last executing test programs: 12m10.662772515s ago: executing program 32 (id=3652): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 10m46.405617884s ago: executing program 33 (id=3926): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r2, 0x0, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = inotify_init1(0x800) inotify_add_watch(r3, 0x0, 0x60000526) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044010) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xfdb, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) io_setup(0x8, &(0x7f0000000600)) 8m56.308681898s ago: executing program 34 (id=4218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x6d5, 0x4) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 8m47.3276768s ago: executing program 35 (id=4254): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ip6tnl0\x00', {0x2, 0x4e21, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'ip6tnl0\x00', {0x2, 0x4e23, @loopback}}) 7m38.828356759s ago: executing program 36 (id=4393): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000240)={0x20, 0x17, 0x3, 't.|'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="20010d"], 0x0}) 5m47.163594056s ago: executing program 37 (id=4697): bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000)) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, 0x0, 0x0, 0x51, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0x102) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x280800) getpgrp(0x0) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x1000) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 5m12.438543816s ago: executing program 38 (id=4750): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000940)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@orlov}, {@noauto_da_alloc}, {@jqfmt_vfsv1}, {@usrjquota}], [{@audit}, {@context={'context', 0x3d, 'system_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'fd\x00'}}]}, 0xff, 0x451, &(0x7f0000001740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x7, 0x4) 3m15.560542004s ago: executing program 39 (id=4935): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d000000010902"], 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@empty, @in=@private=0xa010100, 0x4e22, 0x0, 0x4e24, 0x5, 0xa, 0x20, 0x80}, {0x10, 0x1, 0x1000, 0x4, 0xe1, 0x5, 0xffffffffffffffff, 0x10001}, {0x6, 0x796f, 0x9, 0xd58}, 0x0, 0x0, 0x3, 0x1, 0x3, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x4d5, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3501, 0x0, 0x1, 0xfe, 0x9, 0x9, 0x7}}, 0xe8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f0000000200)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m38.622568992s ago: executing program 9 (id=4998): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000000)='cifs\x00', 0x1) r2 = add_key(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000), 0x80) keyctl$invalidate(0x15, r2) syslog(0x3, &(0x7f0000000140)=""/4096, 0x1000) 2m36.59410154s ago: executing program 9 (id=5000): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getitimer(0x1, 0x0) dup2(r2, r1) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) ioctl$MON_IOCG_STATS(r3, 0x80089203, 0x0) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x6, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @generic={0x5f}, @exit]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x18}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0xa, 0x5, 0xfff, 0x80000000, 0x8, 0x0, 0x200, 0x9}}) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2m34.123461876s ago: executing program 9 (id=5002): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 2m33.834463642s ago: executing program 2 (id=5003): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) accept$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x2000) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, 0x0) mq_open(0x0, 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 2m33.172928373s ago: executing program 9 (id=5005): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x427a7000) write$cgroup_devices(r2, 0x0, 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="0200000000000000b702000014000000b70300003f0000008500000083000000bf0920000000000055490100000000009500000000000000bf91000000000000b7020000000000008500"], 0x0, 0xb, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) read$char_usb(0xffffffffffffffff, &(0x7f00000002c0)=""/151, 0x97) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2m28.880666485s ago: executing program 2 (id=5007): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000500)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000ac0)={0x34, &(0x7f0000000800)={0x20, 0x0, 0x6b, "f02f5c59c32a116e485a68ad4a3dc16afc18594d8420f91673534da423f9d3617a9edc657a178c2dd994e184e9cdd2e3dce81cfa99d31a9ba52b6a763e95fe5a042fddf11dd2c4c1facd74bc9155fb36a2fd51ecc65d6fe3e5c54f2324cb99802e4a8ff9ab8ab882d6bf96"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m27.470819961s ago: executing program 9 (id=5008): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x109, &(0x7f0000006680)) timer_create(0x8, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000180)) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20008010) r5 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) write$nci(r5, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m24.11080319s ago: executing program 2 (id=5009): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) accept$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x2000) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, 0x0) mq_open(0x0, 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 2m22.862236688s ago: executing program 9 (id=5011): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) 2m20.771287757s ago: executing program 2 (id=5013): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x9, 0x2) r1 = msgget(0x3, 0x710) msgget(0x2, 0x624) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x8040) set_robust_list(&(0x7f00000000c0), 0xc) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) msgctl$IPC_RMID(r1, 0x0) 2m15.37000905s ago: executing program 40 (id=5006): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x4, 0x200, &(0x7f0000000880)="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"}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x101, 0x147}}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6_sctp(0xa, 0x3, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31000000002b63d64ef3b66c80b62bfd07c2567bb68100"], 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000200)=0x3, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa0c0800450000b00900000000000000000000000000000000004e20009c907801000000000000007b4b142b7461fd777b1c012bd14efb9f49fcdb8f880c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) 2m15.333072247s ago: executing program 2 (id=5019): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000500)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000ac0)={0x34, &(0x7f0000000800)={0x20, 0x0, 0x6b, "f02f5c59c32a116e485a68ad4a3dc16afc18594d8420f91673534da423f9d3617a9edc657a178c2dd994e184e9cdd2e3dce81cfa99d31a9ba52b6a763e95fe5a042fddf11dd2c4c1facd74bc9155fb36a2fd51ecc65d6fe3e5c54f2324cb99802e4a8ff9ab8ab882d6bf96"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m8.411206684s ago: executing program 41 (id=5010): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2080, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x7242}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) ioctl$TCXONC(r1, 0x540a, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2m8.330264755s ago: executing program 2 (id=5028): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000200)={0xe, {0x7, 0x6, 0x1, 0xa8, "68169f53a87232657c325addd469205ba5c8be36d0ac1a2be29469cb66eaf6f920e61f9143b26e43baecfe76df807bfaf0ce263a48b43b48913a4a7a6fe1e95196f8c4ea55f991ed71b35639ea1fbed7b6a0917933a22ee5c28ae10fe44b93a316a881fa096cbc8bd54aac72f9b30a881a320ad636f1c37c5ff305595e9514aea9cb062ce500984b1ee7ce2bf5ff27aa3a2ee56dcfafb4065709aded9f37a76012bc8e042c0caef1"}}, 0xb4) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x41a100, 0x30}, 0x18) getdents64(r1, &(0x7f0000000100)=""/177, 0xb1) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$alg(0x26, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x9b) r3 = getpgid(0x0) getpgid(r3) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmmsg(r4, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_open_dev$mtd(&(0x7f00000003c0), 0x8, 0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") 2m4.53932009s ago: executing program 42 (id=5011): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) 1m54.080969126s ago: executing program 5 (id=5039): syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000010000001811", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) getpgrp(0xffffffffffffffff) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe758, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x2, 0x1], [0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x9, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x8, 0x0, 0x8, 0xffffffff, 0x4, 0x0, 0x0, 0x3, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000540)='wg2\x00', 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4014, &(0x7f00000000c0), 0x1, 0x3f9, &(0x7f0000000900)="$eJzs3c1uG0UcAPD/br6atDSpxIGPSwRIREIkTdoClUAi4sKhPdEDR6zELVGdFiVGolXEh0DcQALxAHAAHoEjHHgHOAMHqBShHEg5IBmtveuY2E7r1MZV+vtJI8/srD1jj2e9O5mdBPDAmo2IlyNiJCJOR8R0vj3NQ7zfCNl+uztbK3/vbK0kUau99mcSSb6teK0kfzyev8BcGpF+lMTjHcrdvHHzaqlSKW/k6YXq+lsLmzduPru2XrpSvlK+tvTcmbPnzr1wfun5vr3X7fXkk6e+ufDbZx+vfv7TH9/PZPU9kee1vo9+mY3Z5mey3/l+FzZkx1riyegQKwIAwIHS/Nx/tH7+Px0jsXfyNh2f/jjUygEAAAB9UasVjwAAAMDRlbj2BwAAgCOumAewu7O1UoQhTkfgf7a9HBEzjfa/nYdGzmjznt6xfff39tNsRLx67OJSFmJA92EDAAAAPMh+WG4s/Nc+/vdP7ZGW/SYjYqpY26+PZvel28d/0lt9LpIW28sRL0bE7bbxv7TYZWYkTz1UHyocSy6vVcqnI+JkRMzF2ESWXjygjHefuPptt7zW8b8vf319MSs/e9zbI701OvHf56yWqqV7ec/s2f4g4rHRTu2fNMd8W9fJzKz1WMYba7svdcvL2j9r7yK0tz+DVPsqiac79v+9lUuTg9dnXagfDxbyo8JEexm/nPj6w27lt/b/LGTlF38LYPCy/j91cPvX18ltrte72XsZ3/118edueXdu/87H//HkUr2C4/m2d0rV6sZixHhyoX27b1NT8XkUn1fW/nNPdv79L87/kvy3/2TL+tC9eOW9U5e65en/w5W1/2pP/b/3yJtTj851K//u+v/ZemWKF3H+d2d320DDricAAAAAAAAA/ZHW5/Yl6Xwznqbz8415vg/HVFq5vll95vL1t6+tNuYAzsRYWsz/nG6ZD7rYuI28mV7alz4TEaci4ovpyXp6fmWyPu8AAAAAGLzjXa7/M78f5mYPAAAA4P40M+wKAAAAAAPn+h8AAACOtHtZ179S3ij+RdAhny4icrjISP7Fu1/qc/QiQzwoAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABD/BgAA///fEr3I") linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r8, 0xa, 0x28000000}, 0x0) 1m51.788252385s ago: executing program 43 (id=5028): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000200)={0xe, {0x7, 0x6, 0x1, 0xa8, "68169f53a87232657c325addd469205ba5c8be36d0ac1a2be29469cb66eaf6f920e61f9143b26e43baecfe76df807bfaf0ce263a48b43b48913a4a7a6fe1e95196f8c4ea55f991ed71b35639ea1fbed7b6a0917933a22ee5c28ae10fe44b93a316a881fa096cbc8bd54aac72f9b30a881a320ad636f1c37c5ff305595e9514aea9cb062ce500984b1ee7ce2bf5ff27aa3a2ee56dcfafb4065709aded9f37a76012bc8e042c0caef1"}}, 0xb4) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x41a100, 0x30}, 0x18) getdents64(r1, &(0x7f0000000100)=""/177, 0xb1) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$alg(0x26, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x9b) r3 = getpgid(0x0) getpgid(r3) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmmsg(r4, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_open_dev$mtd(&(0x7f00000003c0), 0x8, 0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") 1m50.406869874s ago: executing program 5 (id=5042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x85, 0x4, 0x20, @dev={0xfe, 0x80, '\x00', 0x16}, @empty, 0x80, 0x20, 0x4, 0x1}}) socket$nl_generic(0x10, 0x3, 0x10) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x1b8, 0x12, 0x600, 0x1b8, 0x202, 0x388, 0x2e8, 0x2e8, 0x388, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:fuse_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) pread64(r3, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 1m46.8709585s ago: executing program 5 (id=5043): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000240), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) getpgrp(0xffffffffffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe758, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x2, 0x1], [0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x9, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x8, 0x0, 0x8, 0xffffffff, 0x4, 0x0, 0x0, 0x3, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0xa, 0x28000000}, 0x0) 1m46.494824831s ago: executing program 5 (id=5045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x80) socket$inet(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r1) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4005}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ptrace(0x10, r3) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0xc, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) ptrace$setsig(0x4203, r3, 0x72d8, &(0x7f0000000000)={0x15, 0x0, 0x899d}) 1m43.909459522s ago: executing program 5 (id=5047): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f00007bf000/0x4000)=nil, 0x4000, 0xb635773f06ebbee7, 0x1010, 0xffffffffffffffff, 0x1b5c9000) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x40d00) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r1, 0x800c6f40, &(0x7f00000000c0)={""/4, 0x4}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x6) fchdir(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x24, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452"}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlimit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x4048010) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m43.512409524s ago: executing program 5 (id=5049): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x9}}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000080)=""/5, 0x5, 0x0, &(0x7f00000002c0)=""/227, 0xe3}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000004"], 0x20}}, 0x20000090) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1m28.159801245s ago: executing program 44 (id=5049): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x9}}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000080)=""/5, 0x5, 0x0, &(0x7f00000002c0)=""/227, 0xe3}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000004"], 0x20}}, 0x20000090) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1m26.987261465s ago: executing program 3 (id=5060): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000000)='cifs\x00', 0x1) syslog(0x3, &(0x7f0000000140)=""/4096, 0x1000) 1m25.439530444s ago: executing program 3 (id=5061): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x109, &(0x7f0000006680)) timer_create(0x8, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000180)) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20008010) r5 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) write$nci(r5, &(0x7f00000004c0)=ANY=[], 0x102) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 1m22.842289835s ago: executing program 3 (id=5062): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8000000000000, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_emit_ethernet(0x6e, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)}, 0x0) syz_emit_ethernet(0xc6, 0x0, &(0x7f0000000540)={0x0, 0x2, [0x43b, 0xb10, 0x33e, 0x6ea]}) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x38, &(0x7f00000002c0)={0x0, 0x36a9, 0x8, 0x0, 0x55}, 0x0, 0x0, &(0x7f0000000340)) syz_open_dev$sndpcmp(0x0, 0x3, 0x480000) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_clone(0x18200000, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) 1m21.741451452s ago: executing program 3 (id=5063): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0xa) fchdir(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r3, 0x2007ffb) close(r3) r4 = open(&(0x7f0000000280)='.\x00', 0x80000, 0x140) fcntl$notify(r4, 0x402, 0x8000003d) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 1m19.736414273s ago: executing program 3 (id=5064): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x2000000000006) 1m18.651754194s ago: executing program 3 (id=5065): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x3, 0x407, 0x8, 0x801003e, 0x80, '\v\b\x00', 0x9, 0xfffffff5}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x12) dup(r1) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000145802, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x103381) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r4 = socket(0x2c, 0x803, 0xffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000005b80)={'ip6gre0\x00', 0x0}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x21, r5, 0x8, 0xffff) r6 = dup(r3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000480)={{0x6, 0x6, 0x4a7, 0x6, 'syz1\x00', 0x6}, 0x5, 0x3, 0xb4, r5, 0x6, 0x3, 'syz1\x00', &(0x7f0000000180)=['\x00z\x05c\xeap\xeb\x029\xf4\xfd\tocQ;\xfa\xf4\x19\xe2\xdd@NTg\xe8\xd1\xa4\xcf<*\xd8\x98Q>\x97Q*7\xaa\xb9\xee\x95\x96\xbf\f\"\xbdE%\xed\xe6\xb8\x05\x80\x9d\xb2\x87n\xd5\xd8\x10\xcc<\xb1\x19\xce\xe0;\x85\x06\xa9(\xa1\a\xd1\xe3\r\xaa\f\xca#\x93+\xd7~\x9fI\x82h\xcb\xd6\x9a\xd3\x12\xfd\xfb/@\xd3\b\xdf\xc0\xe4ry\x81\xfdX\xa2\xa4\xa3})\x7f\xf3\'\xd3PeY\xd8Zp', '^\x00', '#\x00', '\x00', ':]))', '\x00\x00\x01\x00\x00\x00\x00\x00\x00'], 0x8e}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f000088f000/0x3000)=nil, 0x3000, 0x0) setpriority(0x2, 0x0, 0x8) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m15.47889476s ago: executing program 6 (id=5068): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7, @empty, 0xe229, 0x1}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8, 0x400000}, 0x20) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x6, 0x0, 0x10, 0x7fff7ff9}, {0x9, 0x4, 0xa, 0x2}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) ppoll(0x0, 0x0, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8) dup2(r1, r2) r3 = socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) syz_usb_connect$midi(0x0, 0x39, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x27, 0x1, 0x1, 0x3, 0x60, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x28, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x5, 0x3}], [{{0x9, 0x5, 0x9, 0x2, 0x10, 0x80, 0xd1, 0x7, {0x6, 0x25, 0x1, 0x2, "6d11"}}}]}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='1', 0x1) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0x38, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0x7ff, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @local}, "695a31130fbfeaee"}}}}}, 0x0) syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') 1m11.96003162s ago: executing program 6 (id=5069): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) syz_open_dev$radio(&(0x7f0000000400), 0x3, 0x2) syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000240)={0x0, 0xd58c, 0x10, 0x3, 0x108}, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x200}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}]}}, 0x0, 0x26, 0x4d, 0x0, 0x6}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) socket(0x2b, 0x1, 0x1) syz_open_dev$vim2m(0x0, 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 1m9.236523461s ago: executing program 6 (id=5070): syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000bfa20000000000000e6fdc510f07020000f8ffffffb703000008000000b70400009118f32f850000000300000095000000000000003df521e0c6c89405b38d5c4fb3d047a393d4fd9953511551e093ff8f125bf0c75b9f284747744f4112eb6e50835ce62dd73a00d8f5e11c6a7449b373c07b74e87c9cd95f94f4dea9a655ed7bee2f7814468684c6b419403b7bb97a37fb26113e893f42c224404ead4e66904d483f03"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{0x0}], 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) getpgrp(0xffffffffffffffff) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe758, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x2, 