last executing test programs: 10m45.177956681s ago: executing program 32 (id=246): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000280), 0x4002, 0x0) io_uring_enter(r2, 0x3699, 0x3fd8, 0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff000000070581020002001201000200000040341278560001", 0x44) openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/ep1in-bulk\x00', 0x2, 0x24) 8m56.704877325s ago: executing program 33 (id=504): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000280), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='raid5', 0x5) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)='1:0', 0x3) write(0xffffffffffffffff, &(0x7f00000004c0)='1:1', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r2, &(0x7f00000005c0)='0', 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000640)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/dev-ram3/slot\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xfffffffffffffffd, 0x80, 0x1, 0x0, 0x1, 0x4, 0x3, 0xfffffffffffffffa, 0x8000009654, 0xffff0, 0x808, 0x0, 0x10, 0x20007, 0x7ffffffffffffb, 0xcc0, 0x1, 0x5, 0x94d6, 0x0, 0x1ff, 0x40000809, 0x0, 0xfffffffffffffffa, 0x5, 0x2000000000004}) syz_usb_control_io(r0, 0x0, 0x0) 8m49.250801431s ago: executing program 34 (id=520): mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000600)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="c3fd", 0x2) 7m46.605398937s ago: executing program 35 (id=621): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, 0x0, 0x0, 0x4060019}, 0x20000041) 6m35.54007843s ago: executing program 36 (id=735): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000380)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0x9, {0x0, 0x5, 0x80, 0x0, 0x3, 0xf8, 0x0, 0x8003, 0x86, "3447b6cbe47f950df182382a584e2442228860ea625feee799f9d538ff571f551c7f871c9ea6d1afffee637a01000000001ac58d449a1dceca6012025ea76edceff5cf8047040000009a0e900c1a145a15473eec351c3f00000000000000000060cdeb87135c1343bc21ddb8a45145f1ee7e35062d055d30d1e78eee2868ebf3e62370a9e273"}}, 0x97) 6m30.234470055s ago: executing program 37 (id=744): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) shutdown(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = accept(r0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000002c0)="e4", 0x1, 0x54015, 0x0, 0x0) 5m48.458112258s ago: executing program 38 (id=802): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000000"], 0x18, 0x40044}}], 0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m43.637902062s ago: executing program 39 (id=813): gettid() pipe2(&(0x7f0000002140)={0x0, 0x0}, 0x0) ioprio_set$pid(0x2, 0x0, 0x4004) read$FUSE(r0, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r2) sendto$inet(r2, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001, 0x3}, 0x8) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) write(0xffffffffffffffff, 0x0, 0x0) 5m36.771464564s ago: executing program 40 (id=823): pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) lsetxattr$trusted_overlay_redirect(0x0, 0x0, &(0x7f0000000280)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x4f, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x0) write(r2, &(0x7f0000000000)="320d9f925ab0787ed97f2ac837bd4303c0e8f1e341b60b04a50e15d89f41a26edf0cb4a8663144a6303704b23b4c5c256d1407498edb1322eab5bebf36abbd7310095969b2d02bee1a96f00363317743602ad854c4298e6aec01edb1ce498c4c27d396eb49a7251cbbab9e", 0x6b) 5m7.542061272s ago: executing program 8 (id=854): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) timerfd_create(0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)={[{@gid}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) poll(&(0x7f0000000500)=[{r0, 0x20}], 0x1, 0x7) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) r1 = inotify_init1(0x800) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(0xffffffffffffffff) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r4 = socket$kcm(0x2d, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="917d05b45e27dbcf8cca61c719959ffbab7dfbecfd8efa26b499f4afaec094be", 0x20, 0x20004000, &(0x7f0000000100)={0x2, 0x4e20, @private=0xa010102}, 0x10) r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000240)={0x1, {0x6, 0x2d, 0x8}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6}) close(0x3) 5m7.073777153s ago: executing program 8 (id=856): r0 = syz_open_dev$cec(0x0, 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x4, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x2, 0xfc, 0x0, 0x10}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000140)={0x100000000, 0x800, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x74, 0x3, 0xa7, 0x7, 0x8, 0x7, 0x29}) 5m6.940317336s ago: executing program 8 (id=857): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/devices/usb1/1-0:1.0/usb1-port1/disable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 5m6.720506842s ago: executing program 8 (id=858): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2000, 0x1c0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r0, 0x0, 0x0) 5m6.571584815s ago: executing program 1 (id=859): syz_emit_ethernet(0x36, &(0x7f0000000280)={@random="a24858ca13d1", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x7, 0x28, 0x68, 0x0, 0x7, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@ra={0x94, 0x4}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0x2d, '1\x00'}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x6}, {0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x0, {[0x7, 0x8, 0x6, 0x6, 0x1ff, 0xdcccf9e0, 0xe45, 0x6]}}, 0x5c) r2 = fanotify_init(0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000001380)={"f2efe21e", 0x9, 0x6, 0x4d, 0xad, 0x7, "2179d46fd08e3c0ced34c7b4c7e6d7", "7ca24a13", '\x00', '@\x00', ["062a03b42600010000000900", "bed0f3d6ce7a5f7389827f04", "0022010400000000fbea00"]}) r4 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x4, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x2, 0xfc, 0x0, 0x10}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5m6.445901698s ago: executing program 8 (id=860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 5m5.416285303s ago: executing program 41 (id=861): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_create_resource$binfmt(0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x40104d01, &(0x7f0000000a00)) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 5m5.390415293s ago: executing program 8 (id=863): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)='\x00'/11) ioctl(r1, 0x40140921, &(0x7f0000000420)="0100") ioctl(r1, 0x90000915, 0x0) ioctl(r1, 0x40140921, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) 5m5.165625188s ago: executing program 42 (id=863): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)='\x00'/11) ioctl(r1, 0x40140921, &(0x7f0000000420)="0100") ioctl(r1, 0x90000915, 0x0) ioctl(r1, 0x40140921, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) 5m5.06144892s ago: executing program 1 (id=865): r0 = syz_open_dev$cec(0x0, 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x4, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x2, 0xfc, 0x0, 0x10}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000140)={0x100000000, 0x800, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x74, 0x3, 0xa7, 0x7, 0x8, 0x7, 0x29}) 5m4.744430068s ago: executing program 1 (id=866): r0 = socket(0x10, 0x3, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) writev(r1, &(0x7f0000005900)=[{0x0}, {&(0x7f0000005880)='\\', 0x1}], 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000019080)=@req={0x7, 0x50d, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r5, 0x0, 0x4004000) syz_io_uring_setup(0x264a, &(0x7f00000190c0)={0x0, 0x8847, 0x40, 0x2, 0x8c}, 0x0, &(0x7f0000000180), &(0x7f00000191c0)) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000100005ff00000008000000000000004a", @ANYRES32=0x0, @ANYBLOB="134cb3f600000000140012800b0001006261746164760000040002800a000100bbbbbbbbbbbb99089a895f731da0d7187c23ab62488020e59c1a462fb8259da46c91131fcaee1271b11eaae93844f47fcbbdb75d9a1a521107752d01f5"], 0x40}}, 0x20000840) sendmsg$nl_route_sched(r0, 0x0, 0x2000400c) 5m3.488514188s ago: executing program 1 (id=868): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2000, 0x1c0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r0, 0x0, 0x0) 5m3.278311413s ago: executing program 1 (id=869): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='100', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000d00)={0x0, 'syz_tun\x00', {0x4}, 0xa}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 5m3.144527646s ago: executing program 2 (id=871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 5m1.920855515s ago: executing program 2 (id=872): r0 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000580)={0x0, 0x9f03, 0x80, 0x6, 0x10001d8}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, 0x0, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = dup(r4) syz_ublk_setup_queues(r7, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 5m1.418918777s ago: executing program 1 (id=873): syz_emit_ethernet(0x36, &(0x7f0000000280)={@random="a24858ca13d1", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x7, 0x28, 0x68, 0x0, 0x7, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@ra={0x94, 0x4}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0x2d, '1\x00'}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x6}, {0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x0, {[0x7, 0x8, 0x6, 0x6, 0x1ff, 0xdcccf9e0, 0xe45, 0x6]}}, 0x5c) r2 = fanotify_init(0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000001380)={"f2efe21e", 0x9, 0x6, 0x4d, 0xad, 0x7, "2179d46fd08e3c0ced34c7b4c7e6d7", "7ca24a13", '\x00', '@\x00', ["062a03b42600010000000900", "bed0f3d6ce7a5f7389827f04", "0022010400000000fbea00"]}) r4 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x4, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x2, 0xfc, 0x0, 0x10}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5m0.810183851s ago: executing program 43 (id=873): syz_emit_ethernet(0x36, &(0x7f0000000280)={@random="a24858ca13d1", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x7, 0x28, 0x68, 0x0, 0x7, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@ra={0x94, 0x4}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0x2d, '1\x00'}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x6}, {0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x0, {[0x7, 0x8, 0x6, 0x6, 0x1ff, 0xdcccf9e0, 0xe45, 0x6]}}, 0x5c) r2 = fanotify_init(0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000001380)={"f2efe21e", 0x9, 0x6, 0x4d, 0xad, 0x7, "2179d46fd08e3c0ced34c7b4c7e6d7", "7ca24a13", '\x00', '@\x00', ["062a03b42600010000000900", "bed0f3d6ce7a5f7389827f04", "0022010400000000fbea00"]}) r4 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x4, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x2, 0xfc, 0x0, 0x10}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4m59.785896785s ago: executing program 2 (id=875): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1bc) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x1aff80, 