiscuous mode [ 545.758227][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.137740][ T5095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.230182][ T5095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.268981][ T5095] bond0 (unregistering): Released all slaves [ 548.406874][T11325] bridge0: port 3(erspan0) entered blocking state [ 548.406934][T11325] bridge0: port 3(erspan0) entered disabled state [ 548.407067][T11325] erspan0: entered allmulticast mode [ 548.424112][T11325] erspan0: entered promiscuous mode [ 549.087986][T11176] hsr_slave_0: entered promiscuous mode [ 549.230664][T11176] hsr_slave_1: entered promiscuous mode [ 549.246629][T11176] debugfs: 'hsr0' already exists in 'hsr' [ 549.246702][T11176] Cannot create hsr debugfs directory [ 549.890159][T11347] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 549.891621][T11347] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 549.909119][T11347] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 549.914472][T11347] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 549.931837][T11347] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 551.944063][ T5805] Bluetooth: hci1: command 0x0c1a tx timeout [ 551.944108][ T5805] Bluetooth: hci3: command 0x0c1a tx timeout [ 551.944135][ T5805] Bluetooth: hci4: command 0x0419 tx timeout [ 551.944160][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 551.997702][ T5809] Bluetooth: hci5: command 0x040f tx timeout [ 552.252591][T11415] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 552.252619][T11415] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 552.252758][T11415] vhci_hcd vhci_hcd.0: Device attached [ 552.257952][T11415] random: crng reseeded on system resumption [ 552.430146][T11419] overlayfs: failed to resolve './file0': -2 [ 552.649577][ T5960] usb 46-1: SetAddress Request (2) to port 0 [ 552.649676][ T5960] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 552.783133][T11416] vhci_hcd: connection reset by peer [ 552.824684][ T1421] vhci_hcd vhci_hcd.6: stop threads [ 552.824704][ T1421] vhci_hcd vhci_hcd.6: release socket [ 552.824757][ T1421] vhci_hcd vhci_hcd.6: disconnect device [ 555.895011][ T5095] hsr_slave_0: left promiscuous mode [ 555.928331][ T5095] hsr_slave_1: left promiscuous mode [ 555.929298][ T5095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.929323][ T5095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.986965][ T5095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.987009][ T5095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.112662][ T5095] veth1_macvtap: left promiscuous mode [ 556.112730][ T5095] veth0_macvtap: left promiscuous mode [ 556.112872][ T5095] veth1_vlan: left promiscuous mode [ 556.112973][ T5095] veth0_vlan: left promiscuous mode [ 557.675910][ T5960] usb 46-1: device descriptor read/8, error -110 [ 558.167625][ T5960] usb usb46-port1: attempt power cycle [ 559.505812][ T5960] usb usb46-port1: unable to enumerate USB device [ 560.647069][ T5095] team0 (unregistering): Port device team_slave_1 removed [ 560.706428][ T5095] team0 (unregistering): Port device team_slave_0 removed [ 561.988589][T11439] bridge0: port 3(erspan0) entered blocking state [ 561.988711][T11439] bridge0: port 3(erspan0) entered disabled state [ 561.988855][T11439] erspan0: entered allmulticast mode [ 561.990193][T11439] erspan0: entered promiscuous mode [ 561.990575][T11439] bridge0: port 3(erspan0) entered blocking state [ 561.990636][T11439] bridge0: port 3(erspan0) entered forwarding state [ 562.097437][T11465] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 562.097604][T11465] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 562.097755][T11465] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 562.097907][T11465] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 562.098072][T11465] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 562.882415][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.882483][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.156421][ T5809] Bluetooth: hci5: command 0x040f tx timeout [ 564.156464][ T5809] Bluetooth: hci1: command 0x0c1a tx timeout [ 564.156492][ T5809] Bluetooth: hci3: command 0x0c1a tx timeout [ 564.156519][ T5809] Bluetooth: hci4: command 0x0419 tx timeout [ 564.156551][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout [ 566.824620][T11513] netlink: 168 bytes leftover after parsing attributes in process `syz.9.1473'. [ 566.855312][T11504] 9p: Bad value for 'rfdno' [ 567.006346][ T37] kauditd_printk_skb: 26 callbacks suppressed [ 567.006359][ T37] audit: type=1326 audit(1773487587.246:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11509 comm="syz.9.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04aa56c799 code=0x7fc00000 [ 567.730274][ T37] audit: type=1326 audit(1773487587.886:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11509 comm="syz.9.