0x1], [0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x9, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x8, 0x0, 0x8, 0xffffffff, 0x4, 0x0, 0x0, 0x3, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000540)='wg2\x00', 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4014, &(0x7f00000000c0), 0x1, 0x3f9, &(0x7f0000000900)="$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") getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r8, 0xa, 0x28000000}, 0x0) 1m8.468901717s ago: executing program 6 (id=5071): socket$inet6_sctp(0xa, 0x1, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001500)={0x2020}, 0x2020) 1m7.746265932s ago: executing program 6 (id=5072): io_uring_setup(0x4823, &(0x7f0000000100)={0x0, 0x3ffe, 0x40, 0x2, 0x16d}) pause() socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f3f01f7d04a37f60a74b51f629a0332b0854d78ec1123e57c7ff57f1c8b1141977fb5ac0d93db53353a9f1776ef87199e5752827c1ddf2708ce41dd41fd679ecf"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 1m5.128475035s ago: executing program 6 (id=5074): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x70bd2d, 0x25dfdc00, {0xa}}, 0x1c}}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000080000000090a0104000000e6ffffffff060000000900010073797a3000000000440011800a0001006d61746368000000340002801c0003004ec849704f7ab6ee5bcc8b71ed5070ce80036c5d5625c47a0a00010071756f74610000000800024000000000080005400000002508000a40000000010900020073797a3100000000140000001000010000000000000000000084000a"], 0xc8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000180)={0x0, 0x20000, 0x8, 0x2, 0x200, 0x0}) r3 = socket$inet6(0xa, 0xc, 0x4200007) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x2, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r4, 0x40047452, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c910"], 0x15) 1m2.671781885s ago: executing program 45 (id=5065): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x3, 0x407, 0x8, 0x801003e, 0x80, '\v\b\x00', 0x9, 0xfffffff5}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x12) dup(r1) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000145802, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x103381) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r4 = socket(0x2c, 0x803, 0xffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000005b80)={'ip6gre0\x00', 0x0}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x21, r5, 0x8, 0xffff) r6 = dup(r3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000480)={{0x6, 0x6, 0x4a7, 0x6, 'syz1\x00', 0x6}, 0x5, 0x3, 0xb4, r5, 0x6, 0x3, 'syz1\x00', &(0x7f0000000180)=['\x00z\x05c\xeap\xeb\x029\xf4\xfd\tocQ;\xfa\xf4\x19\xe2\xdd@NTg\xe8\xd1\xa4\xcf<*\xd8\x98Q>\x97Q*7\xaa\xb9\xee\x95\x96\xbf\f\"\xbdE%\xed\xe6\xb8\x05\x80\x9d\xb2\x87n\xd5\xd8\x10\xcc<\xb1\x19\xce\xe0;\x85\x06\xa9(\xa1\a\xd1\xe3\r\xaa\f\xca#\x93+\xd7~\x9fI\x82h\xcb\xd6\x9a\xd3\x12\xfd\xfb/@\xd3\b\xdf\xc0\xe4ry\x81\xfdX\xa2\xa4\xa3})\x7f\xf3\'\xd3PeY\xd8Zp', '^\x00', '#\x00', '\x00', ':]))', '\x00\x00\x01\x00\x00\x00\x00\x00\x00'], 0x8e}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f000088f000/0x3000)=nil, 0x3000, 0x0) setpriority(0x2, 0x0, 0x8) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m0.885107249s ago: executing program 7 (id=5040): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r2, 0x0, 0x80, 0x6) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xf603594}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 1m0.578739209s ago: executing program 7 (id=5077): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b72040150000000000010902120001010080320904000000ff"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000700)={0x40, 0x9, 0xb, "0064000c0035250649add6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 58.819887986s ago: executing program 7 (id=5078): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0xa) fchdir(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r3, 0x2007ffb) close(r3) r4 = open(&(0x7f0000000280)='.\x00', 0x80000, 0x140) fcntl$notify(r4, 0x402, 0x8000003d) fcntl$setsig(r4, 0xa, 0x1d) 58.394262091s ago: executing program 7 (id=5080): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000001e00000000000000200018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x60, 0x8, &(0x7f00000006c0)='\x00\x00\x00 \x00\x00\x00\x00', &(0x7f0000000000)=""/2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 55.129456146s ago: executing program 7 (id=5081): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x22406e, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x804, &(0x7f0000000440)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6c6f7765722c757466383d312c6e6f636173652c757466383d312cfc19c5762b228366d1cde7a2d873686f72746e616d653d6d697865642c726f6469722c757466383d312c696f636861727365743d69736f383835392d362c636f6465706167653d3836342c756e695f786c6174653d312c757466383d312c757466383d312c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6c6f7765722c00"], 0x1, 0x28c, &(0x7f0000001500)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x100) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 54.910746619s ago: executing program 8 (id=5082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1, 0x3, 0x4, {0x1, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x2, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='1', 0x1) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="70000000ffffffffffffffffffffffff08004500002ce5ff0000002f346440807d9078ac1e00010a010102000065580018907804000000030000006558000000000000ad51dd6d2d1db9a6d342fab266c955dc6c4f7aca47dd895ea03e4c17f9f74df1afa5736a611da246c6da2a0d62819efa63d21f8ab131cd816844c9d63c5cacd168cf38aa7334a5ddee33c4e214324431a98c5fe5221180fe95ce7d036fa52bbb905383a7"], 0x3e) 54.621792194s ago: executing program 7 (id=5083): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000200)={0xe, {0x7, 0x6, 0x1, 0xa8, "68169f53a87232657c325addd469205ba5c8be36d0ac1a2be29469cb66eaf6f920e61f9143b26e43baecfe76df807bfaf0ce263a48b43b48913a4a7a6fe1e95196f8c4ea55f991ed71b35639ea1fbed7b6a0917933a22ee5c28ae10fe44b93a316a881fa096cbc8bd54aac72f9b30a881a320ad636f1c37c5ff305595e9514aea9cb062ce500984b1ee7ce2bf5ff27aa3a2ee56dcfafb4065709aded9f37a76012bc8e042c0caef1"}}, 0xb4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x41a100, 0x30}, 0x18) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$alg(0x26, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$l2tp6(0xa, 0x2, 0x73) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x9b) r2 = getpgid(0x0) getpgid(r2) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_open_dev$mtd(&(0x7f00000003c0), 0x8, 0x40) close_range(r4, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") 51.73559573s ago: executing program 8 (id=5084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffe08, &(0x7f0000000040)=0xfffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace(0x4208, r0) getpid() getrlimit(0xb, &(0x7f00000000c0)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x100000) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r4, 0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) msgget(0x2, 0x217) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0317000000000000"], 0x8, 0x800) 49.98144129s ago: executing program 8 (id=5085): io_uring_setup(0x4823, &(0x7f0000000100)={0x0, 0x3ffe, 0x40, 0x2, 0x16d}) pause() socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f3f01f7d04a37f60a74b51f629a0332b0854d78ec1123e57c7ff57f1c8b1141977fb5ac0d93db53353a9f1776ef87199e5752827c1ddf2708ce41dd41fd679ecf"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 49.838284011s ago: executing program 46 (id=5074): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x70bd2d, 0x25dfdc00, {0xa}}, 0x1c}}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000080000000090a0104000000e6ffffffff060000000900010073797a3000000000440011800a0001006d61746368000000340002801c0003004ec849704f7ab6ee5bcc8b71ed5070ce80036c5d5625c47a0a00010071756f74610000000800024000000000080005400000002508000a40000000010900020073797a3100000000140000001000010000000000000000000084000a"], 0xc8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000180)={0x0, 0x20000, 0x8, 0x2, 0x200, 0x0}) r3 = socket$inet6(0xa, 0xc, 0x4200007) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x2, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r4, 0x40047452, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c910"], 0x15) 46.479529993s ago: executing program 8 (id=5087): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) syz_open_dev$radio(&(0x7f0000000400), 0x3, 0x2) syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000240)={0x0, 0xd58c, 0x10, 0x3, 0x108}, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x200}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}]}}, 0x0, 0x26, 0x4d, 0x0, 0x6}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) socket(0x2b, 0x1, 0x1) syz_open_dev$vim2m(0x0, 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 43.857510163s ago: executing program 8 (id=5088): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000140)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 40.649288609s ago: executing program 8 (id=5089): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc0, &(0x7f0000000100)=0x7, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c0c8) tkill(0x0, 0xb) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x10000, 0x10) getsockname$packet(r5, 0x0, &(0x7f0000000280)) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x20600, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000009b80)={0x40000012}) read$FUSE(r6, &(0x7f0000002540)={0x2020}, 0xfffffecf) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x2, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, 0x0, 0x0) 38.382706187s ago: executing program 47 (id=5083): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000200)={0xe, {0x7, 0x6, 0x1, 0xa8, "68169f53a87232657c325addd469205ba5c8be36d0ac1a2be29469cb66eaf6f920e61f9143b26e43baecfe76df807bfaf0ce263a48b43b48913a4a7a6fe1e95196f8c4ea55f991ed71b35639ea1fbed7b6a0917933a22ee5c28ae10fe44b93a316a881fa096cbc8bd54aac72f9b30a881a320ad636f1c37c5ff305595e9514aea9cb062ce500984b1ee7ce2bf5ff27aa3a2ee56dcfafb4065709aded9f37a76012bc8e042c0caef1"}}, 0xb4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x41a100, 0x30}, 0x18) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$alg(0x26, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$l2tp6(0xa, 0x2, 0x73) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x9b) r2 = getpgid(0x0) getpgid(r2) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_open_dev$mtd(&(0x7f00000003c0), 0x8, 0x40) close_range(r4, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") 25.391126237s ago: executing program 48 (id=5089): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc0, &(0x7f0000000100)=0x7, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c0c8) tkill(0x0, 0xb) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x10000, 0x10) getsockname$packet(r5, 0x0, &(0x7f0000000280)) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x20600, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000009b80)={0x40000012}) read$FUSE(r6, &(0x7f0000002540)={0x2020}, 0xfffffecf) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x2, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, 0x0, 0x0) 15.524384031s ago: executing program 1 (id=5105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getitimer(0x1, 0x0) dup2(r2, r1) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) ioctl$MON_IOCG_STATS(r3, 0x80089203, 0x0) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x18}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0xa, 0x5, 0xfff, 0x80000000, 0x8, 0x0, 0x200, 0x9}}) bpf$MAP_CREATE(0x0, 0x0, 0x50) 12.963725993s ago: executing program 1 (id=5107): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000580)={0x0, 0xa, 0x2, "e8fd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.590863089s ago: executing program 4 (id=5108): close(0x3) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) listen(r0, 0xa01) 11.663938285s ago: executing program 0 (id=5111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x76, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8}]}}}, {0x34, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x200}}, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r3, 0x8100587e, &(0x7f0000001040)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) 11.483991026s ago: executing program 4 (id=5112): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000580)=ANY=[@ANYBLOB="61756469742c67e1506910fc83995f747970653d696d9e2343237846886d617369672c736d61636b667368"]) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mount(0x0, 0x0, 0x0, 0x44021, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) openat$null(0xffffff9c, 0x0, 0x101201, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x1) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB], 0xfe44, 0x0) 8.006252968s ago: executing program 1 (id=5113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x58, 0x64, 0x0, 0x8, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x11, 0x20, 0x606f, 0x0, 0xe7, {[@exp_fastopen={0xfe, 0x14, 0xf989, "e0625660bac570f7f163f1bb3603f207"}, @timestamp={0x8, 0xa, 0x9, 0x6}, @window={0x3, 0x3, 0x1}, @exp_smc={0xfe, 0x6}, @nop, @mss={0x2, 0x4, 0x200}, @mss={0x2, 0x4, 0x5}]}}}}}}}, 0x0) 7.891741146s ago: executing program 0 (id=5114): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) pipe2$watch_queue(&(0x7f0000000000), 0x80) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) syslog(0x3, &(0x7f0000000140)=""/4096, 0x1000) 7.589918499s ago: executing program 4 (id=5115): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x6da, 0x2002) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x404c001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = mq_open(0x0, 0x42, 0x48, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') accept4$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0x0, 0x180000) listns(&(0x7f0000000500)={0x20, 0x0, 0x9, 0x8000000, 0x0, 0x3}, 0x0, 0xf4240, 0x0) 7.37873896s ago: executing program 1 (id=5116): syz_emit_ethernet(0x373, &(0x7f00000003c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x33d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a1800c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fed0e94222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f018"}, {0x19, 0x7, "b8a3e10000a3e1030000000900fec0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x19, 0x11, "3f14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e2eeb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05"}]}}}}}}, 0x0) 6.75114683s ago: executing program 4 (id=5117): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x9, 0x2) r1 = msgget(0x3, 0x710) msgget(0x2, 0x624) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x8040) set_robust_list(&(0x7f00000000c0), 0xc) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) msgctl$IPC_RMID(r1, 0x0) 6.731135091s ago: executing program 1 (id=5118): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x109, &(0x7f0000006680)) timer_create(0x8, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000180)) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20008010) r5 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$nci(r5, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 6.60955393s ago: executing program 0 (id=5119): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000540), 0x4) 4.526735093s ago: executing program 4 (id=5120): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x2, 0x5003) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, 0x0, 0x300f401, 0x0, 0x2, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x400000000010, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4041091}, 0x844) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) 4.195751244s ago: executing program 0 (id=5121): close(0x3) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) listen(r0, 0xa01) 2.123602503s ago: executing program 1 (id=5122): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f00000011c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000580)={0x0, 0xa, 0x2, "e8fd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.691682279s ago: executing program 4 (id=5123): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200507"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="400d03"], 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="6012d7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.133855563s ago: executing program 0 (id=5124): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) accept$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x2000) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, 0x0) mq_open(0x0, 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket(0x10, 0x3, 0x0) 0s ago: executing program 0 (id=5125): socket$tipc(0x1e, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="831f6b2e4bf635336e7672e6ae29bdefc04953fddd81ade57d5854862b6b62a931de1a706687ec566b76857db88db261b3c3d1733f69e7807f4ba61f809ccf55071abe9841190d796fd5fad7873a79bf3372ee5c32e1e5fa222d201c6ccfaf917ecd0b04dab424c4e64c42cca0f620b130214b347d91f201ae06d3f68d684ccb2e939b1cd895fd9d8570990575c5dc77f23d2ad2156ce6acbe3efc01817f7a81f7d0e3bcbd9cd406bd503d1efa4bdf90feac4fd0cb3744645336b85cc11ac1706f2461f359a17340ed38c12988e2ba2a2c8e680d14946404b0a44d0ff7a553c3f3cdacbe2f138c7276388241c47e3039d9d815", 0xf3}, {0xffffffffffffffff}, {&(0x7f00000004c0)="c95503ca8ac930799269074c34b71fb8b9778a502c2d3c04c015546e92b11cbd1d47733494707d2a396c671f51d24676ea471db04d7c259f5dfc08ec8a0ae6d004dba5ae00c01b0bf3d479491a01a433cc554f6a65d57485662e8673dd0363a0e45969a3a1b7f70540a82ec4326df4dc202e4b6f0fccd4cc2f05c86b6ecb8326252b26c5ed1bb13883d70eb40bf44842ba2ca4fe52ac88444f3b6764248a25b07c9055b078bd14c699506552d92bef9a6ae419ae7904a73720a662f7e816f35e89ecdbd00d6ccf12cb9faed08779e14e446a8d214feb2236aa3d930f74b51c5c05e1666fe3a0fc909692f182628771ccc4a8a2", 0xf3}, {&(0x7f00000005c0)="d212a1c0e195616d0438fe6e09e93650d6c0df606b0b884e244b29930e9896ce13f230d99faa02421441725d89bf3ab71181f92aa1f7489100f9088c09e80a448fa8b9a78b265eeb730e8f7d03d2f4941e19e0f0c4c218a1635cc6b60aa247225e6eab61f2ad0d", 0x67}, {&(0x7f0000000640)="88ff425d7846c8f8a5d15dd26a1337d216573f18cc5fa7b74f94a50c45df53723575b577db717605aa49762ff25b22ef9daba8df53a07c65fb554a4e1ef375c88d614c249a22028f5f0dd4a87d320494857668dcebf27d483888ad9733bf2612c88b01857d289526052caa3dac0cdbd9aaccb87bc62d1d003317d42b61797a8f5517611b8a9bb751c946596ba47153a2cc9ee7db34bf18eecdc06506ef48332f0ac0aa23c13ce9c9e3847d9f323574c2883b8c033516e1d46d2f313643cdb27882e1f0d0b2583e821792cdf84b7583027a338712a1f5e13d10", 0xd9}, {&(0x7f0000000740)="8cad96b19e559c008d5e0883766666ba3aeb5dea4611bfc75124cef8f2f5e0647418942cb2c981946c789bf1d7b2ae26652c8f745013506e8bb54b890df940ef8486d155198a8bd3884a8ae024b7b3f7df8c563eb9532602f30110d302b3350039d92c27ca4259a99f6eac7039759e6450c226411dddcbb1fa0fa768bee581b2abe0d2e9edef1a0a94e2f8bdf0674cdf04289b464114fb105151f5c52bce98190930330104d191a6967865a1d742cbe01fa9bb35bc", 0xb5}, {&(0x7f0000000800)="c712e0068c31aa7ef6ca22cf33224f60994985b23e33123f31dfe39e14246f242868730a70467c65b62594feaf630c9a700428ad741bffb8af241cf6e3100240bbd58ee9bfaaa141ae68d188e4e0a26ab39d8577d001e49a3cfd7a5b5a40985d676071aa4358fbc8283f235c5850fbf61827e4ad585d0168b29964bec0c06117627f6bcccb765db068796d01d1dad28a259c3744b3aff189818480dae12272961818f34388b0dd12e2539ae5bbbd251a97121af0", 0xb4}], 0x8, 0x0, 0x0, 0x8001}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f00000df000/0x1000)=nil, 0x1000, 0xb) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000380"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0xfffffffffffffea9, &(0x7f0000000940)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x819, 0x870bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x3}, {0xa, 