last executing test programs: 15m20.729665437s ago: executing program 32 (id=87): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1c75, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2e5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 15m4.436161223s ago: executing program 3 (id=133): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=@delchain={0x24, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3900}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 15m2.844153601s ago: executing program 3 (id=136): write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x104008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 14m59.374649631s ago: executing program 3 (id=138): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) pipe2(0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000100), 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB=' \f', @ANYRES64=r0, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0}) 14m54.499720054s ago: executing program 3 (id=145): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x8382, 0x0) socket(0xa, 0x3, 0x3a) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000200)=0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) 14m48.581649056s ago: executing program 3 (id=149): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x200009}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000000)=0x8, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14m46.168127078s ago: executing program 3 (id=151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0004060004004cba004000642c00032101"], 0x4a) 14m28.62684382s ago: executing program 33 (id=151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0004060004004cba004000642c00032101"], 0x4a) 10m57.019711304s ago: executing program 4 (id=515): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x202, 0x2004f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x5b4, 0x51, 0x7}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x52a1, 0x1e}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x4, 0xe608}) close_range(r4, 0xffffffffffffffff, 0x0) 10m56.875508811s ago: executing program 4 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x3e, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x100000, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 10m54.565850823s ago: executing program 4 (id=518): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 10m50.674635599s ago: executing program 4 (id=525): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() fsopen(&(0x7f00000001c0)='nfsd\x00', 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) syz_emit_vhci(&(0x7f0000005f00)=ANY=[@ANYBLOB="04"], 0xd) 10m48.200024413s ago: executing program 4 (id=531): prctl$PR_MCE_KILL(0x23, 0x3, 0x7ffffffff000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) 10m45.475741812s ago: executing program 4 (id=534): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f00000002c0)=[{0x20, 0x2c, 0x40, 0xfffff034}, {0x20, 0x0, 0x7, 0x39a0}, {0x6, 0xba, 0x2, 0xbfff}]}, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a300000000048000000030a01040000000000000000010000000900010073797a30000000000900030073797a31000000001400048008000140000000040800024000000064080007006e61740040000000060a01040000000000000000010000000900010073797a30000000000900020073797a31000000001400048010000180090001006d6173710000"], 0xd0}}, 0x0) rename(&(0x7f0000000000)='./cgroup.net/devices.allow\x00', &(0x7f00000002c0)='./cgroup.net/cgroup.procs\x00') open(&(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x100080, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x9000, 0xffffdffd, @dev={0xfe, 0x80, '\x00', 0x16}, 0x7}, 0x1c) 10m29.285943353s ago: executing program 34 (id=534): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f00000002c0)=[{0x20, 0x2c, 0x40, 0xfffff034}, {0x20, 0x0, 0x7, 0x39a0}, {0x6, 0xba, 0x2, 0xbfff}]}, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a300000000048000000030a01040000000000000000010000000900010073797a30000000000900030073797a31000000001400048008000140000000040800024000000064080007006e61740040000000060a01040000000000000000010000000900010073797a30000000000900020073797a31000000001400048010000180090001006d6173710000"], 0xd0}}, 0x0) rename(&(0x7f0000000000)='./cgroup.net/devices.allow\x00', &(0x7f00000002c0)='./cgroup.net/cgroup.procs\x00') open(&(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x100080, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x9000, 0xffffdffd, @dev={0xfe, 0x80, '\x00', 0x16}, 0x7}, 0x1c) 9m16.963508969s ago: executing program 0 (id=620): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) timer_gettime(0x0, &(0x7f00000003c0)) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) file_getattr(r4, 0x0, &(0x7f0000006040), 0x27, 0x1000) 9m15.821539094s ago: executing program 0 (id=622): setns(0xc9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285628, &(0x7f0000000080)={0x3, @win={{}, 0x2, 0x0, 0x0, 0x0, 0x0}}) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106412, &(0x7f00000000c0)={0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 9m13.983638396s ago: executing program 0 (id=623): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') 9m8.79178822s ago: executing program 0 (id=630): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0x40000000) 9m7.413084386s ago: executing program 0 (id=631): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x1ff) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000)) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_fuse_handle_req(r3, &(0x7f0000009b40)="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", 0x2000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x100) ioctl$TIOCGETD(r0, 0x5424, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x801a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) write(r5, &(0x7f0000000280)='{*', 0x2) 9m5.436790856s ago: executing program 0 (id=634): syz_open_dev$vim2m(0x0, 0x7fff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) msgsnd(0x0, 0x0, 0x8, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(0xffffffffffffffff, 0x6f44, 0x7) mkdirat(0xffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x800004, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='zst', 0x3) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 8m55.310492366s ago: executing program 6 (id=641): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100100000040c50f80b0000000000001090224000100009009090400fe01030001000921c100fe0122280009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="202228000000280ac2631385269c2c3cbdeacc918d0fb74237cc6e"], 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000041000901feffffff00000000027c0000040042800c0001800600060089"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000280)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0x7}, {0xfff2, 0x3}, {0xf, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040080}, 0x45890) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={0x0, 0x154}, 0x1, 0x0, 0x0, 0x8800}, 0x4010) mlockall(0x52921abbe1ee075d) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x1) syz_usb_control_io(r1, 0x0, 0x0) 8m51.618448586s ago: executing program 6 (id=646): socket$inet_sctp(0x2, 0x5, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = syz_clone(0x2831880, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)="b63cdf0410b1d3609cb284a3e621c812547d84e5cdd1dc7ec14aba4b70b79b6d9736ac8ad4e61dc0ae68385895d59f7b1a") fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffe, 0x5, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x39000, 0x0) vmsplice(r4, &(0x7f0000000180)=[{&(0x7f0000002280)="80", 0x1}], 0x1, 0x0) read$FUSE(r4, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r4, &(0x7f0000000240)={0x2020}, 0x2020) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 8m49.736633471s ago: executing program 35 (id=634): syz_open_dev$vim2m(0x0, 0x7fff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) msgsnd(0x0, 0x0, 0x8, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(0xffffffffffffffff, 0x6f44, 0x7) mkdirat(0xffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x800004, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='zst', 0x3) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 8m47.683047512s ago: executing program 6 (id=652): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @empty}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x300) recvmmsg(r1, &(0x7f000000bd00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/19, 0x13}, 0x8819520}], 0x1, 0x45833af92e4a38bf, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x6, 0xfffff001, 0x64, @private2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, 0x8}}) 8m46.729616306s ago: executing program 6 (id=655): setns(0xc9, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) 8m44.706798392s ago: executing program 6 (id=657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xfffd, 0xe9, @mcast1, 0x5}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) 8m42.961380356s ago: executing program 6 (id=658): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d0403048708487b05beb72666696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f43657274696669630000000000000008666963617428a2e0861e1ae90d412073656c662d74657374696e67206b657930b8ece1852be1042deb5eeeabba59301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301683142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c000000005de9705cb4022073b7c77a5adb670a964219cf4f674f356aee", 0x1cd, 0xfffffffffffffffd) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) r1 = open(&(0x7f0000000140)='./dev\x00', 0x212e00, 0x164) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) socketpair(0x10, 0x4, 0x3, &(0x7f0000000380)) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 8m26.985330217s ago: executing program 36 (id=658): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="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", 0x1cd, 0xfffffffffffffffd) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) r1 = open(&(0x7f0000000140)='./dev\x00', 0x212e00, 0x164) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) socketpair(0x10, 0x4, 0x3, &(0x7f0000000380)) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 7m10.376184929s ago: executing program 5 (id=728): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) open(0x0, 0x108843, 0x55) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0xd9e, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000340), 0x0, 0x45833af92e4b38ff, 0x0) 7m8.602100538s ago: executing program 5 (id=729): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x6e, 0x141602) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000380)={0xd4e4, 0x40, {}, {0xee01}, 0xfff, 0xf}) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/218, 0xe7}], 0x2f, 0x0) 7m6.647982508s ago: executing program 5 (id=730): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0xd, 0x10001, 0xc, 0x2, 0x401, 0x0}) capset(&(0x7f0000000440)={0x20071026, r2}, &(0x7f0000000500)={0x3, 0x3, 0x2000, 0x6, 0x9}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f00000000c0)=0xf73f) select(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) open(0x0, 0x62b000, 0x4b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="7a0a00ff000000007110b6000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 7m4.637039882s ago: executing program 5 (id=732): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) landlock_restrict_self(r3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/cpu_byteorder', 0x8440, 0xea) 7m3.751493429s ago: executing program 5 (id=734): openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x1e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') write$cgroup_int(r3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{0x0, 0x1, 0x3, 0x6}], 0x10, 0x101}, 0x94) 6m59.05134454s ago: executing program 5 (id=736): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) syz_open_procfs(0x0, &(0x7f0000001380)='statm\x00') getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000480), 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000280)=""/102) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 6m42.278851989s ago: executing program 37 (id=736): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) syz_open_procfs(0x0, &(0x7f0000001380)='statm\x00') getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000480), 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000280)=""/102) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1m48.342004331s ago: executing program 2 (id=853): socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrusage(0x0, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) 47.789504346s ago: executing program 2 (id=862): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() setrlimit(0xa, &(0x7f00000000c0)={0x9, 0x6}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x5, 0x20980) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, 0x0) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) write(r3, &(0x7f0000000000)="5a000300010003", 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='sessionid\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 44.016123739s ago: executing program 2 (id=864): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x101, 0x800, 0x103, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r1, &(0x7f00000002c0)={0x0, 0xfb00, 0x4, 0x1, 0x224}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x33bd, 0x6e2, 0x3, 0x80}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa618, 0x80000, 0x0, 0x12d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x193d, 0x2, 0x2, 0xab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b68, 0x20000, 0x1, 0x376}}], 0x4, &(0x7f0000001d00)={0x2e, 0x34, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r5, '\x00', {0x2, 0x214, 0x0, 0x0}}, &(0x7f0000001d80)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) epoll_create1(0x0) unshare(0x28000600) close(0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x288840, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) dup(0xffffffffffffffff) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') getdents64(r8, &(0x7f0000000000)=""/90, 0x5a) getdents(r8, &(0x7f0000000100)=""/67, 0x43) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) 41.004076203s ago: executing program 2 (id=858): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 30.316246442s ago: executing program 8 (id=860): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrusage(0x0, &(0x7f0000000280)) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7b68fc283eed8441}, 0x28) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x1005c48, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x901) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(0x0, 0x0, 0x0, 0x0) 30.062453434s ago: executing program 2 (id=863): io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1ff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() openat$sysfs(0xffffffffffffff9c, 0x0, 0x122102, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) sendmsg$nl_route(r1, 0x0, 0x4054) setns(0xc9, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000200), 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000000)={0x3, 0x8, 0xd, 0x0, 0x16, "bae9b23b2225cb76ef3ebbbf666395606aed1a"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003f000500010000000000000001010000000000000f0001006f76732d73797374656d00000800020000000000080009002a"], 0x38}}, 0x0) 28.420593988s ago: executing program 8 (id=865): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x248a}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(0x0, 0x80800) bpf$MAP_CREATE(0x0, 0x0, 0x0) setns(0xc9, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') read$FUSE(r4, &(0x7f0000001280)={0x2020}, 0x2020) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000000)={0x7, 0x10000}) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x20008000) shutdown(r0, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x0, 0x70bd26, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x20040000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x80000001, 0x812d}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x8804) 25.012877182s ago: executing program 8 (id=869): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000001c0)=0xb, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = socket(0xa, 0x3, 0x87) sendto(r4, 0x0, 0x0, 0x800, 0x0, 0x0) ioctl$int_in(r4, 0x5452, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x3) fchdir(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000380)=""/111, 0x6f}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000640)=""/198, 0xc6}, {&(0x7f0000000740)=""/165, 0xa5}, {&(0x7f0000000800)=""/81, 0x51}, {&(0x7f0000000880)=""/117, 0x75}, {&(0x7f0000000900)=""/117, 0x75}], 0x7, &(0x7f0000000a00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @none, 0xb}, 0xe) getpeername(r7, 0x0, &(0x7f0000000180)) ioctl(r6, 0x8916, &(0x7f0000000200)="76657468303a3000000000000000000002") sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0xea5bc50b6199d77e) bpf$MAP_CREATE(0x300000000000018, &(0x7f0000000200)=@base={0x17, 0x4, 0x41, 0x0, 0x60101, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0xfffffffe, 0x3}, 0x50) 22.842783305s ago: executing program 1 (id=870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) socket$netlink(0x10, 0x3, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) 21.519713895s ago: executing program 8 (id=872): r0 = socket$unix(0x1, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f51116c280e300", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r2, &(0x7f0000000300)="52352ad9c511632230feabb93e8326b6e72421603ac6c4c871de093d4aa05067dd8374081f2ba3f75aaba0f9c0a9e5461e39edf5d57376b744dd3cf4", 0x3c, 0xc000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000700080073114300000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioprio_set$uid(0x3, 0x0, 0x4007) select(0xff56, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff, 0x300}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r5, 0xffffffffffffffff, 0x0, 0x7ffffffd) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="24005a802000018014000300000000000000000000000d000100000004000200040001"], 0x40}}, 0x0) 21.432221154s ago: executing program 2 (id=874): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000006c0)={'#! ', './file0', [], 0xa, "129dd500000000570c0f7cda50ef16a37b47835722648c94e61d360546fad278570e0dfd8fcbbcb40a0bddee505ea3d467c5adbcc9999e9e03b6fc3e2c0a"}, 0x49) execveat(0xffffffffffffffff, &(0x7f0000000680)='./file1\x00', 0x0, 0x0, 0x100) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x0, 0x0, 0x200000, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x4, 0x5, 0x0, 0x10000, 0x3, 0x4, 0x0, 0xffffffffffffffff, 