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f04aa50db19 code=0x7fc00000 [ 568.764945][T11176] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 568.810323][T11533] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 568.811221][T11533] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 568.811867][T11533] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 568.812493][T11533] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 568.812811][T11533] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 568.872981][T11176] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 568.939871][T11176] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 569.002117][T11176] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 571.284466][ T5805] Bluetooth: hci5: command 0x040f tx timeout [ 571.284517][ T5805] Bluetooth: hci1: command 0x0c1a tx timeout [ 571.284545][ T5805] Bluetooth: hci3: command 0x0c1a tx timeout [ 571.284571][ T5805] Bluetooth: hci4: command 0x0419 tx timeout [ 571.284597][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 572.114256][T11176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.312115][T11176] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.368526][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.368802][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.447908][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.448097][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.942813][T11176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.280873][T11176] veth0_vlan: entered promiscuous mode [ 580.350338][T11176] veth1_vlan: entered promiscuous mode [ 581.369221][T11176] veth0_macvtap: entered promiscuous mode [ 581.372384][T11176] veth1_macvtap: entered promiscuous mode [ 581.643308][T11176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.701870][T11176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.743752][ T8131] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.743799][ T8131] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.743831][ T8131] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.743862][ T8131] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.995701][ T1229] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 585.012479][ T8130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.012501][ T8130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.145712][ T1229] usb 5-1: Using ep0 maxpacket: 8 [ 585.150216][ T1229] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 585.150252][ T1229] usb 5-1: can't read configurations, error -61 [ 585.270336][ T8126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.270358][ T8126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.285770][ T1229] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 585.415182][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 585.432199][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 585.448580][ T1229] usb 5-1: Using ep0 maxpacket: 8 [ 585.449502][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 585.451276][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 585.454096][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 585.510257][ T1229] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 585.510297][ T1229] usb 5-1: can't read configurations, error -61 [ 585.516289][ T1229] usb usb5-port1: attempt power cycle [ 585.855751][ T1229] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 585.882885][ T1229] usb 5-1: Using ep0 maxpacket: 8 [ 585.894906][ T1229] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 585.894944][ T1229] usb 5-1: can't read configurations, error -61 [ 586.044832][ T1229] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 586.056281][ T1229] usb 5-1: Using ep0 maxpacket: 8 [ 586.062224][ T1229] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 586.062261][ T1229] usb 5-1: can't read configurations, error -61 [ 586.062794][ T1229] usb usb5-port1: unable to enumerate USB device [ 586.454234][T11655] overlayfs: missing 'lowerdir' [ 587.516087][ T5805] Bluetooth: hci2: command tx timeout [ 588.305051][T11635] chnl_net:caif_netlink_parms(): no params data found [ 588.743605][T11635] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.763656][T11635] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.763917][T11635] bridge_slave_0: entered allmulticast mode [ 588.798582][T11635] bridge_slave_0: entered promiscuous mode [ 588.812047][T11635] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.812166][T11635] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.812416][T11635] bridge_slave_1: entered allmulticast mode [ 588.845170][T11635] bridge_slave_1: entered promiscuous mode [ 588.910438][T11635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.914633][T11635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.975071][T11635] team0: Port device team_slave_0 added [ 589.036415][T11635] team0: Port device team_slave_1 added [ 591.030012][T11635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.030029][T11635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.030053][T11635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.032154][T11635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.032167][T11635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.032191][T11635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.730427][ T5805] Bluetooth: hci2: command tx timeout [ 598.713139][ T5809] Bluetooth: hci2: command tx timeout [ 600.013877][T11707] overlayfs: missing 'lowerdir' [ 600.068712][T11707] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 600.135626][T11710] binder: 11709:11710 ioctl c0306201 200000000040 returned -22 [ 600.172601][T11711] overlay: Unknown parameter '/' [ 600.211302][T11711] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 600.296743][T11635] hsr_slave_0: entered promiscuous mode [ 600.298103][T11635] hsr_slave_1: entered promiscuous mode [ 600.299036][T11635] debugfs: 'hsr0' already exists in 'hsr' [ 600.299060][T11635] Cannot create hsr debugfs directory [ 600.591299][ T5883] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 600.715751][ T5809] Bluetooth: hci2: command tx timeout [ 601.117807][ T5883] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 601.117845][ T5883] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 601.117878][ T5883] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 601.295918][ T5883] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 601.295983][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 601.296039][ T5883] usb 7-1: Product: syz [ 601.296086][ T5883] usb 7-1: Manufacturer: syz [ 601.296100][ T5883] usb 7-1: SerialNumber: syz [ 602.213605][ T5883] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 602.461813][ T8462] usb 7-1: USB disconnect, device number 3 [ 602.480971][ T8462] usblp0: removed [ 612.914799][ T1229] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 613.556879][ T1229] usb 10-1: Using ep0 maxpacket: 8 [ 615.450849][ T1229] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 615.450904][ T1229] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 615.450925][ T1229] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 615.450947][ T1229] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 615.450968][ T1229] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 615.451007][ T1229] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 615.451027][ T1229] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.924269][ T1229] usb 10-1: can't set config #16, error -71 [ 619.051210][ T1229] usb 10-1: USB disconnect, device number 2 [ 620.272018][T11802] 9pnet_virtio: no channels available for device syz [ 620.464463][T11803] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 620.464887][T11803] overlayfs: overlapping lowerdir path [ 622.417169][ T1919] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.007038][T11831] random: crng reseeded on system resumption [ 623.065529][T11828] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 623.065549][T11828] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 623.092642][T11828] vhci_hcd vhci_hcd.0: Device attached [ 623.386247][ T1665] usb 50-1: SetAddress Request (10) to port 0 [ 623.386300][ T1665] usb 50-1: new SuperSpeed USB device number 10 using vhci_hcd [ 623.512309][ T1919] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.575760][T11829] vhci_hcd: connection reset by peer [ 623.596159][ T1231] vhci_hcd vhci_hcd.8: stop threads [ 623.596177][ T1231] vhci_hcd vhci_hcd.8: release socket [ 623.596218][ T1231] vhci_hcd vhci_hcd.8: disconnect device [ 623.940769][ T1919] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.323445][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.323506][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.565769][ T5870] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 624.715817][ T5870] usb 7-1: Using ep0 maxpacket: 8 [ 624.717595][ T5870] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 624.717628][ T5870] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 624.717640][ T5870] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 624.717652][ T5870] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 624.717663][ T5870] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 624.717687][ T5870] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 624.717698][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.995757][ T5870] usb 7-1: usb_control_msg returned -32 [ 624.995800][ T5870] usbtmc 7-1:16.0: can't read capabilities [ 625.370443][ T1919] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.463228][T11870] bridge0: port 3(erspan0) entered blocking state [ 627.469834][T11870] bridge0: port 3(erspan0) entered disabled state [ 627.477077][T11870] erspan0: entered allmulticast mode [ 627.626801][ T5870] usb 7-1: USB disconnect, device number 4 [ 627.648776][T11870] erspan0: entered promiscuous mode [ 627.736701][T11870] bridge0: port 3(erspan0) entered blocking state [ 627.740149][T11870] bridge0: port 3(erspan0) entered forwarding state [ 628.131706][T11878] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 628.131776][T11878] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 628.133266][T11878] vhci_hcd vhci_hcd.0: Device attached [ 628.475806][ T1665] usb 