0x2}, {0x10, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1800}, 0x20000080) kernel console output (not intermixed with test programs): ves [ 1368.565733][ T5771] pwc: Registered as video103. [ 1368.606128][ T5771] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input48 [ 1368.760266][ T5771] usb 2-1: USB disconnect, device number 101 [ 1369.010104][T20336] hsr_slave_0: left promiscuous mode [ 1369.099967][T20336] hsr_slave_1: left promiscuous mode [ 1370.114293][T20336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1370.878630][T20336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1370.928709][T20336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1370.944479][T22929] loop1: detected capacity change from 0 to 512 [ 1371.029497][T20336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1371.045343][T22929] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1371.141098][T20336] veth1_macvtap: left promiscuous mode [ 1371.154318][T22929] EXT4-fs (loop1): 1 truncate cleaned up [ 1371.180688][T20336] veth0_macvtap: left promiscuous mode [ 1371.198130][T22929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1371.232503][T20336] veth1_vlan: left promiscuous mode [ 1371.260119][T20336] veth0_vlan: left promiscuous mode [ 1373.005296][T17869] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1373.611021][ T188] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1373.933048][ T188] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1374.324158][ T5771] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1375.775942][ T188] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1375.832763][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.899351][ T188] usb 3-1: config 0 descriptor?? [ 1375.948896][ T5771] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1375.988362][ T5771] usb 10-1: New USB device found, idVendor=0738, idProduct=1713, bcdDevice= 0.40 [ 1376.024864][ T5771] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.066275][ T5771] usb 10-1: Product: syz [ 1376.110134][ T5771] usb 10-1: Manufacturer: syz [ 1376.145786][ T5771] usb 10-1: SerialNumber: syz [ 1378.510512][T22966] loop1: detected capacity change from 0 to 512 [ 1378.535399][T20336] team0 (unregistering): Port device team_slave_1 removed [ 1378.580860][ T10] usb 3-1: USB disconnect, device number 63 [ 1378.592772][ T5771] usbhid 10-1:1.0: can't add hid device: -71 [ 1378.639422][ T5771] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 1378.655638][T22966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1378.768079][ T5771] usb 10-1: USB disconnect, device number 27 [ 1378.778777][T20336] team0 (unregistering): Port device team_slave_0 removed [ 1379.117519][ T10] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1379.162540][T17869] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1379.298213][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1379.326822][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1379.394453][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.487293][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1379.540134][ T10] pvrusb2: ********** [ 1379.564805][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1379.627948][ T10] pvrusb2: Important functionality might not be entirely working. [ 1379.666075][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1380.675895][T22989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.691816][ T10] pvrusb2: ********** [ 1381.441207][ T2359] pvrusb2: Invalid write control endpoint [ 1381.465810][T22989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.588350][T22989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.641242][T22989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.821889][T22554] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1381.890739][T22554] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1381.961679][ T2359] pvrusb2: Invalid write control endpoint [ 1381.971906][T22554] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1382.021163][ T2359] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1382.048787][T22554] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1382.086833][ T2359] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1382.120914][T22976] xfrm0: entered promiscuous mode [ 1382.126368][T22976] xfrm0: entered allmulticast mode [ 1382.155970][ T2359] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1382.207809][ T2359] pvrusb2: Device being rendered inoperable [ 1382.225766][T22554] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1382.262780][ T2359] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1382.444482][T22998] loop9: detected capacity change from 0 to 4096 [ 1382.453846][T22554] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1382.461873][ T2359] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1382.514025][ T2359] pvrusb2: Attached sub-driver cx25840 [ 1382.522544][T22554] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1382.540512][T23003] loop1: detected capacity change from 0 to 512 [ 1382.573451][T22998] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 1382.600583][ T2359] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1382.657289][T22554] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1382.691699][ T188] usb 3-1: USB disconnect, device number 64 [ 1382.704359][T23003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1382.740552][ T2359] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1383.062196][T22792] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.173654][T22792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.218366][ T4936] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1383.270940][T22792] bridge_slave_0: entered allmulticast mode [ 1383.279992][T17869] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1383.359333][T22792] bridge_slave_0: entered promiscuous mode [ 1383.671057][ T188] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1383.948695][T22792] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.006279][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1384.025670][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1384.034215][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1384.042401][ T5639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1384.049958][ T188] usb 3-1: not running at top speed; connect to a high speed hub [ 1384.072123][ T5639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1384.134636][T22792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.165162][ T188] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1384.190889][T22792] bridge_slave_1: entered allmulticast mode [ 1384.230625][ T188] usb 3-1: New USB device found, idVendor=1241, idProduct=f767, bcdDevice= 0.40 [ 1384.266459][T22792] bridge_slave_1: entered promiscuous mode [ 1384.289237][ T188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.351341][ T188] usb 3-1: Manufacturer: ј [ 1384.385611][ T188] usb 3-1: SerialNumber: 馚퀋怘̓⸩ㅻ髿୬聱늙䞟毤쎲蕼恶嫬쏝哖鳘놆젖蚢坹Ů͜폞╃贰჻靌ꝝ⃧뤓庁휻쳡恎ॕ似筰쎳醾ⴧ㡚奧譫왭굋ኺ喝⡒㦤ꃛ털Ä솩쟠⠀ꙙㇽₕĤ白芵㜔ꚗ퇳ူ迣릷哭ᙐᑇྈ멼莌吺⁩曶⮬䓍⾜ኴ놗堁膬囐꣌癛압녿࿼థ㿽씩혿뵐끩弞 [ 1384.858693][ T5771] usb 8-1: USB disconnect, device number 41 [ 1385.010029][ T188] usbhid 3-1:1.0: can't add hid device: -71 [ 1385.051948][ T188] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1385.131559][ T188] usb 3-1: USB disconnect, device number 65 [ 1385.260707][T22792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.294746][ T5771] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1385.360385][T22792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.491010][ T5771] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1385.561014][ T5771] usb 10-1: New USB device found, idVendor=0738, idProduct=1713, bcdDevice= 0.40 [ 1385.648788][ T5771] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.705728][T22792] team0: Port device team_slave_0 added [ 1385.718909][ T5771] usb 10-1: Product: syz [ 1385.743784][ T5771] usb 10-1: Manufacturer: syz [ 1385.780686][ T5771] usb 10-1: SerialNumber: syz [ 1386.070906][T22792] team0: Port device team_slave_1 added [ 1387.099240][ T5639] Bluetooth: hci2: command tx timeout [ 1387.129088][ T5771] usbhid 10-1:1.0: can't add hid device: -71 [ 1388.024657][ T5771] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 1388.202227][ T5771] usb 10-1: USB disconnect, device number 28 [ 1388.250065][T22792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1388.340699][T22792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.580380][T22792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1388.690431][T22792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1388.741775][T22792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.886371][ T4936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1388.898913][ T4936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1388.907174][ T4936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1388.916708][ T4936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1388.924945][ T4936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1388.983585][T22792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1389.157223][ T4936] Bluetooth: hci2: command tx timeout [ 1391.002058][ T4936] Bluetooth: hci0: command tx timeout [ 1391.244141][ T4936] Bluetooth: hci2: command tx timeout [ 1392.164648][T22792] hsr_slave_0: entered promiscuous mode [ 1392.203185][T22792] hsr_slave_1: entered promiscuous mode [ 1392.228654][T22792] debugfs: 'hsr0' already exists in 'hsr' [ 1392.278266][T22792] Cannot create hsr debugfs directory [ 1393.088072][ T4936] Bluetooth: hci0: command tx timeout [ 1393.328576][ T4936] Bluetooth: hci2: command tx timeout [ 1395.173639][ T4936] Bluetooth: hci0: command tx timeout [ 1397.294385][ T4936] Bluetooth: hci0: command tx timeout [ 1398.331678][T19149] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1398.517047][T19149] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1398.550517][T19149] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1398.579735][T19149] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1398.601725][T20336] bridge_slave_1: left allmulticast mode [ 1398.607555][T19149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.619118][T20336] bridge_slave_1: left promiscuous mode [ 1398.645300][T20336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.654748][T19149] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 1398.691458][T19149] usb 3-1: no configuration chosen from 1 choice [ 1398.750394][T20336] bridge_slave_0: left allmulticast mode [ 1398.767829][T20336] bridge_slave_0: left promiscuous mode [ 1398.787132][T20336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.134872][ T9477] usb 3-1: USB disconnect, device number 66 [ 1401.250897][T20336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1401.309218][T20336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1401.335008][T20336] bond0 (unregistering): Released all slaves [ 1401.528446][T20336] tipc: Left network mode [ 1401.533699][T23023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.613549][T23023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.656023][T23023] bridge_slave_0: entered allmulticast mode [ 1401.708668][T23023] bridge_slave_0: entered promiscuous mode [ 1402.655983][T23023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.695564][T23023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.705477][T23179] loop2: detected capacity change from 0 to 1024 [ 1403.723749][T23023] bridge_slave_1: entered allmulticast mode [ 1403.770338][T23179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1403.803879][T23023] bridge_slave_1: entered promiscuous mode [ 1403.986150][T20479] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1404.219122][T23023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1404.294614][T23023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1404.618403][ T5771] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1404.758506][T23023] team0: Port device team_slave_0 added [ 1404.810765][ T5771] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1404.837601][ T5771] usb 2-1: New USB device found, idVendor=0738, idProduct=1713, bcdDevice= 0.40 [ 1404.880856][ T5771] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.912958][ T5771] usb 2-1: Product: syz [ 1404.927642][ T5771] usb 2-1: Manufacturer: syz [ 1404.939600][ T5771] usb 2-1: SerialNumber: syz [ 1405.940912][T20336] hsr_slave_0: left promiscuous mode [ 1406.799376][T20336] hsr_slave_1: left promiscuous mode [ 1406.819502][T20336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1406.848980][T20336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1407.091325][ T5771] usbhid 2-1:1.0: can't add hid device: -71 [ 1407.106372][ T5771] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1407.133298][ T5771] usb 2-1: USB disconnect, device number 102 [ 1407.634176][T20336] team0 (unregistering): Port device team_slave_1 removed [ 1407.663756][T20336] team0 (unregistering): Port device team_slave_0 removed [ 1407.913837][T23023] team0: Port device team_slave_1 added [ 1408.119791][T23068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.158957][T23068] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.177132][T23068] bridge_slave_0: entered allmulticast mode [ 1408.210799][T23068] bridge_slave_0: entered promiscuous mode [ 1408.239405][T23023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1408.260307][T23023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1408.354624][T23023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1408.393836][T23023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1408.419586][T23023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1408.494707][T23023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1408.548549][T23068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.566962][T23068] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.589305][T23068] bridge_slave_1: entered allmulticast mode [ 1408.608544][T23068] bridge_slave_1: entered promiscuous mode [ 1408.692366][T22792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1409.238091][T22792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1409.343229][T22792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1409.386831][T22792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1409.480447][T22792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1409.553252][T22792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1409.579742][T22792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1409.647358][T22792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1409.740870][T23023] hsr_slave_0: entered promiscuous mode [ 1409.758344][T23023] hsr_slave_1: entered promiscuous mode [ 1409.780627][T23068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1409.833691][T23068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.059663][T23068] team0: Port device team_slave_0 added [ 1410.150994][T23068] team0: Port device team_slave_1 added [ 1410.578159][T23068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.597967][T23068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.669745][T23068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1410.705307][T23068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1410.722882][T23068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.800545][T23068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1411.267286][T23270] loop1: detected capacity change from 0 to 1024 [ 1411.452942][T23068] hsr_slave_0: entered promiscuous mode [ 1411.462738][T23068] hsr_slave_1: entered promiscuous mode [ 1411.474072][T23068] debugfs: 'hsr0' already exists in 'hsr' [ 1411.483162][T23068] Cannot create hsr debugfs directory [ 1412.468557][T22792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1412.555737][T20336] bridge_slave_1: left allmulticast mode [ 1412.572658][T20336] bridge_slave_1: left promiscuous mode [ 1412.588256][T20336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.623593][T20336] bridge_slave_0: left allmulticast mode [ 1412.636347][T20336] bridge_slave_0: left promiscuous mode [ 1412.646422][T20336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.827872][T20336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1412.848092][T20336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1412.863110][T20336] bond0 (unregistering): Released all slaves [ 1412.911348][T22792] 8021q: adding VLAN 0 to HW filter on device team0 [ 1412.987232][T20336] hsr_slave_0: left promiscuous mode [ 1413.033821][T20336] hsr_slave_1: left promiscuous mode [ 1413.051116][T20336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1413.094448][T20336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1413.104920][T23290] fuse: Bad value for 'fd' [ 1413.308101][T20336] team0 (unregistering): Port device team_slave_1 removed [ 1413.353959][T20336] team0 (unregistering): Port device team_slave_0 removed [ 1413.648797][ T9197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.655938][ T9197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1415.860890][ T9197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1415.868110][ T9197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1416.243847][T23023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1418.091999][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1418.102352][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1418.159088][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1418.175028][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1418.182731][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1418.384073][T23023] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1418.418649][T23023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1418.564982][T23023] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1418.829377][T23023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1418.950212][T23023] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1418.981131][T23023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1419.071370][T23023] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1419.215027][T21242] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1419.629915][T21242] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.673859][T21242] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1419.763474][T21242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.817377][T21242] usb 3-1: config 0 descriptor?? [ 1419.831950][ T5639] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 1419.863323][T21242] pwc: Askey VC010 type 2 USB webcam detected. [ 1420.146034][T21242] pwc: send_video_command error -71 [ 1420.172129][T21242] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1420.208304][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1420.228704][T21242] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1420.268970][T21242] usb 3-1: USB disconnect, device number 67 [ 1420.277004][ T5639] Bluetooth: hci3: command tx timeout [ 1420.781975][ T10] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1420.985391][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.015326][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1421.077274][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.109343][T23023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1421.134880][ T10] usb 3-1: config 0 descriptor?? [ 1421.197471][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1421.607653][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1421.650348][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 1421.682129][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1421.735369][T23023] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.754030][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 1421.776186][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 1421.794600][T20324] bridge_slave_1: left allmulticast mode [ 