last executing test programs: 13m36.061498199s ago: executing program 4 (id=9): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e50, &(0x7f0000000080)={[{@abort}, {@noinit_itable}, {@grpquota}, {@user_xattr}, {@auto_da_alloc}, {@inlinecrypt}], [{@flag='async'}]}, 0x6, 0x60d, &(0x7f0000000340)="$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") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 13m32.993206561s ago: executing program 4 (id=16): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x100058d1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r0 = msgget(0x2, 0x200) msgctl$IPC_RMID(r0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) msgget(0x0, 0x323) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) msgget(0x2, 0x624) msgget(0x1, 0x240) msgget(0x3, 0x606) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x44, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008800}, 0x44000000) 13m30.766542915s ago: executing program 1 (id=18): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e50, &(0x7f0000000080)={[{@abort}, {@noinit_itable}, {@grpquota}, {@user_xattr}, {@auto_da_alloc}, {@inlinecrypt}], [{@flag='async'}]}, 0x6, 0x60d, &(0x7f0000000340)="$eJzs3c9rHGUfAPDvzCZ5kzZ90768vLwtigEPLUjTpBarXmzrwR4KFuxBxENDk9TQ7Q+aFGwtmIIHBQURr6K9+A94l9y9iaDePAtVpKKg0pXZnWk3yW66ptlskvl8YLPP88zsPs93Z5/MMzN5MgGU1mj2I43YG3HvbBIx0rRsOBoLR/P17v5y81z2SKJWe+XnJJK8rFg/yZ935pnBiPj6RMR/Kivrnbt+48JktdbwdsSh+YtXDs1dv3Fw9uLk+enz05cmDj975Oj4cxNHJtYlzp3588lTLz/2wTtvPDPzTfVgEsfiTP9bU7EsjvUyGqNxLw+xubwvIo5miRafy1azDUIotUr+feyPiP/FSFTquYaRmH2/p40DuqpWiagBJZXo/1BSxTigOLbv4Dg46f6oZOPcOd44AFoZf1/j3EgM1o+NdtxNmo6MGuc2dq9D/Vkdf93c90n2iCXnIX6/v3X61qGedhZuRcT/W8Wf1Nu2ux5pFn+6pB3Zl2A8Igby9r34CG1o/kJ14zzMatYafxoRx/LnrPzEGusfXZbf6PgBKKfF4/mOfCHLPdj/ZWOPYvwTLcY/wy32XWvR6/1f+/Ffsb8frJ8jT5eNw7Ixy+nWb9lffGaFH947+VG7+pvHf9kjq78YC26EO7ci9i2L/90s2Hz8k8WStNj+2Spnj3VWx0vf/nRySUHTRaNex1+7HbG/5fHPg1Fpllrl+uShmdnq9HjjZ8s6vvzq9c9blaebIP5s++9oE3/T9k+Xvy77TK50WMcXp29fbLds+KHxpz8OJGfqqYG85M3J+fmrExEDyakl71UvP7x6W4p1ivfI4j/wZOv+v+T7f2vp+wwVvzI7cOXVC3fbLVvL9m+6mHyv1mEb2snin3r49l/R/7OyDzus47fXrj3ebtlq8Q89SmAAAAAAAABQQmn9GmySjt1Pp+nYWGO+7H9jR1q9PDf/1Mzla5emIg7U/x6yPy2udI808kmWn8j/HrbIH16Wfzoi9kTEx5When7s3OXqVK+DBwAAAAAAAAAAAAAAAAAAgE1iZz7/v7hP9a+Vxvx/oCS6eYM5YHPT/6G86v1/xS2egDKw/4fy0v+hvPR/KC/9H8pL/4fy0v+hvPR/KC/9HwAAAAC2pT1PLH6fRMTC80P1R2YgX2ZGEGxv/b1uANAzlV43AOiZ+5f+DfahdDoa//+R/3PA7jcH6IGkVWF9cFBbvfMvtnwlAAAAAAAAAAAAANAF+/e2n/9vbjBsb6b9QXmtMv//s7W/FNgK/Ot/KC/H+MDDZvEPtltg/j8AAAAAAAAAAAAAbJjh+iNJx/K5wMORpmNjEbsiYnf0JzOz1enxiPh3RHxX6f9Xlp/odaMBAAAAAAAAAAAAAAAAAABgm5m7fuPCZLU6fbU58eeKki2YWOx85eIuqBvQsBfiH74qkq5/YruWlwxFxCbYgl1K9DWVJBEL2ZbfFA27Oheboxn1RI9/MQEAAAAAAAAAAAAAAAAAQAk1zT1ubd+nG9wiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANh4D+7/371Er2MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALamvwMAAP//cUhAbA==") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xffffffff) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 13m28.003106689s ago: executing program 1 (id=21): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e50, &(0x7f0000000080)={[{@abort}, {@noinit_itable}, {@grpquota}, {@user_xattr}, {@auto_da_alloc}, {@inlinecrypt}], [{@flag='async'}]}, 0x6, 0x60d, &(0x7f0000000340)="$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") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xffffffff) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 13m27.920232197s ago: executing program 4 (id=22): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xffffffff) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) 13m26.916924118s ago: executing program 4 (id=27): add_key$user(&(0x7f00000001c0), 0x0, &(0x7f0000000240), 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x404c004) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002080)="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", 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) 13m25.521839693s ago: executing program 1 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r2, 0x5412, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r2, 0x5412, 0x0) write(r0, &(0x7f0000000150)='33554432\x00', 0x9) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13m22.067041568s ago: executing program 4 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(0x0, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 13m16.635838062s ago: executing program 4 (id=36): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$P9_RLOPEN(r2, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x2, 0x3}, 0x9}}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f041}) sendto$inet6(r3, &(0x7f0000000180)="da", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x410) 13m16.554031914s ago: executing program 1 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r2, 0x5412, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r2, 0x5412, 0x0) write(r0, &(0x7f0000000150)='33554432\x00', 0x9) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13m12.749991495s ago: executing program 1 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(0x0, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) 13m10.445753006s ago: executing program 1 (id=43): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x100058d1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r0 = msgget(0x2, 0x200) msgctl$IPC_RMID(r0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) msgget(0x0, 0x323) 13m0.247207267s ago: executing program 32 (id=36): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$P9_RLOPEN(r2, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x2, 0x3}, 0x9}}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f041}) sendto$inet6(r3, &(0x7f0000000180)="da", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x410) 12m55.032144388s ago: executing program 33 (id=43): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x100058d1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r0 = msgget(0x2, 0x200) msgctl$IPC_RMID(r0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) msgget(0x0, 0x323) 12m1.524034304s ago: executing program 0 (id=109): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e50, &(0x7f0000000080)={[{@abort}, {@noinit_itable}, {@grpquota}, {@user_xattr}, {@auto_da_alloc}, {@inlinecrypt}], [{@flag='async'}]}, 0x6, 0x60d, &(0x7f0000000340)="$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") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0xffffffff) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 11m59.47623253s ago: executing program 0 (id=111): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xad, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x0, 0x1, 0x9f, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty, {[@generic={0x94, 0xa, "9b40f51983638a38"}, @ssrr={0x89, 0x17, 0x74, [@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @lsrr={0x83, 0xf, 0x20, [@local, @loopback, @empty]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0xa, 0x8, 0x0, 0x80, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0xc, 0x4, 0x80}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @nop, @sack_perm={0x4, 0x2}]}}, {"3b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) 11m52.986600335s ago: executing program 0 (id=114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(0x0, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000140)=0x881) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11m50.565987308s ago: executing program 0 (id=117): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xad, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x0, 0x1, 0x9f, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty, {[@generic={0x94, 0xa, "9b40f51983638a38"}, @ssrr={0x89, 0x17, 0x74, [@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @lsrr={0x83, 0xf, 0x20, [@local, @loopback, @empty]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0xa, 0x8, 0x0, 0x80, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0xc, 0x4, 0x80}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @nop, @sack_perm={0x4, 0x2}]}}, {"3b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) 11m42.156388428s ago: executing program 0 (id=123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(0x0, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000140)=0x881) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11m37.642037455s ago: executing program 0 (id=126): chdir(&(0x7f0000000040)='./cgroup\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, r5, 0x0, &(0x7f00002c8000/0x3000)=nil, 0x3000, 0x5}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000440)={0x28, 0x2, r6, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000400)}) 11m22.11599068s ago: executing program 34 (id=126): chdir(&(0x7f0000000040)='./cgroup\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, r5, 0x0, &(0x7f00002c8000/0x3000)=nil, 0x3000, 0x5}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000440)={0x28, 0x2, r6, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000400)}) 10m7.14181433s ago: executing program 5 (id=186): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$P9_RLOPEN(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f041}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x34000) 10m1.928142433s ago: executing program 5 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(0x0, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000140)=0x881) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9m56.958646603s ago: executing program 5 (id=194): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xad, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x0, 0x1, 0x9f, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty, {[@generic={0x94, 0xa, "9b40f51983638a38"}, @ssrr={0x89, 0x17, 0x74, [@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @lsrr={0x83, 0xf, 0x20, [@local, @loopback, @empty]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0xa, 0x8, 0x0, 0x80, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0xc, 0x4, 0x80}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @nop, @sack_perm={0x4, 0x2}]}}, {"3b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9m49.822571513s ago: executing program 5 (id=198): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xad, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x0, 0x1, 0x9f, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty, {[@generic={0x94, 0xa, "9b40f51983638a38"}, @ssrr={0x89, 0x17, 0x74, [@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @lsrr={0x83, 0xf, 0x20, [@local, @loopback, @empty]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0xa, 0x8, 0x0, 0x80, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0xc, 0x4, 0x80}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @nop, @sack_perm={0x4, 0x2}]}}, {"3b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9m43.971958977s ago: executing program 5 (id=202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(0x0, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000140)=0x881) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9m41.432146543s ago: executing program 5 (id=204): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xad, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x0, 0x1, 0x9f, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty, {[@generic={0x94, 0xa, "9b40f51983638a38"}, @ssrr={0x89, 0x17, 0x74, [@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @lsrr={0x83, 0xf, 0x20, [@local, @loopback, @empty]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0xa, 0x8, 0x0, 0x80, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0xc, 0x4, 0x80}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @nop, @sack_perm={0x4, 0x2}]}}, {"3b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9m25.645947507s ago: executing program 35 (id=204): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xad, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x0, 0x1, 0x9f, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty, {[@generic={0x94, 0xa, "9b40f51983638a38"}, @ssrr={0x89, 0x17, 0x74, [@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @lsrr={0x83, 0xf, 0x20, [@local, @loopback, @empty]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0xa, 0x8, 0x0, 0x80, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0xc, 0x4, 0x80}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @nop, @sack_perm={0x4, 0x2}]}}, {"3b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 59.170810196s ago: executing program 3 (id=475): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x5410, 0x0) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000c0601010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00000000"], 0x0, 0x34}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r8 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) r9 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x5, 0x2d, &(0x7f0000000340)=ANY=[@ANYRES8=r9], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 59.169090867s ago: executing program 3 (id=476): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x5410, 0x0) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000c0601010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00000000"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r7 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) 59.158165732s ago: executing program 3 (id=479): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xad, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x0, 0x1, 0x9f, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty, {[@generic={0x94, 0xa, "9b40f51983638a38"}, @ssrr={0x89, 0x17, 0x74, [@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @lsrr={0x83, 0xf, 0x20, [@local, @loopback, @empty]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0xa, 0x8, 0x0, 0x80, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0xc, 0x4, 0x80}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @nop, @sack_perm={0x4, 0x2}]}}, {"3b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 59.145857503s ago: executing program 8 (id=134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(0x0, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000140)=0x881) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 59.14286941s ago: executing program 6 (id=51): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e50, &(0x7f0000000080)={[{@abort}, {@noinit_itable}, {@grpquota}, {@user_xattr}, {@auto_da_alloc}, {@inlinecrypt}], [{@flag='async'}]}, 0x6, 0x60d, &(0x7f0000000340)="$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") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xffffffff) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 59.139926025s ago: executing program 8 (id=480): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xad, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x0, 0x1, 0x9f, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty, {[@generic={0x94, 0xa, "9b40f51983638a38"}, @ssrr={0x89, 0x17, 0x74, [@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @lsrr={0x83, 0xf, 0x20, [@local, @loopback, @empty]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0xa, 0x8, 0x0, 0x80, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0xc, 0x4, 0x80}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @nop, @sack_perm={0x4, 0x2}]}}, {"3b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 59.138828053s ago: executing program 2 (id=482): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x5410, 0x0) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000c0601010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00000000"], 0x0, 0x34}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) r8 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x5, 0x2d, &(0x7f0000000340)=ANY=[@ANYRES8=r8], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 59.138358929s ago: executing program 3 (id=483): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x5410, 0x0) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000c0601010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00000000"], 0x0, 0x34}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) r8 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x5, 0x2d, &(0x7f0000000340)=ANY=[@ANYRES8=r8], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 59.137941553s ago: executing program 6 (id=484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(0x0, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000140)=0x881) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 55.851085478s ago: executing program 6 (id=486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, 0x0, 0x0, 0x1000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(0x0, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000140)=0x881) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 55.406988493s ago: executing program 2 (id=487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(0x0, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000140)=0x881) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 55.353817061s ago: executing program 8 (id=488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(0x0, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000140)=0x881) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 53.26431367s ago: executing program 8 (id=490): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xad, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x0, 0x1, 0x9f, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty, {[@generic={0x94, 0xa, "9b40f51983638a38"}, @ssrr={0x89, 0x17, 0x74, [@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @lsrr={0x83, 0xf, 0x20, [@local, @loopback, @empty]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0xa, 0x8, 0x0, 0x80, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0xc, 0x4, 0x80}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @nop, @sack_perm={0x4, 0x2}]}}, {"3b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 50.913028521s ago: executing program 2 (id=491): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x100058d1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r0 = msgget(0x2, 0x200) msgctl$IPC_RMID(r0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) msgget(0x0, 0x323) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) msgget(0x2, 0x624) msgget(0x1, 0x240) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x44, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008800}, 0x44000000) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000400)={0x51, "640ec1be19b5b96ec6a632d8953fad341e42ecf4e6c1485dd8f6f63bfef8552754e778be1421e268b5ec9dd7d446176613deb03a4fc93bb6cd5c1fc31fb1dc511f8dbcc1398255083099b8577a0fb118997749faeffe3b0e25ac4c0ca3e21a9edda7e7c076879a17eb1c844f2d38403813fb54165204ca2288bd2f77508d08e6"}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002000300000015000000080010"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000040)=""/225, 0xe1}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000000280)=""/46, 0x2e}, {&(0x7f00000002c0)=""/105, 0x69}], 0x6, 0x0, 0x0, 0x80c1}, 0x20000000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x5607, 0x4) ioctl$VT_ACTIVATE(r6, 0x5606, 0x4) ioctl$TIOCL_UNBLANKSCREEN(r6, 0x541c, &(0x7f00000005c0)) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001800dd8d000000000000000002"], 0x34}}, 0x0) 50.590841654s ago: executing program 3 (id=493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x1, 0x0) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000140)=0x881) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) 46.791841578s ago: executing program 3 (id=495): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x5410, 0x0) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000c0601010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00000000"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r6) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) r7 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x5, 0x2d, &(0x7f0000000340)=ANY=[@ANYRES8=r7], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 40.658934949s ago: executing program 36 (id=486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, 0x0, 0x0, 0x1000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(0x0, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000140)=0x881) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 36.524679075s ago: executing program 37 (id=490): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xad, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x0, 0x1, 0x9f, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty, {[@generic={0x94, 0xa, "9b40f51983638a38"}, @ssrr={0x89, 0x17, 0x74, [@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @lsrr={0x83, 0xf, 0x20, [@local, @loopback, @empty]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0xa, 0x8, 0x0, 0x80, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0xc, 0x4, 0x80}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @nop, @sack_perm={0x4, 0x2}]}}, {"3b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 36.291432772s ago: executing program 2 (id=503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x1, 0x0) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000140)=0x881) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) 34.205728548s ago: executing program 2 (id=504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(0x0, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000140)=0x881) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 30.991764222s ago: executing program 38 (id=495): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x5410, 0x0) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000c0601010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00000000"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r6) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) r7 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x5, 0x2d, &(0x7f0000000340)=ANY=[@ANYRES8=r7], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 30.959816882s ago: executing program 2 (id=506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(0x0, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000140)=0x881) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 15.366806586s ago: executing program 39 (id=506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(0x0, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000140)=0x881) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 11.23205722s ago: executing program 9 (id=518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(0x0, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000140)=0x881) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9.086548086s ago: executing program 9 (id=519): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) pipe2$9p(0x0, 0x4080) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ptrace$pokeuser(0x6, r1, 0x108, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$FOU_CMD_ADD(r2, 0x0, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x20008820) ptrace$pokeuser(0x6, r1, 0x118, 0x0) r5 = dup(0xffffffffffffffff) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="7472f436ab616e733c66642c726664", @ANYRESHEX, @ANYRESHEX=r5]) 3.587061267s ago: executing program 9 (id=524): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x138d, 0x8735, 0xdb9, 0xffff32eb, 0xfffffffe, 0x2, 0x10002d79, 0x401, 0x0, 0xc8, 0xfffffffe, 0x5, 0xf013, 0xc2, 0x80000002], 0x0, 0x4000003}) 3.333416991s ago: executing program 9 (id=525): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705810340"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) 2.251162218s ago: executing program 7 (id=528): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) recvmmsg(r0, 0x0, 0x0, 0x40000000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) 1.722749705s ago: executing program 7 (id=529): r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x2, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x804000, 0x0) sendmsg$nl_route(r0, 0x0, 0x4004804) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="0000fc00", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x16, 0x7c, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.584228417s ago: executing program 7 (id=530): openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r0 = io_uring_setup(0x27, &(0x7f0000000040)={0x0, 0x400c8a1, 0xc000, 0x8, 0x3a8}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.112863815s ago: executing program 9 (id=531): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newsa={0x140, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010103, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x0, 0x4000, 0x4e24, 0x8001}, {@in=@multicast2, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x43}, {0x323, 0x80000001, 0x9, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {0xf, 0x0, 0x200000000}, {}, 0x70bd29, 0x3503, 0x2, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}}, 0x200080d4) 460.833404ms ago: executing program 9 (id=532): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e5a2d0000000000010902240001000000000904000001030102000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) 435.501182ms ago: executing program 7 (id=533): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) 305.91171ms ago: executing program 7 (id=534): dup(0xffffffffffffffff) connect$pptp(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) write$binfmt_misc(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x4a, 0x0, 0x0) 0s ago: executing program 7 (id=535): syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404f1004000001010200010902200001010080320904000002000000000705810200020007050202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x777) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb-serial/devices/ttyUSB0/vcc_mode\x00', 0x1, 0x0) write(r0, &(0x7f0000005880)='7', 0x1) kernel console output (not intermixed with test programs): node 3: block 1 [ 576.540381][ C1] EXT4-fs (loop3): last error at time 1789997434: ext4_acquire_dquot:7067 [ 576.601132][ T8637] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.344: Freeing blocks not in datazone - block = 0, count = 4096 [ 576.601195][ T8637] loop3: lost filesystem error report for type 5 error -117 [ 576.616851][ T8637] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.344: Invalid inode bitmap blk 0 in block_group 0 [ 576.616926][ T8637] loop3: lost filesystem error report for type 5 error -117 [ 576.633345][ T8637] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 576.633387][ T8637] loop3: lost filesystem error report for type 5 error -117 [ 576.633630][ T1159] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 576.633690][ T1159] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 576.636023][ T1159] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 576.636082][ T1159] EXT4-fs error (device loop3): ext4_release_dquot:7103: comm kworker/u8:7: Failed to release dquot type 0 [ 576.636123][ T1159] loop3: lost filesystem error report for type 5 error -117 [ 576.639927][ T8637] EXT4-fs (loop3): 1 orphan inode deleted [ 576.676774][ T8637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.603411][ T5633] Bluetooth: hci0: command tx timeout [ 579.682094][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.932194][ T8298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.148689][ T8467] hsr_slave_0: entered promiscuous mode [ 580.151179][ T8664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.346'. [ 580.198110][ T8467] hsr_slave_1: entered promiscuous mode [ 580.219753][ T8467] debugfs: 'hsr0' already exists in 'hsr' [ 580.219861][ T8467] Cannot create hsr debugfs directory [ 581.589045][ T8298] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.660590][ T5633] Bluetooth: hci0: command tx timeout [ 581.787869][ T1461] bridge_slave_1: left allmulticast mode [ 581.787913][ T1461] bridge_slave_1: left promiscuous mode [ 581.788172][ T1461] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.836095][ T1461] bridge_slave_0: left allmulticast mode [ 581.836137][ T1461] bridge_slave_0: left promiscuous mode [ 581.836514][ T1461] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.881560][ T1461] bridge_slave_1: left allmulticast mode [ 581.881593][ T1461] bridge_slave_1: left promiscuous mode [ 581.881775][ T1461] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.886292][ T1461] bridge_slave_0: left allmulticast mode [ 581.886318][ T1461] bridge_slave_0: left promiscuous mode [ 581.886490][ T1461] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.581304][ T1461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.138116][ T1461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.151894][ T1461] bond0 (unregistering): Released all slaves [ 583.742683][ T5633] Bluetooth: hci0: command tx timeout [ 583.811180][ T1461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.814445][ T1461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.816337][ T1461] bond0 (unregistering): Released all slaves [ 583.869239][ T1304] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.869368][ T1304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.409083][ T8685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.350'. [ 585.822855][ T5633] Bluetooth: hci0: command tx timeout [ 586.262960][ T4929] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 586.270986][ T4929] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 586.273480][ T4929] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 586.275463][ T4929] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 586.291768][ T4929] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 588.380591][ T4929] Bluetooth: hci6: command tx timeout [ 588.466213][ T1461] hsr_slave_0: left promiscuous mode [ 588.467301][ T1461] hsr_slave_1: left promiscuous mode [ 588.472050][ T1461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.479166][ T1461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.512558][ T1461] hsr_slave_0: left promiscuous mode [ 588.513596][ T1461] hsr_slave_1: left promiscuous mode [ 588.514626][ T1461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.516973][ T1461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.842187][ T1461] team0 (unregistering): Port device team_slave_1 removed [ 588.864524][ T1461] team0 (unregistering): Port device team_slave_0 removed [ 590.094132][ T1461] team0 (unregistering): Port device team_slave_1 removed [ 590.112509][ T1461] team0 (unregistering): Port device team_slave_0 removed [ 590.460721][ T4929] Bluetooth: hci6: command tx timeout [ 590.792753][ T8724] loop2: detected capacity change from 0 to 1024 [ 590.800155][ T8724] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 590.847665][ T8724] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #3: block 1: comm syz.2.354: lblock 1 mapped to illegal pblock 1 (length 1) [ 590.847743][ T8724] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 590.851165][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 590.851203][ C0] EXT4-fs (loop2): initial error at time 1789997448: ext4_map_blocks:832: inode 3: block 1 [ 590.851273][ C0] EXT4-fs (loop2): last error at time 1789997448: ext4_map_blocks:832: inode 3: block 1 [ 590.869359][ T8724] Quota error (device loop2): write_blk: dquota write failed [ 590.869436][ T8724] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 590.869533][ T8724] EXT4-fs error (device loop2): ext4_acquire_dquot:7067: comm syz.2.354: Failed to acquire dquot type 0 [ 590.869590][ T8724] loop2: lost filesystem error report for type 5 error -117 [ 590.871845][ T8724] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.354: Freeing blocks not in datazone - block = 0, count = 4096 [ 590.872065][ T8724] loop2: lost filesystem error report for type 5 error -117 [ 590.874323][ T8724] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.354: Invalid inode bitmap blk 0 in block_group 0 [ 590.874377][ T8724] loop2: lost filesystem error report for type 5 error -117 [ 590.876206][ T8724] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 590.876250][ T8724] loop2: lost filesystem error report for type 5 error -117 [ 591.046962][ T8724] EXT4-fs (loop2): 1 orphan inode deleted [ 591.077796][ T8724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.097889][ T1159] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 591.105769][ T1159] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 591.105833][ T1159] EXT4-fs error (device loop2): ext4_release_dquot:7103: comm kworker/u8:7: Failed to release dquot type 0 [ 592.952901][ T4929] Bluetooth: hci6: command tx timeout [ 593.145691][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.038162][ T8747] binder: 8745:8747 ioctl c0306201 0 returned -14 [ 595.021488][ T4929] Bluetooth: hci6: command tx timeout [ 595.647893][ T8753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.356'. [ 595.932556][ T8761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.359'. [ 598.948010][ T8781] binder: 8777:8781 ioctl c0306201 0 returned -14 [ 600.305687][ T8429] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 600.369441][ T8429] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 600.511742][ T8429] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 600.540142][ T8429] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 600.571189][ T8627] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.571328][ T8627] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.571533][ T8627] bridge_slave_0: entered allmulticast mode [ 600.583263][ T8627] bridge_slave_0: entered promiscuous mode [ 600.793193][ T8429] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 600.799537][ T8429] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 600.816953][ T8429] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 600.831910][ T8429] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 600.833432][ T8627] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.833542][ T8627] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.833713][ T8627] bridge_slave_1: entered allmulticast mode [ 600.837313][ T8627] bridge_slave_1: entered promiscuous mode [ 601.049747][ T8627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.065692][ T8627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.534755][ T8627] team0: Port device team_slave_0 added [ 601.635653][ T8627] team0: Port device team_slave_1 added [ 601.692910][ T8691] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.693048][ T8691] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.693235][ T8691] bridge_slave_0: entered allmulticast mode [ 601.697155][ T8691] bridge_slave_0: entered promiscuous mode [ 601.703925][ T8691] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.704186][ T8691] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.704378][ T8691] bridge_slave_1: entered allmulticast mode [ 601.710188][ T8691] bridge_slave_1: entered promiscuous mode [ 601.719443][ T8627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.719467][ T8627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.719513][ T8627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.851268][ T8627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.851295][ T8627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.851340][ T8627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.913901][ T8691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.728762][ T8802] binder: 8800:8802 ioctl c0306201 0 returned -14 [ 603.738471][ T8691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.248292][ T8627] hsr_slave_0: entered promiscuous mode [ 604.249613][ T8627] hsr_slave_1: entered promiscuous mode [ 604.259302][ T8627] debugfs: 'hsr0' already exists in 'hsr' [ 604.259340][ T8627] Cannot create hsr debugfs directory [ 605.561537][ T8691] team0: Port device team_slave_0 added [ 605.572875][ T8691] team0: Port device team_slave_1 added [ 606.012990][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 606.016144][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 606.017818][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 