50-1: device descriptor read/8, error -110 [ 628.576256][ T809] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 628.769117][T11879] vhci_hcd: connection reset by peer [ 628.787908][ T147] vhci_hcd vhci_hcd.6: stop threads [ 628.787965][ T147] vhci_hcd vhci_hcd.6: release socket [ 628.788213][ T147] vhci_hcd vhci_hcd.6: disconnect device [ 629.579489][ T1665] usb usb50-port1: attempt power cycle [ 629.592030][T11887] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1539'. [ 629.723263][ T37] audit: type=1800 audit(1773487649.966:50): pid=11891 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.1540" name="bus" dev="tmpfs" ino=169 res=0 errno=0 [ 629.925944][ T5883] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 630.081644][ T5883] usb 10-1: Using ep0 maxpacket: 32 [ 630.096848][ T5883] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 630.096890][ T5883] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 630.096926][ T5883] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 630.096943][ T5883] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 630.096956][ T5883] usb 10-1: config 0 interface 0 has no altsetting 0 [ 630.100982][ T5883] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 630.101009][ T5883] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 630.101027][ T5883] usb 10-1: Product: syz [ 630.101040][ T5883] usb 10-1: Manufacturer: syz [ 630.101051][ T5883] usb 10-1: SerialNumber: syz [ 630.104072][ T5883] usb 10-1: config 0 descriptor?? [ 630.140931][ T1665] usb usb50-port1: unable to enumerate USB device [ 630.159439][ T5883] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 630.221140][ T5883] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 630.518284][ T1229] usb 10-1: USB disconnect, device number 3 [ 630.518430][ C0] ldusb 10-1:0.0: usb_submit_urb failed (-19) [ 630.545218][T11894] ldusb 10-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 630.580017][ T1229] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 630.934856][ T1919] erspan0: left allmulticast mode [ 630.934885][ T1919] erspan0: left promiscuous mode [ 630.935126][ T1919] bridge0: port 3(erspan0) entered disabled state [ 631.010871][ T1919] bridge_slave_1: left allmulticast mode [ 631.010889][ T1919] bridge_slave_1: left promiscuous mode [ 631.011062][ T1919] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.099382][ T1919] bridge_slave_0: left allmulticast mode [ 631.099409][ T1919] bridge_slave_0: left promiscuous mode [ 631.099627][ T1919] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.076288][ T1919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.166299][ T1919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.187653][ T1919] bond0 (unregistering): Released all slaves [ 633.274909][T11907] pim6reg: entered allmulticast mode [ 633.280777][T11903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.280807][T11903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.317185][T11903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.317213][T11903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.472783][T11926] process 'syz.6.1552' launched '/dev/fd/3' with NULL argv: empty string added [ 633.536447][T11635] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 633.665793][ T809] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 633.724630][T11929] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 633.724664][T11929] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 633.725067][T11929] vhci_hcd vhci_hcd.0: Device attached [ 634.275941][ T1665] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 634.654317][T11930] vhci_hcd: connection reset by peer [ 634.699990][ T13] vhci_hcd vhci_hcd.4: stop threads [ 634.700049][ T13] vhci_hcd vhci_hcd.4: release socket [ 634.702281][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 635.395547][T11939] comedi comedi3: comedi_test: 20263 microvolt, 2 microsecond waveform attached [ 635.695259][T11635] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 635.809709][T11635] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 636.045888][ T809] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 636.087689][T11635] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 636.195807][ T809] usb 5-1: Using ep0 maxpacket: 32 [ 636.202253][ T809] usb 5-1: config 0 has no interfaces? [ 636.207734][ T809] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 636.207762][ T809] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 636.207780][ T809] usb 5-1: Product: syz [ 636.207793][ T809] usb 5-1: Manufacturer: syz [ 636.207806][ T809] usb 5-1: SerialNumber: syz [ 636.218515][ T809] usb 5-1: config 0 descriptor?? [ 637.710613][ T1919] hsr_slave_0: left promiscuous mode [ 637.711271][ T5883] usb 5-1: USB disconnect, device number 20 [ 637.777284][ T1919] hsr_slave_1: left promiscuous mode [ 637.778372][ T1919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.778396][ T1919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.875003][ T1919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.875067][ T1919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.059464][T11999] SQUASHFS error: Failed to read block 0x0: -5 [ 639.078231][ T1919] veth1_macvtap: left promiscuous mode [ 639.078333][ T1919] veth0_macvtap: left promiscuous mode [ 639.078594][ T1919] veth1_vlan: left promiscuous mode [ 639.078764][ T1919] veth0_vlan: left promiscuous mode [ 639.135815][ T5883] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 639.208708][T12001] loop8: detected capacity change from 0 to 8 [ 639.249394][T11789] Dev loop8: unable to read RDB block 8 [ 639.249453][T11789] loop8: unable to read partition table [ 639.249690][T11789] loop8: partition table beyond EOD, truncated [ 639.269401][T12001] Dev loop8: unable to read RDB block 8 [ 639.269445][T12001] loop8: unable to read partition table [ 639.269648][T12001] loop8: partition table beyond EOD, truncated [ 639.285748][ T5883] usb 7-1: Using ep0 maxpacket: 8 [ 639.290844][T12001] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 639.300187][ T5883] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 639.300211][ T5883] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.300230][ T5883] usb 7-1: config 0 has no interface number 0 [ 639.300272][ T5883] usb 7-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 639.300291][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.373832][ T5883] usb 7-1: config 0 descriptor?? [ 639.432528][ T1665] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 639.795789][ T5960] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 639.820418][ T5883] usb 7-1: USB disconnect, device number 5 [ 639.955725][ T5960] usb 10-1: Using ep0 maxpacket: 16 [ 639.964650][ T5960] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 639.975709][ T5960] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 639.975737][ T5960] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.975754][ T5960] usb 10-1: Product: syz [ 639.975766][ T5960] usb 10-1: Manufacturer: syz [ 639.975778][ T5960] usb 10-1: SerialNumber: syz [ 640.027343][ T5960] usb 10-1: config 0 descriptor?? [ 640.049400][ T5960] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 640.049458][ T5960] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 640.244860][T12015] loop8: detected capacity change from 0 to 8 [ 640.304172][T12015] Dev loop8: unable to read RDB block 8 [ 640.304225][T12015] loop8: unable to read partition table [ 640.304643][T12015] loop8: partition table beyond EOD, truncated [ 640.304690][T12015] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 640.656665][ T5960] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 640.804077][ T1919] team0 (unregistering): Port device team_slave_1 removed [ 640.858898][ T1919] team0 (unregistering): Port device team_slave_0 removed [ 641.085717][ T36] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 641.240897][ T36] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 641.240931][ T36] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 641.240969][ T36] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 641.240989][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.252266][T12019] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 641.265280][ T36] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 641.643098][ T5960] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 641.643131][ T5960] em28xx 10-1:0.0: board has no eeprom [ 641.885966][ T5960] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 641.886132][ T5960] em28xx 10-1:0.0: dvb set to bulk mode. [ 641.892581][ T1665] em28xx 10-1:0.0: Binding DVB extension [ 642.006397][ T5960] usb 10-1: USB disconnect, device number 4 [ 642.033276][ T5960] em28xx 10-1:0.0: Disconnecting em28xx [ 642.163209][T11635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.164952][ T36] usb 7-1: USB disconnect, device number 6 [ 642.228582][ T1665] em28xx 10-1:0.0: Registering input extension [ 642.229407][ T5960] em28xx 10-1:0.0: Closing input extension [ 642.290146][T11635] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.336028][ T5960] em28xx 10-1:0.0: Freeing device [ 642.387275][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.387381][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.389137][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.389236][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.735728][ T5960] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 642.895756][ T5960] usb 9-1: Using ep0 maxpacket: 16 [ 642.899955][ T5960] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.899981][ T5960] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 642.900016][ T5960] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 642.900037][ T5960] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.951925][ T5960] usb 9-1: config 0 descriptor?? [ 643.059669][ T5809] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 643.181756][ T5809] Bluetooth: hci5: unexpected subevent 0x0e length: 30 > 15 [ 643.181804][ T5809] Bluetooth: hci5: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 643.184362][ T1665] usb 9-1: USB disconnect, device number 9 [ 643.293648][ T5960] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 643.455743][ T5960] usb 10-1: Using ep0 maxpacket: 32 [ 643.457620][ T5960] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 643.457635][ T5960] usb 10-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 643.457647][ T5960] usb 10-1: config 0 interface 0 has no altsetting 0 [ 643.459845][ T5960] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 643.459860][ T5960] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.459870][ T5960] usb 10-1: Product: syz [ 643.459877][ T5960] usb 10-1: Manufacturer: syz [ 643.459884][ T5960] usb 10-1: SerialNumber: syz [ 643.547502][ T5960] usb 10-1: config 0 descriptor?? [ 643.703731][T11635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.195978][ T5960] gs_usb 10-1:0.0: Configuring for 174 interfaces [ 644.237841][T11635] veth0_vlan: entered promiscuous mode [ 645.319809][ T5960] gs_usb 10-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 645.667781][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 645.701447][ T5805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 645.704593][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 645.725118][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 645.733818][ T5805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 645.749383][ T5960] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -71 [ 645.774616][ T5960] usb 10-1: USB disconnect, device number 5 [ 646.285748][ T809] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 646.415763][ T5860] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 646.451046][ T809] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 646.451071][ T809] usb 10-1: config 0 has no interface number 0 [ 646.451112][ T809] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 646.451128][ T809] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 646.451140][ T809] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 646.451152][ T809] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 646.451165][ T809] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 646.451177][ T809] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 646.451200][ T809] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 646.451211][ T809] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.458774][ T809] usb 10-1: config 0 descriptor?? [ 646.486595][T12083] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 646.486782][T12083] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 646.503153][ T809] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 646.586741][ T5860] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.586774][ T5860] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.586811][ T5860] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 646.586832][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.630298][ T5860] usb 7-1: config 0 descriptor?? [ 646.721252][T12083] ldusb 10-1:0.55: Write buffer overflow, 1 bytes dropped [ 646.737735][ T1665] usb 10-1: USB disconnect, device number 6 [ 646.814855][ T1665] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 647.054949][ T5860] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 647.063785][ T5860] hid-steam 0003:28DE:1142.0005: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 647.128092][T12074] chnl_net:caif_netlink_parms(): no params data found [ 647.136210][ T5860] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected [ 647.172231][ T5860] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 647.207524][ T5860] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 647.574377][T12085] capability: warning: `syz.6.1607' uses deprecated v2 capabilities in a way that may be insecure [ 647.836339][ T5809] Bluetooth: hci4: command tx timeout [ 648.309087][T12074] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.309346][T12074] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.309530][T12074] bridge_slave_0: entered allmulticast mode [ 648.311079][T12074] bridge_slave_0: entered promiscuous mode [ 648.313542][T12074] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.315041][T12074] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.315181][T12074] bridge_slave_1: entered allmulticast mode [ 648.331643][T12074] bridge_slave_1: entered promiscuous mode [ 648.345851][ T8462] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 648.535697][ T8462] usb 9-1: Using ep0 maxpacket: 16 [ 648.537473][ T8462] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.537503][ T8462] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.537523][ T8462] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 648.537548][ T8462] usb 9-1: config 0 interface 0 has no altsetting 0 [ 648.537578][ T8462] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 648.537598][ T8462] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.541239][ T8462] usb 9-1: config 0 descriptor?? [ 648.885426][T12074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.039973][T12126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1619'. [ 