0x0) syz_usb_disconnect(r1) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000041000100fcff0700040000000100000004004880140001801000108004000b8008000100ac1414bb080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 4m57.904220819s ago: executing program 2 (id=876): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2000, 0x1c0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r0, 0x0, &(0x7f0000001300)) 4m57.682510734s ago: executing program 2 (id=877): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_create_resource$binfmt(0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x40104d01, &(0x7f0000000a00)) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 4m56.360329136s ago: executing program 2 (id=878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 4m55.802726079s ago: executing program 44 (id=878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 4m26.046891779s ago: executing program 6 (id=901): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000040)={0x18, r1}) 4m21.983884875s ago: executing program 6 (id=905): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b000000000000000000000000000000000008000100ed"], 0x20}}, 0x4000000) 4m20.984459989s ago: executing program 6 (id=906): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = io_uring_setup(0x383a, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x3, 0x3d6}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m19.020362845s ago: executing program 6 (id=909): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2000, 0x1c0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r0, 0x1, &(0x7f0000001300)=[0x0]) 4m18.936117187s ago: executing program 4 (id=910): r0 = socket(0x40000000015, 0x5, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000004c0)='hpfs\x00', 0xc4, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x40502, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000180)=0x8d) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r1, 0xaa3a6000) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x38, 0x6, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x1000) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010027bd7000fdffffff02"], 0x24}}, 0x4000000) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 4m18.697368482s ago: executing program 6 (id=911): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 4m17.94436823s ago: executing program 6 (id=912): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) timerfd_create(0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)={[{@gid}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) poll(&(0x7f0000000500)=[{r0, 0x20}], 0x1, 0x7) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) r1 = inotify_init1(0x800) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(0xffffffffffffffff) umount2(0x0, 0x9) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r4 = socket$kcm(0x2d, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="917d05b45e27dbcf8cca61c719959ffbab7dfbecfd8efa26b499f4afaec094be", 0x20, 0x20004000, &(0x7f0000000100)={0x2, 0x4e20, @private=0xa010102}, 0x10) r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000240)={0x1, {0x6, 0x2d, 0x8}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6}) close(0x3) 4m17.937045961s ago: executing program 4 (id=913): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_create_resource$binfmt(0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x40104d01, &(0x7f0000000a00)) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 4m16.643925441s ago: executing program 45 (id=912): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) timerfd_create(0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)={[{@gid}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) poll(&(0x7f0000000500)=[{r0, 0x20}], 0x1, 0x7) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) r1 = inotify_init1(0x800) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(0xffffffffffffffff) umount2(0x0, 0x9) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r4 = socket$kcm(0x2d, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="917d05b45e27dbcf8cca61c719959ffbab7dfbecfd8efa26b499f4afaec094be", 0x20, 0x20004000, &(0x7f0000000100)={0x2, 0x4e20, @private=0xa010102}, 0x10) r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000240)={0x1, {0x6, 0x2d, 0x8}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6}) close(0x3) 4m16.637296341s ago: executing program 4 (id=915): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x48, r1, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x363}]]}, 0x48}, 0x1, 0x0, 0x0, 0xf041}, 0x0) 4m14.763196655s ago: executing program 4 (id=919): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2000, 0x1c0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r0, 0x1, &(0x7f0000001300)=[0x0]) 4m14.13879324s ago: executing program 4 (id=920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 4m13.176160813s ago: executing program 4 (id=921): r0 = socket(0x40000000015, 0x5, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000004c0)='hpfs\x00', 0xc4, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x40502, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000180)=0x8d) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r1, 0xaa3a6000) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x38, 0x6, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x1000) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010027bd7000fdffffff02"], 0x24}}, 0x4000000) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 4m12.393272541s