1421.810543][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 1421.820438][T20324] bridge_slave_1: left promiscuous mode [ 1421.832922][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 1421.849790][T20324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.873967][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 1421.893176][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 1421.909729][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 1421.926700][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 1421.948503][T20324] bridge_slave_0: left allmulticast mode [ 1421.961289][T20324] bridge_slave_0: left promiscuous mode [ 1421.971506][T20324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.258271][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 1422.282481][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 1422.296564][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 1423.255017][ T5639] Bluetooth: hci3: command tx timeout [ 1423.260892][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.267550][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.092342][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 1424.137061][ T10] pwc: Registered as video103. [ 1424.178983][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input49 [ 1424.240288][ T10] usb 3-1: USB disconnect, device number 68 [ 1424.457868][T23364] fuse: Bad value for 'fd' [ 1424.590495][T20324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1424.610727][T20324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1424.628228][T20324] bond0 (unregistering): Released all slaves [ 1424.717205][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1424.873881][T20324] hsr_slave_0: left promiscuous mode [ 1424.936762][T20324] hsr_slave_1: left promiscuous mode [ 1424.949692][T20324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1424.983449][T20324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1425.327538][ T5639] Bluetooth: hci3: command tx timeout [ 1427.276146][T20324] team0 (unregistering): Port device team_slave_1 removed [ 1427.357539][T20324] team0 (unregistering): Port device team_slave_0 removed [ 1427.411956][ T5639] Bluetooth: hci3: command tx timeout [ 1427.720811][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.727999][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1427.777896][T23068] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1427.793615][T23068] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1427.841167][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1427.845452][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.845534][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.847797][T23068] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1427.897564][T23068] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1427.899888][T23068] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1427.930757][T23068] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1427.941358][T23068] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1427.957927][T23068] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1428.592312][T23068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1428.890361][T23068] 8021q: adding VLAN 0 to HW filter on device team0 [ 1428.893799][T23303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.893884][T23303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.894013][T23303] bridge_slave_0: entered allmulticast mode [ 1428.901949][T23303] bridge_slave_0: entered promiscuous mode [ 1428.910131][T20331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.910213][T20331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1428.914298][T23303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1428.915141][T23303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.915257][T23303] bridge_slave_1: entered allmulticast mode [ 1428.920770][T23303] bridge_slave_1: entered promiscuous mode [ 1428.978505][T20324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1428.978598][T20324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1429.039354][T23303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1429.063777][T23303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1429.223271][T23303] team0: Port device team_slave_0 added [ 1429.233424][T23303] team0: Port device team_slave_1 added [ 1429.445882][T23303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1429.445900][T23303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1429.445924][T23303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1429.453255][T23303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1429.453271][T23303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1429.453294][T23303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1429.693915][T23303] hsr_slave_0: entered promiscuous mode [ 1429.700977][T23303] hsr_slave_1: entered promiscuous mode [ 1429.701557][T23303] debugfs: 'hsr0' already exists in 'hsr' [ 1429.701574][T23303] Cannot create hsr debugfs directory [ 1429.704765][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1430.084459][T23023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1430.297487][ T5771] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1430.402506][T23023] veth0_vlan: entered promiscuous mode [ 1430.428292][ T5771] usb 3-1: device descriptor read/64, error -71 [ 1430.548348][T23023] veth1_vlan: entered promiscuous mode [ 1430.674874][ T5771] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1430.756052][T23023] veth0_macvtap: entered promiscuous mode [ 1430.781816][T23023] veth1_macvtap: entered promiscuous mode [ 1430.815043][ T5771] usb 3-1: device descriptor read/64, error -71 [ 1430.913188][T23023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1430.921113][ T5771] usb usb3-port1: attempt power cycle [ 1430.950506][T23023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1430.976160][T20326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.976202][T20326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.976233][T20326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.976264][T20326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.262214][ T5771] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1431.292593][ T5771] usb 3-1: device descriptor read/8, error -71 [ 1431.359873][T23068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1431.456562][T20326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.456582][T20326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.530765][ T5771] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1431.551781][ T5771] usb 3-1: device descriptor read/8, error -71 [ 1431.758207][ T5771] usb usb3-port1: unable to enumerate USB device [ 1433.708475][T23303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1433.743273][T23303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1433.745878][T20331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.745895][T20331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1433.760530][T23303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1433.817799][T23303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1433.829964][T23303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1433.874538][T23303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1433.889559][T23303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1433.960627][T23303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1434.554895][T23303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1434.640223][T23303] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.658814][T16092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.658896][T16092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1434.703460][T20324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.703559][T20324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1434.926497][T23068] veth0_vlan: entered promiscuous mode [ 1434.958017][T23068] veth1_vlan: entered promiscuous mode [ 1435.001665][ T5282] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1435.102814][T23068] veth0_macvtap: entered promiscuous mode [ 1435.135010][T23068] veth1_macvtap: entered promiscuous mode [ 1435.235231][T23068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1435.295709][T23068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1435.346158][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.346303][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.346347][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.346377][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.767590][T20331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1435.767626][T20331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1435.900803][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1435.900825][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1436.661717][T19149] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1436.763083][T23303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1436.819769][T19149] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1436.819830][T19149] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1436.819851][T19149] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.822317][T19149] usb 6-1: config 0 descriptor?? [ 1436.908955][T23303] veth0_vlan: entered promiscuous mode [ 1436.926296][T23303] veth1_vlan: entered promiscuous mode [ 1437.008471][T23303] veth0_macvtap: entered promiscuous mode [ 1437.026832][T23303] veth1_macvtap: entered promiscuous mode [ 1437.070509][T23303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1437.092667][T23303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1437.107438][T20326] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.107505][T20326] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.107537][T20326] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.107568][T20326] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.239647][T19149] keytouch 0003:0926:3333.0023: fixing up Keytouch IEC report descriptor [ 1437.258290][T19149] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0023/input/input50 [ 1437.291392][ T5282] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1437.452284][T23523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.452748][T23523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.499281][T23523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.499722][T23523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.528503][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.528520][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.551262][T19149] keytouch 0003:0926:3333.0023: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1437.665398][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.665418][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.717975][T19149] usb 6-1: USB disconnect, device number 76 [ 1437.798058][T23535] fido_id[23535]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1438.412127][T23548] loop3: detected capacity change from 0 to 512 [ 1438.442250][T23548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1440.456463][T23303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1443.238129][T23569] pim6reg: entered allmulticast mode [ 1443.468104][ T4936] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1443.475091][ T4936] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1443.476971][ T4936] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1443.479339][ T4936] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1443.479856][ T4936] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1443.539100][T23561] 9pnet_virtio: no channels available for device syz [ 1443.800394][ T5282] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1444.295209][T21242] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1444.429315][T21242] usb 3-1: device descriptor read/64, error -71 [ 1444.667088][T21242] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1444.817160][T21242] usb 3-1: device descriptor read/64, error -71 [ 1444.928266][T21242] usb usb3-port1: attempt power cycle [ 1445.269523][T21242] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1445.289798][T21242] usb 3-1: device descriptor read/8, error -71 [ 1445.527676][ T4936] Bluetooth: hci6: command tx timeout [ 1445.685278][T21242] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 1446.213135][T21242] usb 3-1: device descriptor read/8, error -71 [ 1446.318921][T21242] usb usb3-port1: unable to enumerate USB device [ 1446.910573][ T10] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1447.377030][ T10] usb 6-1: device descriptor read/64, error -71 [ 1447.618671][ T4936] Bluetooth: hci6: command tx timeout [ 1447.618941][ T10] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1447.754049][ T10] usb 6-1: device descriptor read/64, error -71 [ 1447.861780][ T10] usb usb6-port1: attempt power cycle [ 1448.743035][ T10] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1448.765249][ T10] usb 6-1: device descriptor read/8, error -71 [ 1449.102344][ T10] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1449.685534][T23620] loop3: detected capacity change from 0 to 512 [ 1449.694665][ T4936] Bluetooth: hci6: command tx timeout [ 1449.745095][T23620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1449.808996][ T10] usb 6-1: device descriptor read/8, error -71 [ 1449.917301][ T10] usb usb6-port1: unable to enumerate USB device [ 1450.151372][T23303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1450.275249][ T5282] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1452.417103][ T4936] Bluetooth: hci6: command tx timeout [ 1453.746709][ T5639] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1453.759720][ T5639] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1453.761781][ T5639] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1453.763456][ T5639] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1453.773755][ T5639] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1455.868219][ T4936] Bluetooth: hci7: command tx timeout [ 1457.557821][ T4936] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1457.577635][ T4936] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1457.581659][ T4936] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1457.587889][ T4936] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1457.593761][ T4936] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1457.626332][T23571] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.626420][T23571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.626598][T23571] bridge_slave_0: entered allmulticast mode [ 1457.642922][T23571] bridge_slave_0: entered promiscuous mode [ 1457.673888][T23571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.673976][T23571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.674129][T23571] bridge_slave_1: entered allmulticast mode [ 1457.689097][T23571] bridge_slave_1: entered promiscuous mode [ 1457.949032][ T5639] Bluetooth: hci7: command tx timeout [ 1459.631982][ T5639] Bluetooth: hci8: command tx timeout [ 1460.034337][ T5639] Bluetooth: hci7: command tx timeout [ 1460.067446][T23571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1460.084157][T23571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1460.274320][ T5771] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1460.388067][T23571] team0: Port device team_slave_0 added [ 1460.408054][T23571] team0: Port device team_slave_1 added [ 1460.431682][ T5771] usb 6-1: Using ep0 maxpacket: 16 [ 1460.453504][ T5771] usb 6-1: config 206 has an invalid interface number: 66 but max is 0 [ 1460.453531][ T5771] usb 6-1: config 206 has no interface number 0 [ 1460.453556][ T5771] usb 6-1: config 206 interface 66 has no altsetting 0 [ 1460.467730][ T5771] usb 6-1: string descriptor 0 read error: -22 [ 1460.467836][ T5771] usb 6-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=d7.81 [ 1460.467857][ T5771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.481628][ T5771] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 1460.481667][ T5771] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1460.481683][ T5771] dvb-usb: bulk message failed: -22 (2/0) [ 1460.609376][ T5771] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1460.615966][ T5771] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 1460.616009][ T5771] usb 6-1: media controller created [ 1460.616029][ T5771] dvb-usb: bulk message failed: -22 (6/0) [ 1460.616062][ T5771] dw2102: i2c transfer failed. [ 1460.616080][ T5771] dvb-usb: bulk message failed: -22 (6/0) [ 1460.616093][ T5771] dw2102: i2c transfer failed. [ 1460.616106][ T5771] dvb-usb: bulk message failed: -22 (6/0) [ 1460.616119][ T5771] dw2102: i2c transfer failed. [ 1460.616131][ T5771] dvb-usb: bulk message failed: -22 (6/0) [ 1460.616144][ T5771] dw2102: i2c transfer failed. [ 1460.616157][ T5771] dvb-usb: bulk message failed: -22 (6/0) [ 1460.616169][ T5771] dw2102: i2c transfer failed. [ 1460.616182][ T5771] dvb-usb: bulk message failed: -22 (6/0) [ 1460.616194][ T5771] dw2102: i2c transfer failed. [ 1460.616203][ T5771] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1460.682884][ T5771] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1460.706160][T23571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1460.706178][T23571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1460.706202][T23571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1460.726731][T23571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1460.726748][T23571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1460.726772][T23571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1460.752152][T23680] 9pnet_virtio: no channels available for device syz [ 1460.880886][ T5771] dvb-usb: bulk message failed: -22 (1/0) [ 1460.880906][ T5771] dw2102: command 0x51 transfer failed. [ 1461.079461][T23571] hsr_slave_0: entered promiscuous mode [ 1461.097979][T23571] hsr_slave_1: entered promiscuous mode [ 1461.099220][T23571] debugfs: 'hsr0' already exists in 'hsr' [ 1461.099240][T23571] Cannot create hsr debugfs directory [ 1461.160501][ T5771] DVB: Unable to find symbol m88rs2000_attach() [ 1461.160519][ T5771] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 1461.431052][ T5771] rc_core: IR keymap rc-su3000 not found [ 1461.431071][ T5771] Registered IR keymap rc-empty [ 1461.432533][ T5771] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1461.453532][ T5771] input: TeVii S632 USB as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input51 [ 1461.501533][ T5771] dvb-usb: schedule remote query interval to 150 msecs. [ 1461.501555][ T5771] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1461.501569][ T5771] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 1461.660279][T19149] dvb-usb: bulk message failed: -22 (1/0) [ 1461.660322][T19149] dw2102: i2c transfer failed. [ 1461.716763][ T5639] Bluetooth: hci8: command tx timeout [ 1461.778293][ T5771] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1461.815409][T20757] dvb-usb: bulk message failed: -22 (1/0) [ 1461.815429][T20757] dw2102: i2c transfer failed. [ 1461.829075][T23712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.830648][T23712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.906866][ T5771] usb 4-1: device descriptor read/64, error -71 [ 1461.976933][T20757] dvb-usb: bulk message failed: -22 (1/0) [ 1461.976955][T20757] dw2102: i2c transfer failed. [ 1462.053485][T23712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1462.053899][T23712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.060511][T23712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1462.060930][T23712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.117608][ T5639] Bluetooth: hci7: command tx timeout [ 1462.142523][T21242] dvb-usb: bulk message failed: -22 (1/0) [ 1462.142544][T21242] dw2102: i2c