606.018928][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 606.020090][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 606.330781][ T8691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.330809][ T8691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.330853][ T8691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.336104][ T8691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.336127][ T8691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.336171][ T8691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.667848][ T8467] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 607.684257][ T8467] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 607.687107][ T8467] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 607.712637][ T8467] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 608.004871][ T8467] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 608.051976][ T8467] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 608.056141][ T8835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.364'. [ 608.058669][ T8467] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 608.163519][ T5633] Bluetooth: hci2: command tx timeout [ 608.481672][ T8467] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 610.262762][ T5633] Bluetooth: hci2: command tx timeout [ 610.790049][ T8467] kthread_run failed with err -4 [ 610.897012][ T8691] hsr_slave_0: entered promiscuous mode [ 610.904839][ T8691] hsr_slave_1: entered promiscuous mode [ 610.907291][ T8691] debugfs: 'hsr0' already exists in 'hsr' [ 610.907323][ T8691] Cannot create hsr debugfs directory [ 611.103687][ T5274] 8021q: adding VLAN 0 to HW filter on device eth17 [ 611.516344][ T4929] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 611.518856][ T4929] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 611.519545][ T4929] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 611.521201][ T4929] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 611.522308][ T4929] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 611.582826][ T8862] netlink: 24 bytes leftover after parsing attributes in process `syz.2.367'. [ 612.300473][ T5633] Bluetooth: hci2: command tx timeout [ 613.586540][ T5633] Bluetooth: hci3: command tx timeout [ 614.444938][ T5633] Bluetooth: hci2: command tx timeout [ 615.660894][ T5633] Bluetooth: hci3: command tx timeout [ 615.821545][ T1461] bridge_slave_1: left allmulticast mode [ 615.821585][ T1461] bridge_slave_1: left promiscuous mode [ 615.821852][ T1461] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.829363][ T1461] bridge_slave_0: left allmulticast mode [ 615.829403][ T1461] bridge_slave_0: left promiscuous mode [ 615.856479][ T1461] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.113907][ T1461] bridge_slave_1: left allmulticast mode [ 616.113948][ T1461] bridge_slave_1: left promiscuous mode [ 616.114185][ T1461] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.247416][ T1461] bridge_slave_0: left allmulticast mode [ 616.550768][ T1461] bridge_slave_0: left promiscuous mode [ 616.759470][ T1461] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.919908][ T8916] binder: 8904:8916 ioctl c0306201 0 returned -14 [ 618.845680][ T5633] Bluetooth: hci3: command tx timeout [ 619.372763][ T1461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.375908][ T1461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.377754][ T1461] bond0 (unregistering): Released all slaves [ 619.552940][ T1461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.555944][ T1461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.557748][ T1461] bond0 (unregistering): Released all slaves [ 620.039240][ T8926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.375'. [ 620.055485][ T1461] hsr_slave_0: left promiscuous mode [ 620.086494][ T1461] hsr_slave_1: left promiscuous mode [ 620.137238][ T1461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.235785][ T1461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.878893][ T5633] Bluetooth: hci3: command tx timeout [ 621.010094][ T1461] hsr_slave_0: left promiscuous mode [ 621.026963][ T1461] hsr_slave_1: left promiscuous mode [ 621.027745][ T1461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.056356][ T1461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.397751][ T1461] team0 (unregistering): Port device team_slave_1 removed [ 621.425213][ T1461] team0 (unregistering): Port device team_slave_0 removed [ 622.775646][ T1461] team0 (unregistering): Port device team_slave_1 removed [ 622.799522][ T1461] team0 (unregistering): Port device team_slave_0 removed [ 623.703414][ T8961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.378'. [ 623.822597][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.822680][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.557464][ T8815] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.564306][ T8815] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.573870][ T8815] bridge_slave_0: entered allmulticast mode [ 625.675312][ T8815] bridge_slave_0: entered promiscuous mode [ 625.795026][ T8815] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.798402][ T8815] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.824026][ T8815] bridge_slave_1: entered allmulticast mode [ 625.880580][ T8815] bridge_slave_1: entered promiscuous mode [ 626.003847][ T8815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.062689][ T8815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.876055][ T8988] binder: 8983:8988 ioctl c0306201 0 returned -14 [ 628.305984][ T8815] team0: Port device team_slave_0 added [ 628.326298][ T8815] team0: Port device team_slave_1 added [ 628.474206][ T8815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.474236][ T8815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.474286][ T8815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.543713][ T8815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.543743][ T8815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.543790][ T8815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.988197][ T8815] hsr_slave_0: entered promiscuous mode [ 629.991786][ T8815] hsr_slave_1: entered promiscuous mode [ 630.844283][ T9007] binder: 9003:9007 ioctl c0306201 0 returned -14 [ 632.967479][ T8860] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.967680][ T8860] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.967839][ T8860] bridge_slave_0: entered allmulticast mode [ 632.977238][ T8860] bridge_slave_0: entered promiscuous mode [ 633.053305][ T8860] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.053427][ T8860] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.053590][ T8860] bridge_slave_1: entered allmulticast mode [ 633.058546][ T8860] bridge_slave_1: entered promiscuous mode [ 633.398291][ T9030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.386'. [ 633.406651][ T8860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.418406][ T8860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.999837][ T8860] team0: Port device team_slave_0 added [ 634.007246][ T8860] team0: Port device team_slave_1 added [ 634.675854][ T9039] binder: 9034:9039 ioctl c0306201 0 returned -14 [ 636.082552][ T8860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.082580][ T8860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.082628][ T8860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.116175][ T8860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.116203][ T8860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.116250][ T8860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.415055][ T8860] hsr_slave_0: entered promiscuous mode [ 636.416231][ T8860] hsr_slave_1: entered promiscuous mode [ 636.417045][ T8860] debugfs: 'hsr0' already exists in 'hsr' [ 636.417074][ T8860] Cannot create hsr debugfs directory [ 637.003708][ T9053] netlink: 20 bytes leftover after parsing attributes in process `syz.2.388'. [ 638.218233][ T4929] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 638.233617][ T4929] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 638.234463][ T4929] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 638.236518][ T4929] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 638.237222][ T4929] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 639.155086][ T8691] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 639.194906][ T8691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 639.519861][ T8691] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 639.554265][ T8691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 640.421042][ T4929] Bluetooth: hci0: command tx timeout [ 641.070900][ T8691] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 641.078740][ T8691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 641.526545][ T8691] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 641.561678][ T8691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 642.530566][ T4929] Bluetooth: hci0: command tx timeout [ 643.280992][ T9106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.393'. [ 644.189743][ T8691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.540330][ T4929] Bluetooth: hci0: command tx timeout [ 645.133204][ T8691] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.758572][ T13] bridge_slave_1: left allmulticast mode [ 645.758613][ T13] bridge_slave_1: left promiscuous mode [ 645.758856][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.778035][ T13] bridge_slave_0: left allmulticast mode [ 645.778078][ T13] bridge_slave_0: left promiscuous mode [ 645.778332][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.846365][ T13] bridge_slave_1: left allmulticast mode [ 645.846406][ T13] bridge_slave_1: left promiscuous mode [ 645.846643][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.854794][ T13] bridge_slave_0: left allmulticast mode [ 645.854834][ T13] bridge_slave_0: left promiscuous mode [ 645.855090][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.295211][ T9129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.396'. [ 646.381288][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.620598][ T4929] Bluetooth: hci0: command tx timeout [ 646.960584][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.156766][ T13] bond0 (unregistering): Released all slaves [ 649.209835][ T1854] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 649.250776][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 649.268867][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 649.271982][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 649.276851][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 649.278812][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 649.828907][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.879503][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.896104][ T13] bond0 (unregistering): Released all slaves [ 651.350587][ T5633] Bluetooth: hci5: command tx timeout [ 651.414555][ T13] hsr_slave_0: left promiscuous mode [ 651.417265][ T13] hsr_slave_1: left promiscuous mode [ 651.418273][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.439434][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.457093][ T13] hsr_slave_0: left promiscuous mode [ 651.457969][ T13] hsr_slave_1: left promiscuous mode [ 651.460102][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.463486][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.048320][ T13] team0 (unregistering): Port device team_slave_1 removed [ 652.097109][ T13] team0 (unregistering): Port device team_slave_0 removed [ 653.420944][ T5633] Bluetooth: hci5: command tx timeout [ 653.694295][ T13] team0 (unregistering): Port device team_slave_1 removed [ 653.726611][ T13] team0 (unregistering): Port device team_slave_0 removed [ 655.346991][ T8815] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 655.368661][ T8815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 655.375773][ T8815] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 655.394364][ T8815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 655.454887][ T9202] netlink: 20 bytes leftover after parsing attributes in process `syz.2.403'. [ 655.503842][ T5633] Bluetooth: hci5: command tx timeout [ 656.873055][ T5739] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 657.505903][ T5739] usb 3-1: device descriptor read/64, error -71 [ 657.572123][ T8815] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 657.583160][ T5633] Bluetooth: hci5: command tx timeout [ 657.814230][ T8815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 657.849181][ T5739] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 658.021934][ T5739] usb 3-1: device descriptor read/64, error -71 [ 658.159892][ T5739] usb usb3-port1: attempt power cycle [ 659.215875][ T8815] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 659.259171][ T8815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 659.440502][ T5739] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 659.642307][ T5739] usb 3-1: device descriptor read/8, error -71 [ 662.172724][ T9245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.408'. [ 662.530744][ T7901] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 662.987385][ T7901] usb 4-1: device descriptor read/64, error -71 [ 664.640690][ T7901] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 664.787632][ T7901] usb 4-1: device descriptor read/64, error -71 [ 664.894479][ T7901] usb usb4-port1: attempt power cycle [ 665.312348][ T7901] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 665.679821][ T7901] usb 4-1: device not accepting address 5, error -71 [ 666.985286][ T9058] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.985707][ T9058] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.985862][ T9058] bridge_slave_0: entered allmulticast mode [ 666.994230][ T9058] bridge_slave_0: entered promiscuous mode [ 667.117695][ T9279] netlink: 20 bytes leftover after parsing attributes in process `syz.3.411'. [ 667.620764][ T5762] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 667.807387][ T5762] usb 4-1: device descriptor read/64, error -71 [ 668.086130][ T5762] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 668.247904][ T5762] usb 4-1: device descriptor read/64, error -71 [ 668.353790][ T5762] usb usb4-port1: attempt power cycle [ 668.750818][ T5762] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 668.775264][ T5762] usb 4-1: device descriptor read/8, error -71 [ 669.033593][ T5762] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 669.057718][ T5762] usb 4-1: device descriptor read/8, error -71 [ 669.167539][ T5762] usb usb4-port1: unable to enumerate USB device [ 670.204037][ T9289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.413'. [ 670.245285][ T4929] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 670.258101][ T4929] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 670.270560][ T4929] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 670.275650][ T4929] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 670.276583][ T4929] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 670.386483][ T9058] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.386579][ T9058] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.386737][ T9058] bridge_slave_1: entered allmulticast mode [ 670.411918][ T9058] bridge_slave_1: entered promiscuous mode [ 670.570329][ T5739] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 670.700353][ T5739] usb 3-1: device descriptor read/64, error -71 [ 670.708168][ T9058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.771986][ T9058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.941529][ T5739] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 671.074215][ T5739] usb 3-1: device descriptor read/64, error -71 [ 671.093659][ T9058] team0: Port device team_slave_0 added [ 671.107506][ T9058] team0: Port device team_slave_1 added [ 671.107710][ T8860] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 671.144322][ T8860] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 671.182259][ T5739] usb usb3-port1: attempt power cycle [ 671.209377][ T8860] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 671.240176][ T8860] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 671.248974][ T8860] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 671.303480][ T8860] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 671.305288][ T9058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.305312][ T9058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.305380][ T9058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.309720][ T8860] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 671.378787][ T8860] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 671.512025][ T9058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.512051][ T9058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.512089][ T9058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.521373][ T5739] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 671.541529][ T5739] usb 3-1: device descriptor read/8, error -71 [ 671.576114][ T8860] kthread_run failed with err -4 [ 671.790837][ T5739] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 671.814057][ T5739] usb 3-1: device descriptor read/8, error -71 [ 671.920901][ T5739] usb usb3-port1: unable to enumerate USB device [ 671.968009][ T9058] hsr_slave_0: entered promiscuous mode [ 671.979226][ T9058] hsr_slave_1: entered promiscuous mode [ 671.987737][ T9058] debugfs: 'hsr0' already exists in 'hsr' [ 671.987769][ T9058] Cannot create hsr debugfs directory [ 672.093524][ T9139] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.093647][ T9139] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.093809][ T9139] bridge_slave_0: entered allmulticast mode [ 672.096027][ T9139] bridge_slave_0: entered promiscuous mode [ 672.104396][ T9139] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.105403][ T9139] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.105578][ T9139] bridge_slave_1: entered allmulticast mode [ 672.118281][ T9139] bridge_slave_1: entered promiscuous mode [ 672.831577][ T9330] binder: 9328:9330 ioctl c0306201 0 returned -14 [ 674.036270][ T4929] Bluetooth: hci2: command tx timeout [ 674.406874][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 674.411391][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 674.412588][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 674.413749][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 674.414478][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 674.458933][ T9333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.417'. [ 674.895978][ T8660] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 675.049208][ T9139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.071810][ T8660] usb 3-1: device descriptor read/64, error -71 [ 675.333345][ T8660] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 675.511233][ T8660] usb 3-1: device descriptor read/64, error -71 [ 675.642831][ T8660] usb usb3-port1: attempt power cycle [ 676.060663][ T8660] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 676.098904][ T8660] usb 3-1: device descriptor read/8, error -71 [ 676.141839][ T5633] Bluetooth: hci2: command tx timeout [ 676.352202][ T8660] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 676.386805][ T8660] usb 3-1: device descriptor read/8, error -71 [ 676.473121][ T5633] Bluetooth: hci3: command tx timeout [ 676.509834][ T8660] usb usb3-port1: unable to enumerate USB device [ 677.438657][ T9139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.520427][ T9340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.418'. [ 678.044533][ T7679] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 678.210752][ T7679] usb 3-1: device descriptor read/64, error -71 [ 678.220997][ T5633] Bluetooth: hci2: command tx timeout [ 678.471557][ T7679] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 678.540619][ T5633] Bluetooth: hci3: command tx timeout [ 678.621080][ T7679] usb 3-1: device descriptor read/64, error -71 [ 678.743818][ T7679] usb usb3-port1: attempt power cycle [ 678.834375][ T9139] team0: Port device team_slave_0 added [ 679.172153][ T7679] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 679.196542][ T7679] usb 3-1: device descriptor read/8, error -71 [ 679.452216][ T7679] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 679.492245][ T7679] usb 3-1: device descriptor read/8, error -71 [ 679.616671][ T7679] usb usb3-port1: unable to enumerate USB device [ 680.277209][ T9139] team0: Port device team_slave_1 added [ 680.310865][ T5633] Bluetooth: hci2: command tx timeout [ 680.620906][ T5633] Bluetooth: hci3: command tx timeout [ 680.759011][ T9346] netlink: 20 bytes leftover after parsing attributes in process `syz.3.416'. [ 681.160793][ T8660] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 681.235312][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.235357][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.841867][ T9351] binder: 9348:9351 ioctl c0306201 0 returned -14 [ 683.109287][ T5633] Bluetooth: hci3: command tx timeout [ 683.149924][ T9139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.312038][ T8660] usb 4-1: device descriptor read/64, error -71 [ 683.574427][ T8660] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 683.724481][ T8660] usb 4-1: device descriptor read/64, error -71 [ 683.776040][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.776068][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.776116][ T9139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.841424][ T8660] usb usb4-port1: attempt power cycle [ 684.888168][ T9139] hsr_slave_0: entered promiscuous mode [ 684.898253][ T9139] hsr_slave_1: entered promiscuous mode [ 684.911633][ T9139] debugfs: 'hsr0' already exists in 'hsr' [ 684.911668][ T9139] Cannot create hsr debugfs directory [ 685.256149][ T9364] netlink: 20 bytes leftover after parsing attributes in process `syz.3.422'. [ 685.264734][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.264816][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.636557][ T13] bridge_slave_1: left allmulticast mode [ 686.636600][ T13] bridge_slave_1: left promiscuous mode [ 686.636854][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.661906][ T13] bridge_slave_0: left allmulticast mode [ 686.661943][ T13] bridge_slave_0: left promiscuous mode [ 686.662203][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.691925][ T9368] loop3: detected capacity change from 0 to 32768 [ 686.694043][ T9368] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.423 (9368) [ 686.697416][ T9368] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 686.697469][ T9368] BTRFS info (device loop3): using crc32c checksum algorithm [ 686.764691][ T13] bridge_slave_1: left allmulticast mode [ 686.764734][ T13] bridge_slave_1: left promiscuous mode [ 686.764981][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.801360][ T13] bridge_slave_0: left allmulticast mode [ 686.801749][ T13] bridge_slave_0: left promiscuous mode [ 686.802002][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.948458][ T9368] BTRFS info (device loop3): enabling ssd optimizations [ 686.948501][ T9368] BTRFS info (device loop3): turning on flush-on-commit [ 686.948531][ T9368] BTRFS info (device loop3): enabling free space tree [ 686.948561][ T9368] BTRFS info (device loop3): enabling auto defrag [ 686.948591][ T9368] BTRFS info (device loop3): use lzo compression, level 1 [ 686.948628][ T9368] BTRFS info (device loop3): max_inline set to 4096 [ 687.013001][ T9385] netlink: 20 bytes leftover after parsing attributes in process `syz.2.420'. [ 687.599190][ T7679] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 688.092264][ T7679] usb 3-1: device descriptor read/64, error -71 [ 688.336207][ T7679] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 688.563664][ T7679] usb 3-1: device descriptor read/64, error -71 [ 688.682653][ T7679] usb usb3-port1: attempt power cycle [ 689.091192][ T7679] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 689.115671][ T7679] usb 3-1: device descriptor read/8, error -71 [ 689.376971][ T7679] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 689.406262][ T7679] usb 3-1: device descriptor read/8, error -71 [ 689.506152][ T5621] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 689.529802][ T7679] usb usb3-port1: unable to enumerate USB device [ 690.537612][ T9393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.425'. [ 691.413486][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.462445][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.467203][ T13] bond0 (unregistering): Released all slaves [ 691.631112][ T7679] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 691.780391][ T7679] usb 3-1: device descriptor read/64, error -71 [ 692.012207][ T7679] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 692.155089][ T7679] usb 3-1: device descriptor read/64, error -71 [ 692.272177][ T7679] usb usb3-port1: attempt power cycle [ 692.698191][ T7679] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 692.738901][ T7679] usb 3-1: device descriptor read/8, error -71 [ 693.006769][ T7679] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 693.022627][ T7679] usb 3-1: device descriptor read/8, error -71 [ 693.143772][ T7679] usb usb3-port1: unable to enumerate USB device [ 693.400303][ T9399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.426'. [ 693.472408][ T9402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.427'. [ 693.841605][ T5739] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 693.981633][ T5739] usb 3-1: device descriptor read/64, error -71 [ 694.157716][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.223643][ T5739] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 694.278134][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.345835][ T13] bond0 (unregistering): Released all slaves [ 694.412063][ T5739] usb 3-1: device descriptor read/64, error -71 [ 694.525443][ T5739] usb usb3-port1: attempt power cycle [ 694.828518][ T7679] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 694.916035][ T5739] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 694.942902][ T5739] usb 3-1: device descriptor read/8, error -71 [ 695.110628][ T7679] usb 4-1: device descriptor read/64, error -71 [ 695.228702][ T5739] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 695.268384][ T5739] usb 3-1: device descriptor read/8, error -71 [ 695.372003][ T5739] usb usb3-port1: unable to enumerate USB device [ 695.981213][ T7679] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 697.789334][ T9290] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.789460][ T9290] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.789623][ T9290] bridge_slave_0: entered allmulticast mode [ 697.794410][ T9290] bridge_slave_0: entered promiscuous mode [ 697.938545][ T13] hsr_slave_0: left promiscuous mode [ 697.939410][ T13] hsr_slave_1: left promiscuous mode [ 697.955474][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.957901][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.990839][ T13] hsr_slave_0: left promiscuous mode [ 697.991817][ T13] hsr_slave_1: left promiscuous mode [ 697.992766][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.993424][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.219032][ T13] team0 (unregistering): Port device team_slave_1 removed [ 698.243546][ T13] team0 (unregistering): Port device team_slave_0 removed [ 698.548343][ T13] team0 (unregistering): Port device team_slave_1 removed [ 698.567261][ T13] team0 (unregistering): Port device team_slave_0 removed [ 698.705243][ T9290] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.705360][ T9290] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.705534][ T9290] bridge_slave_1: entered allmulticast mode [ 698.707587][ T9290] bridge_slave_1: entered promiscuous mode [ 698.765929][ T9290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.769470][ T9290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.987293][ T9290] team0: Port device team_slave_0 added [ 701.135451][ T9290] team0: Port device team_slave_1 added [ 701.865162][ T5633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 701.870112][ T5633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 701.889076][ T5633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 701.892331][ T5633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 701.893088][ T5633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 701.959846][ T9290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.959873][ T9290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.959946][ T9290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.254624][ T9290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.254653][ T9290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.254702][ T9290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.427129][ T9290] hsr_slave_0: entered promiscuous mode [ 703.436924][ T9290] hsr_slave_1: entered promiscuous mode [ 703.438176][ T9290] debugfs: 'hsr0' already exists in 'hsr' [ 703.438206][ T9290] Cannot create hsr debugfs directory [ 703.981052][ T4929] Bluetooth: hci6: command tx timeout [ 704.521766][ T9448] loop3: detected capacity change from 0 to 32768 [ 704.558377][ T9448] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.433 (9448) [ 704.577915][ T9448] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 704.577968][ T9448] BTRFS info (device loop3): using crc32c checksum algorithm [ 704.794564][ T9448] BTRFS info (device loop3): enabling ssd optimizations [ 704.794607][ T9448] BTRFS info (device loop3): turning on flush-on-commit [ 704.794637][ T9448] BTRFS info (device loop3): enabling free space tree [ 704.794667][ T9448] BTRFS info (device loop3): enabling auto defrag [ 704.794725][ T9448] BTRFS info (device loop3): use lzo compression, level 1 [ 704.794762][ T9448] BTRFS info (device loop3): max_inline set to 4096 [ 706.060843][ T4929] Bluetooth: hci6: command tx timeout [ 706.272663][ T5621] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 706.935800][ T9334] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.935975][ T9334] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.936155][ T9334] bridge_slave_0: entered allmulticast mode [ 706.949668][ T9334] bridge_slave_0: entered promiscuous mode [ 707.023643][ T9334] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.023835][ T9334] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.023999][ T9334] bridge_slave_1: entered allmulticast mode [ 707.026142][ T9334] bridge_slave_1: entered promiscuous mode [ 707.130791][ T9334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.135050][ T9334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.259543][ T9334] team0: Port device team_slave_0 added [ 707.278939][ T9334] team0: Port device team_slave_1 added [ 708.044858][ T9485] binder: 9482:9485 ioctl c0306201 0 returned -14 [ 709.204105][ T4929] Bluetooth: hci6: command tx timeout [ 709.932541][ T9487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.436'. [ 709.937027][ T9334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.937049][ T9334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.937104][ T9334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.947949][ T9334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.947976][ T9334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.948021][ T9334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.372607][ T4929] Bluetooth: hci6: command tx timeout [ 711.881104][ T5739] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 712.097541][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 712.108083][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 712.119076][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 712.134425][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 712.135147][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 712.416253][ T9334] hsr_slave_0: entered promiscuous mode [ 712.417425][ T9334] hsr_slave_1: entered promiscuous mode [ 712.418248][ T9334] debugfs: 'hsr0' already exists in 'hsr' [ 712.418277][ T9334] Cannot create hsr debugfs directory [ 715.159261][ T9508] binder: 9500:9508 ioctl c0306201 0 returned -14 [ 716.397834][ T4929] Bluetooth: hci0: command tx timeout [ 717.599783][ T9520] binder: 9517:9520 ioctl c0306201 0 returned -14 [ 718.866036][ T5633] Bluetooth: hci0: command tx timeout [ 719.491734][ T13] bridge_slave_1: left allmulticast mode [ 719.491774][ T13] bridge_slave_1: left promiscuous mode [ 719.492018][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.524382][ T13] bridge_slave_0: left allmulticast mode [ 719.524422][ T13] bridge_slave_0: left promiscuous mode [ 719.527807][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.579579][ T13] bridge_slave_1: left allmulticast mode [ 719.579612][ T13] bridge_slave_1: left promiscuous mode [ 719.579798][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.609026][ T13] bridge_slave_0: left allmulticast mode [ 719.609065][ T13] bridge_slave_0: left promiscuous mode [ 719.609298][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.676546][ T9533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.442'. [ 720.943810][ T5633] Bluetooth: hci0: command tx timeout [ 721.654417][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.657365][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.659157][ T13] bond0 (unregistering): Released all slaves [ 721.839837][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.854402][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.856322][ T13] bond0 (unregistering): Released all slaves [ 721.918956][ T9536] loop2: detected capacity change from 0 to 32768 [ 721.931286][ T9536] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.443 (9536) [ 721.935816][ T9536] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 721.935864][ T9536] BTRFS info (device loop2): using crc32c checksum algorithm [ 722.018675][ T9536] BTRFS info (device loop2): enabling ssd optimizations [ 722.018713][ T9536] BTRFS info (device loop2): turning on flush-on-commit [ 722.018740][ T9536] BTRFS info (device loop2): enabling free space tree [ 722.018768][ T9536] BTRFS info (device loop2): enabling auto defrag [ 722.018795][ T9536] BTRFS info (device loop2): use lzo compression, level 1 [ 722.018827][ T9536] BTRFS info (device loop2): max_inline set to 4096 [ 723.190438][ T5633] Bluetooth: hci0: command tx timeout [ 723.738023][ T5618] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 723.844605][ T13] hsr_slave_0: left promiscuous mode [ 723.857762][ T13] hsr_slave_1: left promiscuous mode [ 723.858816][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.921711][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 723.965669][ T13] hsr_slave_0: left promiscuous mode [ 723.968509][ T9559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.446'. [ 724.331730][ T8662] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 724.471019][ T8662] usb 4-1: device descriptor read/64, error -71 [ 724.721112][ T8662] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 724.813472][ T13] hsr_slave_1: left promiscuous mode [ 724.851133][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.860806][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.879218][ T8662] usb 4-1: device descriptor read/64, error -71 [ 724.984462][ T8662] usb usb4-port1: attempt power cycle [ 725.394225][ T8662] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 725.416728][ T8662] usb 4-1: device descriptor read/8, error -71 [ 725.691850][ T8662] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 725.753898][ T8662] usb 4-1: device descriptor read/8, error -71 [ 725.864725][ T8662] usb usb4-port1: unable to enumerate USB device [ 726.982244][ T9562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.445'. [ 727.117501][ T13] team0 (unregistering): Port device team_slave_1 removed [ 