649.040008][T12126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1619'. [ 649.117200][ T36] usb 7-1: USB disconnect, device number 7 [ 649.161409][ T36] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected [ 649.204692][ T8462] usb 9-1: USB disconnect, device number 10 [ 649.459446][T12074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.600111][T12074] team0: Port device team_slave_0 added [ 649.615942][T12074] team0: Port device team_slave_1 added [ 649.683952][T12142] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1626'. [ 649.756967][T12074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.756984][T12074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.757007][T12074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.759181][T12074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.759193][T12074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 wo[ 649.759193][T12074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.759217][T12074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.837655][ T8462] Oops: general protection fault, probably for non-canonical address 0xdffffc000000006b: 0000 [#1] SMP KASAN PTI [ 649.837818][ T8462] KASAN: null-ptr-deref in range [0x0000000000000358-0x000000000000035f] [ 649.837911][ T8462] CPU: 1 UID: 0 PID: 8462 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 649.837935][ T8462] Tainted: [L]=SOFTLOCKUP [ 649.837942][ T8462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 649.837952][ T8462] Workqueue: events l2cap_info_timeout [ 649.838106][ T8462] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 649.838222][ T8462] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 649.838236][ T8462] RSP: 0018:ffffc900042f7808 EFLAGS: 00010202 [ 649.838347][ T8462] RAX: dffffc0000000000 RBX: ffffffff88ecb3ee RCX: 0000000080000001 [ 649.838360][ T8462] RDX: 0000000000000000 RSI: ffffffff88ecb3ee RDI: 000000000000006b [ 649.838371][ T8462] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 649.838381][ T8462] R10: dffffc0000000000 R11: ffffffff8a22d060 R12: 0000000000000000 [ 649.838392][ T8462] R13: 0000000000000358 R14: 0000000000000358 R15: 0000000000000001 [ 649.838403][ T8462] FS: 0000000000000000(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000 [ 649.838417][ T8462] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 649.838429][ T8462] CR2: 000000110c37fa21 CR3: 000000003379e000 CR4: 00000000003526f0 [ 649.838449][ T8462] Call Trace: [ 649.838456][ T8462] [ 649.838463][ T8462] __kasan_check_byte+0x12/0x40 [ 649.838515][ T8462] lock_acquire+0x79/0x2e0 [ 649.838557][ T8462] lock_sock_nested+0x3e/0x130 [ 649.838650][ T8462] ? l2cap_sock_ready_cb+0x46/0x160 [ 649.838677][ T8462] l2cap_sock_ready_cb+0x46/0x160 [ 649.838697][ T8462] l2cap_conn_start+0x779/0xff0 [ 649.838719][ T8462] ? __pfx_l2cap_conn_start+0x10/0x10 [ 649.838741][ T8462] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 649.838851][ T8462] ? lockdep_hardirqs_on+0x7a/0x110 [ 649.838936][ T8462] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 649.838959][ T8462] ? mutex_lock_nested+0x152/0x1d0 [ 649.838977][ T8462] ? l2cap_info_timeout+0x60/0xa0 [ 649.838993][ T8462] l2cap_info_timeout+0x68/0xa0 [ 649.839009][ T8462] ? process_scheduled_works+0xa8d/0x18c0 [ 649.839036][ T8462] process_scheduled_works+0xb6e/0x18c0 [ 649.839068][ T8462] ? __pfx_process_scheduled_works+0x10/0x10 [ 649.839090][ T8462] ? assign_work+0x3d5/0x5e0 [ 649.839111][ T8462] worker_thread+0xa53/0xfc0 [ 649.839142][ T8462] kthread+0x388/0x470 [ 649.839159][ T8462] ? __pfx_worker_thread+0x10/0x10 [ 649.839178][ T8462] ? __pfx_kthread+0x10/0x10 [ 649.839194][ T8462] ret_from_fork+0x51e/0xb90 [ 649.839230][ T8462] ? __pfx_ret_from_fork+0x10/0x10 [ 649.839249][ T8462] ? __switch_to+0xc7d/0x1450 [ 649.839287][ T8462] ? __pfx_kthread+0x10/0x10 [ 649.839303][ T8462] ret_from_fork_asm+0x1a/0x30 [ 649.839338][ T8462] [ 649.839347][ T8462] Modules linked in: [ 649.839383][ T8462] ---[ end trace 0000000000000000 ]--- [ 649.840309][ T8462] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 649.840334][ T8462] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 649.840348][ T8462] RSP: 0018:ffffc900042f7808 EFLAGS: 00010202 [ 649.840364][ T8462] RAX: dffffc0000000000 RBX: ffffffff88ecb3ee RCX: 0000000080000001 [ 649.840376][ T8462] RDX: 0000000000000000 RSI: ffffffff88ecb3ee RDI: 000000000000006b [ 649.840388][ T8462] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 649.840398][ T8462] R10: dffffc0000000000 R11: ffffffff8a22d060 R12: 0000000000000000 [ 649.840410][ T8462] R13: 0000000000000358 R14: 0000000000000358 R15: 0000000000000001 [ 649.840421][ T8462] FS: 0000000000000000(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000 [ 649.840435][ T8462] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 649.840447][ T8462] CR2: 000000110c37fa21 CR3: 0000000039980000 CR4: 00000000003526f0 [ 649.840472][ T8462] Kernel panic - not syncing: Fatal exception [ 649.840730][ T8462] Kernel Offset: disabled