transfer failed. [ 1462.145905][ T5771] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1462.278105][ T5771] usb 4-1: device descriptor read/64, error -71 [ 1462.296079][T20757] dvb-usb: bulk message failed: -22 (1/0) [ 1462.296099][T20757] dw2102: i2c transfer failed. [ 1462.387458][ T5771] usb usb4-port1: attempt power cycle [ 1462.457727][T20757] dvb-usb: bulk message failed: -22 (1/0) [ 1462.457749][T20757] dw2102: i2c transfer failed. [ 1462.619033][T20757] dvb-usb: bulk message failed: -22 (1/0) [ 1462.619056][T20757] dw2102: i2c transfer failed. [ 1462.728389][ T5771] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1462.749037][ T5771] usb 4-1: device descriptor read/8, error -71 [ 1462.777726][T20757] dvb-usb: bulk message failed: -22 (1/0) [ 1462.778314][T20757] dw2102: i2c transfer failed. [ 1462.937054][T20757] dvb-usb: bulk message failed: -22 (1/0) [ 1462.937076][T20757] dw2102: i2c transfer failed. [ 1462.988405][ T5771] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1463.007909][ T5771] usb 4-1: device descriptor read/8, error -71 [ 1463.098247][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1463.100559][ T10] dw2102: i2c transfer failed. [ 1463.129079][ T5771] usb usb4-port1: unable to enumerate USB device [ 1463.259296][ T5771] dvb-usb: bulk message failed: -22 (1/0) [ 1463.259319][ T5771] dw2102: i2c transfer failed. [ 1463.419407][ T9482] dvb-usb: bulk message failed: -22 (1/0) [ 1463.419429][ T9482] dw2102: i2c transfer failed. [ 1463.580896][ T5771] dvb-usb: bulk message failed: -22 (1/0) [ 1463.580918][ T5771] dw2102: i2c transfer failed. [ 1463.741730][ T5771] dvb-usb: bulk message failed: -22 (1/0) [ 1463.741752][ T5771] dw2102: i2c transfer failed. [ 1463.801610][ T5639] Bluetooth: hci8: command tx timeout [ 1463.899339][ T5771] dvb-usb: bulk message failed: -22 (1/0) [ 1463.899360][ T5771] dw2102: i2c transfer failed. [ 1464.063854][ T5771] dvb-usb: bulk message failed: -22 (1/0) [ 1464.063876][ T5771] dw2102: i2c transfer failed. [ 1464.161678][ T5771] usb 6-1: USB disconnect, device number 81 [ 1465.881782][ T5639] Bluetooth: hci8: command tx timeout [ 1466.375948][T23753] loop5: detected capacity change from 0 to 512 [ 1466.473599][T23641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.473719][T23641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.473912][T23641] bridge_slave_0: entered allmulticast mode [ 1466.526919][T23753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1466.541547][T23641] bridge_slave_0: entered promiscuous mode [ 1466.545872][ T5771] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 1466.718074][T23641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.718169][T23641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.718288][T23641] bridge_slave_1: entered allmulticast mode [ 1466.732921][T23641] bridge_slave_1: entered promiscuous mode [ 1467.858361][T23763] loop3: detected capacity change from 0 to 128 [ 1468.956476][T23068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1469.022322][T23763] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1469.024285][T23763] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1469.107225][T23674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.107314][T23674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.148046][T23674] bridge_slave_0: entered allmulticast mode [ 1469.149597][T23674] bridge_slave_0: entered promiscuous mode [ 1469.312574][T23641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1469.313569][T23674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.313661][T23674] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.313785][T23674] bridge_slave_1: entered allmulticast mode [ 1469.324744][T23674] bridge_slave_1: entered promiscuous mode [ 1469.351474][ T4936] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1469.354825][ T4936] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1469.355528][ T4936] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1469.370371][ T4936] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1469.374869][ T4936] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1470.438525][T23641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1471.496188][ T4936] Bluetooth: hci9: command tx timeout [ 1471.558804][T23674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1471.603915][T23303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1471.939181][T23641] team0: Port device team_slave_0 added [ 1471.943897][T23641] team0: Port device team_slave_1 added [ 1472.012251][T23674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1473.573438][ T4936] Bluetooth: hci9: command tx timeout [ 1474.223906][T23792] loop3: detected capacity change from 0 to 512 [ 1474.288232][T23641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1474.288252][T23641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1474.288277][T23641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1474.376622][T23792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1474.474489][T23674] team0: Port device team_slave_0 added [ 1474.478797][T23641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1474.478812][T23641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1474.478840][T23641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1474.592514][T23674] team0: Port device team_slave_1 added [ 1474.661054][T23303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1475.211578][T23801] loop3: detected capacity change from 0 to 32768 [ 1475.232158][ T4936] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 1475.251742][T23801] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1475.251781][T23801] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1475.266743][T23801] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 1475.278076][ T9477] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1475.278117][ T9477] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1475.350973][T23641] hsr_slave_0: entered promiscuous mode [ 1475.364523][T23641] hsr_slave_1: entered promiscuous mode [ 1475.367919][T23641] debugfs: 'hsr0' already exists in 'hsr' [ 1475.367938][T23641] Cannot create hsr debugfs directory [ 1475.369771][T23674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1475.369785][T23674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1475.369809][T23674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1475.373412][T23571] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1475.389839][T23571] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1475.392506][T23571] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1475.423784][T23571] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1475.430136][ T9477] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 151ms [ 1475.430304][ T9477] gfs2: fsid=syz:syz.0: jid=0: Done [ 1475.430338][T23801] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1475.450187][T23674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1475.450203][T23674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1475.450228][T23674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1475.519361][T23801] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1475.564133][T23571] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1475.568123][T23809] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 1475.568174][T23809] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 1475.568202][T23809] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:23809 [gfs2_quotad/syz] gfs2_quota_sync+0x353/0x450 [ 1475.568248][T23809] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 1475.568276][T23809] CPU: 0 UID: 0 PID: 23809 Comm: gfs2_quotad/syz Tainted: G L syzkaller #0 PREEMPT(full) [ 1475.568300][T23809] Tainted: [L]=SOFTLOCKUP [ 1475.568310][T23809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1475.568322][T23809] Call Trace: [ 1475.568330][T23809] [ 1475.568339][T23809] dump_stack_lvl+0xe8/0x150 [ 1475.568369][T23809] gfs2_withdraw+0xc3/0x1b0 [ 1475.568391][T23809] inode_go_instantiate+0xbc7/0x12c0 [ 1475.568415][T23809] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1475.568441][T23809] ? __pfx_inode_go_instantiate+0x10/0x10 [ 1475.568459][T23809] ? do_raw_spin_unlock+0xf5/0x210 [ 1475.568484][T23809] ? __pfx_wake_bit_function+0x10/0x10 [ 1475.568511][T23809] gfs2_instantiate+0x168/0x220 [ 1475.568535][T23809] gfs2_glock_wait+0x1d4/0x2a0 [ 1475.568560][T23809] do_sync+0x49c/0xbb0 [ 1475.568585][T23809] ? gfs2_quota_sync+0x353/0x450 [ 1475.568624][T23809] ? __pfx_do_sync+0x10/0x10 [ 1475.568648][T23809] ? do_raw_spin_lock+0x12b/0x2f0 [ 1475.568678][T23809] ? gfs2_quota_sync+0x353/0x450 [ 1475.568704][T23809] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1475.568729][T23809] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1475.568750][T23809] ? do_raw_spin_unlock+0xf5/0x210 [ 1475.568777][T23809] gfs2_quota_sync+0x353/0x450 [ 1475.568813][T23809] gfs2_quotad+0x2ab/0x6f0 [ 1475.568851][T23809] ? __pfx_gfs2_quotad+0x10/0x10 [ 1475.568878][T23809] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1475.568902][T23809] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1475.568922][T23809] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1475.568943][T23809] ? __kthread_parkme+0x71/0x1f0 [ 1475.568971][T23809] ? __kthread_parkme+0x196/0x1f0 [ 1475.569001][T23809] kthread+0x388/0x470 [ 1475.569029][T23809] ? __pfx_gfs2_quotad+0x10/0x10 [ 1475.569055][T23809] ? __pfx_kthread+0x10/0x10 [ 1475.569085][T23809] ret_from_fork+0x514/0xb70 [ 1475.569116][T23809] ? __pfx_ret_from_fork+0x10/0x10 [ 1475.569145][T23809] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1475.569181][T23809] ? __switch_to+0xc89/0x1420 [ 1475.569208][T23809] ? __pfx_kthread+0x10/0x10 [ 1475.569238][T23809] ret_from_fork_asm+0x1a/0x30 [ 1475.569271][T23809] [ 1475.569297][T23809] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1475.661884][ T4936] Bluetooth: hci9: command tx timeout [ 1475.664711][T20757] gfs2: fsid=syz:syz.0: file system withdrawn [ 1475.678663][T23571] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1475.681096][T23571] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1475.752433][T23571] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1476.080372][T23674] hsr_slave_0: entered promiscuous mode [ 1476.082824][T23674] hsr_slave_1: entered promiscuous mode [ 1476.083447][T23674] debugfs: 'hsr0' already exists in 'hsr' [ 1476.083465][T23674] Cannot create hsr debugfs directory [ 1477.739665][ T4936] Bluetooth: hci9: command tx timeout [ 1478.332358][T23818] loop3: detected capacity change from 0 to 512 [ 1478.365099][T23818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1478.518964][T23303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1481.000302][ T5771] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1481.157972][ T5771] usb 4-1: Using ep0 maxpacket: 16 [ 1481.166463][ T5771] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1481.166494][ T5771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1481.171653][ T5771] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1481.171680][ T5771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.171698][ T5771] usb 4-1: Product: syz [ 1481.171712][ T5771] usb 4-1: Manufacturer: syz [ 1481.171727][ T5771] usb 4-1: SerialNumber: syz [ 1481.178698][ T5771] usb 4-1: config 0 descriptor?? [ 1481.201177][ T5771] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1481.201210][ T5771] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1481.499036][T23571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1481.621324][ T9198] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.751660][T23571] 8021q: adding VLAN 0 to HW filter on device team0 [ 1481.808672][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.808768][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1481.817118][ T5771] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1481.819844][ T5771] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1481.820498][ T5771] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1481.820517][ T5771] em28xx 4-1:0.0: No AC97 audio processor [ 1481.868337][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.868433][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1482.039175][ T9198] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.231661][ T9198] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.361879][ T9198] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.543385][T23768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.544116][T23768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.544371][T23768] bridge_slave_0: entered allmulticast mode [ 1482.557034][T23768] bridge_slave_0: entered promiscuous mode [ 1482.771159][T23768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.771248][T23768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.771455][T23768] bridge_slave_1: entered allmulticast mode [ 1482.774027][T23768] bridge_slave_1: entered promiscuous mode [ 1483.084632][T23768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1483.102266][T23768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1483.434442][T23768] team0: Port device team_slave_0 added [ 1483.439039][T23768] team0: Port device team_slave_1 added [ 1483.816493][T20757] usb 4-1: USB disconnect, device number 56 [ 1483.821014][T20757] em28xx 4-1:0.0: Disconnecting em28xx [ 1483.906144][T20757] em28xx 4-1:0.0: Freeing device [ 1483.957751][T23768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1483.957769][T23768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1483.957793][T23768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1483.974298][T23768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1483.974316][T23768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1483.974347][T23768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1484.099247][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.102302][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.205358][ T9198] bridge_slave_1: left allmulticast mode [ 1484.205385][ T9198] bridge_slave_1: left promiscuous mode [ 1484.205717][ T9198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.215230][ T9198] bridge_slave_0: left allmulticast mode [ 1484.215252][ T9198] bridge_slave_0: left promiscuous mode [ 1484.215420][ T9198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.594272][T21242] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1484.754828][T21242] usb 4-1: Using ep0 maxpacket: 32 [ 1484.766133][T21242] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1484.766158][T21242] usb 4-1: config 0 has no interface number 0 [ 1484.771691][T21242] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1484.771715][T21242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.771733][T21242] usb 4-1: Product: syz [ 1484.771747][T21242] usb 4-1: Manufacturer: syz [ 1484.771762][T21242] usb 4-1: SerialNumber: syz [ 1484.774248][T21242] usb 4-1: config 0 descriptor?? [ 1484.799750][ T9198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1484.808056][ T9198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1484.814958][ T9198] bond0 (unregistering): Released all slaves [ 1485.247392][T23768] hsr_slave_0: entered promiscuous mode [ 1485.256299][T23768] hsr_slave_1: entered promiscuous mode [ 1485.257135][T23768] debugfs: 'hsr0' already exists in 'hsr' [ 1485.257153][T23768] Cannot create hsr debugfs directory [ 1485.304880][T23674] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1485.325878][T23674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1485.326778][T23674] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1485.344715][T23674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1485.471738][T23674] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1485.499649][T23674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1485.501963][T23674] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1485.509575][T23674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1485.579216][ T9198] hsr_slave_0: left promiscuous mode [ 1485.597315][ T9198] hsr_slave_1: left promiscuous mode [ 1485.598082][ T9198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1485.598101][ T9198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1485.604903][ T9198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1485.604925][ T9198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1485.638616][ T9198] veth1_macvtap: left promiscuous mode [ 1485.641443][ T9198] veth0_macvtap: left promiscuous mode [ 1485.641566][ T9198] veth1_vlan: left promiscuous mode [ 1485.641622][ T9198] veth0_vlan: left promiscuous mode [ 1485.814462][T23857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1485.814949][T23857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.026258][T21242] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1486.026288][T21242] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1486.026859][T21242] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1486.027079][T21242] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1486.037350][T21242] usb 4-1: USB disconnect, device number 57 [ 1486.391871][ T9198] team0 (unregistering): Port device team_slave_1 removed [ 1486.417519][ T9198] team0 (unregistering): Port device team_slave_0 removed [ 1486.851151][T23571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1489.062746][T23898] loop3: detected capacity change from 0 to 512 [ 1489.132750][T23898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1489.437845][T23303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1490.557138][T23919] loop3: detected capacity change from 0 to 32768 [ 1490.566423][ T9198] IPVS: stop unused estimator thread 0... [ 1490.720687][T23919] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1490.720707][T23919] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1490.734947][T23919] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 1490.737638][T21242] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1490.737654][T21242] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1490.942544][T21242] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 204ms [ 1490.943036][T21242] gfs2: fsid=syz:syz.0: jid=0: Done [ 1490.943072][T23919] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1490.992012][T23919] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1491.017155][T23928] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 1491.017188][T23928] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 1491.017216][T23928] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:23928 [gfs2_quotad/syz] gfs2_quota_sync+0x353/0x450 [ 1491.017259][T23928] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 1491.017287][T23928] CPU: 0 UID: 0 PID: 23928 Comm: gfs2_quotad/syz Tainted: G L syzkaller #0 PREEMPT(full) [ 1491.017311][T23928] Tainted: [L]=SOFTLOCKUP [ 1491.017319][T23928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1491.017330][T23928] Call Trace: [ 1491.017338][T23928] [ 1491.017347][T23928] dump_stack_lvl+0xe8/0x150 [ 1491.017377][T23928] gfs2_withdraw+0xc3/0x1b0 [ 1491.017404][T23928] inode_go_instantiate+0xbc7/0x12c0 [ 1491.017427][T23928] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.017453][T23928] ? __pfx_inode_go_instantiate+0x10/0x10 [ 1491.017471][T23928] ? do_raw_spin_unlock+0xf5/0x210 [ 1491.017496][T23928] ? __pfx_wake_bit_function+0x10/0x10 [ 1491.017524][T23928] gfs2_instantiate+0x168/0x220 [ 1491.017547][T23928] gfs2_glock_wait+0x1d4/0x2a0 [ 1491.017572][T23928] do_sync+0x49c/0xbb0 [ 1491.017597][T23928] ? gfs2_quota_sync+0x353/0x450 [ 1491.017637][T23928] ? __pfx_do_sync+0x10/0x10 [ 1491.017665][T23928] ? do_raw_spin_lock+0x12b/0x2f0 [ 1491.017695][T23928] ? gfs2_quota_sync+0x353/0x450 [ 1491.017721][T23928] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.017746][T23928] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.017767][T23928] ? do_raw_spin_unlock+0xf5/0x210 [ 1491.017793][T23928] gfs2_quota_sync+0x353/0x450 [ 1491.017829][T23928] gfs2_quotad+0x2ab/0x6f0 [ 1491.017867][T23928] ? __pfx_gfs2_quotad+0x10/0x10 [ 1491.017894][T23928] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.017918][T23928] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1491.017938][T23928] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.017960][T23928] ? __kthread_parkme+0x71/0x1f0 [ 1491.017986][T23928] ? __kthread_parkme+0x196/0x1f0 [ 1491.018017][T23928] kthread+0x388/0x470 [ 1491.018045][T23928] ? __pfx_gfs2_quotad+0x10/0x10 [ 1491.018071][T23928] ? __pfx_kthread+0x10/0x10 [ 1491.018100][T23928] ret_from_fork+0x514/0xb70 [ 1491.018134][T23928] ? __pfx_ret_from_fork+0x10/0x10 [ 1491.018161][T23928] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.018183][T23928] ? __switch_to+0xc89/0x1420 [ 1491.018210][T23928] ? __pfx_kthread+0x10/0x10 [ 1491.018239][T23928] ret_from_fork_asm+0x1a/0x30 [ 1491.018271][T23928] [ 1491.020549][T23928] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1491.134002][T21242] gfs2: fsid=syz:syz.0: file system withdrawn [ 1491.143948][T23641] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1491.172747][T23641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1491.213892][T23641] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1491.256743][T23641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1491.257542][T23641] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1491.297482][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1491.312001][ T5639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1491.314098][ T5639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1491.314967][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1491.315493][ T5639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1491.411151][T23641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1491.497894][T23641] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1491.526976][T23641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1492.162750][T23571] veth0_vlan: entered promiscuous mode [ 1492.342519][T23674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1492.354536][T23571] veth1_vlan: entered promiscuous mode [ 1492.737081][T23674] 8021q: adding VLAN 0 to HW filter on device team0 [ 1492.924593][ T9198] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.924685][ T9198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1492.929030][T23571] veth0_macvtap: entered promiscuous mode [ 1493.360693][ T4936] Bluetooth: hci4: command tx timeout [ 1494.233691][T23571] veth1_macvtap: entered promiscuous mode [ 1494.941979][ T9198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.942066][ T9198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.315081][T23571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1495.361909][T23641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1495.369957][T23571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1495.445212][ T4936] Bluetooth: hci4: command tx timeout [ 1495.628699][T17279] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.630103][T17279] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.630158][T17279] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.630204][T17279] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.949716][T23641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1496.057989][T20334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.058074][T20334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1496.272653][T23571] ieee80211 phy48: Selected rate control algorithm 'minstrel_ht' [ 1496.316626][T20334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.316715][T20334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1497.359673][ T9197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.359694][ T9197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1497.394567][T23768] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1497.419865][T23768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1497.433458][T23768] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1497.463396][T23768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1497.528756][ T4936] Bluetooth: hci4: command tx timeout [ 1497.571330][T23571] ieee80211 phy49: Selected rate control algorithm 'minstrel_ht' [ 1497.617444][T23768] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1497.624289][T23768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1497.755337][T23768] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1497.783861][T23768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1497.894712][ T9198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.894733][ T9198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.409329][T23996] overlayfs: missing 'lowerdir' [ 1498.660078][T23996] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1498.713500][T24006] loop3: detected capacity change from 0 to 512 [ 1498.744674][T24006] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1498.804634][T24006] EXT4-fs (loop3): 1 truncate cleaned up [ 1498.890815][T24006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1499.608924][ T4936] Bluetooth: hci4: command tx timeout [ 1499.719513][T23303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1499.785034][T23768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1500.242484][T23674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1500.350355][T23768] 8021q: adding VLAN 0 to HW filter on device team0 [ 1500.579890][T24031] loop6: detected capacity change from 0 to 32768 [ 1500.580811][T24031] btrfs: Deprecated parameter 'usebackuproot' [ 1500.580830][T24031] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1500.608824][T24031] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5066 (24031) [ 1500.638530][T24031] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1500.638582][T24031] BTRFS info (device loop6): using crc32c checksum algorithm [ 1500.858377][T17279] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1500.858472][T24031] BTRFS error (device loop6): failed to load root extent [ 1500.858502][T24031] BTRFS warning (device loop6): try to load backup roots slot 1 [ 1500.859822][ T9198] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1500.859871][T24031] BTRFS warning (device loop6): couldn't read tree root [ 1500.859888][T24031] BTRFS warning (device loop6): try to load backup roots slot 2 [ 1500.860145][ T9198] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1500.860186][T24031] BTRFS warning (device loop6): couldn't read tree root [ 1500.860202][T24031] BTRFS warning (device loop6): try to load backup roots slot 3 [ 1500.872789][T24031] BTRFS info (device loop6): rebuilding free space tree [ 1500.894700][T24031] BTRFS info (device loop6): checking UUID tree [ 1500.895237][T24031] BTRFS info (device loop6): enabling ssd optimizations [ 1500.895255][T24031] BTRFS info (device loop6): turning on async discard [ 1500.895271][T24031] BTRFS info (device loop6): enabling free space tree [ 1500.895286][T24031] BTRFS info (device loop6): force clearing of disk cache [ 1500.895301][T24031] BTRFS info (device loop6): enabling auto defrag [ 1500.895316][T24031] BTRFS info (device loop6): trying to use backup root at mount time [ 1500.895333][T24031] BTRFS info (device loop6): use zstd compression, level 3 [ 1501.129279][T24051] netlink: 7 bytes leftover after parsing attributes in process `syz.6.5066'. [ 1501.129305][T24051] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5066'. [ 1501.129372][T24051] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5066'. [ 1501.129386][T24051] netlink: 7 bytes leftover after parsing attributes in process `syz.6.5066'. [ 1501.133980][ T4936] Bluetooth: hci6: Unknown advertising packet type: 0x11 [ 1501.137960][ T4936] Bluetooth: hci6: Unknown advertising packet type: 0x17 [ 1501.137978][ T4936] Bluetooth: hci6: Unknown advertising packet type: 0x1d [ 1501.138012][ T4936] Bluetooth: hci6: Malformed LE Event: 0x0d [ 1501.363493][T20326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.363579][T20326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1501.409134][T20334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.409241][T20334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1501.421061][T23930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.421151][T23930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.421281][T23930] bridge_slave_0: entered allmulticast mode [ 1501.426683][T23930] bridge_slave_0: entered promiscuous mode [ 1501.509614][T23930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.509717][T23930] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.509919][T23930] bridge_slave_1: entered allmulticast mode [ 1501.514068][T23930] bridge_slave_1: entered promiscuous mode [ 1501.585813][T23571] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1501.825399][T23930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.889809][T23768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1501.889834][T23768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1501.999305][T23930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1502.770004][T23930] team0: Port device team_slave_0 added [ 1502.798077][T23930] team0: Port device team_slave_1 added [ 1503.086168][T23930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1503.086186][T23930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1503.086209][T23930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1503.115919][T23930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1503.115937][T23930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1503.115960][T23930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1503.405432][ T188] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1503.466513][T23930] hsr_slave_0: entered promiscuous mode [ 1503.469004][T23930] hsr_slave_1: entered promiscuous mode [ 1503.469651][T23930] debugfs: 'hsr0' already exists in 'hsr' [ 1503.469669][T23930] Cannot create hsr debugfs directory [ 1503.578926][ T188] usb 7-1: Using ep0 maxpacket: 8 [ 1503.599506][ T188] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1503.608608][ T188] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 16 [ 1503.620702][ T188] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 1503.620729][ T188] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.620748][ T188] usb 7-1: Product: syz [ 1503.620763][ T188] usb 7-1: Manufacturer: syz [ 1503.620777][ T188] usb 7-1: SerialNumber: syz [ 1503.624342][T24076] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1503.725265][T23674] veth0_vlan: entered promiscuous mode [ 1503.950833][T23641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1503.955513][T23674] veth1_vlan: entered promiscuous mode [ 1504.047765][T24086] syz_tun: entered allmulticast mode [ 1504.693916][T23674] veth0_macvtap: entered promiscuous mode [ 1504.724059][T23674] veth1_macvtap: entered promiscuous mode [ 1504.840762][T23674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1504.882921][T23674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1505.200826][T23930] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.320123][T20331] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.320177][T20331] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.320211][T20331] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.320263][T20331] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.667140][T23930] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.881734][T23674] ieee80211 phy50: Selected rate control algorithm 'minstrel_ht' [ 1505.958245][T23768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1506.217705][T23930] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.321413][T20324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1506.321434][T20324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1506.324157][ T188] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1506.325130][ T188] usb 7-1: invalid MIDI in EP 0 [ 1506.382143][T23674] ieee80211 phy51: Selected rate control algorithm 'minstrel_ht' [ 1506.656587][ T4936] Bluetooth: hci2: command 0x0406 tx timeout [ 1508.790347][T23930] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.901344][T20331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1508.901368][T20331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.931796][ T188] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1508.971587][ T188] usb 7-1: USB disconnect, device number 12 [ 1509.000412][T23641] veth0_vlan: entered promiscuous mode [ 1509.101371][T23641] veth1_vlan: entered promiscuous mode [ 1509.219944][T21831] udevd[21831]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1509.335223][T23641] veth0_macvtap: entered promiscuous mode [ 1509.423039][T23641] veth1_macvtap: entered promiscuous mode [ 1509.489203][T24129] loop6: detected capacity change from 0 to 512 [ 1509.547066][T24129] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1509.568124][T23641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1509.639460][T23641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1509.744492][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.744562][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.744595][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.744635][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.867357][T23571] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1510.388565][T23768] veth0_vlan: entered promiscuous mode [ 1510.609744][T23641] ieee80211 phy52: Selected rate control algorithm 'minstrel_ht' [ 1510.674777][T23768] veth1_vlan: entered promiscuous mode [ 1511.855296][ T5639] Bluetooth: hci0: command 0x0406 tx timeout [ 1512.486334][T23930] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1512.514992][T23930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1512.527453][T23930] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1512.558037][T23930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1512.602341][T23930] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1512.659986][T23930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1512.660803][T23930] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1512.687275][ T5639] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1512.695827][ T5639] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1512.702654][ T5639] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1512.707936][ T5639] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1512.708488][ T5639] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1512.709784][T23930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1512.810443][T23768] veth0_macvtap: entered promiscuous mode [ 1512.864206][T23768] veth1_macvtap: entered promiscuous mode [ 1513.079327][T23768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1513.149918][T23768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1514.832396][ T5639] Bluetooth: hci10: command tx timeout [ 1515.028131][T24171] loop8: detected capacity change from 0 to 128 [ 1515.552622][T24171] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1515.559252][T16092] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.559551][T16092] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.559799][T16092] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.560048][T16092] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.589567][T24171] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1515.715187][ T5639] Bluetooth: Unexpected continuation frame (len 16) [ 1515.994523][T23768] ieee80211 phy53: Selected rate control algorithm 'minstrel_ht' [ 1516.248217][T23930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1516.288147][T23674] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1516.534205][ T4936] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1516.541147][ T4936] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1516.541852][ T4936] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1516.546660][ T4936] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1516.550729][ T4936] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1516.805909][T20342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.805929][T20342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1516.836219][T23768] ieee80211 phy54: Selected rate control algorithm 'minstrel_ht' [ 1516.887697][T24109] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1516.888554][T23930] 8021q: adding VLAN 0 to HW filter on device team0 [ 1516.908281][ T5639] Bluetooth: hci10: command tx timeout [ 1517.039022][T24109] usb 9-1: Using ep0 maxpacket: 16 [ 1517.047689][T24109] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1517.047926][T24109] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1517.051390][ T644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.051407][ T644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.055481][T20342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.055561][T20342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.063562][T24109] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1517.063594][T24109] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.063613][T24109] usb 9-1: Product: syz [ 1517.063628][T24109] usb 9-1: Manufacturer: syz [ 1517.063642][T24109] usb 9-1: SerialNumber: syz [ 1517.074075][T24109] usb 9-1: config 0 descriptor?? [ 1517.106147][T20342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.106231][T20342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.139874][T24109] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1517.139929][T24109] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1517.695952][ T48] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.700501][T24109] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1517.701766][T24109] em28xx 9-1:0.0: Config register raw data: 0x41 [ 1517.989256][T24109] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1518.116621][ T48] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.154371][T24109] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1518.154400][T24109] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.442045][ T48] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.594720][ T5639] Bluetooth: hci7: command tx timeout [ 1518.596549][T24109] usb 8-1: Firmware version (0.0) predates our first public release. [ 1518.596571][T24109] usb 8-1: Please update to version 0.2 or newer [ 1518.597071][T24109] usb 8-1: Firmware: build [ 1518.818594][ T48] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.853170][T24109] usb 8-1: USB disconnect, device number 42 [ 1518.993122][ T5639] Bluetooth: hci10: command tx timeout [ 1519.751144][T21242] usb 9-1: USB disconnect, device number 14 [ 1519.784442][T21242] em28xx 9-1:0.0: Disconnecting em28xx [ 1519.933024][T21242] em28xx 9-1:0.0: Freeing device [ 1521.030618][ T5639] Bluetooth: hci7: command tx timeout [ 1521.072086][ T5639] Bluetooth: hci10: command tx timeout [ 1523.074263][ T5639] Bluetooth: hci7: command tx timeout [ 1523.112522][T21242] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1523.559288][T24249] overlayfs: missing 'lowerdir' [ 1523.757571][ T48] bridge_slave_1: left allmulticast mode [ 1523.757597][ T48] bridge_slave_1: left promiscuous mode [ 1523.757786][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.769119][ T48] bridge_slave_0: left allmulticast mode [ 1523.769143][ T48] bridge_slave_0: left promiscuous mode [ 1523.769324][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.156303][ T5639] Bluetooth: hci7: command tx timeout [ 1526.233236][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1526.240596][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1526.243730][ T48] bond0 (unregistering): Released