ago: executing program 46 (id=921): r0 = socket(0x40000000015, 0x5, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000004c0)='hpfs\x00', 0xc4, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x40502, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000180)=0x8d) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r1, 0xaa3a6000) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x38, 0x6, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x1000) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010027bd7000fdffffff02"], 0x24}}, 0x4000000) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 4m12.384123681s ago: executing program 5 (id=923): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x80049367, 0x0) 4m12.115253797s ago: executing program 5 (id=924): r0 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000580)={0x0, 0x9f03, 0x80, 0x6, 0x10001d8}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, 0x0, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = dup(r5) syz_ublk_setup_queues(r8, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 4m10.944453725s ago: executing program 5 (id=926): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x15, 0x3) syz_ublk_setup_queues(r8, r6, &(0x7f0000000880)={0x0, 0xcdc, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xfaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4m9.766561863s ago: executing program 5 (id=927): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2000, 0x1c0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r0, 0x1, &(0x7f0000001300)=[0x0]) 4m9.45551658s ago: executing program 5 (id=928): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80100, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x0, 0x90, [0x0, 0x200000000000, 0x0, 0x0, 0x200000000030, 0x200000000060], 0xf9ffff00, 0x0, 0x0}, 0x108) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000140)={0x1, {0x6, 0x8, 0x8, 0x5d8, 0x9}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0xa5dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x1f90, @loopback}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'veth0_macvtap\x00', @random="a5a6505c7135"}) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, &(0x7f0000000280)='0', 0x1, 0x40000, &(0x7f0000000340)={0x11, 0x6, r6, 0x1, 0x2, 0x6, @local}, 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) r10 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x101040) ioctl$SG_IO(r10, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="68000000000905040000000000000000020000000900010073797a300000000014000280060001000002000005000a000600000008000500000000002c0004800800010000000001200002800c000100786f6c69637930000800020000000002080000000000001e", 0x68}], 0x1}, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f00000000c0)) 4m5.187945641s ago: executing program 5 (id=933): getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 4m4.532111706s ago: executing program 47 (id=933): getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 11.68724986s ago: executing program 9 (id=1368): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x40580, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000400)={0xbf7ffffc, "7561447b9cc9427cb6b339ede6dbfff20000130001f007ff00e4d57a7c00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x0, "b546baa5cc760d3033de25167d000000000000ceea95878ec6e65500", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"e53a915582f97f2635b44039cbfab4fca0633619087f2a8af8765d9ac20f4331", r2}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r4, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, 0xffffffffffffffff, 0xf, 0x2014}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES16=r6], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 10.747718702s ago: executing program 9 (id=1371): openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214d, 0xc000, 0x2, 0x5e}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.744236632s ago: executing program 0 (id=1379): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x40580, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000400)={0xbf7ffffc, "7561447b9cc9427cb6b339ede6dbfff20000130001f007ff00e4d57a7c00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x0, "b546baa5cc760d3033de25167d000000000000ceea95878ec6e65500", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"e53a915582f97f2635b44039cbfab4fca0633619087f2a8af8765d9ac20f4331", r2}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r4, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)}], 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r5, 0xf, 0x2014}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES16=r7], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 9.97781786s ago: executing program 0 (id=1373): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x2101, 0x0) setitimer(0x1, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r2, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x8000001, 0xff92, 0x0, 0x1, 0x10000003}]}) 9.632323789s ago: executing program 3 (id=1374): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) read$snddsp(r1, &(0x7f0000000240)=""/203, 0xcb) 9.322539436s ago: executing program 3 (id=1377): mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0xb, 0x1}, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000010a80)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x10}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) syz_usb_connect(0x0, 0x32, 0x0, 