0x6f5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa0, 0x40000007, 0x4, 0x0, 0x6, 0x9, 0x1, 0x2, 0xae4f, 0x0, 0xe8, 0x1, 0xfffffffffffffffd, 0x5f23, 0xfffffffefffffffd, 0x80000003, 0x598c054, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1ff, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x1, 0x0, 0x40, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x93, 0x1000000000000, 0x0, 0x1, 0x0, 0xf9c, 0x0, 0xfffffffffffffffb, 0xea4d, 0x377, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x804000000001, 0x3, 0xfffffffffffffffd, 0xc58f, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x3, 0x8000000000000001, 0x4, 0xd2c, 0x4, 0x4, 0x4000000000000004, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x6]}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x5b) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x801d) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) r8 = fsopen(&(0x7f0000000180)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='[::]]:/\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) syz_usb_connect(0x6, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) 20.101329596s ago: executing program 1 (id=875): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24000004) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000340)={0xa, 0x4e24, 0x103, @empty}, 0x1c) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/icmp\x00') preadv(r7, &(0x7f0000000440)=[{&(0x7f0000000640)=""/156, 0x9c}], 0x1, 0x14, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) openat$vga_arbiter(0xffffff9c, 0x0, 0x10000, 0x0) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r9, 0x80506409, 0x0) read(r9, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ffff2bbd7000fcdbdf2503000003"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) 13.905574575s ago: executing program 8 (id=877): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x250, 0x80, 0xa, 0x3, 0xff, 0x8}, 0x5, &(0x7f0000000f40)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x42b}}]}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 13.623915022s ago: executing program 7 (id=878): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) syz_open_dev$vbi(&(0x7f0000000200), 0x0, 0x2) read(0xffffffffffffffff, 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r5, 0x80045010, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r6, r6, r6}, 0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) io_setup(0xb, &(0x7f0000004200)=0x0) io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) mq_notify(0xffffffffffffffff, 0x0) 13.604543489s ago: executing program 1 (id=879): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "c6d560164376f018", "21e3655de63f34cfa1bd5c41e4c6ccfc", "655ceb10", "8f068e40342cf1d5"}, 0x28) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) 12.096141624s ago: executing program 1 (id=880): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000480)='1\n', 0x2) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)='fc\n', 0x3) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='fc\n', 0x3) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00') openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0) 10.283911727s ago: executing program 8 (id=881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r3, &(0x7f0000010440)=[{&(0x7f0000000400)=""/160, 0xa0}], 0x1, 0xc03, 0x0) gettid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f00006dbffc), 0x4) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x42872, 0xffffffffffffffff, 0x80000000) openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0xe8c00, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xffffffff, 0x0, 0x34325241, 0x0, 0x3, [{0x0, 0x3}, {0xfffffffc, 0x20000000}, {}, {0x8}, {0x0, 0x400000}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x7, 0x0, 0x4}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) flock(0xffffffffffffffff, 0x6) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0xb, @sliced={0x1, [0x4d6, 0x7d, 0xc45, 0x2, 0x7, 0xfff5, 0x3ff, 0x2, 0x1, 0x7d4, 0x5, 0x2aa, 0x7, 0x9, 0x3ff, 0x4, 0x200a, 0x7, 0x200, 0x0, 0xc29, 0x1, 0xe7, 0xfff9, 0x40, 0x8, 0x80, 0x6, 0x8, 0xfff5, 0x5022, 0x9, 0x2, 0x3, 0x81, 0x6f4, 0x1, 0x1000, 0x2, 0x2, 0x40, 0x5, 0xf52, 0x4, 0xaae, 0x8, 0x85, 0x4], 0x9}}) 9.123089759s ago: executing program 7 (id=882): socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x121302, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r4, 0x204) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x4, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x40, 0x0, 0xe7}}}}}}, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) 8.910616637s ago: executing program 1 (id=883): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) r1 = creat(0x0, 0x30) connect$unix(r1, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYRES8, @ANYRESDEC=r0, @ANYRESDEC, @ANYBLOB="039bfed84b7d020ed15b8cde0dba1fed41f2b26f36781e2618ec987c0d2d6c6294ad4c7a01c40d35465793e504ea672fd8d921e93ab445efcd1700e3810722949be20f2e1421c58ae4f77ff48f5e63d2b30e9488a2a8cfca6b94a1ac13fc3387301472d83f9bf31ec51c643711293e0523e2f8ae38d8adfd29a53b78180059d5f1e062c8076353ecd2e2dc193007ac2fa383"], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x40008) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0x540) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r6, &(0x7f00000091c0)=""/16384, 0x4000) write(0xffffffffffffffff, &(0x7f0000000200)='m', 0x1) 7.235531108s ago: executing program 7 (id=884): socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrusage(0x0, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7b68fc283eed8441}, 0x28) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x1005c48, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(0x0, 0x0, 0x0, 0x0) 5.759974583s ago: executing program 7 (id=885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, r4, 0xfffffff8}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20044044) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="060000001000"}) clock_gettime(0x9, &(0x7f0000000280)) r7 = socket$inet(0x2, 0x2, 0xfffffffd) setsockopt$inet_mreqn(r7, 0x0, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r8, &(0x7f0000000740)='dummy_udc.0', 0xb) write$uinput_user_dev(r5, &(0x7f0000000b00)={'syz1\x00', {0x5, 0x7, 0xffff, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x5, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x10000007, 0x9, 0x1, 0x4, 0x8000ffe, 0x7fffffff, 0xf, 0x8, 0x800, 0x6, 0x401, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x8000001, 0x5, 0x1, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x3, 0x9, 0x2, 0x1, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x805, 0x80000001, 0xffffffff, 0x9, 0x2a, 0x1, 0x23], [0x9, 0x3, 0x7, 0x39b7c38a, 0x80000015, 0x12, 0x802, 0xc, 0x0, 0x2329, 0x9, 0x3, 0x7, 0x6, 0x8, 0x24a, 0x2, 0xfffffff7, 0xfffffffb, 0x3, 0x8, 0x8, 0x80, 0x6, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x2, 0x200, 0x9a, 0xffffff00, 0x100007ff, 0x6, 0x1, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x5, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x1, 0x3, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0xd, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x2, 0x4, 0x40000, 0xfffffffc, 0x5, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x20001, 0x5, 0x10001, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x408b5, 0x10, 0x4, 0xff, 0x4, 0x2, 0x2, 0x1000000c, 0x0, 0x3, 0x6, 0x8007c12, 0x2, 0x1, 0x0, 0x5, 0xe, 0x3, 0x4, 0x8, 0xfff, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x10008, 0xdd, 0x1, 0x9, 0xc3, 0x7, 0x7a3], [0x9, 0x3a8d, 0xffff9a7f, 0x80000000, 0xc, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfffffffd, 0x2, 0x66608000, 0x7, 0x7fb, 0x8, 0x0, 0x8, 0x9, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x11, 0x1000, 0xffffffff, 0x100, 0x3, 0x20000000, 0x8, 0x3f15, 0xffff, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x2]}, 0x45c) 3.018958712s ago: executing program 38 (id=874): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000006c0)={'#! ', './file0', [], 0xa, "129dd500000000570c0f7cda50ef16a37b47835722648c94e61d360546fad278570e0dfd8fcbbcb40a0bddee505ea3d467c5adbcc9999e9e03b6fc3e2c0a"}, 0x49) execveat(0xffffffffffffffff, &(0x7f0000000680)='./file1\x00', 0x0, 0x0, 0x100) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x0, 0x0, 0x200000, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x4, 0x5, 0x0, 0x10000, 0x3, 0x4, 0x0, 0xffffffffffffffff, 0x6f5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa0, 0x40000007, 0x4, 0x0, 0x6, 0x9, 0x1, 0x2, 0xae4f, 0x0, 0xe8, 0x1, 0xfffffffffffffffd, 0x5f23, 0xfffffffefffffffd, 0x80000003, 0x598c054, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1ff, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x1, 0x0, 0x40, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x93, 0x1000000000000, 0x0, 0x1, 0x0, 0xf9c, 0x0, 0xfffffffffffffffb, 0xea4d, 0x377, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x804000000001, 0x3, 0xfffffffffffffffd, 0xc58f, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x3, 0x8000000000000001, 0x4, 0xd2c, 0x4, 0x4, 0x4000000000000004, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x6]}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x5b) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x801d) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) r8 = fsopen(&(0x7f0000000180)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='[::]]:/\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) syz_usb_connect(0x6, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) 2.77393186s ago: executing program 1 (id=887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r4, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x44}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x10}) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b4552202743442043617074757265"], 0xaf) close(r6) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r9, &(0x7f0000000540)="48696c060a2f686c64bf8fcc6b881b5fa6802c012f6869642d636f72652e63206c696e65cb57e017fcb309130850af815ecccc4d204e9938", 0x38) ioctl$PPPIOCGFLAGS(r9, 0x8004745a, &(0x7f0000000100)) write(r8, &(0x7f0000000000)="2400000011005f0414f900655e00000000ae00002d000000000000ea08000f0001000000", 0x24) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000040)="01000000000022001000000000000001000000000002080045000074000140004006", 0x22}, {&(0x7f0000000ec0)="00d8e1369d20050e00005b731e4eb5071febe9f8cb54afe2e5e68b36", 0x1c}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x130) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x200005, 0x2, 0x7, 0x7, 0x0, 0x3, 0xfc, 0x2, 0xfc, 0x3, 0xfffffbfc, 0x4, 0xff, 0x9, 0x45, [0x0, 0x807]}}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x1010, &(0x7f0000000200)=ANY=[@ANYRES16]) 2.325086868s ago: executing program 7 (id=888): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) writev(r0, &(0x7f00000005c0)=[{0x0, 0x218}, {&(0x7f0000000300)="2ea63d218bc1", 0xfdef}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8403, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x1b}, 0x20) r6 = fanotify_init(0x10, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f00000020c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x8900, &(0x7f00000005c0)={0x0, 0x1, 0x80000}, 0x4d) fanotify_mark(r6, 0x102, 0x40001043, r4, 0x0) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000640), 0x0) open(0x0, 0x108943, 0x148) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) 0s ago: executing program 7 (id=889): syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"}) openat$rdma_cm(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/lun/lun_0\x00', &(0x7f0000000040)='configfs\x00', 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0\x00', 0x1ed) write(0xffffffffffffffff, &(0x7f0000000180)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x148) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='usbip-vudc.0', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/usb_gadget\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) kernel console output (not intermixed with test programs): 362][ C1] bridge0: topology change detected, propagating [ 415.349879][ T7930] netlink: 68 bytes leftover after parsing attributes in process `syz.5.522'. [ 415.364385][ T7930] netlink: 5 bytes leftover after parsing attributes in process `syz.5.522'. [ 416.844205][ C1] net_ratelimit: 200 callbacks suppressed [ 417.021672][ T5614] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 420.737544][ T5879] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 420.905765][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 420.906878][ T5879] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 420.908770][ T5879] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 420.908796][ T5879] usb 2-1: config 0 has no interface number 0 [ 420.908846][ T5879] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 420.908876][ T5879] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 420.908901][ T5879] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 421.001990][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.002015][ T5879] usb 2-1: Product: syz [ 421.002032][ T5879] usb 2-1: Manufacturer: syz [ 421.002049][ T5879] usb 2-1: SerialNumber: syz [ 421.126414][ T5879] usb 2-1: config 0 descriptor?? [ 421.129703][ T7954] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 421.413115][ T5879] usb-storage 2-1:0.20: USB Mass Storage device detected [ 421.560008][ T5879] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 421.602706][ T5879] scsi host1: usb-storage 2-1:0.20 [ 421.758747][ T5879] usb 2-1: USB disconnect, device number 8 [ 422.489173][ T1482] net_ratelimit: 112 callbacks suppressed [ 425.725523][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'. [ 425.759085][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'. [ 427.569701][ C1] net_ratelimit: 56 callbacks suppressed [ 432.989337][ C0] net_ratelimit: 67 callbacks suppressed [ 435.604923][ T5603] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 437.404932][ T8025] bridge_slave_0: left allmulticast mode [ 437.404954][ T8025] bridge_slave_0: left promiscuous mode [ 437.405153][ T8025] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.658747][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 437.758371][ T5606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 437.761334][ T5606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 437.789548][ T5606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 437.822612][ T5606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 438.092312][ C0] net_ratelimit: 82 callbacks suppressed [ 438.532711][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.542'. [ 440.557866][ T5614] Bluetooth: hci5: command tx timeout [ 440.577785][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.577966][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.107759][ T5614] Bluetooth: hci5: command tx timeout [ 443.322851][ T5725] net_ratelimit: 62 callbacks suppressed ** 3332 printk messages dropped ** [ 446.540739][ T5614] Bluetooth: hci5: command tx timeout [ 448.773301][ C1] net_ratelimit: 44 callbacks suppressed [ 448.775348][ T5614] Bluetooth: hci5: command tx timeout [ 453.465032][ T119] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.145504][ C1] net_ratelimit: 116 callbacks suppressed [ 455.802490][ T8075] Zero length message leads to an empty skb [ 460.247160][ C1] net_ratelimit: 58 callbacks suppressed [ 460.751651][ T119] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.933399][ T8109] MTRR 1 not used [ 465.404606][ C1] net_ratelimit: 40 callbacks suppressed [ 465.662550][ T5850] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 465.771743][ T119] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.855419][ T5850] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 465.858726][ T5850] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 465.858785][ T5850] usb 2-1: can't read configurations, error -61 [ 466.012806][ T5850] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 466.167953][ T5850] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 466.183344][ T5850] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 466.183382][ T5850] usb 2-1: can't read configurations, error -61 [ 466.184041][ T5850] usb usb2-port1: attempt power cycle [ 468.265182][ T5850] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 468.412892][ T36] audit: type=1800 audit(1791271557.154:5): pid=8119 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.573" name="(" dev="sda1" ino=2060 res=0 errno=0 [ 468.443766][ T5850] usb 2-1: device descriptor read/8, error -71 [ 469.907494][ T119] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.560238][ C0] net_ratelimit: 49 callbacks suppressed [ 472.970129][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.583'. [ 476.670069][ T5855] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 477.115397][ T5855] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 477.121749][ T5855] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.122105][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.139947][ T5855] usb 6-1: config 0 descriptor?? [ 477.185697][ T5855] pwc: Askey VC010 type 2 USB webcam detected. [ 477.292249][ C0] net_ratelimit: 64 callbacks suppressed [ 478.889387][ T5855] pwc: recv_control_msg error -32 req 02 val 2b00 [ 479.173308][ T8024] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.174406][ T8024] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.174712][ T8024] bridge_slave_0: entered allmulticast mode [ 479.243196][ T8024] bridge_slave_0: entered promiscuous mode [ 479.404575][ T8024] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.405963][ T8024] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.406226][ T8024] bridge_slave_1: entered allmulticast mode [ 479.445641][ T8024] bridge_slave_1: entered promiscuous mode [ 479.580518][ T5855] pwc: recv_control_msg error -32 req 02 val 2700 [ 479.582326][ T5855] pwc: recv_control_msg error -32 req 02 val 2c00 [ 479.584736][ T5855] pwc: recv_control_msg error -32 req 04 val 1000 [ 479.594812][ T5855] pwc: recv_control_msg error -32 req 04 val 1300 [ 479.606687][ T5855] pwc: recv_control_msg error -32 req 04 val 1400 [ 479.653845][ T5855] pwc: recv_control_msg error -32 req 02 val 2000 [ 479.700633][ T5855] pwc: recv_control_msg error -32 req 02 val 2100 [ 479.705076][ T5855] pwc: recv_control_msg error -32 req 04 val 1500 [ 479.775246][ T5855] pwc: recv_control_msg error -32 req 02 val 2500 [ 479.823325][ T5855] pwc: recv_control_msg error -32 req 02 val 2400 [ 479.826440][ T5855] pwc: recv_control_msg error -32 req 02 val 2600 [ 482.055159][ T5855] pwc: recv_control_msg error -71 req 02 val 2800 [ 482.056062][ T5855] pwc: recv_control_msg error -71 req 04 val 