all slaves [ 1528.041109][T24157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1528.041198][T24157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.041335][T24157] bridge_slave_0: entered allmulticast mode [ 1528.046450][T24157] bridge_slave_0: entered promiscuous mode [ 1528.146107][T24157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.146202][T24157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1528.146423][T24157] bridge_slave_1: entered allmulticast mode [ 1528.154958][T24157] bridge_slave_1: entered promiscuous mode [ 1528.521702][ T48] hsr_slave_0: left promiscuous mode [ 1528.532711][ T48] hsr_slave_1: left promiscuous mode [ 1528.533326][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1528.533372][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1528.534008][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1528.534024][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1528.585160][ T48] veth1_macvtap: left promiscuous mode [ 1528.585195][ T48] veth0_macvtap: left promiscuous mode [ 1528.585293][ T48] veth1_vlan: left promiscuous mode [ 1528.585467][ T48] veth0_vlan: left promiscuous mode [ 1528.967377][ T4936] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1528.974875][ T4936] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1528.975576][ T4936] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1528.977508][ T4936] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1528.978629][ T4936] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1529.467825][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1529.493230][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1529.919425][T23930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1530.023839][T24157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1530.040065][T24157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1530.275859][T24157] team0: Port device team_slave_0 added [ 1530.322571][T24157] team0: Port device team_slave_1 added [ 1531.572626][ T4936] Bluetooth: hci11: command tx timeout [ 1531.921364][T24157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1531.921383][T24157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1531.921408][T24157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1533.043859][T24157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1533.043878][T24157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1533.043902][T24157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1533.644583][ T4936] Bluetooth: hci11: command tx timeout [ 1534.405497][T23930] veth0_vlan: entered promiscuous mode [ 1534.412707][T23930] veth1_vlan: entered promiscuous mode [ 1534.446988][T24186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.447078][T24186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.447292][T24186] bridge_slave_0: entered allmulticast mode [ 1534.448998][T24186] bridge_slave_0: entered promiscuous mode [ 1534.453376][T24186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.453460][T24186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.453584][T24186] bridge_slave_1: entered allmulticast mode [ 1534.465770][T24186] bridge_slave_1: entered promiscuous mode [ 1534.502587][T24157] hsr_slave_0: entered promiscuous mode [ 1534.511791][T24157] hsr_slave_1: entered promiscuous mode [ 1534.512428][T24157] debugfs: 'hsr0' already exists in 'hsr' [ 1534.512445][T24157] Cannot create hsr debugfs directory [ 1534.715457][T24186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1534.765947][ T188] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1534.791994][T24186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1534.948992][ T188] usb 9-1: Using ep0 maxpacket: 16 [ 1534.969652][ T188] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1534.969682][ T188] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1534.988552][ T188] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1534.988581][ T188] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.988600][ T188] usb 9-1: Product: syz [ 1534.988615][ T188] usb 9-1: Manufacturer: syz [ 1534.988629][ T188] usb 9-1: SerialNumber: syz [ 1534.991712][ T188] usb 9-1: config 0 descriptor?? [ 1534.997540][ T188] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1534.997570][ T188] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1535.003013][T24186] team0: Port device team_slave_0 added [ 1535.070696][T24186] team0: Port device team_slave_1 added [ 1535.214375][T24186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.214394][T24186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.214462][T24186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1535.244850][T23930] veth0_macvtap: entered promiscuous mode [ 1535.308932][T24186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1535.308952][T24186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.308977][T24186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1535.411725][T23930] veth1_macvtap: entered promiscuous mode [ 1535.616313][ T188] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1535.625663][ T188] em28xx 9-1:0.0: Config register raw data: 0x41 [ 1535.727347][ T4936] Bluetooth: hci11: command tx timeout [ 1535.739247][T24186] hsr_slave_0: entered promiscuous mode [ 1535.741959][T24186] hsr_slave_1: entered promiscuous mode [ 1535.742711][T24186] debugfs: 'hsr0' already exists in 'hsr' [ 1535.742730][T24186] Cannot create hsr debugfs directory [ 1535.768834][T23930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1535.993539][T23930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1536.240390][T20331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.240447][T20331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.240480][T20331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.240537][T20331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.816330][T23930] ieee80211 phy55: Selected rate control algorithm 'minstrel_ht' [ 1537.059131][T20334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.059151][T20334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.271737][T23930] ieee80211 phy56: Selected rate control algorithm 'minstrel_ht' [ 1537.544945][T20334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.544968][T20334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.566476][ T9] usb 9-1: USB disconnect, device number 16 [ 1537.568407][ T9] em28xx 9-1:0.0: Disconnecting em28xx [ 1537.583607][ T9] em28xx 9-1:0.0: Freeing device [ 1537.809263][ T4936] Bluetooth: hci11: command tx timeout [ 1539.841182][T24288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.841271][T24288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.841392][T24288] bridge_slave_0: entered allmulticast mode [ 1539.848608][T24288] bridge_slave_0: entered promiscuous mode [ 1540.066186][T24288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.066278][T24288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.066481][T24288] bridge_slave_1: entered allmulticast mode [ 1540.083309][T24288] bridge_slave_1: entered promiscuous mode [ 1540.188993][T24157] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1540.191115][T24372] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5059'. [ 1540.191157][T24372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5059'. [ 1540.191174][T24372] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5059'. [ 1540.228352][T24157] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1540.244590][T24157] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1540.275308][T24157] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1540.276344][T24157] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1540.315357][T24157] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1540.393448][T24157] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1540.415769][T24157] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1540.485763][T24288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1540.535866][T24288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1540.733992][T22302] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1540.738743][T22302] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1540.739437][T22302] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1540.740228][T22302] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1540.741780][T22302] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1541.062579][ T5771] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1541.064534][T24186] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.222846][ T5771] usb 2-1: Using ep0 maxpacket: 32 [ 1541.233305][ T5771] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 199, changing to 7 [ 1541.236549][ T5771] usb 2-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 1541.236574][ T5771] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.236593][ T5771] usb 2-1: Product: ခ [ 1541.236607][ T5771] usb 2-1: Manufacturer: 趂剨顜ᖖ듈䔂䇣즽ᘉ∃雂ጟ⯡司謹擻霢ɩ䁽裆僚圚ᥙ₉鳞夹䌠ӑ뇶閙⋄︼뽅⭜횡ꝝ憐墼ᨷܳ㍠펖࿤壥࣌穮ꖀ뮯迬 [ 1541.236630][ T5771] usb 2-1: SerialNumber: ᐊ [ 1541.444030][T24186] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.506103][ T5771] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1541.560302][ T5771] usb 2-1: USB disconnect, device number 103 [ 1541.687826][T24288] team0: Port device team_slave_0 added [ 1541.697477][T24288] team0: Port device team_slave_1 added [ 1541.802579][T24186] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.958850][T24288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1541.958869][T24288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1541.958894][T24288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1541.967320][T24288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1541.967336][T24288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1541.967361][T24288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1542.064990][T24186] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.406399][T24288] hsr_slave_0: entered promiscuous mode [ 1542.414316][T24288] hsr_slave_1: entered promiscuous mode [ 1542.416881][T24288] debugfs: 'hsr0' already exists in 'hsr' [ 1542.416899][T24288] Cannot create hsr debugfs directory [ 1542.540584][T22302] Bluetooth: hci3: command 0x0406 tx timeout [ 1542.876291][ T5639] Bluetooth: hci9: command tx timeout [ 1543.389970][T24157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1543.940380][T24186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1543.951404][T24186] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1543.960486][T24157] 8021q: adding VLAN 0 to HW filter on device team0 [ 1543.965235][ T9] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1543.979761][T24186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1544.001038][T24186] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1544.001838][T24186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1544.015521][T24186] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1544.030591][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.030682][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1544.040984][T24186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1544.050521][T24186] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1544.078492][T17279] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.078585][T17279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1544.115149][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1544.120412][ T9] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1544.120460][ T9] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1544.120481][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1544.120510][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1544.120530][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.122979][ T9] usb 2-1: config 0 descriptor?? [ 1544.561021][ T9] mcp2221 0003:04D8:00DD.0024: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1544.820038][ T9] usb 2-1: USB disconnect, device number 104 [ 1544.936746][ T5639] Bluetooth: hci9: command tx timeout [ 1545.603910][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.603962][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.015888][ T5639] Bluetooth: hci9: command tx timeout [ 1547.984791][T24186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1548.093378][T24377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.093470][T24377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.093607][T24377] bridge_slave_0: entered allmulticast mode [ 1548.095185][T24377] bridge_slave_0: entered promiscuous mode [ 1548.133656][T24377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.133753][T24377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.134006][T24377] bridge_slave_1: entered allmulticast mode [ 1548.151033][T24377] bridge_slave_1: entered promiscuous mode [ 1548.411473][T24377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1548.455827][T24186] 8021q: adding VLAN 0 to HW filter on device team0 [ 1548.469440][T24377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1549.098702][ T5639] Bluetooth: hci9: command tx timeout [ 1549.180233][ T644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.180318][ T644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1549.202241][T24377] team0: Port device team_slave_0 added [ 1549.231121][T24377] team0: Port device team_slave_1 added [ 1549.367383][T24288] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1549.383931][T24288] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1549.385961][ T644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.386043][ T644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1549.393530][T24288] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1549.406142][T24288] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1549.444801][T24377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1549.444820][T24377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1549.444868][T24377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1549.446642][T24288] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1549.465434][T24288] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1549.489775][T24377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1549.489796][T24377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1549.489821][T24377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1549.542071][T24288] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1549.562246][T24288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1549.820578][T24377] hsr_slave_0: entered promiscuous mode [ 1549.826683][T24377] hsr_slave_1: entered promiscuous mode [ 1549.827449][T24377] debugfs: 'hsr0' already exists in 'hsr' [ 1549.827467][T24377] Cannot create hsr debugfs directory [ 1550.580831][T24157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1550.690490][ T188] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1550.851260][ T188] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1550.851290][ T188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.851309][ T188] usb 2-1: Product: syz [ 1550.851323][ T188] usb 2-1: Manufacturer: syz [ 1550.851337][ T188] usb 2-1: SerialNumber: syz [ 1551.041990][T24288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1551.265560][T24377] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.286976][ T188] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1551.287057][ T188] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1551.702317][ T188] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1551.702366][ T188] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1551.703469][ T188] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1551.704033][T24377] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.709368][ T188] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 1551.828561][T24288] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.854894][ T9197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.854980][ T9197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1551.999382][T24377] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.076636][ T644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.076727][ T644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1552.213603][T24377] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.555098][T24157] veth0_vlan: entered promiscuous mode [ 1552.594462][T24157] veth1_vlan: entered promiscuous mode [ 1552.721680][T24186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1552.796089][T24157] veth0_macvtap: entered promiscuous mode [ 1553.093098][T24157] veth1_macvtap: entered promiscuous mode [ 1553.394997][T22302] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1553.402043][T22302] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1553.405136][T22302] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1553.414659][T22302] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1553.416309][T22302] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1553.613536][T24109] usb 2-1: USB disconnect, device number 105 [ 1553.816311][T24377] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1553.849785][T24377] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1553.850579][T24377] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1553.878528][T24377] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1553.939354][T24377] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1553.956561][T24377] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1553.957288][T24377] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1553.966946][T24377] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1553.979518][T24157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1554.025048][T24186] veth0_vlan: entered promiscuous mode [ 1554.057474][T24157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1554.122016][ T5771] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1554.172653][T16092] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.172707][T16092] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.172740][T16092] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.172772][T16092] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.182204][T24186] veth1_vlan: entered promiscuous mode [ 1554.273170][ T5771] usb 2-1: Using ep0 maxpacket: 32 [ 1554.277853][ T5771] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1554.277878][ T5771] usb 2-1: config 0 has no interface number 0 [ 1554.283435][ T5771] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1554.283460][ T5771] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.283479][ T5771] usb 2-1: Product: syz [ 1554.283493][ T5771] usb 2-1: Manufacturer: syz [ 1554.283507][ T5771] usb 2-1: SerialNumber: syz [ 1554.293512][ T5771] usb 2-1: config 0 descriptor?? [ 1554.732981][T24157] ieee80211 phy57: Selected rate control algorithm 'minstrel_ht' [ 1554.836418][T24186] veth0_macvtap: entered promiscuous mode [ 1554.879050][T24186] veth1_macvtap: entered promiscuous mode [ 1554.983549][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1554.983591][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1555.042187][T24157] ieee80211 phy58: Selected rate control algorithm 'minstrel_ht' [ 1555.147846][T24538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1555.148316][T24538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1555.248391][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1555.248412][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1555.315435][T24186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1555.357355][ T5771] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1555.357385][ T5771] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1555.359305][ T5771] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1555.359501][ T5771] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1555.385272][ T5771] usb 2-1: USB