0x0) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) io_setup(0x6, &(0x7f0000000540)) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/instances/inst1/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$pptp(0x18, 0x1, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 9.261539557s ago: executing program 0 (id=1378): r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d3, 0x190, 0x1, 0x2, 0xd59f82, 0x4, 0x6, 0x9, 0x8, 0x4, 0x71e, 0x13, 0x1be, 0x7f, 0x2e, 0x37, {0x0, 0x1}, 0x3, 0xed}}) 9.052484823s ago: executing program 0 (id=1381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88) 8.456014187s ago: executing program 0 (id=1383): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) socket(0x2, 0x400000000002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x1d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf982000000000005608000002000000850000000500"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x490420, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) 4.004942063s ago: executing program 0 (id=1384): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="20c81e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.962151734s ago: executing program 7 (id=1385): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="8cb0c3f98f703a092f367d92170eebb7eaa30dfb6578de29a35fc269f9d2103bdf506c3dd28e4db8775f4a68cb0e75c19ccd2e68a2c13afb223f728d776009a570c1d18e600584d03adf32335d226d2c6f11386ba0a0d8f85e0bec6510d0559ddeec94024607714416c454d4a1d83161ed3bebe8e38ff720c5f1faabef7842df80fc7986b41cb6cf0e33b8748ef38922d97ac9b77b0df2fcbc60e41674ab9f37e3a87b7df2e8", @ANYRES64=0x0], 0x20) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) write(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x0) 3.802623028s ago: executing program 9 (id=1386): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) read$snddsp(r1, &(0x7f0000000240)=""/203, 0xcb) 3.73230622s ago: executing program 3 (id=1387): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x2101, 0x0) setitimer(0x1, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r2, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x8000001, 0xff92, 0x0, 0x1, 0x10000003}]}) 2.751617454s ago: executing program 9 (id=1388): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f0000000780)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f00000009c0)={0x2, 0x1, 0xf1, 0x8, 0x5, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030000000040000000000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000010301010000000000000000030000000c00"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001800010600000000000000002d"], 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r4, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffff0}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xb8eb02b}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8014) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000340)="368899c7a0db4bd252ecc8dddad4d1e63904befcd239835abd5bbe2138fd242b5bb326c888128b8bc0efccca2951a894eee6459a27d9455eb63a58afead0c3b1dae5df3f89a75ba9f6fac09fa0e694dcaf06503a63f86952c562468e8694981bd6", 0x61}, {&(0x7f0000000440)="25a3a5a87500eb73f6d1a10557bd1c017f48e9c61fa18a32648a58d8fac6d6142a7c73fc22615f1ef68980c4b9f82d002fd4f0eec58a4cb0720df17297ca3c668fe5e595ce71e74501f6bcf7e97d01a028972d37db3a04833c8a374352257974f4375c714b16b7b8fda04573801c89c660f9b0098add4b62bba47c307f510047a073e36eb039bcaf6d9b3fff44eb24cb1bb30f401822ec9cf9ff324957cf20", 0x9f}, {&(0x7f0000000540)="2fbead346f8777bb1fcb9a6ccde9cf9bae11b3ca9a3ce43a760641f9b1680af477c4cb152358d8e5d3830b2695103e0c06767c62ba1d37f759c3599b3a823fce177ab6ecf94d18aa3da44fdc0422f6352c5accda12a3c053db3e28367d3d8695d4fc63a45f97929d68b7c02e85f0f7e9cae93d3b", 0x74}, {&(0x7f0000000640)="9532e0a2138b4268ce17d4d8e644311439f57a6a8a75d783b7c828772bc21b6dbd887ca3c489155289e376d7b11f1834ec3230305d2142aacea19c2e8ca351f13513a95e8342ea07785a2c2a4879553116aca07fcb1cb592ac2b468d942cd7d1025954876257de028178f97d7dd834da84169ac64fd3b459c25f98b90664dd4f504d9f4083f810f76f5f295f21268d02a8986d594d1c002fb810818e7ee3fb917888c7abee71facb9dcf1d4d5419594cbd78f122fd60520713e06546e237763a60e80b", 0xc3}], 0x4) 2.544913598s ago: executing program 7 (id=1389): r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d3, 0x190, 0x1, 0x2, 0xd59f82, 0x4, 0x6, 0x9, 0x8, 0x4, 0x71e, 0x13, 0x1be, 0x7f, 0x2e, 0x37, {0x0, 0x1}, 0x3, 0xed}}) 2.292194305s ago: executing program 7 (id=1390): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f00000001c0)=[{0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000040)='LLLLLLLLLLLLLLLLL', 0x11, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x9, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, 0x0, 0x0, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x0, 0x0, 0x0, 0x400000000001c, 0x3, 0x6}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, 0x0, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r3, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r2}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r4, 0x0, 0x0, 0x10, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r4, 0x0, r5}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1}) close(r4) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c40)={0x18, r1}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1}) close(r0) 2.125805799s ago: executing program 3 (id=1391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88) 1.825636896s ago: executing program 3 (id=1392): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, 0x0) ioctl(r1, 0x40140921, 0x0) ioctl(r1, 0x40140921, 0x0) ioctl(r1, 0x400c0930, 0x0) ioctl(r1, 