1100 [ 482.056863][ T5855] pwc: recv_control_msg error -71 req 04 val 1200 [ 482.389048][ T8187] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop0": -EINTR [ 482.397499][ T32] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 1 [ 482.547548][ C0] net_ratelimit: 60 callbacks suppressed [ 482.838087][ T119] bridge_slave_1: left allmulticast mode [ 482.838118][ T119] bridge_slave_1: left promiscuous mode [ 482.838381][ T119] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.098411][ T5855] pwc: Registered as video103. [ 483.126749][ T5855] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11 [ 483.224477][ T5855] usb 6-1: USB disconnect, device number 2 [ 483.307604][ T119] bridge_slave_0: left allmulticast mode [ 483.307635][ T119] bridge_slave_0: left promiscuous mode [ 483.307915][ T119] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.997649][ T5614] Bluetooth: hci5: command tx timeout [ 487.555514][ T1479] net_ratelimit: 46 callbacks suppressed [ 487.653433][ T8207] netlink: 'syz.1.595': attribute type 1 has an invalid length. [ 493.301797][ C0] net_ratelimit: 204 callbacks suppressed [ 493.843769][ T8226] binder_alloc: 8224: binder_alloc_buf, no vma [ 496.349160][ T8238] Failed to get privilege flags for destination (handle=0x2:0x0) [ 497.893071][ T119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.414994][ C1] net_ratelimit: 43 callbacks suppressed [ 498.974772][ T119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.939363][ T119] bond0 (unregistering): Released all slaves [ 502.190066][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.190137][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.291717][ T8266] 0x000000000006-0x000000020000 : "" [ 503.992596][ T5719] net_ratelimit: 52 callbacks suppressed [ 504.045180][ T8266] ftl_cs: FTL header corrupt! [ 504.561773][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 504.650763][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 504.656680][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 504.685434][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 504.687682][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 505.938339][ T8280] tmpfs: Too small a size for current use [ 506.977078][ T5606] Bluetooth: hci2: command tx timeout [ 508.144396][ T36] audit: type=1800 audit(1791271596.864:6): pid=8294 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.619" name="syzkaller0" dev="sda1" ino=2052 res=0 errno=0 [ 509.052263][ C1] net_ratelimit: 67 callbacks suppressed [ 509.052491][ T5606] Bluetooth: hci2: command tx timeout [ 511.643091][ T5606] Bluetooth: hci2: command tx timeout [ 513.810091][ T5614] Bluetooth: hci2: command tx timeout [ 514.078668][ T5697] net_ratelimit: 44 callbacks suppressed [ 517.168204][ T36] audit: type=1800 audit(1791271605.914:7): pid=8340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.627" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 517.397099][ T119] hsr_slave_0: left promiscuous mode [ 518.497266][ T119] hsr_slave_1: left promiscuous mode [ 518.515479][ T119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.515542][ T119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.608682][ T119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.608706][ T119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.622669][ C1] net_ratelimit: 130 callbacks suppressed [ 520.287838][ T119] veth1_macvtap: left promiscuous mode [ 520.287957][ T119] veth0_macvtap: left promiscuous mode [ 520.365805][ T119] veth1_vlan: left promiscuous mode [ 520.366025][ T119] veth0_vlan: left promiscuous mode [ 524.695536][ T5697] net_ratelimit: 45 callbacks suppressed [ 529.887493][ T67] net_ratelimit: 49 callbacks suppressed [ 530.023681][ T8392] kAFS: bad VL server IP address [ 530.903858][ T8398] capability: warning: `syz.1.642' uses 32-bit capabilities (legacy support in use) [ 531.581986][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.6.641'. [ 535.302315][ C1] net_ratelimit: 44 callbacks suppressed [ 535.566803][ T8425] netlink: 48 bytes leftover after parsing attributes in process `syz.5.648'. [ 537.100000][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 537.130453][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 537.157384][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 537.223250][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 537.225764][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 539.306019][ T5614] Bluetooth: hci5: command tx timeout [ 540.981687][ C0] net_ratelimit: 82 callbacks suppressed [ 542.480791][ T5614] Bluetooth: hci5: command tx timeout [ 542.490559][ T8361] bridge0: port 3(syz_tun) entered disabled state [ 544.199067][ T8361] syz_tun (unregistering): left allmulticast mode [ 544.199097][ T8361] syz_tun (unregistering): left promiscuous mode [ 544.264458][ T8361] bridge0: port 3(syz_tun) entered disabled state [ 544.521975][ T5614] Bluetooth: hci5: command tx timeout [ 544.938093][ T119] IPVS: stop unused estimator thread 0... [ 546.572379][ T5614] Bluetooth: hci5: command tx timeout [ 546.662346][ C1] net_ratelimit: 86 callbacks suppressed [ 548.735246][ T119] bridge_slave_1: left allmulticast mode [ 548.735411][ T119] bridge_slave_1: left promiscuous mode [ 549.042628][ T119] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.246667][ C0] net_ratelimit: 97 callbacks suppressed [ 552.389776][ T119] bridge_slave_0: left allmulticast mode [ 552.389808][ T119] bridge_slave_0: left promiscuous mode [ 552.390079][ T119] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.084157][ T119] bond0 (unregistering): Released all slaves [ 557.439964][ T8263] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.440062][ T8263] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.440301][ T8263] bridge_slave_0: entered allmulticast mode [ 557.466972][ T8263] bridge_slave_0: entered promiscuous mode [ 557.595740][ T8263] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.595970][ T8263] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.596285][ T8263] bridge_slave_1: entered allmulticast mode [ 557.599828][ T8263] bridge_slave_1: entered promiscuous mode [ 558.184191][ C1] net_ratelimit: 72 callbacks suppressed [ 561.519359][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 561.553287][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 561.557403][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 561.560735][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 561.565801][ T5606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 561.837156][ T5606] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 561.857647][ T5606] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 561.923981][ T5606] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 561.965492][ T5606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 562.010093][ T5606] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 563.484975][ C1] net_ratelimit: 76 callbacks suppressed [ 564.168384][ T5614] Bluetooth: hci1: command tx timeout [ 564.182564][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.182633][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.509683][ T5614] Bluetooth: hci6: command tx timeout [ 566.196187][ T5614] Bluetooth: hci1: command tx timeout [ 567.391279][ T8561] kAFS: unable to lookup cell '.yz1' [ 568.231076][ T5614] Bluetooth: hci6: command tx timeout [ 568.252425][ T5614] Bluetooth: hci1: command tx timeout [ 568.784590][ C0] net_ratelimit: 60 callbacks suppressed [ 570.266780][ T5614] Bluetooth: hci6: command tx timeout [ 570.334493][ T5614] Bluetooth: hci1: command tx timeout [ 572.488526][ T5614] Bluetooth: hci6: command tx timeout [ 574.102259][ C1] net_ratelimit: 108 callbacks suppressed [ 574.496557][ T8598] warning: `syz.5.681' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 575.389840][ T8602] binder: 8601:8602 ioctl c0306201 0 returned -14 [ 575.451315][ T8603] binder: 8601:8603 ioctl c0306201 0 returned -14 [ 576.123154][ T119] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 ** 3797 printk messages dropped ** [ 579.315255][ C1] net_ratelimit: 58 callbacks suppressed [ 579.799603][ T36] audit: type=1800 audit(1791271668.544:8): pid=8622 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.686" name="syzkaller0" dev="sda1" ino=2052 res=0 errno=0 [ 580.724946][ T119] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.012017][ T8631] jffs2: notice: (8631) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 583.258267][ T8436] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.258401][ T8436] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.258676][ T8436] bridge_slave_0: entered allmulticast mode [ 583.317628][ T8436] bridge_slave_0: entered promiscuous mode [ 584.602256][ T5719] net_ratelimit: 46 callbacks suppressed [ 587.525355][ T119] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.182319][ C0] net_ratelimit: 64 callbacks suppressed [ 590.478499][ T8436] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.478646][ T8436] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.478924][ T8436] bridge_slave_1: entered allmulticast mode [ 590.481924][ T8436] bridge_slave_1: entered promiscuous mode [ 593.117221][ T8436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.565861][ T119] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.726269][ T8436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.359818][ T8436] team0: Port device team_slave_0 added [ 594.457306][ T8436] team0: Port device team_slave_1 added [ 596.132483][ T7035] net_ratelimit: 43 callbacks suppressed [ 598.426081][ T8436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.426095][ T8436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.426127][ T8436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.014520][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 600.086983][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 600.090256][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 600.124942][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 600.143787][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 600.824477][ T8705] fuse: Bad value for 'rootmode' [ 601.452315][ C0] net_ratelimit: 45 callbacks suppressed [ 603.548016][ T5614] Bluetooth: hci0: command tx timeout [ 604.942634][ T8528] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.942836][ T8528] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.943113][ T8528] bridge_slave_0: entered allmulticast mode [ 604.948407][ T8528] bridge_slave_0: entered promiscuous mode [ 604.983739][ T8526] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.983871][ T8526] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.984181][ T8526] bridge_slave_0: entered allmulticast mode [ 605.049753][ T8526] bridge_slave_0: entered promiscuous mode [ 605.060377][ T8528] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.060543][ T8528] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.060815][ T8528] bridge_slave_1: entered allmulticast mode [ 605.088238][ T8528] bridge_slave_1: entered promiscuous mode [ 605.091934][ T8526] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.092064][ T8526] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.159036][ T8526] bridge_slave_1: entered allmulticast mode [ 605.181152][ T8526] bridge_slave_1: entered promiscuous mode [ 605.942457][ T5614] Bluetooth: hci0: command tx timeout [ 606.122601][ T119] bridge_slave_1: left allmulticast mode [ 606.122634][ T119] bridge_slave_1: left promiscuous mode [ 606.122937][ T119] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.086291][ C1] net_ratelimit: 61 callbacks suppressed [ 608.091863][ T5614] Bluetooth: hci0: command tx timeout [ 608.712537][ T119] bridge_slave_0: left allmulticast mode [ 608.712567][ T119] bridge_slave_0: left promiscuous mode [ 608.712817][ T119] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.105502][ T5614] Bluetooth: hci0: command tx timeout [ 612.358772][ T119] bridge_slave_1: left allmulticast mode [ 612.358797][ T119] bridge_slave_1: left promiscuous mode [ 612.359011][ T119] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.006230][ C1] net_ratelimit: 60 callbacks suppressed [ 616.840168][ T119] bond0 (unregistering): Released all slaves [ 619.223485][ T119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.292248][ C0] net_ratelimit: 67 callbacks suppressed [ 621.810351][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 621.853656][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 621.886584][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 621.959015][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 621.965770][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 622.013333][ T119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.134984][ T119] bond0 (unregistering): Released all slaves [ 622.304802][ T119] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 622.304827][ T119] wireguard0: left promiscuous mode [ 622.379010][ T119] bond1 (unregistering): Released all slaves [ 623.628221][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 623.707332][ T5606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 623.721314][ T5606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 623.759668][ T5606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 623.779103][ T5606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 624.102510][ T5614] Bluetooth: hci2: command tx timeout [ 624.884190][ C0] net_ratelimit: 29 callbacks suppressed [ 625.446636][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.446699][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.012895][ T5614] Bluetooth: hci5: command tx timeout [ 626.172362][ T5614] Bluetooth: hci2: command tx timeout [ 626.575704][ T8810] kAFS: No cell specified [ 628.102250][ T5614] Bluetooth: hci5: command tx timeout [ 628.252260][ T5614] Bluetooth: hci2: command tx timeout [ 630.769058][ C1] net_ratelimit: 70 callbacks suppressed [ 630.829119][ T5614] Bluetooth: hci5: command tx timeout [ 630.829161][ T5614] Bluetooth: hci2: command tx timeout [ 632.766499][ T8844] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 633.805203][ T5606] Bluetooth: hci5: command tx timeout [ 634.213110][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 634.318934][ T5606] Bluetooth: hci3: unexpected event 0x2f length: 509 > 255 [ 634.526084][ T8850] kAFS: unable to lookup cell '.yz1' [ 635.395320][ T8848] loop8: detected capacity change from 0 to 16384 [ 635.941268][ T1508] net_ratelimit: 75 callbacks suppressed [ 639.172013][ T8851] loop8: detected capacity change from 16384 to 16383 [ 640.547191][ T8851] Dev loop8: unable to read RDB block 8 [ 640.547409][ T8851] loop8: unable to read partition table [ 640.547639][ T8851] loop_reread_partitions: partition scan of loop8 ((õÉê—) failed (rc=-5) [ 640.876176][ T8863] capability: warning: `syz.5.730' uses deprecated v2 capabilities in a way that may be insecure [ 640.972267][ C1] net_ratelimit: 83 callbacks suppressed [ 646.002467][ T56] net_ratelimit: 24 callbacks suppressed [ 649.469524][ T8893] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 651.062372][ T7161] net_ratelimit: 71 callbacks suppressed [ 656.422241][ C1] net_ratelimit: 46 callbacks suppressed [ 659.945727][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 659.983268][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 660.008674][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 660.047535][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 660.050512][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 660.777766][ T8786] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.777866][ T8786] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.778074][ T8786] bridge_slave_0: entered allmulticast mode [ 660.810254][ T8786] bridge_slave_0: entered promiscuous mode [ 661.283920][ T8786] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.284052][ T8786] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.284295][ T8786] bridge_slave_1: entered allmulticast mode [ 661.289092][ T8786] bridge_slave_1: entered promiscuous mode [ 662.429287][ C1] net_ratelimit: 57 callbacks suppressed [ 662.432160][ T5606] Bluetooth: hci1: command tx timeout [ 664.492247][ T5606] Bluetooth: hci1: command tx timeout [ 665.899067][ T5614] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 665.930391][ T5614] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 665.956250][ T5614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 665.960972][ T5614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 665.993269][ T5614] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 666.592226][ T5606] Bluetooth: hci1: command tx timeout [ 668.015901][ T1476] net_ratelimit: 55 callbacks suppressed [ 668.182403][ T5606] Bluetooth: hci6: command tx timeout [ 668.652460][ T5606] Bluetooth: hci1: command tx timeout [ 668.679964][ T119] hsr_slave_0: left promiscuous mode [ 668.783605][ T8973] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5600] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8973] [ 668.929169][ T5606] Bluetooth: Frame is too long (len 16, expected len 4) [ 670.245025][ T119] hsr_slave_1: left promiscuous mode [ 670.246140][ T119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.246158][ T119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.252307][ T5606] Bluetooth: hci6: command tx timeout [ 671.254600][ T119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.254627][ T119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.096247][ T119] veth1_macvtap: left promiscuous mode [ 672.096327][ T119] veth0_macvtap: left promiscuous mode [ 672.096501][ T119] veth1_vlan: left promiscuous mode [ 672.431512][ T119] veth0_vlan: left promiscuous mode [ 672.572967][ T5606] Bluetooth: hci6: command tx timeout [ 673.074967][ C0] net_ratelimit: 62 callbacks suppressed [ 675.132307][ T5606] Bluetooth: hci6: command tx timeout [ 677.626208][ T119] team0 (unregistering): Port device team_slave_1 removed [ 677.829793][ T119] team0 (unregistering): Port device team_slave_0 removed ** 1283 printk messages dropped ** ** 36 printk messages dropped ** ** 12 printk messages dropped ** ** 11 printk messages dropped ** ** 12 printk messages dropped ** ** 13 printk messages dropped ** ** 6 printk messages dropped ** [ 678.252205][ C0] net_ratelimit: 51 callbacks suppressed [ 679.145780][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 679.188771][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 679.190817][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 679.215913][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 679.217246][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 679.946607][ T8786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.297838][ T5606] Bluetooth: hci0: command tx timeout [ 683.377395][ C0] net_ratelimit: 48 callbacks suppressed [ 683.720847][ T5614] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 683.759696][ T5614] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 683.806349][ T5614] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 683.860737][ T5614] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 683.865094][ T5614] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 684.332281][ T5614] Bluetooth: hci0: command tx timeout [ 685.971902][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.971978][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.092220][ T5614] Bluetooth: hci7: command tx timeout [ 686.579096][ T5614] Bluetooth: hci0: command tx timeout [ 688.172945][ T5614] Bluetooth: hci7: command tx timeout [ 688.671515][ T5614] Bluetooth: hci0: command tx timeout [ 688.732880][ C1] net_ratelimit: 98 callbacks suppressed [ 690.260944][ T5614] Bluetooth: hci7: command tx timeout [ 690.878617][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.753'. [ 691.947832][ T9031] input: syz0 as /devices/virtual/input/input12 [ 692.226876][ T9031] input: failed to attach handler evdev to device input12, error: -4 [ 692.332693][ T5614] Bluetooth: hci7: command tx timeout [ 693.887164][ C1] net_ratelimit: 94 callbacks suppressed [ 695.112347][ T9046] netlink: 68 bytes leftover after parsing attributes in process `syz.1.755'. [ 698.547631][ T119] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.136683][ C0] net_ratelimit: 39 callbacks suppressed [ 700.468657][ T119] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.264012][ C0] net_ratelimit: 31 callbacks suppressed [ 704.949912][ T119] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.806569][ T119] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.351451][ T5719] net_ratelimit: 34 callbacks suppressed [ 709.430651][ T8929] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.430745][ T8929] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.430921][ T8929] bridge_slave_0: entered allmulticast mode [ 709.460101][ T8929] bridge_slave_0: entered promiscuous mode [ 710.775376][ T8929] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.775595][ T8929] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.775875][ T8929] bridge_slave_1: entered allmulticast mode [ 710.781030][ T8929] bridge_slave_1: entered promiscuous mode [ 713.960028][ T9123] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 715.117395][ C1] net_ratelimit: 42 callbacks suppressed [ 715.551778][ T8929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.560870][ T8957] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.561018][ T8957] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.561274][ T8957] bridge_slave_0: entered allmulticast mode [ 715.576289][ T8957] bridge_slave_0: entered promiscuous mode [ 715.924668][ T8929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.925344][ T8957] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.925476][ T8957] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.952454][ T8957] bridge_slave_1: entered allmulticast mode [ 715.955831][ T8957] bridge_slave_1: entered promiscuous mode [ 716.223519][ T5614] Bluetooth: hci0: command 0x0401 tx timeout [ 716.875684][ T8929] team0: Port device team_slave_0 added [ 716.908775][ T8957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.968964][ T8980] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.969108][ T8980] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.969391][ T8980] bridge_slave_0: entered allmulticast mode [ 716.999808][ T8980] bridge_slave_0: entered promiscuous mode [ 717.115735][ T8929] team0: Port device team_slave_1 added [ 717.133987][ T8957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.136257][ T8980] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.136471][ T8980] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.136737][ T8980] bridge_slave_1: entered allmulticast mode [ 717.155092][ T8980] bridge_slave_1: entered promiscuous mode [ 720.413507][ C0] net_ratelimit: 50 callbacks suppressed [ 721.440684][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 721.504070][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 721.510435][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 721.554867][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 721.556331][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 722.052622][ T8957] team0: Port device team_slave_0 added [ 722.078389][ T8980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.322902][ T119] bridge_slave_1: left allmulticast mode [ 722.322935][ T119] bridge_slave_1: left promiscuous mode [ 722.323222][ T119] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.613469][ T119] bridge_slave_0: left allmulticast mode [ 722.613491][ T119] bridge_slave_0: left promiscuous mode [ 722.613798][ T119] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.872423][ T119] bridge_slave_1: left allmulticast mode [ 722.872455][ T119] bridge_slave_1: left promiscuous mode [ 722.872720][ T119] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.045574][ T119] bridge_slave_0: left allmulticast mode [ 723.045605][ T119] bridge_slave_0: left promiscuous mode [ 723.045883][ T119] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.322577][ T119] bridge_slave_1: left allmulticast mode [ 723.322610][ T119] bridge_slave_1: left promiscuous mode [ 723.322879][ T119] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.456782][ T119] bridge_slave_0: left allmulticast mode [ 723.456813][ T119] bridge_slave_0: left promiscuous mode [ 723.457078][ T119] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.692542][ T5606] Bluetooth: hci2: command tx timeout [ 723.752560][ T119] bridge_slave_1: left allmulticast mode [ 723.752593][ T119] bridge_slave_1: left promiscuous mode [ 723.752864][ T119] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.914258][ T119] bridge_slave_0: left allmulticast mode [ 723.914289][ T119] bridge_slave_0: left promiscuous mode [ 723.914554][ T119] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.202492][ T119] bridge_slave_1: left allmulticast mode [ 724.202526][ T119] bridge_slave_1: left promiscuous mode [ 724.202796][ T119] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.341092][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 724.389564][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 724.407267][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 724.410298][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 724.411640][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 724.520079][ T119] bridge_slave_0: left allmulticast mode [ 724.520111][ T119] bridge_slave_0: left promiscuous mode [ 724.520363][ T119] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.310843][ T119] bond0 (unregistering): Released all slaves [ 725.612435][ T56] net_ratelimit: 43 callbacks suppressed [ 725.772431][ T5606] Bluetooth: hci2: command tx timeout [ 726.196426][ T119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.283396][ T119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.338003][ T119] bond0 (unregistering): Released all slaves [ 726.572356][ T5606] Bluetooth: hci1: command tx timeout [ 726.833329][ T119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.925110][ T119] bond0 (unregistering): Released all slaves [ 727.464656][ T119] bond0 (unregistering): Released all slaves [ 727.862205][ T5606] Bluetooth: hci2: command tx timeout [ 727.912250][ T119] bond0 (unregistering): Released all slaves [ 728.310992][ T119] bond0 (unregistering): Released all slaves [ 728.662217][ T5606] Bluetooth: hci1: command tx timeout [ 728.795255][ T119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.913377][ T119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.995832][ T119] bond0 (unregistering): Released all slaves [ 729.054828][ T8998] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.055005][ T8998] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.055273][ T8998] bridge_slave_0: entered allmulticast mode [ 729.058305][ T8998] bridge_slave_0: entered promiscuous mode [ 729.090897][ T8957] team0: Port device team_slave_1 added [ 729.095341][ T8980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.948484][ T8998] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.948593][ T8998] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.948812][ T8998] bridge_slave_1: entered allmulticast mode [ 729.951322][ T5606] Bluetooth: hci2: command tx timeout [ 730.017098][ T8998] bridge_slave_1: entered promiscuous mode [ 730.470026][ T8980] team0: Port device team_slave_0 added [ 730.824269][ T5606] Bluetooth: hci1: command tx timeout [ 731.105057][ T8998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.171385][ T8980] team0: Port device team_slave_1 added [ 731.341731][ T8998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.372539][ T1479] net_ratelimit: 37 callbacks suppressed [ 731.731826][ T8980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.731840][ T8980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.731868][ T8980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.795168][ T8998] team0: Port device team_slave_0 added [ 731.797223][ T8980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.797238][ T8980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.797268][ T8980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.893092][ T8998] team0: Port device team_slave_1 added [ 732.458437][ T8998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.458450][ T8998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.458480][ T8998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.619001][ T8998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.619015][ T8998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.619045][ T8998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.923203][ T5606] Bluetooth: hci1: command tx timeout [ 733.035966][ T8980] hsr_slave_0: entered promiscuous mode [ 733.037636][ T8980] hsr_slave_1: entered promiscuous mode [ 733.038755][ T8980] debugfs: 'hsr0' already exists in 'hsr' [ 733.038779][ T8980] Cannot create hsr debugfs directory [ 734.591395][ T8998] hsr_slave_0: entered promiscuous mode [ 734.603688][ T8998] hsr_slave_1: entered promiscuous mode [ 734.607622][ T8998] debugfs: 'hsr0' already exists in 'hsr' [ 734.607657][ T8998] Cannot create hsr debugfs directory [ 736.492184][ C0] net_ratelimit: 112 callbacks suppressed [ 736.803016][ T119] hsr_slave_0: left promiscuous mode [ 736.842483][ T119] hsr_slave_1: left promiscuous mode [ 736.844992][ T119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.845019][ T119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.893964][ T119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.893990][ T119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.934212][ T119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.017217][ T119] veth1_macvtap: left promiscuous mode [ 737.017338][ T119] veth0_macvtap: left promiscuous mode [ 737.017616][ T119] veth1_vlan: left promiscuous mode [ 737.017822][ T119] veth0_vlan: left promiscuous mode [ 738.995658][ T119] team0 (unregistering): Port device team_slave_1 removed [ 739.073157][ T119] team0 (unregistering): Port device team_slave_0 removed [ 740.831691][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 740.891026][ T5614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 740.909485][ T5614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 740.930682][ T5614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 740.945491][ T5614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 741.674609][ T119] team0 (unregistering): Port device team_slave_1 removed [ 741.816392][ T119] team0 (unregistering): Port device team_slave_0 removed [ 741.932402][ C1] net_ratelimit: 42 callbacks suppressed [ 743.140291][ T5606] Bluetooth: hci4: command tx timeout [ 743.425032][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 743.501831][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 743.560187][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 743.644324][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 743.668269][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 745.222213][ T5614] Bluetooth: hci4: command tx timeout [ 745.852514][ T5614] Bluetooth: hci5: command tx timeout [ 746.229014][ T9143] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.229151][ T9143] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.229420][ T9143] bridge_slave_0: entered allmulticast mode [ 746.247653][ T9143] bridge_slave_0: entered promiscuous mode [ 746.386514][ T9143] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.386651][ T9143] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.386934][ T9143] bridge_slave_1: entered allmulticast mode [ 746.413238][ T9143] bridge_slave_1: entered promiscuous mode [ 747.132190][ C1] net_ratelimit: 104 callbacks suppressed [ 747.293033][ T5614] Bluetooth: hci4: command tx timeout [ 747.319533][ T9143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.319761][ T9150] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.319864][ T9150] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.320048][ T9150] bridge_slave_0: entered allmulticast mode [ 747.353736][ T9150] bridge_slave_0: entered promiscuous mode [ 747.375544][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.375614][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.489727][ T9150] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.489865][ T9150] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.490132][ T9150] bridge_slave_1: entered allmulticast mode [ 747.514938][ T9150] bridge_slave_1: entered promiscuous mode [ 747.547206][ T9143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.972539][ T5614] Bluetooth: hci5: command tx timeout [ 748.669674][ T9150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.705921][ T9143] team0: Port device team_slave_0 added [ 748.769308][ T9150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.771965][ T9143] team0: Port device team_slave_1 added [ 749.198669][ T9150] team0: Port device team_slave_0 added [ 749.200707][ T9143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.200718][ T9143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.200743][ T9143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.299115][ T9150] team0: Port device team_slave_1 added [ 749.329023][ T9143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.329037][ T9143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.329069][ T9143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.382192][ T5614] Bluetooth: hci4: command tx timeout [ 749.973301][ T9150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.973313][ T9150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.973343][ T9150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.012374][ T5614] Bluetooth: hci5: command tx timeout [ 750.066500][ T9150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.066515][ T9150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.066545][ T9150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.417498][ T9143] hsr_slave_0: entered promiscuous mode [ 750.419123][ T9143] hsr_slave_1: entered promiscuous mode [ 750.420304][ T9143] debugfs: 'hsr0' already exists in 'hsr' [ 750.420324][ T9143] Cannot create hsr debugfs directory [ 751.467549][ T9150] hsr_slave_0: entered promiscuous mode [ 751.470920][ T9150] hsr_slave_1: entered promiscuous mode [ 751.486920][ T9150] debugfs: 'hsr0' already exists in 'hsr' [ 751.486944][ T9150] Cannot create hsr debugfs directory [ 752.092539][ T5614] Bluetooth: hci5: command tx timeout [ 752.348190][ C1] net_ratelimit: 28 callbacks suppressed [ 753.945992][ T9176] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.946579][ T9176] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.946872][ T9176] bridge_slave_0: entered allmulticast mode [ 753.976883][ T9176] bridge_slave_0: entered promiscuous mode [ 754.182682][ T9176] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.182837][ T9176] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.183103][ T9176] bridge_slave_1: entered allmulticast mode [ 754.189263][ T9176] bridge_slave_1: entered promiscuous mode [ 754.881088][ T9176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.914460][ T9187] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.914701][ T9187] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.914972][ T9187] bridge_slave_0: entered allmulticast mode [ 754.918308][ T9187] bridge_slave_0: entered promiscuous mode [ 754.957164][ T9176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.989762][ T9187] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.989909][ T9187] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.990180][ T9187] bridge_slave_1: entered allmulticast mode [ 755.017408][ T9187] bridge_slave_1: entered promiscuous mode [ 755.510912][ T9176] team0: Port device team_slave_0 added [ 755.537287][ T9187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.541487][ T9176] team0: Port device team_slave_1 added [ 755.658270][ T9187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.347355][ T9176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.347369][ T9176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.347400][ T9176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.405130][ T9187] team0: Port device team_slave_0 added [ 756.406333][ T9176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.406347][ T9176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.406377][ T9176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.663253][ T9187] team0: Port device team_slave_1 added [ 756.908040][ T9143] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 757.014298][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 757.414180][ T9143] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 757.464722][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 757.532156][ C0] net_ratelimit: 28 callbacks suppressed [ 757.550191][ T9187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.550206][ T9187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.550237][ T9187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.417627][ T9143] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 758.467208][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 758.576943][ T9187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.576957][ T9187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.576988][ T9187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.704173][ T9143] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 758.932252][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 