disconnect, device number 106 [ 1555.391177][T24377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1555.417743][T24186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1555.508766][T22302] Bluetooth: hci12: command tx timeout [ 1555.545089][T24288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1555.545993][T20324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.581121][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.581172][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.581205][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.607316][T24377] 8021q: adding VLAN 0 to HW filter on device team0 [ 1555.772596][T16092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1555.772687][T16092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1556.706341][T20324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.706425][T20324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1557.584386][T22302] Bluetooth: hci12: command tx timeout [ 1558.310225][T24186] ieee80211 phy59: Selected rate control algorithm 'minstrel_ht' [ 1558.613183][T24570] netlink: 'syz.4.5026': attribute type 10 has an invalid length. [ 1558.966755][T20336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1558.966776][T20336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.073081][T24186] ieee80211 phy60: Selected rate control algorithm 'minstrel_ht' [ 1559.165610][ T9477] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1559.292952][ T9197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.292973][ T9197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.327164][ T9477] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1559.327194][ T9477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.682053][T22302] Bluetooth: hci12: command tx timeout [ 1559.788600][ T9477] usb 2-1: Firmware version (0.0) predates our first public release. [ 1559.788626][ T9477] usb 2-1: Please update to version 0.2 or newer [ 1559.793882][ T9477] usb 2-1: Firmware: build [ 1560.068195][ T9477] usb 2-1: USB disconnect, device number 107 [ 1561.747615][T22302] Bluetooth: hci12: command tx timeout [ 1563.334803][T24605] netlink: 'syz.0.5104': attribute type 10 has an invalid length. [ 1566.052777][ T9477] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1566.195729][T24288] veth0_vlan: entered promiscuous mode [ 1566.227967][ T9477] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1566.227997][ T9477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.228016][ T9477] usb 2-1: Product: syz [ 1566.228031][ T9477] usb 2-1: Manufacturer: syz [ 1566.228045][ T9477] usb 2-1: SerialNumber: syz [ 1566.619237][T24288] veth1_vlan: entered promiscuous mode [ 1566.627750][T24531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.627856][T24531] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.628018][T24531] bridge_slave_0: entered allmulticast mode [ 1566.748998][ T9477] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1566.749078][ T9477] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1566.789896][T24531] bridge_slave_0: entered promiscuous mode [ 1566.799414][T24531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.808384][T24531] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.808550][T24531] bridge_slave_1: entered allmulticast mode [ 1566.826425][T24531] bridge_slave_1: entered promiscuous mode [ 1567.147621][T24639] loop0: detected capacity change from 0 to 32768 [ 1567.148674][T24639] btrfs: Deprecated parameter 'usebackuproot' [ 1567.148693][T24639] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1567.178209][T24639] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5111 (24639) [ 1567.198132][T24639] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1567.198163][T24639] BTRFS info (device loop0): using crc32c checksum algorithm [ 1567.360500][ T9477] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1567.360549][ T9477] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1567.361093][ T9477] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1568.027182][T24572] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1568.027300][T24639] BTRFS error (device loop0): failed to load root extent [ 1568.027332][T24639] BTRFS warning (device loop0): try to load backup roots slot 1 [ 1568.153464][T22302] Bluetooth: hci6: command 0x0406 tx timeout [ 1568.337930][ T644] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1568.337994][T24639] BTRFS warning (device loop0): couldn't read tree root [ 1568.338014][T24639] BTRFS warning (device loop0): try to load backup roots slot 2 [ 1568.487096][ T9198] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1568.487154][T24639] BTRFS warning (device loop0): couldn't read tree root [ 1568.487187][T24639] BTRFS warning (device loop0): try to load backup roots slot 3 [ 1568.990077][ T9477] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 1568.994753][T24639] BTRFS info (device loop0): rebuilding free space tree [ 1569.059244][T24639] BTRFS info (device loop0): checking UUID tree [ 1569.065876][T24639] BTRFS info (device loop0): enabling ssd optimizations [ 1569.065901][T24639] BTRFS info (device loop0): turning on async discard [ 1569.065948][T24639] BTRFS info (device loop0): enabling free space tree [ 1569.065964][T24639] BTRFS info (device loop0): force clearing of disk cache [ 1569.065979][T24639] BTRFS info (device loop0): enabling auto defrag [ 1569.065994][T24639] BTRFS info (device loop0): trying to use backup root at mount time [ 1569.066011][T24639] BTRFS info (device loop0): use zstd compression, level 3 [ 1569.761872][T24531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1570.102049][T24664] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5111'. [ 1570.102072][T24664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5111'. [ 1570.102134][T24664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5111'. [ 1570.102148][T24664] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5111'. [ 1570.114662][T24531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1570.125349][ T5639] Bluetooth: hci7: Unknown advertising packet type: 0x11 [ 1570.130137][ T5639] Bluetooth: hci7: Unknown advertising packet type: 0x17 [ 1570.130156][ T5639] Bluetooth: hci7: Unknown advertising packet type: 0x1d [ 1570.130172][ T5639] Bluetooth: hci7: Malformed LE Event: 0x0d [ 1570.214563][ T9477] usb 2-1: USB disconnect, device number 108 [ 1570.620686][T24186] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1570.666128][T24531] team0: Port device team_slave_0 added [ 1570.699641][T24531] team0: Port device team_slave_1 added [ 1571.258233][T24288] veth0_macvtap: entered promiscuous mode [ 1571.272769][T24531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1571.272786][T24531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1571.272810][T24531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1571.286394][T24531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1571.286411][T24531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1571.286435][T24531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1571.602777][T24288] veth1_macvtap: entered promiscuous mode [ 1573.855476][T24531] hsr_slave_0: entered promiscuous mode [ 1573.874801][T24531] hsr_slave_1: entered promiscuous mode [ 1573.875447][T24531] debugfs: 'hsr0' already exists in 'hsr' [ 1573.875465][T24531] Cannot create hsr debugfs directory [ 1574.005110][T24377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1576.133932][T24288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1576.604939][T24288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1576.871312][T24572] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.872735][T24572] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.872772][T24572] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.920143][T24572] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.075857][ T188] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1577.118548][ T9477] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1577.263908][ T188] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1577.263937][ T188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.263956][ T188] usb 2-1: Product: syz [ 1577.263970][ T188] usb 2-1: Manufacturer: syz [ 1577.263985][ T188] usb 2-1: SerialNumber: syz [ 1577.281950][ T9477] usb 5-1: Using ep0 maxpacket: 16 [ 1577.288815][ T9477] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 1577.288839][ T9477] usb 5-1: config 0 has no interface number 0 [ 1577.288873][ T9477] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1577.288917][ T9477] usb 5-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1577.304183][ T9477] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1577.304213][ T9477] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.304232][ T9477] usb 5-1: Product: syz [ 1577.304278][ T9477] usb 5-1: Manufacturer: syz [ 1577.304293][ T9477] usb 5-1: SerialNumber: syz [ 1577.327184][ T9477] usb 5-1: config 0 descriptor?? [ 1577.328963][T24705] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1577.349547][ T9477] asix 5-1:0.34: probe with driver asix failed with error -22 [ 1577.805508][ T188] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1577.805559][ T188] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1577.891800][T24288] ieee80211 phy61: Selected rate control algorithm 'minstrel_ht' [ 1577.976242][T24377] veth0_vlan: entered promiscuous mode [ 1578.066679][T20336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1578.066700][T20336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1578.253118][ T32] INFO: task syz.1.5006:23396 blocked for more than 143 seconds. [ 1578.253144][ T32] Tainted: G L syzkaller #0 [ 1578.253157][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1578.253167][ T32] task:syz.1.5006 state:D stack:28424 pid:23396 tgid:23392 ppid:17869 task_flags:0x400040 flags:0x00080002 [ 1578.253227][ T32] Call Trace: [ 1578.253236][ T32] [ 1578.253249][ T32] __schedule+0x17d9/0x56c0 [ 1578.253276][ T32] ? __lock_acquire+0x683/0x2cf0 [ 1578.253308][ T32] ? __lock_acquire+0x683/0x2cf0 [ 1578.253344][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1578.253368][ T32] ? stack_depot_save_flags+0x33/0x800 [ 1578.253395][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1578.253418][ T32] ? kasan_save_track+0x4f/0x80 [ 1578.253445][ T32] ? kasan_save_track+0x11/0x80 [ 1578.253481][ T32] ? __pfx___schedule+0x10/0x10 [ 1578.253510][ T32] ? schedule+0x90/0x2b0 [ 1578.253535][ T32] schedule+0x164/0x2b0 [ 1578.253558][ T32] schedule_preempt_disabled+0x13/0x30 [ 1578.253579][ T32] __mutex_lock+0x7bf/0x1550 [ 1578.253608][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1578.253635][ T32] ? tty_open+0x204/0xcc0 [ 1578.253667][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1578.253693][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1578.253723][ T32] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1578.253751][ T32] ? __kmalloc_cache_noprof+0x150/0x660 [ 1578.253778][ T32] ? tty_open+0x10c/0xcc0 [ 1578.253801][ T32] ? tty_open+0x10c/0xcc0 [ 1578.253832][ T32] tty_open+0x204/0xcc0 [ 1578.253887][ T32] ? __pfx_tty_open+0x10/0x10 [ 1578.253911][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1578.253938][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1578.253962][ T32] ? do_raw_spin_unlock+0xf5/0x210 [ 1578.253990][ T32] chrdev_open+0x4d9/0x600 [ 1578.254017][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 1578.254040][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1578.254063][ T32] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1578.254091][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 1578.254114][ T32] do_dentry_open+0x816/0x1380 [ 1578.254151][ T32] vfs_open+0x3b/0x340 [ 1578.254176][ T32] ? path_openat+0x2e2d/0x3830 [ 1578.254199][ T32] path_openat+0x2e44/0x3830 [ 1578.254225][ T32] ? kasan_save_track+0x3e/0x80 [ 1578.254253][ T32] ? do_sys_openat2+0xcc/0x200 [ 1578.254280][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.254320][ T32] do_file_open+0x23e/0x4a0 [ 1578.254346][ T32] ? __pfx_do_file_open+0x10/0x10 [ 1578.254386][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1578.254409][ T32] ? _raw_spin_unlock+0x28/0x50 [ 1578.254428][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1578.254451][ T32] ? alloc_fd+0x651/0x6c0 [ 1578.254488][ T32] do_sys_openat2+0x115/0x200 [ 1578.254516][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1578.254541][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 1578.254567][ T32] ? kfree+0x4d/0x640 [ 1578.254595][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1578.254624][ T32] __x64_sys_openat+0x138/0x170 [ 1578.254659][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.254681][ T32] do_syscall_64+0x174/0x580 [ 1578.254704][ T32] ? trace_irq_disable+0x3b/0x140 [ 1578.254737][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.254757][ T32] RIP: 0033:0x7fcff6b5e7ce [ 1578.255484][ T32] RSP: 002b:00007fcff79b2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1578.255508][ T32] RAX: ffffffffffffffda RBX: 00007fcff79b36c0 RCX: 00007fcff6b5e7ce [ 1578.255525][ T32] RDX: 0000000000000002 RSI: 00007fcff79b2c00 RDI: ffffffffffffff9c [ 1578.255539][ T32] RBP: 00007fcff6c34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 1578.255553][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1578.255566][ T32] R13: 00007fcff6e26128 R14: 00007fcff6e26090 R15: 00007ffd85add618 [ 1578.255598][ T32] [ 1578.255674][ T32] [ 1578.255674][ T32] Showing all locks held in the system: [ 1578.255685][ T32] 1 lock held by khungtaskd/32: [ 1578.255697][ T32] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1578.255756][ T32] 5 locks held by kworker/0:2/188: [ 1578.255769][ T32] 3 locks held by kworker/u8:6/644: [ 1578.255781][ T32] #0: ffff888031b16940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1578.255838][ T32] #1: ffffc900040c7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1578.255917][ T32] #2: ffffffff9002d8c0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 1578.255981][ T32] 2 locks held by getty/5374: [ 1578.255993][ T32] #0: ffff88803591f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1578.256045][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1578.256108][ T32] 2 locks held by kworker/0:4/19149: [ 1578.256120][ T32] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1578.256176][ T32] #1: ffffc90005d7fc40 (console_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1578.256232][ T32] 3 locks held by kworker/u8:20/20336: [ 1578.256244][ T32] #0: ffff88801b064140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1578.256301][ T32] #1: ffffc90004567c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1578.256357][ T32] #2: ffffffff9002d8c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1578.256416][ T32] 4 locks held by udevd/21829: [ 1578.256428][ T32] #0: ffff8880901a1cf8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 1578.256482][ T32] #1: ffff888075b98c80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1578.256544][ T32] #2: ffff88803266ec38 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1578.256605][ T32] #3: ffff8880456101d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1578.256675][ T32] 4 locks held by syz.1.5006/23393: [ 1578.256688][ T32] 1 lock held by syz.1.5006/23396: [ 1578.256700][ T32] #0: ffffffff8f458680 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x204/0xcc0 [ 1578.256759][ T32] 1 lock held by syz.0.5010/23488: [ 1578.256773][ T32] #0: ffffffff8f458680 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0xdc/0x2e0 [ 1578.256841][ T32] 1 lock held by syz.5.5049/23802: [ 1578.256853][ T32] #0: ffffffff8f458680 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0xdc/0x2e0 [ 1578.256936][ T32] 1 lock held by syz.3.5065/24024: [ 1578.256948][ T32] #0: ffffffff8f458680 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0xdc/0x2e0 [ 1578.257010][ T32] 1 lock held by syz.6.5074/24173: [ 1578.257022][ T32] #0: ffffffff8f458680 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x204/0xcc0 [ 1578.257078][ T32] 1 lock held by syz-executor/24186: [ 1578.257091][ T32] 3 locks held by syz-executor/24288: [ 1578.257103][ T32] #0: ffffffff9009e228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1578.257163][ T32] #1: ffffffff9009e060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1578.257224][ T32] #2: ffffffff9002d8c0 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_register_hw+0x3881/0x4a50 [ 1578.272944][ T32] 1 lock held by syz.8.5089/24359: [ 1578.272957][ T32] #0: ffffffff8f458680 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x204/0xcc0 [ 1578.273015][ T32] 1 lock held by syz.8.5089/24365: [ 1578.273026][ T32] #0: ffffffff8f458680 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x204/0xcc0 [ 1578.273084][ T32] 1 lock held by syz-executor/24377: [ 1578.273096][ T32] #0: ffffffff9002d8c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1578.273152][ T32] 8 locks held by syz-executor/24531: [ 1578.273166][ T32] 2 locks held by kworker/u8:4/24572: [ 1578.273180][ T32] 1 lock held by sed/24716: [ 1578.273193][ T32] [ 1578.273200][ T32] ============================================= [ 1578.273200][ T32] [ 1578.273210][ T32] NMI backtrace for cpu 0 [ 1578.273224][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1578.273248][ T32] Tainted: [L]=SOFTLOCKUP [ 1578.273255][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1578.273267][ T32] Call Trace: [ 1578.273274][ T32] [ 1578.273282][ T32] dump_stack_lvl+0xe8/0x150 [ 1578.273312][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1578.273341][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1578.273372][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1578.273404][ T32] sys_info+0x135/0x170 [ 1578.273430][ T32] watchdog+0xfd7/0x1030 [ 1578.273461][ T32] ? watchdog+0x1c7/0x1030 [ 1578.273491][ T32] kthread+0x388/0x470 [ 1578.273519][ T32] ? __pfx_watchdog+0x10/0x10 [ 1578.273541][ T32] ? __pfx_kthread+0x10/0x10 [ 1578.273570][ T32] ret_from_fork+0x514/0xb70 [ 1578.273601][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1578.273629][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1578.273657][ T32] ? __switch_to+0xc89/0x1420 [ 1578.273684][ T32] ? __pfx_kthread+0x10/0x10 [ 1578.273714][ T32] ret_from_fork_asm+0x1a/0x30 [ 1578.273745][ T32] [ 1578.273756][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1578.273770][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1578.273793][ T32] Tainted: [L]=SOFTLOCKUP [ 1578.273801][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1578.273813][ T32] Call Trace: [ 1578.273820][ T32] [ 1578.273829][ T32] vpanic+0x56c/0xa60 [ 1578.273857][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1578.273886][ T32] ? __pfx_vpanic+0x10/0x10 [ 1578.273914][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1578.273938][ T32] ? __down_trylock_console_sem+0x6b/0x110 [ 1578.273967][ T32] panic+0xc5/0xd0 [ 1578.273995][ T32] ? __pfx_panic+0x10/0x10 [ 1578.274026][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1578.274048][ T32] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 1578.274081][ T32] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 1578.274115][ T32] watchdog+0x1030/0x1030 [ 1578.274146][ T32] ? watchdog+0x1c7/0x1030 [ 1578.274176][ T32] kthread+0x388/0x470 [ 1578.274205][ T32] ? __pfx_watchdog+0x10/0x10 [ 1578.274228][ T32] ? __pfx_kthread+0x10/0x10 [ 1578.274257][ T32] ret_from_fork+0x514/0xb70 [ 1578.274289][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1578.274317][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1578.274340][ T32] ? __switch_to+0xc89/0x1420 [ 1578.274367][ T32] ? __pfx_kthread+0x10/0x10 [ 1578.274397][ T32] ret_from_fork_asm+0x1a/0x30 [ 1578.274429][ T32] [ 1578.274473][ T32] Kernel Offset: disabled