727.137905][ T13] team0 (unregistering): Port device team_slave_0 removed [ 727.280420][ T7901] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 727.410457][ T7901] usb 3-1: device descriptor read/64, error -71 [ 727.442089][ T13] team0 (unregistering): Port device team_slave_1 removed [ 727.458283][ T13] team0 (unregistering): Port device team_slave_0 removed [ 727.610016][ T9565] netlink: 20 bytes leftover after parsing attributes in process `syz.3.447'. [ 727.650609][ T7901] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 727.968776][ T7901] usb 3-1: device descriptor read/64, error -71 [ 728.111554][ T7901] usb usb3-port1: attempt power cycle [ 728.705291][ T4929] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 728.707624][ T4929] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 728.708372][ T4929] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 728.710013][ T4929] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 728.744371][ T4929] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 728.932201][ T7901] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 728.952582][ T7901] usb 3-1: device descriptor read/8, error -71 [ 729.533274][ T7901] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 729.669984][ T5274] 8021q: adding VLAN 0 to HW filter on device eth18 [ 730.043014][ T7901] usb 3-1: device descriptor read/8, error -71 [ 730.277014][ T7901] usb usb3-port1: unable to enumerate USB device [ 730.306945][ T9425] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.307093][ T9425] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.307269][ T9425] bridge_slave_0: entered allmulticast mode [ 730.343695][ T9425] bridge_slave_0: entered promiscuous mode [ 730.358404][ T9425] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.362033][ T9425] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.362192][ T9425] bridge_slave_1: entered allmulticast mode [ 730.383118][ T9425] bridge_slave_1: entered promiscuous mode [ 730.590980][ T9588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.449'. [ 730.780373][ T4929] Bluetooth: hci5: command tx timeout [ 730.963916][ T7901] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 731.153056][ T7901] usb 4-1: device descriptor read/64, error -71 [ 731.442754][ T7901] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 731.600738][ T7901] usb 4-1: device descriptor read/64, error -71 [ 731.718948][ T7901] usb usb4-port1: attempt power cycle [ 732.043672][ T9592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.450'. [ 732.230197][ T7901] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 732.638210][ T7901] usb 4-1: device descriptor read/8, error -71 [ 732.908558][ T4929] Bluetooth: hci5: command tx timeout [ 733.003535][ T7901] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 733.042267][ T7901] usb 4-1: device descriptor read/8, error -71 [ 733.157908][ T7901] usb usb4-port1: unable to enumerate USB device [ 734.170474][ T9425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.174268][ T9425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.503503][ T9425] team0: Port device team_slave_0 added [ 734.802522][ T9425] team0: Port device team_slave_1 added [ 735.145291][ T4929] Bluetooth: hci5: command tx timeout [ 735.596233][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 735.611732][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 735.612854][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 735.615941][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 735.616847][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 735.830182][ T9425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.830210][ T9425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.830342][ T9425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.179123][ T9425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.179151][ T9425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.179201][ T9425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.462097][ T9496] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.462308][ T9496] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.462482][ T9496] bridge_slave_0: entered allmulticast mode [ 736.464670][ T9496] bridge_slave_0: entered promiscuous mode [ 737.417706][ T5633] Bluetooth: hci5: command tx timeout [ 738.128016][ T5633] Bluetooth: hci2: command tx timeout [ 738.692422][ T9496] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.692549][ T9496] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.692714][ T9496] bridge_slave_1: entered allmulticast mode [ 738.698198][ T9496] bridge_slave_1: entered promiscuous mode [ 738.786734][ T9425] hsr_slave_0: entered promiscuous mode [ 738.787915][ T9425] hsr_slave_1: entered promiscuous mode [ 739.417034][ T9496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.443768][ T9496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.477209][ T9658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.455'. [ 740.140380][ T5633] Bluetooth: hci2: command tx timeout [ 740.741117][ T9669] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 740.899869][ T9496] team0: Port device team_slave_0 added [ 741.634251][ T9496] team0: Port device team_slave_1 added [ 742.220416][ T5633] Bluetooth: hci2: command tx timeout [ 742.294656][ T9496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.294683][ T9496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.294750][ T9496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.368704][ T9496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.368733][ T9496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.368783][ T9496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.398355][ T9496] hsr_slave_0: entered promiscuous mode [ 743.402678][ T9496] hsr_slave_1: entered promiscuous mode [ 743.405147][ T9496] debugfs: 'hsr0' already exists in 'hsr' [ 743.405178][ T9496] Cannot create hsr debugfs directory [ 743.508833][ T9701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.461'. [ 743.872111][ T7901] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 744.036858][ T7901] usb 3-1: device descriptor read/64, error -71 [ 744.300343][ T5633] Bluetooth: hci2: command tx timeout [ 744.317012][ T7901] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 744.472022][ T7901] usb 3-1: device descriptor read/64, error -71 [ 744.583602][ T7901] usb usb3-port1: attempt power cycle [ 744.965568][ T7901] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 745.003670][ T7901] usb 3-1: device descriptor read/8, error -71 [ 745.282231][ T7901] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 745.326390][ T7901] usb 3-1: device descriptor read/8, error -71 [ 745.432245][ T7901] usb usb3-port1: unable to enumerate USB device [ 746.712369][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.712455][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.021579][ T9713] loop2: detected capacity change from 0 to 32768 [ 747.037154][ T9713] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.462 (9713) [ 747.060784][ T9713] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 747.060839][ T9713] BTRFS info (device loop2): using crc32c checksum algorithm [ 747.187248][ T9713] BTRFS info (device loop2): enabling ssd optimizations [ 747.187288][ T9713] BTRFS info (device loop2): turning on flush-on-commit [ 747.187318][ T9713] BTRFS info (device loop2): enabling free space tree [ 747.187347][ T9713] BTRFS info (device loop2): enabling auto defrag [ 747.187376][ T9713] BTRFS info (device loop2): use lzo compression, level 1 [ 747.187437][ T9713] BTRFS info (device loop2): max_inline set to 4096 [ 747.372378][ T9425] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 747.481990][ T9425] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 747.483455][ T9425] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 747.512582][ T9425] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 747.526847][ T9730] netlink: 20 bytes leftover after parsing attributes in process `syz.3.463'. [ 748.537949][ T5618] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 748.698386][ T9425] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 748.724555][ T9425] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 748.729446][ T9425] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 748.773194][ T9425] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 748.931312][ T13] bridge_slave_1: left allmulticast mode [ 748.931368][ T13] bridge_slave_1: left promiscuous mode [ 748.931624][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.935748][ T13] bridge_slave_0: left allmulticast mode [ 748.935779][ T13] bridge_slave_0: left promiscuous mode [ 748.936089][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.988540][ T13] bridge_slave_1: left allmulticast mode [ 748.990107][ T13] bridge_slave_1: left promiscuous mode [ 748.990579][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.026764][ T13] bridge_slave_0: left allmulticast mode [ 749.026803][ T13] bridge_slave_0: left promiscuous mode [ 749.027054][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.045353][ T9748] netlink: 20 bytes leftover after parsing attributes in process `syz.3.466'. [ 749.076434][ T13] bridge_slave_1: left allmulticast mode [ 749.076464][ T13] bridge_slave_1: left promiscuous mode [ 749.076650][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.102857][ T13] bridge_slave_0: left allmulticast mode [ 749.102893][ T13] bridge_slave_0: left promiscuous mode [ 749.103166][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.484378][ T7679] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 749.621840][ T7679] usb 4-1: device descriptor read/64, error -71 [ 749.899185][ T7679] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 750.043549][ T7679] usb 4-1: device descriptor read/64, error -71 [ 750.156312][ T7679] usb usb4-port1: attempt power cycle [ 750.581403][ T7679] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 750.611537][ T7679] usb 4-1: device descriptor read/8, error -71 [ 750.881933][ T7679] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 750.904775][ T7679] usb 4-1: device descriptor read/8, error -71 [ 751.029102][ T7679] usb usb4-port1: unable to enumerate USB device [ 752.057415][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.085198][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.103158][ T9751] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 752.103526][ T13] bond0 (unregistering): Released all slaves [ 752.231914][ T9751] md: could not open device unknown-block(1,0). [ 752.362980][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.367821][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.369879][ T13] bond0 (unregistering): Released all slaves [ 753.506305][ T9762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.470'. [ 753.844598][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.892538][ T7679] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 755.797874][ T7679] usb 4-1: device descriptor read/64, error -71 [ 755.950421][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 756.015585][ T13] bond0 (unregistering): Released all slaves [ 756.051123][ T7679] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 756.220989][ T7679] usb 4-1: device descriptor read/64, error -71 [ 756.351951][ T7679] usb usb4-port1: attempt power cycle [ 756.716274][ T5274] 8021q: adding VLAN 0 to HW filter on device eth20 [ 757.047790][ T13] hsr_slave_0: left promiscuous mode [ 758.010957][ T13] hsr_slave_1: left promiscuous mode [ 758.026230][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.044105][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.061940][ T13] hsr_slave_0: left promiscuous mode [ 758.099660][ T13] hsr_slave_1: left promiscuous mode [ 758.103374][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.106291][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.135798][ T13] hsr_slave_0: left promiscuous mode [ 758.136640][ T13] hsr_slave_1: left promiscuous mode [ 758.137631][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.138424][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.378630][ T13] team0 (unregistering): Port device team_slave_1 removed [ 758.411665][ T13] team0 (unregistering): Port device team_slave_0 removed [ 758.900143][ T13] team0 (unregistering): Port device team_slave_1 removed [ 758.928786][ T13] team0 (unregistering): Port device team_slave_0 removed [ 760.167058][ T13] team0 (unregistering): Port device team_slave_1 removed [ 760.186271][ T13] team0 (unregistering): Port device team_slave_0 removed [ 760.370555][ T9569] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.370680][ T9569] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.370877][ T9569] bridge_slave_0: entered allmulticast mode [ 760.378706][ T9569] bridge_slave_0: entered promiscuous mode [ 760.393181][ T9569] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.393303][ T9569] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.393469][ T9569] bridge_slave_1: entered allmulticast mode [ 760.397501][ T9569] bridge_slave_1: entered promiscuous mode [ 760.709802][ T5274] 8021q: adding VLAN 0 to HW filter on device eth19 [ 760.762811][ T9569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.814230][ T9569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.974605][ T9569] team0: Port device team_slave_0 added [ 761.037889][ T9569] team0: Port device team_slave_1 added [ 761.207096][ T9569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.207124][ T9569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.207174][ T9569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.218322][ T9799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.474'. [ 761.293841][ T9801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.475'. [ 761.634333][ T9569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.634379][ T9569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.634624][ T9569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.350439][ T8662] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 764.350438][ T5762] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 764.437031][ T9496] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 764.484077][ T9496] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 764.488121][ T9496] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 764.526394][ T9496] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 764.574190][ T9496] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 764.637459][ T9496] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 764.638448][ T9496] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 764.658386][ T4929] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 764.661005][ T4929] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 764.663421][ T4929] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 764.669163][ T4929] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 764.669899][ T4929] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 764.697024][ T9496] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 765.390623][ T9812] binder: 9810:9812 ioctl c0306201 0 returned -14 [ 767.196656][ T4929] Bluetooth: hci3: command tx timeout [ 767.210320][ T9815] netlink: 20 bytes leftover after parsing attributes in process `syz.3.476'. [ 768.183959][ T9496] kthread_run failed with err -4 [ 768.780982][ T9569] hsr_slave_0: entered promiscuous mode [ 768.800667][ T9569] hsr_slave_1: entered promiscuous mode [ 768.808106][ T9569] debugfs: 'hsr0' already exists in 'hsr' [ 768.808139][ T9569] Cannot create hsr debugfs directory [ 769.270472][ T4929] Bluetooth: hci3: command tx timeout [ 769.435663][ T9628] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.458731][ T9628] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.458931][ T9628] bridge_slave_0: entered allmulticast mode [ 769.478187][ T9628] bridge_slave_0: entered promiscuous mode [ 769.622393][ T5633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 769.626470][ T5633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 769.627236][ T5633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 769.628428][ T5633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 769.629154][ T5633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 769.948160][ T9628] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.948286][ T9628] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.948480][ T9628] bridge_slave_1: entered allmulticast mode [ 769.950754][ T9628] bridge_slave_1: entered promiscuous mode [ 770.432104][ T9628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.523848][ T9628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 770.868217][ T9628] team0: Port device team_slave_0 added [ 770.959065][ T9628] team0: Port device team_slave_1 added [ 771.177119][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.177148][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.177203][ T9628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.339824][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.339852][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.339900][ T9628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.343298][ T5633] Bluetooth: hci3: command tx timeout [ 771.566021][ T9628] hsr_slave_0: entered promiscuous mode [ 771.567308][ T9628] hsr_slave_1: entered promiscuous mode [ 771.568464][ T9628] debugfs: 'hsr0' already exists in 'hsr' [ 771.568495][ T9628] Cannot create hsr debugfs directory [ 771.824003][ T5633] Bluetooth: hci6: command tx timeout [ 772.482050][ T9569] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 772.487597][ T9569] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 772.531141][ T9805] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.531348][ T9805] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.531525][ T9805] bridge_slave_0: entered allmulticast mode [ 772.534075][ T9805] bridge_slave_0: entered promiscuous mode [ 772.569404][ T9569] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 772.579657][ T9569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 772.597867][ T9805] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.598407][ T9805] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.598602][ T9805] bridge_slave_1: entered allmulticast mode [ 772.626406][ T9805] bridge_slave_1: entered promiscuous mode [ 772.660964][ T9569] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 772.677486][ T9569] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 772.783014][ T9569] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 772.789105][ T9569] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 772.826363][ T9805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.839585][ T9805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.020883][ T9805] team0: Port device team_slave_0 added [ 773.095881][ T9805] team0: Port device team_slave_1 added [ 773.326240][ T9805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.326267][ T9805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.326332][ T9805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.329639][ T9805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.329662][ T9805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.329708][ T9805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.334298][ T9628] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 773.345144][ T9628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 773.367834][ T9835] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.368517][ T9835] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.368692][ T9835] bridge_slave_0: entered allmulticast mode [ 773.377669][ T9835] bridge_slave_0: entered promiscuous mode [ 773.384679][ T9835] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.384806][ T9835] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.386597][ T9835] bridge_slave_1: entered allmulticast mode [ 773.391338][ T9835] bridge_slave_1: entered promiscuous mode [ 773.430366][ T5633] Bluetooth: hci3: command tx timeout [ 773.462524][ T9628] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 773.473176][ T9628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 773.502263][ T9628] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 773.515986][ T9628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 773.528619][ T13] bridge_slave_1: left allmulticast mode [ 773.528645][ T13] bridge_slave_1: left promiscuous mode [ 773.528842][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.537006][ T13] bridge_slave_0: left allmulticast mode [ 773.537035][ T13] bridge_slave_0: left promiscuous mode [ 773.540440][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.568781][ T13] bridge_slave_1: left allmulticast mode [ 773.568810][ T13] bridge_slave_1: left promiscuous mode [ 773.568997][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.591137][ T13] bridge_slave_0: left allmulticast mode [ 773.591168][ T13] bridge_slave_0: left promiscuous mode [ 773.591351][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.613149][ T13] bridge_slave_1: left allmulticast mode [ 773.613193][ T13] bridge_slave_1: left promiscuous mode [ 773.613372][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.615585][ T13] bridge_slave_0: left allmulticast mode [ 773.615609][ T13] bridge_slave_0: left promiscuous mode [ 773.615775][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.719797][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.732636][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.734707][ T13] bond0 (unregistering): Released all slaves [ 773.816687][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.819031][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.823961][ T13] bond0 (unregistering): Released all slaves [ 773.900595][ T5633] Bluetooth: hci6: command tx timeout [ 773.917007][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.919399][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.932575][ T13] bond0 (unregistering): Released all slaves [ 773.954398][ T9835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.959254][ T9628] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 773.973424][ T9628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 774.063292][ T9835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.104809][ T13] hsr_slave_0: left promiscuous mode [ 774.105499][ T13] hsr_slave_1: left promiscuous mode [ 774.106262][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.106835][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.136283][ T13] hsr_slave_0: left promiscuous mode [ 774.137010][ T13] hsr_slave_1: left promiscuous mode [ 774.137757][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.138355][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.154950][ T13] hsr_slave_0: left promiscuous mode [ 774.162352][ T13] hsr_slave_1: left promiscuous mode [ 774.163506][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.174626][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.347281][ T13] team0 (unregistering): Port device team_slave_1 removed [ 774.360954][ T13] team0 (unregistering): Port device team_slave_0 removed [ 774.635324][ T13] team0 (unregistering): Port device team_slave_1 removed [ 774.656345][ T13] team0 (unregistering): Port device team_slave_0 removed [ 774.945446][ T13] team0 (unregistering): Port device team_slave_1 removed [ 774.962312][ T13] team0 (unregistering): Port device team_slave_0 removed [ 775.097218][ T9805] hsr_slave_0: entered promiscuous mode [ 775.098827][ T9805] hsr_slave_1: entered promiscuous mode [ 775.151328][ T9835] team0: Port device team_slave_0 added [ 775.154386][ T9835] team0: Port device team_slave_1 added [ 775.297497][ T9835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.297529][ T9835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.297570][ T9835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.300150][ T9835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.300172][ T9835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.300213][ T9835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.485134][ T9569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.578864][ T9835] hsr_slave_0: entered promiscuous mode [ 775.580077][ T9835] hsr_slave_1: entered promiscuous mode [ 775.592621][ T9835] debugfs: 'hsr0' already exists in 'hsr' [ 775.592654][ T9835] Cannot create hsr debugfs directory [ 775.914988][ T9569] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.990503][ T5633] Bluetooth: hci6: command tx timeout [ 776.029416][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.029558][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.081659][ T9597] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.081786][ T9597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.252980][ T5274] 8021q: adding VLAN 0 to HW filter on device eth17 [ 776.278052][ T9628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.410819][ T9628] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.418646][ T6728] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.418741][ T6728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.468789][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.468918][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.475610][ T9805] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 777.508147][ T9805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 777.516599][ T9805] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 777.538593][ T9805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 777.554287][ T9805] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 777.586185][ T9805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 777.587277][ T9805] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 777.601431][ T9805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 777.783924][ T9569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.898122][ T9835] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 777.915395][ T9835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 777.916476][ T9835] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 777.937991][ T9835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 777.939534][ T9835] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 777.963990][ T9835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 777.978814][ T9835] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 777.989140][ T9835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 778.019369][ T9628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.060982][ T5633] Bluetooth: hci6: command tx timeout [ 778.279201][ T9805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.369840][ T9805] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.427142][ T6728] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.427271][ T6728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.456954][ T6728] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.457083][ T6728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.482397][ T9835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.639974][ T9835] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.668142][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.668270][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.708967][ T6728] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.709094][ T6728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.769810][ T9569] veth0_vlan: entered promiscuous mode [ 778.839336][ T9569] veth1_vlan: entered promiscuous mode [ 778.979428][ T9628] veth0_vlan: entered promiscuous mode [ 779.066338][ T9628] veth1_vlan: entered promiscuous mode [ 779.092302][ T9569] veth0_macvtap: entered promiscuous mode [ 779.129863][ T9569] veth1_macvtap: entered promiscuous mode [ 779.235892][ T9569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.296818][ T9569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 779.319903][ T9628] veth0_macvtap: entered promiscuous mode [ 779.347203][ T9628] veth1_macvtap: entered promiscuous mode [ 779.460895][ T6728] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.466432][ T1304] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.529216][ T6728] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.542269][ T9628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.628341][ T9628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 779.690774][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.690851][ T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.690936][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.691000][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.691063][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.735873][ T1304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.735909][ T1304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.943766][ T1304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.943798][ T1304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.254698][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.254733][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.684844][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.684892][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.249855][ T9835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.307758][ T9805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.101016][T10053] binder: 10050:10053 ioctl c0306201 0 returned -14 [ 785.148431][ T9805] veth0_vlan: entered promiscuous mode [ 785.192896][ T9805] veth1_vlan: entered promiscuous mode [ 785.227743][ T9835] veth0_vlan: entered promiscuous mode [ 785.259775][ T9835] veth1_vlan: entered promiscuous mode [ 785.308705][ T9805] veth0_macvtap: entered promiscuous mode [ 785.337997][ T9805] veth1_macvtap: entered promiscuous mode [ 785.364204][ T9835] veth0_macvtap: entered promiscuous mode [ 785.392260][ T9835] veth1_macvtap: entered promiscuous mode [ 785.438011][ T9805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.458481][ T9805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.472648][ T9835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.500840][ T9835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.555461][ T79] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.581248][ T1304] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.751241][ T6728] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.756575][ T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.757612][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.758752][ T79] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.758822][ T79] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.758882][ T79] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.837292][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.837326][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.906729][ T6728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.906763][ T6728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.954064][ T6728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.954097][ T6728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.995379][ T6728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.995413][ T6728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.843719][T10071] loop6: detected capacity change from 0 to 1024 [ 787.092035][T10071] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 787.445829][T10071] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #3: block 1: comm syz.6.51: lblock 1 mapped to illegal pblock 1 (length 1) [ 787.446226][T10071] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 787.448409][T10071] Quota error (device loop6): write_blk: dquota write failed [ 787.448890][T10071] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 787.449872][T10071] EXT4-fs error (device loop6): ext4_acquire_dquot:7067: comm syz.6.51: Failed to acquire dquot type 0 [ 787.450060][T10071] loop6: lost filesystem error report for type 5 error -117 [ 787.450376][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 787.450407][ C0] EXT4-fs (loop6): initial error at time 1789997645: ext4_map_blocks:832: inode 3: block 1 [ 787.450468][ C0] EXT4-fs (loop6): last error at time 1789997645: ext4_map_blocks:832: inode 3: block 1 [ 787.622998][T10071] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.51: Freeing blocks not in datazone - block = 0, count = 4096 [ 787.623281][T10071] loop6: lost filesystem error report for type 5 error -117 [ 787.877590][T10071] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.51: Invalid inode bitmap blk 0 in block_group 0 [ 787.877757][T10071] loop6: lost filesystem error report for type 5 error -117 [ 787.928395][ T1159] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 787.928769][ T1159] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 787.987925][T10071] EXT4-fs error (device loop6) in ext4_free_inode:363: Corrupt filesystem [ 787.988024][T10071] loop6: lost filesystem error report for type 5 error -117 [ 788.058553][T10071] EXT4-fs (loop6): 1 orphan inode deleted [ 788.059945][ T1159] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 788.059997][ T1159] EXT4-fs error (device loop6): ext4_release_dquot:7103: comm kworker/u8:7: Failed to release dquot type 0 [ 788.060037][ T1159] loop6: lost filesystem error report for type 5 error -117 [ 788.141433][T10071] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.019586][ T9805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.152899][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.152983][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 851.180520][ T4929] Bluetooth: hci5: command 0x0406 tx timeout [ 861.420655][ T4929] Bluetooth: hci2: command 0x0406 tx timeout [ 867.767776][T10090] netlink: 20 bytes leftover after parsing attributes in process `syz.7.481'. [ 867.768255][T10088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.482'. [ 868.416929][T10096] binder: 10093:10096 ioctl c0306201 0 returned -14 [ 869.712516][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.712670][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.749219][T10101] netlink: 20 bytes leftover after parsing attributes in process `syz.9.485'. [ 871.060575][ T30] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 871.120381][ T8662] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 871.329944][T10106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.483'. [ 871.460382][ T8621] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 871.591756][ T8621] usb 10-1: device descriptor read/64, error -71 [ 872.231268][T10114] binder: 10111:10114 ioctl c0306201 0 returned -14 [ 873.580380][ T8660] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 874.344043][T10119] binder: 10113:10119 ioctl c0306201 0 returned -14 [ 875.859699][ T8621] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 876.100622][T10122] loop7: detected capacity change from 0 to 1024 [ 876.190748][T10122] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 876.252629][T10122] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #3: block 1: comm syz.7.489: lblock 1 mapped to illegal pblock 1 (length 1) [ 876.252694][T10122] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 876.256570][T10122] Quota error (device loop7): write_blk: dquota write failed [ 876.256624][T10122] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 876.256698][T10122] EXT4-fs error (device loop7): ext4_acquire_dquot:7067: comm syz.7.489: Failed to acquire dquot type 0 [ 876.256736][T10122] loop7: lost filesystem error report for type 5 error -117 [ 876.260315][ C1] EXT4-fs (loop7): error count since last fsck: 2 [ 876.260345][ C1] EXT4-fs (loop7): initial error at time 1789997734: ext4_map_blocks:832: inode 3: block 1 [ 876.260411][ C1] EXT4-fs (loop7): last error at time 1789997734: ext4_acquire_dquot:7067 [ 876.286787][T10122] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.489: Freeing blocks not in datazone - block = 0, count = 4096 [ 876.287822][T10122] loop7: lost filesystem error report for type 5 error -117 [ 876.334281][T10122] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.489: Invalid inode bitmap blk 0 in block_group 0 [ 876.334338][T10122] loop7: lost filesystem error report for type 5 error -117 [ 876.343048][T10122] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem [ 876.343096][T10122] loop7: lost filesystem error report for type 5 error -117 [ 876.348438][T10122] EXT4-fs (loop7): 1 orphan inode deleted [ 876.370542][ T13] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 876.370612][ T13] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 876.374011][ T13] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 876.374071][ T13] EXT4-fs error (device loop7): ext4_release_dquot:7103: comm kworker/u8:1: Failed to release dquot type 0 [ 876.374112][ T13] loop7: lost filesystem error report for type 5 error -117 [ 876.388959][T10122] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 878.247425][ T9835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.956490][T10135] binder: 10131:10135 ioctl c0306201 0 returned -14 [ 881.061547][T10139] binder: 10137:10139 ioctl c0306201 0 returned -14 [ 886.851007][T10164] binder: 10159:10164 ioctl c0306201 0 returned -14 [ 888.129295][ T4929] Bluetooth: hci3: command 0x0406 tx timeout [ 888.930795][T10169] binder: 10167:10169 ioctl c0306201 0 returned -14 [ 891.440330][T10175] binder: 10173:10175 ioctl c0306201 0 returned -14 [ 892.565939][ T4929] Bluetooth: hci6: command 0x0406 tx timeout [ 893.312477][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 893.321595][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 893.331985][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 893.333144][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 893.333931][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 893.555663][ T5633] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 893.558976][ T5633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 893.570658][ T5633] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 893.579554][ T5633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 893.580829][ T5633] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 894.300802][T10185] binder: 10181:10185 ioctl c0306201 0 returned -14 [ 895.587579][ T4929] Bluetooth: hci0: command tx timeout [ 895.670391][ T4929] Bluetooth: hci7: command tx timeout [ 896.244089][T10192] netlink: 24 bytes leftover after parsing attributes in process `syz.7.497'. [ 896.554364][ T5942] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.719659][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 896.732575][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 896.734716][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 896.737558][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 896.738609][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 897.047962][T10201] netlink: 20 bytes leftover after parsing attributes in process `syz.7.507'. [ 897.499943][ T30] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 897.661103][ T4929] Bluetooth: hci0: command tx timeout [ 897.741281][ T4929] Bluetooth: hci7: command tx timeout [ 897.775384][ T30] usb 8-1: device descriptor read/64, error -71 [ 898.096876][ T30] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 898.310203][ T30] usb 8-1: device descriptor read/64, error -71 [ 898.504919][ T30] usb usb8-port1: attempt power cycle [ 898.866432][ T4929] Bluetooth: hci3: command tx timeout [ 899.012402][ T30] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 899.053886][ T30] usb 8-1: device descriptor read/8, error -71 [ 899.371709][ T30] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 899.416351][ T30] usb 8-1: device descriptor read/8, error -71 [ 899.521737][ T30] usb usb8-port1: unable to enumerate USB device [ 899.740495][ T4929] Bluetooth: hci0: command tx timeout [ 899.821331][ T4929] Bluetooth: hci7: command tx timeout [ 899.878602][ T5942] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.659650][ T5942] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.817672][ T5621] syz_tun (unregistering): left allmulticast mode [ 900.950573][ T4929] Bluetooth: hci3: command tx timeout [ 901.529943][T10224] netlink: 20 bytes leftover after parsing attributes in process `syz.9.502'. [ 901.820856][ T4929] Bluetooth: hci0: command tx timeout [ 901.901342][ T4929] Bluetooth: hci7: command tx timeout [ 901.906604][ T7901] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 902.094212][ T7901] usb 10-1: device descriptor read/64, error -71 [ 902.303515][ T5942] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.415162][ T7901] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 902.616104][ T7901] usb 10-1: device descriptor read/64, error -71 [ 902.742418][ T7901] usb usb10-port1: attempt power cycle [ 903.020934][ T4929] Bluetooth: hci3: command tx timeout [ 903.142811][ T7901] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 903.166993][ T7901] usb 10-1: device descriptor read/8, error -71 [ 903.530730][ T7901] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 903.573700][ T7901] usb 10-1: device descriptor read/8, error -71 [ 903.732037][ T7901] usb usb10-port1: unable to enumerate USB device [ 904.249817][T10227] netlink: 20 bytes leftover after parsing attributes in process `syz.7.509'. [ 904.654334][ T8662] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 904.835623][ T8662] usb 8-1: device descriptor read/64, error -71 [ 905.100682][ T4929] Bluetooth: hci3: command tx timeout [ 905.159248][ T8662] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 905.387802][ T8662] usb 8-1: device descriptor read/64, error -71 [ 905.517403][ T8662] usb usb8-port1: attempt power cycle [ 906.025646][ T8662] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 906.051002][ T8662] usb 8-1: device descriptor read/8, error -71 [ 906.509619][ T8662] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 906.993975][ T8662] usb 8-1: device descriptor read/8, error -71 [ 907.999199][ T8662] usb usb8-port1: unable to enumerate USB device [ 908.774537][T10252] binder: 10242:10252 ioctl c0306201 0 returned -14 [ 911.739380][T10177] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.739482][T10177] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.739646][T10177] bridge_slave_0: entered allmulticast mode [ 911.745665][T10177] bridge_slave_0: entered promiscuous mode [ 911.759103][T10177] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.759228][T10177] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.759711][T10177] bridge_slave_1: entered allmulticast mode [ 911.776170][T10177] bridge_slave_1: entered promiscuous mode [ 912.211598][ T5942] bridge_slave_1: left allmulticast mode [ 912.211630][ T5942] bridge_slave_1: left promiscuous mode [ 912.211829][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.259678][ T5942] bridge_slave_0: left allmulticast mode [ 912.259717][ T5942] bridge_slave_0: left promiscuous mode [ 912.259974][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.308900][T10273] loop9: detected capacity change from 0 to 1024 [ 912.359330][T10273] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 912.431228][T10273] EXT4-fs error (device loop9): ext4_map_blocks:832: inode #3: block 1: comm syz.9.515: lblock 1 mapped to illegal pblock 1 (length 1) [ 912.431293][T10273] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 912.433973][T10273] Quota error (device loop9): write_blk: dquota write failed [ 912.434023][T10273] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 912.434096][T10273] EXT4-fs error (device loop9): ext4_acquire_dquot:7067: comm syz.9.515: Failed to acquire dquot type 0 [ 912.434137][T10273] loop9: lost filesystem error report for type 5 error -117 [ 912.438364][T10273] EXT4-fs error (device loop9): ext4_free_blocks:6718: comm syz.9.515: Freeing blocks not in datazone - block = 0, count = 4096 [ 912.438415][T10273] loop9: lost filesystem error report for type 5 error -117 [ 912.440330][ C1] EXT4-fs (loop9): error count since last fsck: 3 [ 912.440359][ C1] EXT4-fs (loop9): initial error at time 1789997770: ext4_map_blocks:832: inode 3: block 1 [ 912.440419][ C1] EXT4-fs (loop9): last error at time 1789997770: ext4_free_blocks:6718 [ 913.120455][T10278] binder: 10276:10278 ioctl c0306201 0 returned -14 [ 914.464452][T10273] EXT4-fs error (device loop9): ext4_read_inode_bitmap:140: comm syz.9.515: Invalid inode bitmap blk 0 in block_group 0 [ 914.464506][T10273] loop9: lost filesystem error report for type 5 error -117 [ 914.525692][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 914.537677][T10273] EXT4-fs error (device loop9) in ext4_free_inode:363: Corrupt filesystem [ 914.537720][T10273] loop9: lost filesystem error report for type 5 error -117 [ 914.541158][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 914.546784][T10273] EXT4-fs (loop9): 1 orphan inode deleted [ 914.548206][ T5991] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 914.548265][ T5991] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 914.558992][ T5991] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 914.559058][ T5991] EXT4-fs error (device loop9): ext4_release_dquot:7103: comm kworker/u8:13: Failed to release dquot type 0 [ 914.559097][ T5991] loop9: lost filesystem error report for type 5 error -117 [ 914.596010][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 914.617190][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 914.619902][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 914.632414][T10273] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 915.601457][ T9569] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.648887][ T5942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 915.713648][ T5942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 915.736027][ T5942] bond0 (unregistering): Released all slaves [ 917.714795][ T4929] Bluetooth: hci2: command tx timeout [ 917.985413][T10177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.147399][T10177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.606757][T10177] team0: Port device team_slave_0 added [ 918.764631][T10177] team0: Port device team_slave_1 added [ 918.897254][ T5942] hsr_slave_0: left promiscuous mode [ 918.901990][ T5942] hsr_slave_1: left promiscuous mode [ 918.905580][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 918.905616][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 918.933095][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 918.933131][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.013829][ T5942] veth1_macvtap: left promiscuous mode [ 919.013884][ T5942] veth0_macvtap: left promiscuous mode [ 919.014013][ T5942] veth1_vlan: left promiscuous mode [ 919.014101][ T5942] veth0_vlan: left promiscuous mode [ 919.255519][T10316] netlink: 20 bytes leftover after parsing attributes in process `syz.7.517'. [ 919.636656][ T7679] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 919.751019][ T4929] Bluetooth: hci2: command tx timeout [ 919.771124][ T7679] usb 8-1: device descriptor read/64, error -71 [ 920.056407][ T7679] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 920.200705][ T7679] usb 8-1: device descriptor read/64, error -71 [ 920.319007][ T7679] usb usb8-port1: attempt power cycle [ 920.745712][ T7679] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 920.766883][ T7679] usb 8-1: device descriptor read/8, error -71 [ 921.056615][ T7679] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 921.106303][ T7679] usb 8-1: device descriptor read/8, error -71 [ 921.233849][ T7679] usb usb8-port1: unable to enumerate USB device [ 921.820976][ T4929] Bluetooth: hci2: command tx timeout [ 922.492584][T10320] FAULT_INJECTION: forcing a failure. [ 922.492584][T10320] name failslab, interval 1, probability 0, space 0, times 1 [ 922.492636][T10320] CPU: 0 UID: 0 PID: 10320 Comm: syz.7.520 Not tainted syzkaller #0 PREEMPT(full) [ 922.492682][T10320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 922.492704][T10320] Call Trace: [ 922.492717][T10320] [ 922.492732][T10320] dump_stack_lvl+0x100/0x190 [ 922.492793][T10320] should_fail_ex.cold+0x5/0xa [ 922.492837][T10320] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.492891][T10320] should_failslab+0xc2/0x120 [ 922.492932][T10320] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 922.492993][T10320] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.493041][T10320] ? __d_alloc+0x35/0xa50 [ 922.493092][T10320] __d_alloc+0x35/0xa50 [ 922.493141][T10320] d_alloc_pseudo+0x1c/0xc0 [ 922.493202][T10320] alloc_file_pseudo+0x118/0x290 [ 922.493253][T10320] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 922.493296][T10320] ? alloc_fd+0x471/0x7a0 [ 922.493342][T10320] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.493388][T10320] ? do_raw_spin_unlock+0x145/0x1e0 [ 922.493443][T10320] __anon_inode_getfile+0xe8/0x280 [ 922.493506][T10320] anon_inode_getfile_fmode+0x37/0xa0 [ 922.493566][T10320] do_eventfd+0x159/0x2b0 [ 922.493608][T10320] __x64_sys_eventfd2+0x53/0x80 [ 922.493648][T10320] do_syscall_64+0x123/0x790 [ 922.493696][T10320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.493737][T10320] RIP: 0033:0x7f27a2b9e159 [ 922.493767][T10320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.493805][T10320] RSP: 002b:00007f27a3aa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 922.493843][T10320] RAX: ffffffffffffffda RBX: 00007f27a2e25fa0 RCX: 00007f27a2b9e159 [ 922.493869][T10320] RDX: 0000000000000000 RSI: 0000000000000801 RDI: 0000000000000006 [ 922.493892][T10320] RBP: 00007f27a2c3506b R08: 0000000000000000 R09: 0000000000000000 [ 922.493916][T10320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 922.493939][T10320] R13: 00007f27a2e26038 R14: 00007f27a2e25fa0 R15: 00007ffff6644258 [ 922.493996][T10320] [ 922.697011][ T5942] team0 (unregistering): Port device team_slave_1 removed [ 922.795465][ T5942] team0 (unregistering): Port device team_slave_0 removed [ 923.405043][ T5274] 8021q: adding VLAN 0 to HW filter on device eth17 [ 923.491061][T10326] vxlan0: entered allmulticast mode [ 923.578784][T10177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.578812][T10177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.578856][T10177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.627744][T10177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.627768][T10177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.627820][T10177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.750711][ T5815] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 923.910651][ T4929] Bluetooth: hci2: command tx timeout [ 923.916797][ T5815] usb 10-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 923.921543][ T5815] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.921613][ T5815] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.094293][T10342] syzkaller0: entered promiscuous mode [ 924.094325][T10342] syzkaller0: entered allmulticast mode [ 924.127556][T10177] hsr_slave_0: entered promiscuous mode [ 924.128622][T10177] hsr_slave_1: entered promiscuous mode [ 924.150179][ T36] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.150358][ T36] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.150430][ T36] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.150518][ T36] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.272445][T10180] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.272571][T10180] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.272764][T10180] bridge_slave_0: entered allmulticast mode [ 924.275561][T10180] bridge_slave_0: entered promiscuous mode [ 924.466720][ T5815] wacom 0003:056A:033B.0001: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 924.479089][ T5815] wacom 0003:056A:033B.0001: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.9-1/input0 [ 924.482832][ T5815] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/0003:056A:033B.0001/input/input5 [ 924.655601][T10180] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.655724][T10180] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.655948][T10180] bridge_slave_1: entered allmulticast mode [ 924.666960][T10180] bridge_slave_1: entered promiscuous mode [ 924.699952][T10358] FAULT_INJECTION: forcing a failure. [ 924.699952][T10358] name failslab, interval 1, probability 0, space 0, times 0 [ 924.700005][T10358] CPU: 1 UID: 0 PID: 10358 Comm: syz.7.528 Not tainted syzkaller #0 PREEMPT(full) [ 924.700050][T10358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 924.700074][T10358] Call Trace: [ 924.700086][T10358] [ 924.700101][T10358] dump_stack_lvl+0x100/0x190 [ 924.700162][T10358] should_fail_ex.cold+0x5/0xa [ 924.700206][T10358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.700263][T10358] should_failslab+0xc2/0x120 [ 924.700332][T10358] __kmalloc_cache_noprof+0x91/0x6d0 [ 924.700385][T10358] ? jffs2_sum_init+0x88/0x1b0 [ 924.700450][T10358] jffs2_sum_init+0x88/0x1b0 [ 924.700506][T10358] jffs2_do_mount_fs+0x795/0x2300 [ 924.700571][T10358] ? rcu_is_watching+0x13/0xc0 [ 924.700621][T10358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.700668][T10358] ? trace_kmalloc+0xeb/0x110 [ 924.700704][T10358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.700751][T10358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.700797][T10358] ? lockdep_init_map_type+0x5c/0x250 [ 924.700838][T10358] ? __pfx_jffs2_do_mount_fs+0x10/0x10 [ 924.700893][T10358] ? __raw_spin_lock_init+0x3a/0x110 [ 924.700941][T10358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.700987][T10358] ? __init_rwsem+0x10e/0x180 [ 924.701036][T10358] jffs2_do_fill_super+0x3d4/0xa50 [ 924.701106][T10358] jffs2_fill_super+0x283/0x370 [ 924.701167][T10358] ? __pfx_get_mtd_device+0x10/0x10 [ 924.701222][T10358] ? __pfx_jffs2_fill_super+0x10/0x10 [ 924.701285][T10358] mtd_get_sb+0x2f0/0x4c0 [ 924.701352][T10358] ? __pfx_jffs2_fill_super+0x10/0x10 [ 924.701413][T10358] get_tree_mtd+0x6f9/0x8a0 [ 