758.998184][ T9176] hsr_slave_0: entered promiscuous mode [ 759.010510][ T9176] hsr_slave_1: entered promiscuous mode [ 759.021225][ T9176] debugfs: 'hsr0' already exists in 'hsr' [ 759.021249][ T9176] Cannot create hsr debugfs directory [ 760.476974][ T9187] hsr_slave_0: entered promiscuous mode [ 760.478713][ T9187] hsr_slave_1: entered promiscuous mode [ 760.479841][ T9187] debugfs: 'hsr0' already exists in 'hsr' [ 760.479865][ T9187] Cannot create hsr debugfs directory [ 762.735534][ C1] net_ratelimit: 31 callbacks suppressed [ 764.722554][ T119] bridge_slave_1: left allmulticast mode [ 764.722589][ T119] bridge_slave_1: left promiscuous mode [ 764.722866][ T119] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.905471][ T119] bridge_slave_0: left allmulticast mode [ 764.905504][ T119] bridge_slave_0: left promiscuous mode [ 764.905771][ T119] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.202419][ T119] bridge_slave_1: left allmulticast mode [ 765.202453][ T119] bridge_slave_1: left promiscuous mode [ 765.202713][ T119] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.385604][ T119] bridge_slave_0: left allmulticast mode [ 765.385637][ T119] bridge_slave_0: left promiscuous mode [ 765.385910][ T119] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.672648][ T119] bridge_slave_1: left allmulticast mode [ 765.672680][ T119] bridge_slave_1: left promiscuous mode [ 765.672947][ T119] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.834315][ T119] bridge_slave_0: left allmulticast mode [ 765.834347][ T119] bridge_slave_0: left promiscuous mode [ 765.834600][ T119] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.152461][ T119] bridge_slave_1: left allmulticast mode [ 766.152494][ T119] bridge_slave_1: left promiscuous mode [ 766.152769][ T119] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.257188][ T119] bridge_slave_0: left allmulticast mode [ 766.257221][ T119] bridge_slave_0: left promiscuous mode [ 766.257485][ T119] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.144781][ T119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.263389][ T119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.357107][ T119] bond0 (unregistering): Released all slaves [ 767.942279][ C1] net_ratelimit: 28 callbacks suppressed [ 767.947545][ T119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.073306][ T119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.165301][ T119] bond0 (unregistering): Released all slaves [ 768.783633][ T119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.904649][ T119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.996524][ T119] bond0 (unregistering): Released all slaves [ 769.593326][ T119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 769.703297][ T119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 769.787726][ T119] bond0 (unregistering): Released all slaves [ 770.467147][ T9150] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 770.588633][ T9150] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 770.643407][ T9150] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 770.731065][ T9150] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 771.170997][ T9150] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 771.294338][ T9150] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 771.333390][ T9150] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 771.593919][ T9150] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 771.688441][ T9143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.222976][ T119] hsr_slave_0: left promiscuous mode [ 772.272347][ T119] hsr_slave_1: left promiscuous mode [ 772.280422][ T119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.378930][ T119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.592290][ T119] hsr_slave_0: left promiscuous mode [ 772.615360][ T119] hsr_slave_1: left promiscuous mode [ 772.617017][ T119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.653992][ T119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.132139][ C1] net_ratelimit: 32 callbacks suppressed [ 774.235686][ T119] team0 (unregistering): Port device team_slave_1 removed [ 774.368532][ T119] team0 (unregistering): Port device team_slave_0 removed [ 775.794139][ T119] team0 (unregistering): Port device team_slave_1 removed [ 775.893416][ T119] team0 (unregistering): Port device team_slave_0 removed [ 776.503081][ T119] team0 (unregistering): Port device team_slave_1 removed [ 776.604645][ T119] team0 (unregistering): Port device team_slave_0 removed [ 777.322966][ T119] team0 (unregistering): Port device team_slave_1 removed [ 777.422983][ T119] team0 (unregistering): Port device team_slave_0 removed [ 778.187992][ T9143] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.332188][ C1] net_ratelimit: 24 callbacks suppressed [ 778.447348][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.452776][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.740708][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.741248][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.947136][ T9150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.373986][ T9150] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.556937][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.557060][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.579478][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 780.615183][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 780.653217][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 780.661266][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 780.675273][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 781.040471][ T1480] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.040725][ T1480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.972498][ T5614] Bluetooth: hci0: command tx timeout [ 783.613910][ C1] net_ratelimit: 82 callbacks suppressed [ 783.630092][ T9176] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 783.777662][ T9176] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 783.958729][ T9176] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 784.134627][ T9176] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 784.171566][ T9176] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 784.265937][ T9176] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 784.316941][ T9176] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 784.621900][ T9176] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 784.728456][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 784.740553][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 784.777103][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 784.987265][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 784.991495][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 785.054261][ T5614] Bluetooth: hci0: command tx timeout [ 786.904988][ T9187] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 786.954489][ T9187] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 787.096192][ T9187] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 787.132623][ T5614] Bluetooth: hci2: command tx timeout [ 787.133032][ T5614] Bluetooth: hci0: command tx timeout [ 787.267133][ T9187] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 787.331944][ T9187] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 787.470401][ T9187] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 787.564978][ T9187] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 787.657121][ T9187] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 788.822171][ C1] net_ratelimit: 57 callbacks suppressed [ 789.212497][ T5606] Bluetooth: hci2: command tx timeout [ 789.212531][ T5606] Bluetooth: hci0: command tx timeout [ 789.726229][ T9387] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.726326][ T9387] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.726519][ T9387] bridge_slave_0: entered allmulticast mode [ 789.730567][ T9387] bridge_slave_0: entered promiscuous mode [ 789.800295][ T9387] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.800424][ T9387] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.800645][ T9387] bridge_slave_1: entered allmulticast mode [ 789.820786][ T9387] bridge_slave_1: entered promiscuous mode [ 790.489082][ T9387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.559260][ T9387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.899087][ T9387] team0: Port device team_slave_0 added [ 790.933447][ T9387] team0: Port device team_slave_1 added [ 791.259536][ T9387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.259550][ T9387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.259581][ T9387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.292313][ T5614] Bluetooth: hci2: command tx timeout [ 791.518128][ T9387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.518158][ T9387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.518188][ T9387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.719572][ T9176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.512510][ T9387] hsr_slave_0: entered promiscuous mode [ 792.517232][ T9387] hsr_slave_1: entered promiscuous mode [ 792.530884][ T9387] debugfs: 'hsr0' already exists in 'hsr' [ 792.530907][ T9387] Cannot create hsr debugfs directory [ 793.273337][ T9410] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.273565][ T9410] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.273818][ T9410] bridge_slave_0: entered allmulticast mode [ 793.276888][ T9410] bridge_slave_0: entered promiscuous mode [ 793.309984][ T9176] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.372331][ T5614] Bluetooth: hci2: command tx timeout [ 793.382335][ T9410] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.382468][ T9410] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.382724][ T9410] bridge_slave_1: entered allmulticast mode [ 793.388798][ T9410] bridge_slave_1: entered promiscuous mode [ 793.903704][ T1508] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.903816][ T1508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.022192][ C1] net_ratelimit: 28 callbacks suppressed [ 794.420217][ T9410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.476759][ T9410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.596412][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.598200][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.741809][ T9187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.802960][ T9410] team0: Port device team_slave_0 added [ 795.199506][ T9410] team0: Port device team_slave_1 added [ 795.550504][ T9410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.550518][ T9410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.550548][ T9410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.790726][ T9410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.790736][ T9410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.790757][ T9410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.914661][ T9187] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.101113][ T1479] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.106218][ T1479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.403703][ T9410] hsr_slave_0: entered promiscuous mode [ 796.405362][ T9410] hsr_slave_1: entered promiscuous mode [ 796.406488][ T9410] debugfs: 'hsr0' already exists in 'hsr' [ 796.406511][ T9410] Cannot create hsr debugfs directory [ 796.454193][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.454412][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.444162][ T119] bridge_slave_1: left allmulticast mode [ 797.444194][ T119] bridge_slave_1: left promiscuous mode [ 797.444467][ T119] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.564189][ T119] bridge_slave_0: left allmulticast mode [ 797.564221][ T119] bridge_slave_0: left promiscuous mode [ 797.564575][ T119] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.862557][ T119] bridge_slave_1: left allmulticast mode [ 797.862590][ T119] bridge_slave_1: left promiscuous mode [ 797.862850][ T119] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.018544][ T119] bridge_slave_0: left allmulticast mode [ 798.018576][ T119] bridge_slave_0: left promiscuous mode [ 798.018835][ T119] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.212274][ C1] net_ratelimit: 35 callbacks suppressed [ 799.672945][ T119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.763288][ T119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.819847][ T119] bond0 (unregistering): Released all slaves [ 800.583295][ T119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.663415][ T119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.696064][ T119] bond0 (unregistering): Released all slaves [ 801.968722][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 802.025504][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 802.094697][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 802.123033][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 802.127096][ T5606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 803.145337][ T119] hsr_slave_0: left promiscuous mode [ 803.182339][ T119] hsr_slave_1: left promiscuous mode [ 803.183911][ T119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.234449][ T119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.432731][ T119] hsr_slave_0: left promiscuous mode [ 803.473155][ T119] hsr_slave_1: left promiscuous mode [ 803.474800][ T119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.523439][ T119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.769496][ T5606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 803.808758][ T5606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 803.835598][ T5606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 803.838921][ T5606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 803.840271][ T5606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 804.252312][ T5614] Bluetooth: hci1: command tx timeout [ 804.332768][ T1479] net_ratelimit: 30 callbacks suppressed [ 805.167978][ T119] team0 (unregistering): Port device team_slave_1 removed [ 805.264935][ T119] team0 (unregistering): Port device team_slave_0 removed [ 806.022699][ T5614] Bluetooth: hci4: command tx timeout [ 806.332272][ T5614] Bluetooth: hci1: command tx timeout [ 806.884467][ T119] team0 (unregistering): Port device team_slave_1 removed [ 806.994111][ T119] team0 (unregistering): Port device team_slave_0 removed [ 808.092145][ T5614] Bluetooth: hci4: command tx timeout [ 808.422250][ T5614] Bluetooth: hci1: command tx timeout [ 808.820336][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.820404][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.383888][ T1480] net_ratelimit: 83 callbacks suppressed [ 810.204959][ T5614] Bluetooth: hci4: command tx timeout [ 810.502142][ T5606] Bluetooth: hci1: command tx timeout [ 812.262318][ T5606] Bluetooth: hci4: command tx timeout [ 813.959885][ T9464] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.960588][ T9464] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.961834][ T9464] bridge_slave_0: entered allmulticast mode [ 813.992349][ T9464] bridge_slave_0: entered promiscuous mode [ 814.117353][ T9464] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.117514][ T9464] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.117759][ T9464] bridge_slave_1: entered allmulticast mode [ 814.122659][ T9464] bridge_slave_1: entered promiscuous mode [ 814.573758][ T13] net_ratelimit: 30 callbacks suppressed [ 815.038245][ T9455] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.038912][ T9455] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.039153][ T9455] bridge_slave_0: entered allmulticast mode [ 815.065612][ T9455] bridge_slave_0: entered promiscuous mode [ 815.090664][ T9464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.394741][ T9455] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.394877][ T9455] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.395131][ T9455] bridge_slave_1: entered allmulticast mode [ 815.398166][ T9455] bridge_slave_1: entered promiscuous mode [ 815.436638][ T9464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.891777][ T9455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.911933][ T9464] team0: Port device team_slave_0 added [ 815.992923][ T9455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.255197][ T9464] team0: Port device team_slave_1 added [ 816.258375][ T9387] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 816.358298][ T9387] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 816.519744][ T9387] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 816.552576][ T9387] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 816.888842][ T9387] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 816.931712][ T9387] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 817.530901][ T9455] team0: Port device team_slave_0 added [ 817.538983][ T9464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.538996][ T9464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.539025][ T9464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.541597][ T9387] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 817.631704][ T9387] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 817.651108][ T9455] team0: Port device team_slave_1 added [ 817.658741][ T9464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.658755][ T9464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.658786][ T9464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.113022][ T9455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.113036][ T9455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.113067][ T9455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.280894][ T9455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.280908][ T9455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.280939][ T9455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.639672][ T9464] hsr_slave_0: entered promiscuous mode [ 818.641357][ T9464] hsr_slave_1: entered promiscuous mode [ 818.664231][ T9464] debugfs: 'hsr0' already exists in 'hsr' [ 818.664256][ T9464] Cannot create hsr debugfs directory [ 819.176853][ T9410] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 819.232581][ T9410] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 819.374953][ T9410] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 819.429233][ T9410] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 819.495280][ T9455] hsr_slave_0: entered promiscuous mode [ 819.499336][ T9455] hsr_slave_1: entered promiscuous mode [ 819.559558][ T9455] debugfs: 'hsr0' already exists in 'hsr' [ 819.559594][ T9455] Cannot create hsr