924.701473][T10358] ? __pfx_get_tree_mtd+0x10/0x10 [ 924.701530][T10358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.701582][T10358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.701626][T10358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.701670][T10358] ? security_capable+0x80/0x260 [ 924.701726][T10358] vfs_get_tree+0x92/0x320 [ 924.701772][T10358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.701815][T10358] path_mount+0x7d0/0x24c0 [ 924.701871][T10358] ? __pfx_path_mount+0x10/0x10 [ 924.701915][T10358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.701956][T10358] ? lockdep_hardirqs_on+0x7d/0x110 [ 924.701993][T10358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.702030][T10358] ? kmem_cache_free+0x127/0x6c0 [ 924.702084][T10358] ? __x64_sys_mount+0x293/0x310 [ 924.702122][T10358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.702160][T10358] __x64_sys_mount+0x293/0x310 [ 924.702203][T10358] ? __pfx___x64_sys_mount+0x10/0x10 [ 924.702249][T10358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.702294][T10358] do_syscall_64+0x123/0x790 [ 924.702337][T10358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.702372][T10358] RIP: 0033:0x7f27a2b9e159 [ 924.702398][T10358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.702432][T10358] RSP: 002b:00007f27a3aa4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 924.702466][T10358] RAX: ffffffffffffffda RBX: 00007f27a2e25fa0 RCX: 00007f27a2b9e159 [ 924.702490][T10358] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200 [ 924.702512][T10358] RBP: 00007f27a2c3506b R08: 0000000000000000 R09: 0000000000000000 [ 924.702534][T10358] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 924.702555][T10358] R13: 00007f27a2e26038 R14: 00007f27a2e25fa0 R15: 00007ffff6644258 [ 924.702599][T10358] [ 924.874071][T10358] jffs2: warning: (10358) jffs2_sum_init: Can't allocate memory for summary information! [ 925.096796][ T5815] usb 10-1: USB disconnect, device number 8 [ 925.400700][T10195] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.400843][T10195] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.401044][T10195] bridge_slave_0: entered allmulticast mode [ 925.409443][T10195] bridge_slave_0: entered promiscuous mode [ 925.834446][ T5942] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.957455][T10195] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.957698][T10195] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.957901][T10195] bridge_slave_1: entered allmulticast mode [ 925.984553][T10195] bridge_slave_1: entered promiscuous mode [ 926.014117][T10180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.156312][T10180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.228712][T10195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.244377][T10195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.317781][ T5942] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.348036][T10180] team0: Port device team_slave_0 added [ 926.518610][T10382] FAULT_INJECTION: forcing a failure. [ 926.518610][T10382] name failslab, interval 1, probability 0, space 0, times 0 [ 926.518660][T10382] CPU: 1 UID: 0 PID: 10382 Comm: syz.7.534 Not tainted syzkaller #0 PREEMPT(full) [ 926.518705][T10382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 926.518728][T10382] Call Trace: [ 926.518739][T10382] [ 926.518754][T10382] dump_stack_lvl+0x100/0x190 [ 926.518814][T10382] should_fail_ex.cold+0x5/0xa [ 926.518855][T10382] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.518913][T10382] should_failslab+0xc2/0x120 [ 926.518960][T10382] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 926.519023][T10382] ? __alloc_skb+0x140/0x710 [ 926.519086][T10382] __alloc_skb+0x140/0x710 [ 926.519141][T10382] ? __pfx___alloc_skb+0x10/0x10 [ 926.519195][T10382] ? alloc_pages_noprof+0xf9/0x160 [ 926.519255][T10382] tcp_stream_alloc_skb+0x34/0x660 [ 926.519305][T10382] tcp_sendmsg_locked+0x13b7/0x4420 [ 926.519386][T10382] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 926.519438][T10382] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.519485][T10382] ? lock_acquire+0x1d1/0x380 [ 926.519528][T10382] ? do_raw_spin_lock+0x128/0x260 [ 926.519576][T10382] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 926.519634][T10382] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.519683][T10382] ? __local_bh_enable_ip+0xa5/0x120 [ 926.519731][T10382] tcp_sendmsg+0x2e/0x50 [ 926.519782][T10382] ? __pfx_tcp_sendmsg+0x10/0x10 [ 926.519834][T10382] inet_sendmsg+0xb9/0x140 [ 926.519879][T10382] __sys_sendto+0x453/0x4e0 [ 926.519929][T10382] ? __pfx_inet_sendmsg+0x10/0x10 [ 926.519985][T10382] ? __pfx___sys_sendto+0x10/0x10 [ 926.520069][T10382] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.520116][T10382] ? xfd_validate_state+0x129/0x190 [ 926.520165][T10382] __x64_sys_sendto+0xe0/0x1c0 [ 926.520219][T10382] ? do_syscall_64+0xae/0x790 [ 926.520259][T10382] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.520326][T10382] ? lockdep_hardirqs_on+0x7d/0x110 [ 926.520367][T10382] do_syscall_64+0x123/0x790 [ 926.520411][T10382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.520452][T10382] RIP: 0033:0x7f27a2b9e159 [ 926.520481][T10382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.520519][T10382] RSP: 002b:00007f27a3aa4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 926.520556][T10382] RAX: ffffffffffffffda RBX: 00007f27a2e25fa0 RCX: 00007f27a2b9e159 [ 926.520583][T10382] RDX: fffffffffffffe88 RSI: 00002000000002c0 RDI: 0000000000000003 [ 926.520609][T10382] RBP: 00007f27a2c3506b R08: 0000000000000000 R09: 0000000000000000 [ 926.520633][T10382] R10: 000000000000004a R11: 0000000000000246 R12: 0000000000000000 [ 926.520658][T10382] R13: 00007f27a2e26038 R14: 00007f27a2e25fa0 R15: 00007ffff6644258 [ 926.520709][T10382] [ 926.547733][ T5274] 8021q: adding VLAN 0 to HW filter on device eth18 [ 926.586810][T10180] team0: Port device team_slave_1 added [ 926.778366][T10195] team0: Port device team_slave_0 added [ 926.877686][ T5942] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.926380][T10195] team0: Port device team_slave_1 added [ 926.927193][T10180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.927212][T10180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.927247][T10180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.950730][ T8662] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 927.009941][T10180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.009969][T10180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.010019][T10180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.060012][T10195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.060037][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.060079][T10195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.112978][ T8662] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 927.114875][ T8662] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.114941][ T8662] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.120392][ T5762] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 927.133317][ T8662] usb 10-1: config 0 descriptor?? [ 927.183416][ T5942] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.208666][T10195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.208694][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.208744][T10195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.327898][T10180] hsr_slave_0: entered promiscuous mode [ 927.329088][T10180] hsr_slave_1: entered promiscuous mode [ 927.329860][T10180] debugfs: 'hsr0' already exists in 'hsr' [ 927.329887][T10180] Cannot create hsr debugfs directory [ 927.357915][ T5762] usb 8-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 927.360108][ T5762] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 927.360152][ T5762] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 927.397254][ T5762] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 927.397298][ T5762] usb 8-1: Product: syz [ 927.397325][ T5762] usb 8-1: Manufacturer: syz [ 927.452967][ T5762] iuu_phoenix 8-1:1.0: iuu_phoenix converter detected [ 927.460172][ T5762] usb 8-1: iuu_phoenix converter now attached to ttyUSB0 [ 927.698361][ T8662] savu 0003:1E7D:2D5A.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 927.818637][T10384] ------------[ cut here ]------------ [ 927.818657][T10384] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 927.818671][T10384] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x944/0x1bd0, CPU#0: syz.9.532/10384 [ 927.841299][T10384] Modules linked in: [ 927.845218][T10384] CPU: 0 UID: 0 PID: 10384 Comm: syz.9.532 Not tainted syzkaller #0 PREEMPT(full) [ 927.854817][T10384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 927.864290][T10195] hsr_slave_0: entered promiscuous mode [ 927.865074][T10195] hsr_slave_1: entered promiscuous mode [ 927.865553][T10195] debugfs: 'hsr0' already exists in 'hsr' [ 927.865578][T10195] Cannot create hsr debugfs directory [ 927.889056][T10384] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 927.895136][T10384] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 28 31 73 05 45 85 c0 75 13 48 8d 3d 9c 3c 76 05 48 c7 c6 00 f7 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 927.915449][T10384] RSP: 0018:ffffc90003677790 EFLAGS: 00010246 [ 927.922310][T10384] RAX: 0000000000000003 RBX: ffff88807a113880 RCX: 1ffffffff228b4dc [ 927.930422][T10384] RDX: 0000000000000000 RSI: ffffffff8beff700 RDI: ffffffff9148b260 [ 927.938423][T10384] RBP: ffffc90003677900 R08: 0000000000000000 R09: 0000000000000000 [ 927.946530][T10384] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 927.954654][T10384] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88807a113808 [ 927.962712][T10384] FS: 00007f00d327c6c0(0000) GS:ffff888123b53000(0000) knlGS:0000000000000000 [ 927.971772][T10384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 927.978398][T10384] CR2: 0000001b33404ff8 CR3: 000000007270d000 CR4: 0000000000350ef0 [ 927.986941][T10384] Call Trace: [ 927.990754][T10384] [ 927.994139][T10384] ? roccat_open+0x105/0x660 [ 927.998909][T10384] ? __pfx___mutex_lock+0x10/0x10 [ 928.004053][T10384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.009742][T10384] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 928.015431][T10384] ? lock_acquire+0x1d1/0x380 [ 928.020143][T10384] ? roccat_open+0x8b/0x660 [ 928.024763][T10384] ? roccat_open+0x105/0x660 [ 928.029412][T10384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.035151][T10384] roccat_open+0x105/0x660 [ 928.039630][T10384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.045386][T10384] ? __pfx_roccat_open+0x10/0x10 [ 928.047707][T10281] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.047787][T10281] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.047930][T10281] bridge_slave_0: entered allmulticast mode [ 928.050917][T10281] bridge_slave_0: entered promiscuous mode [ 928.055323][T10281] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.055411][T10281] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.055682][T10281] bridge_slave_1: entered allmulticast mode [ 928.058691][T10281] bridge_slave_1: entered promiscuous mode [ 928.103493][T10384] chrdev_open+0x234/0x6a0 [ 928.107960][T10384] ? __pfx_chrdev_open+0x10/0x10 [ 928.113032][T10384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.118722][T10384] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 928.125190][T10384] do_dentry_open+0x6ab/0x14d0 [ 928.130016][T10384] ? __pfx_chrdev_open+0x10/0x10 [ 928.135061][T10384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.140846][T10384] vfs_open+0x82/0x3f0 [ 928.144958][T10384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.150685][T10384] path_openat+0x19fa/0x2440 [ 928.155318][T10384] ? __pfx_path_openat+0x10/0x10 [ 928.160366][T10384] do_file_open+0x20e/0x430 [ 928.164918][T10384] ? __pfx_do_file_open+0x10/0x10 [ 928.170090][T10384] ? _raw_spin_unlock+0x28/0x50 [ 928.175088][T10384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.181006][T10384] ? alloc_fd+0x471/0x7a0 [ 928.185387][T10384] do_sys_openat2+0x10f/0x1e0 [ 928.190114][T10384] ? __pfx_do_sys_openat2+0x10/0x10 [ 928.195919][T10384] ? __pfx_get_timespec64+0x10/0x10 [ 928.201603][T10384] ? raw_ioctl+0x26f/0x2b80 [ 928.206168][T10384] __x64_sys_openat+0x12d/0x210 [ 928.211111][T10384] ? __pfx___x64_sys_openat+0x10/0x10 [ 928.216550][T10384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.222409][T10384] do_syscall_64+0x123/0x790 [ 928.227060][T10384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.233086][T10384] RIP: 0033:0x7f00d239e159 [ 928.237544][T10384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.257264][T10384] RSP: 002b:00007f00d327c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 928.265767][T10384] RAX: ffffffffffffffda RBX: 00007f00d2625fa0 RCX: 00007f00d239e159 [ 928.271363][T10281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 928.283144][T10384] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 928.291215][T10384] RBP: 00007f00d243506b R08: 0000000000000000 R09: 0000000000000000 [ 928.299798][T10384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 928.308320][T10384] R13: 00007f00d2626038 R14: 00007f00d2625fa0 R15: 00007ffee6dc28e8 [ 928.316383][T10384] [ 928.319428][T10384] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 928.326729][T10384] CPU: 0 UID: 0 PID: 10384 Comm: syz.9.532 Not tainted syzkaller #0 PREEMPT(full) [ 928.336062][T10384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 928.346189][T10384] Call Trace: [ 928.349488][T10384] [ 928.352435][T10384] dump_stack_lvl+0x100/0x190 [ 928.357167][T10384] vpanic+0x553/0x970 [ 928.361179][T10384] ? __pfx_vpanic+0x10/0x10 [ 928.365706][T10384] ? lock_release+0x24d/0x310 [ 928.370422][T10384] panic+0xd1/0xe0 [ 928.374175][T10384] ? __pfx_panic+0x10/0x10 [ 928.378641][T10384] check_panic_on_warn.cold+0x19/0x34 [ 928.384056][T10384] ? __mutex_lock+0x944/0x1bd0 [ 928.388861][T10384] __warn.cold+0x191/0x318 [ 928.393322][T10384] __report_bug+0x30f/0x440 [ 928.397865][T10384] ? __mutex_lock+0x944/0x1bd0 [ 928.402668][T10384] ? __pfx___report_bug+0x10/0x10 [ 928.408006][T10384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.413796][T10384] ? __lock_acquire+0x5c0/0x1f40 [ 928.418781][T10384] report_bug_entry+0xe2/0x290 [ 928.423581][T10384] ? __mutex_lock+0x94b/0x1bd0 [ 928.428371][T10384] handle_bug+0x1cd/0x2a0 [ 928.432743][T10384] exc_invalid_op+0x17/0x50 [ 928.437369][T10384] asm_exc_invalid_op+0x1a/0x20 [ 928.442253][T10384] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 928.447658][T10384] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 28 31 73 05 45 85 c0 75 13 48 8d 3d 9c 3c 76 05 48 c7 c6 00 f7 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 928.467296][T10384] RSP: 0018:ffffc90003677790 EFLAGS: 00010246 [ 928.473397][T10384] RAX: 0000000000000003 RBX: ffff88807a113880 RCX: 1ffffffff228b4dc [ 928.481394][T10384] RDX: 0000000000000000 RSI: ffffffff8beff700 RDI: ffffffff9148b260 [ 928.489399][T10384] RBP: ffffc90003677900 R08: 0000000000000000 R09: 0000000000000000 [ 928.497494][T10384] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 928.505520][T10384] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88807a113808 [ 928.513531][T10384] ? roccat_open+0x105/0x660 [ 928.518172][T10384] ? __pfx___mutex_lock+0x10/0x10 [ 928.523233][T10384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.528898][T10384] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 928.534479][T10384] ? lock_acquire+0x1d1/0x380 [ 928.539168][T10384] ? roccat_open+0x8b/0x660 [ 928.543707][T10384] ? roccat_open+0x105/0x660 [ 928.548337][T10384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.553993][T10384] roccat_open+0x105/0x660 [ 928.558458][T10384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.564149][T10384] ? __pfx_roccat_open+0x10/0x10 [ 928.569121][T10384] chrdev_open+0x234/0x6a0 [ 928.573553][T10384] ? __pfx_chrdev_open+0x10/0x10 [ 928.578503][T10384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.584161][T10384] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 928.590537][T10384] do_dentry_open+0x6ab/0x14d0 [ 928.595344][T10384] ? __pfx_chrdev_open+0x10/0x10 [ 928.600313][T10384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.606012][T10384] vfs_open+0x82/0x3f0 [ 928.610103][T10384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.615765][T10384] path_openat+0x19fa/0x2440 [ 928.620376][T10384] ? __pfx_path_openat+0x10/0x10 [ 928.625350][T10384] do_file_open+0x20e/0x430 [ 928.629871][T10384] ? __pfx_do_file_open+0x10/0x10 [ 928.634925][T10384] ? _raw_spin_unlock+0x28/0x50 [ 928.639816][T10384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.645488][T10384] ? alloc_fd+0x471/0x7a0 [ 928.649846][T10384] do_sys_openat2+0x10f/0x1e0 [ 928.654554][T10384] ? __pfx_do_sys_openat2+0x10/0x10 [ 928.659783][T10384] ? __pfx_get_timespec64+0x10/0x10 [ 928.665091][T10384] ? raw_ioctl+0x26f/0x2b80 [ 928.669626][T10384] __x64_sys_openat+0x12d/0x210 [ 928.674504][T10384] ? __pfx___x64_sys_openat+0x10/0x10 [ 928.679919][T10384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.685623][T10384] do_syscall_64+0x123/0x790 [ 928.690232][T10384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.696146][T10384] RIP: 0033:0x7f00d239e159 [ 928.700578][T10384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.720217][T10384] RSP: 002b:00007f00d327c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 928.728679][T10384] RAX: ffffffffffffffda RBX: 00007f00d2625fa0 RCX: 00007f00d239e159 [ 928.736669][T10384] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 928.744686][T10384] RBP: 00007f00d243506b R08: 0000000000000000 R09: 0000000000000000 [ 928.752673][T10384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 928.760657][T10384] R13: 00007f00d2626038 R14: 00007f00d2625fa0 R15: 00007ffee6dc28e8 [ 928.768698][T10384] [ 928.771959][T10384] Kernel Offset: disabled [ 928.776282][T10384] Rebooting in 86400 seconds..