debugfs directory [ 819.692368][ C0] net_ratelimit: 28 callbacks suppressed [ 819.799318][ T9410] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 819.831956][ T9410] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 819.931844][ T9410] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 820.040503][ T9410] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 823.695230][ T9387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.166006][ T9387] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.246834][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.247057][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.299370][ T9410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.355858][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.355998][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.489771][ T119] bridge_slave_1: left allmulticast mode [ 824.489799][ T119] bridge_slave_1: left promiscuous mode [ 824.490099][ T119] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.765530][ T119] bridge_slave_0: left allmulticast mode [ 824.765563][ T119] bridge_slave_0: left promiscuous mode [ 824.765823][ T119] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.053898][ T119] bridge_slave_1: left allmulticast mode [ 825.053939][ T119] bridge_slave_1: left promiscuous mode [ 825.054226][ T119] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.224103][ T119] bridge_slave_0: left allmulticast mode [ 825.224135][ T119] bridge_slave_0: left promiscuous mode [ 825.224405][ T119] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.452313][ T67] net_ratelimit: 30 callbacks suppressed [ 826.844085][ T119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.925136][ T119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.965953][ T119] bond0 (unregistering): Released all slaves [ 827.851668][ T119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.935520][ T119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.985949][ T119] bond0 (unregistering): Released all slaves [ 828.574311][ T9410] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.659296][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.659435][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.753272][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.753465][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.203285][ T119] hsr_slave_0: left promiscuous mode [ 829.242269][ T119] hsr_slave_1: left promiscuous mode [ 829.243814][ T119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.283660][ T119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.512336][ T119] hsr_slave_0: left promiscuous mode [ 829.552331][ T119] hsr_slave_1: left promiscuous mode [ 829.554007][ T119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.583516][ T119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.732192][ C0] net_ratelimit: 33 callbacks suppressed [ 830.913083][ T119] team0 (unregistering): Port device team_slave_1 removed [ 831.013532][ T119] team0 (unregistering): Port device team_slave_0 removed [ 832.514756][ T119] team0 (unregistering): Port device team_slave_1 removed [ 832.603071][ T119] team0 (unregistering): Port device team_slave_0 removed [ 835.470655][ T9387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.841753][ T9410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.102199][ C1] net_ratelimit: 27 callbacks suppressed [ 836.171231][ T9410] veth0_vlan: entered promiscuous mode [ 836.250802][ T9410] veth1_vlan: entered promiscuous mode [ 837.119992][ T9410] veth0_macvtap: entered promiscuous mode [ 837.202949][ T9410] veth1_macvtap: entered promiscuous mode [ 837.497296][ T9410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 837.881112][ T9464] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 838.012571][ T9464] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 838.018826][ T9410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.065469][ T9387] veth0_vlan: entered promiscuous mode [ 838.299793][ T9464] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 838.345456][ T9464] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 838.364222][ T9464] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 838.430840][ T9464] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 838.447968][ T9464] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 838.498726][ T9464] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 838.679463][ T9387] veth1_vlan: entered promiscuous mode [ 839.143307][ T9455] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 839.207947][ T9455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 839.229538][ T9455] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 839.278565][ T9455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 839.437250][ T9455] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 839.643091][ T9455] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 839.655105][ T9455] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 839.766504][ T9455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 840.126263][ T9387] veth0_macvtap: entered promiscuous mode [ 840.131676][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.131694][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.500914][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.500933][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.554859][ T1479] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.006891][ T9464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.452910][ T1482] net_ratelimit: 120 callbacks suppressed [ 841.540742][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 842.533724][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 842.539259][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 842.541833][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 842.544788][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 842.793444][ T9464] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.031775][ T119] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.050416][ T119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.213808][ T119] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.213985][ T119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.538850][ T9563] Illegal XDP return value 4294967294 on prog (id 60) dev N/A, expect packet loss! [ 844.811006][ T9455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.071937][ T9455] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.165159][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.167333][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.247703][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.249469][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.272380][ T5606] Bluetooth: hci5: command tx timeout [ 845.681397][ T1480] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.681773][ T1480] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.702940][ T1480] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.072482][ T5697] net_ratelimit: 80 callbacks suppressed [ 848.345096][ T5606] Bluetooth: hci5: command tx timeout [ 850.252556][ T9583] netlink: 180 bytes leftover after parsing attributes in process `syz.1.775'. [ 850.252963][ T9583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.775'. [ 851.679096][ T5606] Bluetooth: hci5: command tx timeout [ 852.174085][ C0] net_ratelimit: 32 callbacks suppressed [ 853.925238][ T5606] Bluetooth: hci5: command tx timeout [ 857.382118][ C1] net_ratelimit: 156 callbacks suppressed [ 862.811066][ C0] net_ratelimit: 28 callbacks suppressed [ 865.520891][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 865.570879][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 865.589498][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 865.619337][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 865.655032][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 868.553090][ C0] net_ratelimit: 63 callbacks suppressed [ 868.565501][ T5606] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 868.754799][ T9670] Bluetooth: hci0: command tx timeout [ 868.778999][ T5606] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 868.795885][ T5606] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 868.799706][ T5606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 868.806768][ T5606] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 869.284784][ T9671] binder: BINDER_SET_CONTEXT_MGR already set [ 869.284802][ T9671] binder: 9666:9671 ioctl 4018620d 200000001000 returned -16 [ 870.896445][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.896510][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.950145][ T5606] Bluetooth: hci0: command tx timeout [ 871.215263][ T36] audit: type=1800 audit(1791271959.954:9): pid=9686 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.791" name="syzkaller0" dev="sda1" ino=2052 res=0 errno=0 [ 871.987077][ T5606] Bluetooth: hci6: command tx timeout [ 873.410394][ T5606] Bluetooth: hci0: command tx timeout [ 873.765593][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.794'. [ 873.818189][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.794'. [ 873.929383][ T67] net_ratelimit: 42 callbacks suppressed [ 874.012852][ T5606] Bluetooth: hci6: command tx timeout [ 874.849635][ T9697] macvtap1: entered promiscuous mode [ 874.849667][ T9697] dummy0: entered promiscuous mode [ 874.850610][ T9697] macvtap1: entered allmulticast mode [ 874.850632][ T9697] dummy0: entered allmulticast mode [ 875.220049][ T9699] dummy0: left allmulticast mode [ 875.273429][ T9699] macvtap1: left promiscuous mode [ 875.273465][ T9699] macvtap1: left allmulticast mode [ 875.532167][ T5614] Bluetooth: hci0: command tx timeout [ 876.229692][ T5606] Bluetooth: hci6: command tx timeout [ 876.406096][ T8170] dummy0: left promiscuous mode [ 878.375541][ T5614] Bluetooth: hci6: command tx timeout [ 879.212354][ C1] net_ratelimit: 63 callbacks suppressed [ 880.833066][ T9732] tmpfs: Unknown parameter 'QO V¢òÿ' [ 883.783301][ T9745] 9p: Bad value for 'rfdno' [ 884.487889][ T5697] net_ratelimit: 98 callbacks suppressed [ 886.973838][ T9758] CIFS mount error: No usable UNC path provided in device string! [ 886.973838][ T9758] [ 886.974119][ T9758] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 889.582366][ T1499] bridge_slave_1: left allmulticast mode [ 889.582389][ T1499] bridge_slave_1: left promiscuous mode [ 889.582588][ T1499] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.612421][ T1170] net_ratelimit: 53 callbacks suppressed [ 889.764838][ T1499] bridge_slave_0: left allmulticast mode [ 889.764862][ T1499] bridge_slave_0: left promiscuous mode [ 889.765043][ T1499] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.772277][ T5716] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 889.962208][ T5716] usb 2-1: unable to get BOS descriptor or descriptor too short [ 889.962267][ T5716] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=fb.7c [ 889.969851][ T5716] usb 2-1: config 0 has an invalid interface number: 148 but max is 0 [ 889.969919][ T5716] usb 2-1: config 0 has no interface number 0 [ 889.970036][ T5716] usb 2-1: config 0 interface 148 has no altsetting 0 [ 889.985279][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.985344][ T5716] usb 2-1: Product: syz [ 889.985390][ T5716] usb 2-1: Manufacturer: syz [ 889.985433][ T5716] usb 2-1: SerialNumber: syz [ 890.094949][ T5716] usb 2-1: config 0 descriptor?? [ 891.598985][ T5614] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 891.599270][ T5614] Bluetooth: hci2: Injecting HCI hardware error event [ 891.601606][ T5614] Bluetooth: hci2: hardware error 0x00 [ 894.768325][ C1] net_ratelimit: 24 callbacks suppressed [ 894.927939][ T5614] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 895.409339][ T5716] mos7840 2-1:0.148: required endpoints missing [ 895.597408][ T5716] usb 2-1: USB disconnect, device number 14 [ 896.534196][ T36] audit: type=1800 audit(1791271984.984:10): pid=9797 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.812" name="syzkaller0" dev="sda1" ino=2052 res=0 errno=0 [ 898.034948][ T1499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.016166][ T9803] JFS: charset not found [ 899.384627][ T1499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.552608][ T9808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.814'. [ 899.765386][ T36] audit: type=1326 audit(1791271988.224:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9802 comm="syz.2.814" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6acc28e199 code=0x7ffc0000 [ 899.765675][ T36] audit: type=1326 audit(1791271988.234:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9802 comm="syz.2.814" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f6acc28e199 code=0x7ffc0000 [ 899.765935][ T36] audit: type=1326 audit(1791271988.234:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9802 comm="syz.2.814" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6acc28e199 code=0x7ffc0000 [ 899.766183][ T36] audit: type=1326 audit(1791271988.234:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9802 comm="syz.2.814" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6acc28e199 code=0x7ffc0000 [ 899.766427][ T36] audit: type=1326 audit(1791271988.244:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9802 comm="syz.2.814" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6acc28e199 code=0x7ffc0000 [ 899.766707][ T36] audit: type=1326 audit(1791271988.244:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9802 comm="syz.2.814" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6acc28e199 code=0x7ffc0000 [ 899.767071][ T36] audit: type=1326 audit(1791271988.254:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9802 comm="syz.2.814" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6acc28e199 code=0x7ffc0000 [ 899.767259][ T36] audit: type=1326 audit(1791271988.254:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9802 comm="syz.2.814" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6acc24e9ce code=0x7ffc0000 [ 899.767578][ T36] audit: type=1326 audit(1791271988.264:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9802 comm="syz.2.814" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6acc24e9ce code=0x7ffc0000 [ 900.332545][ C1] net_ratelimit: 52 callbacks suppressed [ 900.576322][ T1499] bond0 (unregistering): Released all slaves [ 900.769912][ T9548] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.770027][ T9548] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.770275][ T9548] bridge_slave_0: entered allmulticast mode [ 900.799741][ T9810] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 8) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 900.800308][ T9810] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 900.811247][ T9548] bridge_slave_0: entered promiscuous mode [ 905.705670][ T1164] net_ratelimit: 14 callbacks suppressed [ 906.406800][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 907.139582][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 907.206309][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 907.211658][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 907.243177][ T5606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 909.442488][ T1499] hsr_slave_0: left promiscuous mode [ 909.452441][ T5614] Bluetooth: hci1: command tx timeout [ 909.482719][ T1499] hsr_slave_1: left promiscuous mode [ 909.491901][ T1499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 909.580872][ T1499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 909.932400][ T1499] veth0_macvtap: left promiscuous mode [ 909.932716][ T1499] veth1_vlan: left promiscuous mode [ 909.932921][ T1499] veth0_vlan: left promiscuous mode [ 910.723352][ T9857] net_ratelimit: 54 callbacks suppressed [ 911.331467][ T9859] device-mapper: ioctl: Invalid ioctl structure: name t!, dev f803 [ 911.548661][ T5614] Bluetooth: hci1: command tx timeout [ 913.652063][ T5614] Bluetooth: hci1: command tx timeout [ 915.450560][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 915.450579][ T36] audit: type=1804 audit(1791272004.174:37): pid=9869 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.825" name="/newroot/256/mnt/bridge_slave_0" dev="sda1" ino=2085 res=1 errno=0 [ 915.706537][ T5614] Bluetooth: hci1: command tx timeout [ 916.328294][ T13] net_ratelimit: 224 callbacks suppressed [ 917.001867][ T9878] FAULT_INJECTION: forcing a failure. [ 917.001867][ T9878] name failslab, interval 1, probability 0, space 0, times 0 [ 917.002031][ T9878] CPU: 1 UID: 0 PID: 9878 Comm: syz.1.827 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 917.002069][ T9878] Tainted: [L]=SOFTLOCKUP [ 917.002080][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 917.002101][ T9878] Call Trace: [ 917.002112][ T9878] [ 917.002124][ T9878] dump_stack_lvl+0xe8/0x150 [ 917.002177][ T9878] should_fail_ex+0x46b/0x600 [ 917.002220][ T9878] should_failslab+0xa8/0x100 [ 917.002249][ T9878] __kmalloc_cache_noprof+0xa1/0x680 [ 917.002288][ T9878] ? netstat_seq_show+0x10d/0xe50 [ 917.002322][ T9878] ? netstat_seq_show+0x10d/0xe50 [ 917.002356][ T9878] ? seq_write+0xd8/0x140 [ 917.002386][ T9878] netstat_seq_show+0x10d/0xe50 [ 917.002440][ T9878] seq_read_iter+0x464/0xcb0 [ 917.002494][ T9878] seq_read+0x36a/0x490 [ 917.002529][ T9878] ? lockdep_hardirqs_on+0x7b/0x110 [ 917.002565][ T9878] ? __pfx_seq_read+0x10/0x10 [ 917.002618][ T9878] ? security_file_permission+0x14/0x260 [ 917.002664][ T9878] ? __pfx_seq_read+0x10/0x10 [ 917.002696][ T9878] proc_reg_read+0x1f6/0x2f0 [ 917.002734][ T9878] ? __pfx_proc_reg_read+0x10/0x10 [ 917.002771][ T9878] vfs_read+0x219/0xa90 [ 917.002811][ T9878] ? __pfx_vfs_read+0x10/0x10 [ 917.002845][ T9878] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 917.002876][ T9878] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 917.002903][ T9878] ? mutex_lock_nested+0x152/0x1d0 [ 917.002936][ T9878] ? fdget_pos+0x252/0x320 [ 917.002974][ T9878] ksys_read+0x156/0x270 [ 917.003007][ T9878] ? __pfx_ksys_read+0x10/0x10 [ 917.003051][ T9878] do_syscall_64+0x166/0x520 [ 917.003078][ T9878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.003104][ T9878] ? clear_bhb_loop+0x70/0xc0 [ 917.003141][ T9878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.003172][ T9878] RIP: 0033:0x7fe7c837e199 [ 917.003197][ T9878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.003219][ T9878] RSP: 002b:00007fe7c6594028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 917.003246][ T9878] RAX: ffffffffffffffda RBX: 00007fe7c8606180 RCX: 00007fe7c837e199 [ 917.003265][ T9878] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000007 [ 917.003283][ T9878] RBP: 00007fe7c84158e0 R08: 0000000000000000 R09: 0000000000000000 [ 917.003299][ T9878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.003315][ T9878] R13: 00007fe7c8606218 R14: 00007fe7c8606180 R15: 00007ffd3755b268 [ 917.003354][ T9878] [ 918.669651][ T1499] team0 (unregistering): Port device team_slave_1 removed [ 919.668426][ T1499] team0 (unregistering): Port device team_slave_0 removed [ 921.388337][ T1482] net_ratelimit: 32 callbacks suppressed [ 926.730640][ C1] net_ratelimit: 23 callbacks suppressed ** 72617 printk messages dropped ** ** 7 printk messages dropped ** ** 78607 printk messages dropped ** ** 79147 printk messages dropped ** ** 80838 printk messages dropped ** [ 932.006633][ C1] net_ratelimit: 21 callbacks suppressed [ 932.035628][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.035705][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.287169][ T5606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 932.348286][ T5606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 932.351623][ T5606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 932.377740][ T5606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 932.379974][ T5606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 933.279103][ T9932] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 933.279661][ T9932] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 934.115078][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 934.363123][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 934.399633][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 934.504881][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 934.521734][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 934.573203][ T5614] Bluetooth: hci4: command tx timeout [ 936.533767][ T9953] netlink: 256 bytes leftover after parsing attributes in process `syz.1.838'. [ 936.742346][ T5606] Bluetooth: hci4: command tx timeout [ 937.270936][ C1] net_ratelimit: 38 callbacks suppressed [ 937.274598][ T5606] Bluetooth: hci5: command tx timeout [ 937.862126][ T198] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 938.022175][ T198] usb 2-1: Using ep0 maxpacket: 8 [ 938.025537][ T198] usb 2-1: unable to get BOS descriptor or descriptor too short [ 938.025595][ T198] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice=32.07 [ 938.032352][ T198] usb 2-1: config 4 has an invalid interface number: 202 but max is 0 [ 938.032381][ T198] usb 2-1: config 4 has no interface number 0 [ 938.032436][ T198] usb 2-1: config 4 interface 202 has no altsetting 0 [ 938.036000][ T198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.036025][ T198] usb 2-1: Product: syz [ 938.036043][ T198] usb 2-1: Manufacturer: syz [ 938.036061][ T198] usb 2-1: SerialNumber: syz [ 938.460660][ T9962] ubi0: attaching mtd0 [ 938.572167][ T9962] ubi0: scanning is finished [ 938.572905][ T9962] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 939.032879][ T5606] Bluetooth: hci4: command tx timeout [ 939.292210][ T5606] Bluetooth: hci5: command tx timeout [ 939.579411][ T9962] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 941.364635][ T5606] Bluetooth: hci4: command tx timeout [ 941.373255][ T5614] Bluetooth: hci5: command tx timeout [ 942.041027][ T198] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.202/input/input14 [ 942.272720][ T5697] net_ratelimit: 103 callbacks suppressed [ 942.441505][ T4942] bcm5974 2-1:4.202: could not read from device [ 945.356266][ T5614] Bluetooth: hci5: command tx timeout [ 945.435963][ T4942] bcm5974 2-1:4.202: could not read from device [ 945.670092][ T198] usb 2-1: USB disconnect, device number 15 [ 947.329632][ T5697] net_ratelimit: 36 callbacks suppressed [ 952.572047][ C1] net_ratelimit: 73 callbacks suppressed [ 957.881332][ C0] net_ratelimit: 41 callbacks suppressed [ 961.936915][ T9838] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.937138][ T9838] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.937403][ T9838] bridge_slave_0: entered allmulticast mode [ 961.977111][ T9838] bridge_slave_0: entered promiscuous mode [ 962.124441][ T9838] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.124611][ T9838] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.124895][ T9838] bridge_slave_1: entered allmulticast mode [ 962.138292][ T9838] bridge_slave_1: entered promiscuous mode [ 962.683130][ T9838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.906473][ T9838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.975381][ C0] net_ratelimit: 29 callbacks suppressed [ 963.175740][ T9922] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.175864][ T9922] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.176110][ T9922] bridge_slave_0: entered allmulticast mode [ 963.201100][ T9922] bridge_slave_0: entered promiscuous mode [ 963.285559][ T9838] team0: Port device team_slave_0 added [ 963.285985][ T9922] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.286162][ T9922] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.286416][ T9922] bridge_slave_1: entered allmulticast mode [ 963.298779][ T9922] bridge_slave_1: entered promiscuous mode [ 963.443895][ T9838] team0: Port device team_slave_1 added [ 964.081033][ T9922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.147443][ T9922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.767715][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 964.827429][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 964.830498][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 964.864075][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 964.910687][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 965.677560][ T9931] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.677798][ T9931] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.678050][ T9931] bridge_slave_0: entered allmulticast mode [ 965.681110][ T9931] bridge_slave_0: entered promiscuous mode [ 965.820693][ T9931] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.820864][ T9931] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.821136][ T9931] bridge_slave_1: entered allmulticast mode [ 965.854945][ T9931] bridge_slave_1: entered promiscuous mode [ 965.874754][ T9922] team0: Port device team_slave_0 added [ 965.944672][ T9922] team0: Port device team_slave_1 added [ 966.478039][ T9931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 966.640415][ T9931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 966.972961][ T5606] Bluetooth: hci0: command tx timeout [ 966.989523][ T9922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.989538][ T9922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.989569][ T9922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.225288][ T9922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.225302][ T9922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.225333][ T9922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.428275][ T9931] team0: Port device team_slave_0 added [ 967.860167][ T9931] team0: Port device team_slave_1 added [ 968.173082][ T1479] net_ratelimit: 64 callbacks suppressed [ 968.181431][ T9931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 968.181444][ T9931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.181475][ T9931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.358231][ T9922] hsr_slave_0: entered promiscuous mode [ 968.366811][ T9922] hsr_slave_1: entered promiscuous mode [ 968.375284][ T9922] debugfs: 'hsr0' already exists in 'hsr' [ 968.375307][ T9922] Cannot create hsr debugfs directory [ 968.378885][ T9931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.378899][ T9931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.378930][ T9931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 969.052329][ T5606] Bluetooth: hci0: command tx timeout [ 969.189097][ T9931] hsr_slave_0: entered promiscuous mode [ 969.190745][ T9931] hsr_slave_1: entered promiscuous mode [ 969.204116][ T9931] debugfs: 'hsr0' already exists in 'hsr' [ 969.204146][ T9931] Cannot create hsr debugfs directory [ 970.612320][ T1499] bridge_slave_0: left allmulticast mode [ 970.612352][ T1499] bridge_slave_0: left promiscuous mode [ 970.612652][ T1499] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.912416][ T1499] bridge_slave_1: left allmulticast mode [ 970.912449][ T1499] bridge_slave_1: left promiscuous mode [ 970.912729][ T1499] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.084113][ T1499] bridge_slave_0: left allmulticast mode [ 971.084146][ T1499] bridge_slave_0: left promiscuous mode [ 971.084418][ T1499] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.132422][ T5606] Bluetooth: hci0: command tx timeout [ 971.383469][ T1499] bridge_slave_1: left allmulticast mode [ 971.383501][ T1499] bridge_slave_1: left promiscuous mode [ 971.383804][ T1499] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.544090][ T1499] bridge_slave_0: left allmulticast mode [ 971.544123][ T1499] bridge_slave_0: left promiscuous mode [ 971.544404][ T1499] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.504041][ T1499] bond0 (unregistering): Released all slaves [ 973.212211][ T5606] Bluetooth: hci0: command tx timeout [ 973.222126][ C1] net_ratelimit: 52 callbacks suppressed [ 973.335231][ T1499] bond0 (unregistering): Released all slaves [ 974.194416][ T1499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.253896][ T1499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.306219][ T1499] bond0 (unregistering): Released all slaves [ 975.293225][ T1499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.393459][ T1499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.445834][ T1499] bond0 (unregistering): Released all slaves [ 977.735179][T10047] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.735318][T10047] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.735590][T10047] bridge_slave_0: entered allmulticast mode [ 977.743318][T10047] bridge_slave_0: entered promiscuous mode [ 977.781350][T10047] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.781477][T10047] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.781714][T10047] bridge_slave_1: entered allmulticast mode [ 977.790831][T10047] bridge_slave_1: entered promiscuous mode [ 978.002175][ T1499] hsr_slave_0: left promiscuous mode [ 978.085025][ T1499] hsr_slave_1: left promiscuous mode [ 978.086621][ T1499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.133389][ T1499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.412372][ T1482] net_ratelimit: 64 callbacks suppressed [ 978.426637][ T1499] hsr_slave_0: left promiscuous mode [ 978.462175][ T1499] hsr_slave_1: left promiscuous mode [ 978.463791][ T1499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.513292][ T1499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.214382][ T1499] team0 (unregistering): Port device team_slave_1 removed [ 980.293088][ T1499] team0 (unregistering): Port device team_slave_0 removed [ 981.533100][ T1499] team0 (unregistering): Port device team_slave_1 removed [ 981.634760][ T1499] team0 (unregistering): Port device team_slave_0 removed [ 982.930372][T10047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 982.963731][T10047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.238994][T10047] team0: Port device team_slave_0 added [ 983.566145][T10047] team0: Port device team_slave_1 added [ 983.862137][ C1] net_ratelimit: 67 callbacks suppressed [ 984.052239][T10047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 984.052254][T10047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.052286][T10047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 984.070557][T10047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.070589][T10047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.070649][T10047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 984.595236][T10047] hsr_slave_0: entered promiscuous mode [ 984.596437][T10047] hsr_slave_1: entered promiscuous mode [ 984.614571][T10047] debugfs: 'hsr0' already exists in 'hsr' [ 984.614595][T10047] Cannot create hsr debugfs directory [ 986.149950][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 986.184886][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 986.188714][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 986.190698][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 986.252505][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 988.413671][ T5606] Bluetooth: hci1: command tx timeout [ 988.972095][ C0] net_ratelimit: 70 callbacks suppressed [ 988.973550][ T1499] bridge_slave_1: left allmulticast mode [ 988.973581][ T1499] bridge_slave_1: left promiscuous mode [ 988.999696][ T1499] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.121656][ T5614] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 989.208432][ T5614] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 989.211395][ T5614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 989.225629][ T5614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 989.250226][ T5614] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 989.355440][ T1499] bridge_slave_0: left allmulticast mode [ 989.355471][ T1499] bridge_slave_0: left promiscuous mode [ 989.355810][ T1499] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.103463][ T1499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.223321][ T1499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.314795][ T1499] bond0 (unregistering): Released all slaves [ 990.508009][ T5614] Bluetooth: hci1: command tx timeout [ 991.372156][ T5614] Bluetooth: hci6: command tx timeout [ 991.388925][ T1499] team0 (unregistering): Port device team_slave_1 removed [ 991.485078][ T1499] team0 (unregistering): Port device team_slave_0 removed [ 992.572067][ T5614] Bluetooth: hci1: command tx timeout [ 993.135797][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.135903][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.452067][ T5614] Bluetooth: hci6: command tx timeout [ 993.904982][T10065] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.905124][T10065] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.905416][T10065] bridge_slave_0: entered allmulticast mode [ 993.909566][T10065] bridge_slave_0: entered promiscuous mode [ 994.246396][T10065] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.246647][T10065] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.246905][T10065] bridge_slave_1: entered allmulticast mode [ 994.250005][T10065] bridge_slave_1: entered promiscuous mode [ 994.332119][ C1] net_ratelimit: 72 callbacks suppressed [ 994.652648][ T5614] Bluetooth: hci1: command tx timeout [ 994.810382][T10065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 994.871050][T10065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.532924][ T5614] Bluetooth: hci6: command tx timeout [ 995.681179][T10065] team0: Port device team_slave_0 added [ 995.699931][T10065] team0: Port device team_slave_1 added [ 996.212836][T10065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.212847][T10065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.212870][T10065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.339755][T10065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.339766][T10065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.339791][T10065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.075825][T10065] hsr_slave_0: entered promiscuous mode [ 997.077551][T10065] hsr_slave_1: entered promiscuous mode [ 997.078744][T10065] debugfs: 'hsr0' already exists in 'hsr' [ 997.078768][T10065] Cannot create hsr debugfs directory [ 997.622443][ T5614] Bluetooth: hci6: command tx timeout [ 998.999642][T10047] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 999.045422][T10047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 999.046000][T10084] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.046968][T10084] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.047186][T10084] bridge_slave_0: entered allmulticast mode [ 999.049757][T10084] bridge_slave_0: entered promiscuous mode [ 999.237604][T10047] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 999.287711][T10047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 999.290905][T10084] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.291042][T10084] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.291285][T10084] bridge_slave_1: entered allmulticast mode [ 999.325917][T10084] bridge_slave_1: entered promiscuous mode [ 999.344433][T10047] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 999.395672][T10047] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 999.472861][T10047] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 999.535718][ C0] net_ratelimit: 46 callbacks suppressed [ 999.544976][T10047] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 999.829896][T10084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.867691][T10084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.002955][T10084] team0: Port device team_slave_0 added [ 1000.025433][T10084] team0: Port device team_slave_1 added [ 1000.267948][ T1499] bridge_slave_1: left allmulticast mode [ 1000.267982][ T1499] bridge_slave_1: left promiscuous mode [ 1000.268269][ T1499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.406696][ T1499] bridge_slave_0: left allmulticast mode [ 1000.406729][ T1499] bridge_slave_0: left promiscuous mode [ 1000.407016][ T1499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.682343][ T1499] bridge_slave_1: left allmulticast mode [ 1000.682376][ T1499] bridge_slave_1: left promiscuous mode [ 1000.682653][ T1499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.865507][ T1499] bridge_slave_0: left allmulticast mode [ 1000.865540][ T1499] bridge_slave_0: left promiscuous mode [ 1000.865811][ T1499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.523236][ T1499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.633307][ T1499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1001.725080][ T1499] bond0 (unregistering): Released all slaves [ 1002.273171][ T1499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1002.374788][ T1499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1002.456301][ T1499] bond0 (unregistering): Released all slaves [ 1002.837697][T10084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.837707][T10084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.837731][T10084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1003.047595][T10084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1003.047609][T10084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1003.047641][T10084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1003.732212][ T1499] hsr_slave_0: left promiscuous mode [ 1003.772281][ T1499] hsr_slave_1: left promiscuous mode [ 1003.773868][ T1499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.823591][ T1499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.034551][ T1499] hsr_slave_0: left promiscuous mode [ 1004.072229][ T1499] hsr_slave_1: left promiscuous mode [ 1004.074607][ T1499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.133263][ T1499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.652124][ T1515] net_ratelimit: 43 callbacks suppressed [ 1004.974387][ T1499] team0 (unregistering): Port device team_slave_1 removed [ 1005.063431][ T1499] team0 (unregistering): Port device team_slave_0 removed [ 1006.614658][ T1499] team0 (unregistering): Port device team_slave_1 removed [ 1006.694349][ T1499] team0 (unregistering): Port device team_slave_0 removed [ 1007.460178][T10084] hsr_slave_0: entered promiscuous mode [ 1007.461519][T10084] hsr_slave_1: entered promiscuous mode [ 1007.481723][T10084] debugfs: 'hsr0' already exists in 'hsr' [ 1007.481753][T10084] Cannot create hsr debugfs directory [ 1007.601895][T10065] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1007.660897][T10065] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1007.740862][T10065] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1007.952274][T10065] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1008.213576][T10065] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1008.284166][T10065] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1008.469650][T10065] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1008.511530][T10065] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1009.759621][T10047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.772208][ T1482] net_ratelimit: 50 callbacks suppressed [ 1010.279562][T10047] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.315801][ T1508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.316020][ T1508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.413520][ T1515] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.413658][ T1515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.829787][T10065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.128060][T10065] 8021q: adding VLAN 0 to HW filter on device team0 [ 1011.169034][ T1499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.169298][ T1499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.268582][ T1499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.268777][ T1499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.739404][T10047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1013.550669][T10084] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1013.607682][T10084] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1013.611242][T10084] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1013.655303][T10084] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1013.658012][T10084] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1013.791028][T10084] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1013.807482][T10084] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1013.841692][T10084] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1013.915224][T10065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1014.317245][T10047] veth0_vlan: entered promiscuous mode [ 1014.479510][T10047] veth1_vlan: entered promiscuous mode [ 1014.689082][T10084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.784711][T10047] veth0_macvtap: entered promiscuous mode [ 1014.830730][T10047] veth1_macvtap: entered promiscuous mode [ 1014.881621][T10084] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.890958][T10065] veth0_vlan: entered promiscuous mode [ 1014.894589][ T1482] net_ratelimit: 42 callbacks suppressed [ 1014.943054][ T1515] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.943193][ T1515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1015.014366][T10065] veth1_vlan: entered promiscuous mode [ 1015.020991][ T1482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.021213][ T1482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.050639][T10047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1015.195321][T10047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1015.647873][T10065] veth0_macvtap: entered promiscuous mode [ 1015.808646][T10065] veth1_macvtap: entered promiscuous mode [ 1016.373528][ T1508] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.522375][T10065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.530344][ T1499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.530362][ T1499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.573108][T10065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.976793][ T119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.976810][ T119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.354550][ T1479] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.857130][ T1479] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.857328][ T1479] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.857518][ T1479] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.858012][ T1479] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.858223][ T1479] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.858758][ T1479] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.085605][ T1508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.085627][ T1508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.609690][T10170] Bluetooth: MGMT ver 1.23 [ 1020.512688][ T1508] net_ratelimit: 188 callbacks suppressed [ 1021.877727][ T1499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.877746][ T1499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.767799][T10084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.832835][ T56] net_ratelimit: 164 callbacks suppressed [ 1027.922069][ T36] audit: type=1800 audit(1791272116.614:38): pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.857" name=80 dev="sda1" ino=2087 res=0 errno=0 [ 1030.972044][ C0] net_ratelimit: 225 callbacks suppressed [ 1031.021885][T10084] veth0_vlan: entered promiscuous mode [ 1031.039968][T10084] veth1_vlan: entered promiscuous mode [ 1031.240165][T10084] veth0_macvtap: entered promiscuous mode [ 1031.449808][T10084] veth1_macvtap: entered promiscuous mode [ 1031.640790][T10084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.804366][T10084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1036.041234][ T9599] net_ratelimit: 99 callbacks suppressed [ 1037.954865][ T42] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.258984][ T42] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.391010][ T42] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.435198][ T7161] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.616441][T10248] JFS: charset not found [ 1041.452879][ T1479] net_ratelimit: 217 callbacks suppressed [ 1044.438258][T10252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1046.850136][ T67] net_ratelimit: 200 callbacks suppressed [ 1048.887891][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.887902][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.189554][T10277] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1051.781393][T10277] usb 8-1: Using ep0 maxpacket: 8 [ 1051.785816][T10277] usb 8-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1051.793712][T10277] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.793777][T10277] usb 8-1: Product: syz [ 1051.793822][T10277] usb 8-1: Manufacturer: syz [ 1051.793864][T10277] usb 8-1: SerialNumber: syz [ 1052.124135][T10277] usb 8-1: config 0 descriptor?? [ 1052.269824][ T1479] net_ratelimit: 80 callbacks suppressed [ 1052.497776][T10277] radio-usb-si4713 8-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1053.800686][T10277] radio-usb-si4713 8-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1053.801462][T10277] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1053.827316][T10277] usb 8-1: USB disconnect, device number 2 [ 1055.730875][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.730940][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.892617][ T5606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1055.977371][ T5606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1055.985986][ T5606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1056.017927][ T5606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1056.036081][ T5606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1057.743004][ C0] net_ratelimit: 90 callbacks suppressed [ 1058.683507][ T5614] Bluetooth: hci4: command tx timeout [ 1060.907141][ T5614] Bluetooth: hci4: command tx timeout [ 1062.934776][T10341] udc dummy_udc.0: failed to start g1: -19 [ 1062.940699][T10341] UDC core: g1: couldn't find an available UDC or it's busy [ 1063.116732][T10114] net_ratelimit: 131 callbacks suppressed [ 1063.141589][ T5614] Bluetooth: hci4: command tx timeout [ 1064.321300][T10350] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1064.358951][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.887'. [ 1065.375208][ T5614] Bluetooth: hci4: command tx timeout [ 1066.515073][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1066.603185][T10350] hsr_slave_0 (unregistering): left promiscuous mode [ 1067.007306][T10358] bus: 'gadget': add driver configfs-gadget.g1 [ 1067.007352][T10358] kobject: 'configfs-gadget.g1' (ffff888038909400): kobject_add_internal: parent: 'drivers', set: 'drivers' [ 1067.007535][T10358] gadget gadget.32: bus: 'gadget': __driver_probe_device: matched device with driver configfs-gadget.g1 [ 1067.010557][T10358] gadget gadget.32: bus: 'gadget': really_probe: probing driver configfs-gadget.g1 with device [ 1067.010710][T10358] udc usbip-vudc.0: binding gadget driver [g1] [ 1067.010825][T10358] configfs-gadget.g1 gadget.32: adding 'uac1_func'/ffff88804b8fbc00 to config 'c'/ffff88803e0f7920 [ 1067.011031][T10358] ================================================================== [ 1067.011067][T10358] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x1b8/0x320 [ 1067.011105][T10358] Read of size 224 at addr ffffffff99ee57e0 by task syz.7.889/10358 [ 1067.011120][T10358] [ 1067.011132][T10358] CPU: 0 UID: 0 PID: 10358 Comm: syz.7.889 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1067.011156][T10358] Tainted: [L]=SOFTLOCKUP [ 1067.011162][T10358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1067.011174][T10358] Call Trace: [ 1067.011180][T10358] [ 1067.011188][T10358] dump_stack_lvl+0xe8/0x150 [ 1067.011216][T10358] print_address_description+0x55/0x1e0 [ 1067.011240][T10358] ? usb_copy_descriptors+0x1b8/0x320 [ 1067.011283][T10358] print_report+0x58/0x70 [ 1067.011314][T10358] kasan_report+0x117/0x150 [ 1067.011340][T10358] ? usb_copy_descriptors+0x1b8/0x320 [ 1067.011369][T10358] kasan_check_range+0x264/0x2c0 [ 1067.011386][T10358] ? usb_copy_descriptors+0x1b8/0x320 [ 1067.011403][T10358] __asan_memcpy+0x29/0x70 [ 1067.011425][T10358] usb_copy_descriptors+0x1b8/0x320 [ 1067.011444][T10358] usb_assign_descriptors+0xcf/0x290 [ 1067.011461][T10358] f_audio_bind+0x1b5e/0x34b0 [ 1067.011487][T10358] usb_add_function+0x290/0x930 [ 1067.011503][T10358] ? check_remote_wakeup_config+0x58/0x1c0 [ 1067.011522][T10358] configfs_composite_bind+0xde0/0x1410 [ 1067.011545][T10358] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1067.011562][T10358] gadget_bind_driver+0x2ca/0x9e0 [ 1067.011590][T10358] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1067.011613][T10358] really_probe+0x254/0xae0 [ 1067.011633][T10358] __driver_probe_device+0x1e8/0x360 [ 1067.011651][T10358] driver_probe_device+0x4f/0x240 [ 1067.011670][T10358] __driver_attach+0x339/0x600 [ 1067.011688][T10358] bus_for_each_dev+0x23e/0x2c0 [ 1067.011709][T10358] ? __pfx___driver_attach+0x10/0x10 [ 1067.011726][T10358] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1067.011750][T10358] ? rt_spin_unlock+0x165/0x200 [ 1067.011778][T10358] bus_add_driver+0x348/0x670 [ 1067.011805][T10358] driver_register+0x23a/0x320 [ 1067.011825][T10358] usb_gadget_register_driver_owner+0xf9/0x270 [ 1067.011850][T10358] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1067.011875][T10358] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1067.011899][T10358] configfs_write_iter+0x33a/0x430 [ 1067.011925][T10358] vfs_write+0x61e/0xbb0 [ 1067.011948][T10358] ? __pfx_vfs_write+0x10/0x10 [ 1067.011969][T10358] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1067.011989][T10358] ? mutex_lock_nested+0x152/0x1d0 [ 1067.012011][T10358] ? fdget_pos+0x252/0x320 [ 1067.012033][T10358] ksys_write+0x156/0x270 [ 1067.012054][T10358] ? __pfx_ksys_write+0x10/0x10 [ 1067.012079][T10358] do_syscall_64+0x166/0x520 [ 1067.012097][T10358] ? trace_irq_disable+0x3b/0x140 [ 1067.012119][T10358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.012136][T10358] ? clear_bhb_loop+0x70/0xc0 [ 1067.012155][T10358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.012171][T10358] RIP: 0033:0x7fca2f57e199 [ 1067.012187][T10358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.012201][T10358] RSP: 002b:00007fca2d7d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1067.012219][T10358] RAX: ffffffffffffffda RBX: 00007fca2f805fa0 RCX: 00007fca2f57e199 [ 1067.012232][T10358] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000004 [ 1067.012243][T10358] RBP: 00007fca2f6158e0 R08: 0000000000000000 R09: 0000000000000000 [ 1067.012253][T10358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1067.012264][T10358] R13: 00007fca2f806038 R14: 00007fca2f805fa0 R15: 00007ffc3f6dcb98 [ 1067.012290][T10358] [ 1067.012297][T10358] [ 1067.012301][T10358] The buggy address belongs to the variable: [ 1067.012307][T10358] ac_header_desc+0x0/0x20 [ 1067.012326][T10358] [ 1067.012331][T10358] The buggy address belongs to the physical page: [ 1067.012345][T10358] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x19ee5 [ 1067.012360][T10358] flags: 0x80000000002000(reserved|node=0|zone=1) [ 1067.012381][T10358] raw: 0080000000002000 ffffea000067b948 ffffea000067b948 0000000000000000 [ 1067.012395][T10358] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1067.012404][T10358] page dumped because: kasan: bad access detected [ 1067.012412][T10358] page_owner info is not present (never set?) [ 1067.012419][T10358] [ 1067.012423][T10358] Memory state around the buggy address: [ 1067.012432][T10358] ffffffff99ee5680: 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 00 00 00 00 [ 1067.012443][T10358] ffffffff99ee5700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1067.012454][T10358] >ffffffff99ee5780: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 f9 f9 f9 [ 1067.012467][T10358] ^ [ 1067.012477][T10358] ffffffff99ee5800: 00 f9 f9 f9 00 f9 f9 f9 00 00 f9 f9 00 00 f9 f9 [ 1067.012488][T10358] ffffffff99ee5880: 00 00 f9 f9 00 00 f9 f9 00 00 00 00 00 00 00 00 [ 1067.012497][T10358] ================================================================== [ 1067.012548][T10358] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1067.564716][T10358] CPU: 0 UID: 0 PID: 10358 Comm: syz.7.889 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1067.576092][T10358] Tainted: [L]=SOFTLOCKUP [ 1067.580420][T10358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1067.590497][T10358] Call Trace: [ 1067.593781][T10358] [ 1067.596731][T10358] vpanic+0x56d/0xa60 [ 1067.600721][T10358] ? rcu_is_watching+0x16/0xb0 [ 1067.605502][T10358] ? __pfx_vpanic+0x10/0x10 [ 1067.610361][T10358] panic+0xc5/0xd0 [ 1067.614086][T10358] ? __pfx_panic+0x10/0x10 [ 1067.618504][T10358] ? usb_copy_descriptors+0x1b8/0x320 [ 1067.623885][T10358] ? usb_copy_descriptors+0x1b8/0x320 [ 1067.629263][T10358] check_panic_on_warn+0x89/0xb0 [ 1067.634206][T10358] ? usb_copy_descriptors+0x1b8/0x320 [ 1067.639597][T10358] end_report+0x73/0x170 [ 1067.643843][T10358] ? usb_copy_descriptors+0x1b8/0x320 [ 1067.649214][T10358] kasan_report+0x128/0x150 [ 1067.653723][T10358] ? usb_copy_descriptors+0x1b8/0x320 [ 1067.659105][T10358] kasan_check_range+0x264/0x2c0 [ 1067.664048][T10358] ? usb_copy_descriptors+0x1b8/0x320 [ 1067.669425][T10358] __asan_memcpy+0x29/0x70 [ 1067.673851][T10358] usb_copy_descriptors+0x1b8/0x320 [ 1067.679057][T10358] usb_assign_descriptors+0xcf/0x290 [ 1067.684350][T10358] f_audio_bind+0x1b5e/0x34b0 [ 1067.689054][T10358] usb_add_function+0x290/0x930 [ 1067.693934][T10358] ? check_remote_wakeup_config+0x58/0x1c0 [ 1067.699757][T10358] configfs_composite_bind+0xde0/0x1410 [ 1067.705362][T10358] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1067.711361][T10358] gadget_bind_driver+0x2ca/0x9e0 [ 1067.716411][T10358] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1067.721972][T10358] really_probe+0x254/0xae0 [ 1067.726485][T10358] __driver_probe_device+0x1e8/0x360 [ 1067.731789][T10358] driver_probe_device+0x4f/0x240 [ 1067.736833][T10358] __driver_attach+0x339/0x600 [ 1067.741612][T10358] bus_for_each_dev+0x23e/0x2c0 [ 1067.746483][T10358] ? __pfx___driver_attach+0x10/0x10 [ 1067.751780][T10358] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1067.757169][T10358] ? rt_spin_unlock+0x165/0x200 [ 1067.762045][T10358] bus_add_driver+0x348/0x670 [ 1067.766740][T10358] driver_register+0x23a/0x320 [ 1067.771526][T10358] usb_gadget_register_driver_owner+0xf9/0x270 [ 1067.777697][T10358] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1067.783345][T10358] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1067.789517][T10358] configfs_write_iter+0x33a/0x430 [ 1067.794644][T10358] vfs_write+0x61e/0xbb0 [ 1067.798896][T10358] ? __pfx_vfs_write+0x10/0x10 [ 1067.803682][T10358] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1067.809533][T10358] ? mutex_lock_nested+0x152/0x1d0 [ 1067.814670][T10358] ? fdget_pos+0x252/0x320 [ 1067.819099][T10358] ksys_write+0x156/0x270 [ 1067.823436][T10358] ? __pfx_ksys_write+0x10/0x10 [ 1067.828299][T10358] do_syscall_64+0x166/0x520 [ 1067.832910][T10358] ? trace_irq_disable+0x3b/0x140 [ 1067.837962][T10358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.844035][T10358] ? clear_bhb_loop+0x70/0xc0 [ 1067.848720][T10358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.854619][T10358] RIP: 0033:0x7fca2f57e199 [ 1067.859042][T10358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.878658][T10358] RSP: 002b:00007fca2d7d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1067.887263][T10358] RAX: ffffffffffffffda RBX: 00007fca2f805fa0 RCX: 00007fca2f57e199 [ 1067.895253][T10358] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000004 [ 1067.903231][T10358] RBP: 00007fca2f6158e0 R08: 0000000000000000 R09: 0000000000000000 [ 1067.911209][T10358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1067.919187][T10358] R13: 00007fca2f806038 R14: 00007fca2f805fa0 R15: 00007ffc3f6dcb98 [ 1067.927179][T10358] [ 1067.930819][T10358] Kernel Offset: disabled [ 1067.935161][T10358] Rebooting in 86400 seconds..