0x40140921, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) pwrite64(r1, &(0x7f0000001000), 0x1000, 0x0) 1.812285276s ago: executing program 7 (id=1393): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x40580, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000400)={0xbf7ffffc, "7561447b9cc9427cb6b339ede6dbfff20000130001f007ff00e4d57a7c00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x0, "b546baa5cc760d3033de25167d000000000000ceea95878ec6e65500", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"e53a915582f97f2635b44039cbfab4fca0633619087f2a8af8765d9ac20f4331", r2}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r4, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)}], 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r5, 0xf, 0x2014}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES16=r7], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 1.497086614s ago: executing program 9 (id=1394): r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214d, 0xc000, 0x2, 0x5e}) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 1.2025258s ago: executing program 7 (id=1395): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9, 0x1}, 0x20) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x8804) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @rand_addr=' \x01\x00', 0x5}, 0x1c, 0x0}, 0x8000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_vlan\x00', {0x4}, 0x26}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000340)={{0x0, 0x1, 0x10000, 0x3, 0xffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x5423, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000680)='GPL\x00'}, 0x94) 968.343506ms ago: executing program 9 (id=1396): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x7fc3, "b9abecfe9100a72ead3b3be3b6795e80561559bf34037168c9eebad8f163d551"}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) read$snddsp(r1, &(0x7f0000000240)=""/203, 0xcb) 920.588537ms ago: executing program 3 (id=1397): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="8cb0c3f98f703a092f367d92170eebb7eaa30dfb6578de29a35fc269f9d2103bdf506c3dd28e4db8775f4a68cb0e75c19ccd2e68a2c13afb223f728d776009a570c1d18e600584d03adf32335d226d2c6f11386ba0a0d8f85e0bec6510d0559ddeec94024607714416c454d4a1d83161ed3bebe8e38ff720c5f1faabef7842df80fc7986b41cb6cf0e33b8748ef38922d97ac9b77b0df2fcbc60e41674ab9f37e3a87b7df2e8", @ANYRES64=0x0], 0x20) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) write(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb) socket$inet(0x2, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 7 (id=1398): r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d3, 0x190, 0x1, 0x2, 0xd59f82, 0x4, 0x6, 0x9, 0x8, 0x4, 0x71e, 0x13, 0x1be, 0x7f, 0x2e, 0x37, {0x0, 0x1}, 0x3, 0xed}}) kernel console output (not intermixed with test programs): amed from eth3 [ 449.508563][ T9034] syz.7.765: attempt to access beyond end of device [ 449.508563][ T9034] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 449.521634][ T9034] hpfs: hpfs_map_sector(): read error [ 449.558457][ T9034] netlink: 8 bytes leftover after parsing attributes in process `syz.7.765'. [ 451.982863][ T11] hsr_slave_0: left promiscuous mode [ 452.022920][ T11] hsr_slave_1: left promiscuous mode [ 452.070387][ T11] bridge_slave_1: left allmulticast mode [ 452.076258][ T11] bridge_slave_1: left promiscuous mode [ 452.100583][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.129478][ T11] bridge_slave_0: left allmulticast mode [ 452.155796][ T11] bridge_slave_0: left promiscuous mode [ 452.180292][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.332486][ T11] veth1_macvtap: left promiscuous mode [ 452.338067][ T11] veth0_macvtap: left promiscuous mode [ 452.368478][ T11] veth1_vlan: left promiscuous mode [ 452.389748][ T11] veth0_vlan: left promiscuous mode [ 453.423969][ T9072] syz.0.773: attempt to access beyond end of device [ 453.423969][ T9072] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 453.438371][ T9072] hpfs: hpfs_map_sector(): read error [ 453.516659][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'. [ 457.934547][ T11] team0 (unregistering): Port device team_slave_1 removed [ 458.006045][ T11] team0 (unregistering): Port device team_slave_0 removed [ 458.244638][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.407881][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.114860][ T11] bond0 (unregistering): Released all slaves [ 459.573127][ T8948] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 459.658067][ T8894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.693817][ T8948] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 459.821696][ T8948] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 459.855916][ T8948] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 459.944359][ T8894] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.008642][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.016018][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.115202][ T7900] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.122557][ T7900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.634718][ T8948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.709673][ T8948] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.793251][ T7898] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.800487][ T7898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.883588][ T7900] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.890855][ T7900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.930663][ T9115] syz.0.781: attempt to access beyond end of device [ 460.930663][ T9115] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 461.103893][ T9115] hpfs: hpfs_map_sector(): read error [ 461.114257][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.781'. [ 461.366037][ T8894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.943857][ T8948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.261165][ T8894] veth0_vlan: entered promiscuous mode [ 464.306815][ T8894] veth1_vlan: entered promiscuous mode [ 464.431939][ T8894] veth0_macvtap: entered promiscuous mode [ 466.022143][ T8894] veth1_macvtap: entered promiscuous mode [ 466.109268][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.149882][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.181427][ T8894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.217351][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.267244][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.335547][ T8894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.400993][ T8894] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.422662][ T8894] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.440001][ T8894] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.449190][ T8894] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.818001][ T8948] veth0_vlan: entered promiscuous mode [ 466.927617][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.938818][ T8948] veth1_vlan: entered promiscuous mode [ 466.961146][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.141285][ T7898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.149210][ T7898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.241518][ T8948] veth0_macvtap: entered promiscuous mode [ 467.324906][ T8948] veth1_macvtap: entered promiscuous mode [ 467.406839][ T8948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.459907][ T8948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.509902][ T8948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.547017][ T8948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.584169][ T8948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.746471][ T8948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.790022][ T8948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.829951][ T8948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.853620][ T8948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.877029][ T8948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.904413][ T8948] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.940035][ T8948] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.992734][ T8948] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.009975][ T8948] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.412443][ T9188] syz.7.789: attempt to access beyond end of device [ 468.412443][ T9188] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 468.449937][ T7900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.457947][ T7900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.470350][ T9188] hpfs: hpfs_map_sector(): read error [ 468.519523][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.7.789'. [ 468.695597][ T9] kernel write not supported for file /sequencer2 (pid: 9 comm: kworker/0:1) [ 468.775537][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.876245][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.761043][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.7.791'. [ 473.536202][ T9238] jffs2: notice: (9238) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 474.884675][ T1032] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.174363][ T1032] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.392242][ T1032] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.423292][ T1032] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.914233][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 476.927362][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 476.935997][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 476.961896][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 476.993744][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 477.017629][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 478.686126][ T9284] comedi comedi3: Buffer allocation failed [ 478.844782][ T9281] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 479.099957][ T5785] Bluetooth: hci2: command tx timeout [ 480.604567][ T9277] chnl_net:caif_netlink_parms(): no params data found [ 481.136006][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 481.147890][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 481.160211][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 481.178000][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 481.185280][ T5779] Bluetooth: hci2: command tx timeout [ 481.201134][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 481.211145][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 482.462744][ T9277] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.470264][ T9277] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.477617][ T9277] bridge_slave_0: entered allmulticast mode [ 482.485887][ T9277] bridge_slave_0: entered promiscuous mode [ 482.495367][ T9277] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.502948][ T9277] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.510276][ T9277] bridge_slave_1: entered allmulticast mode [ 482.517856][ T9277] bridge_slave_1: entered promiscuous mode [ 484.042315][ T5785] Bluetooth: hci2: command tx timeout [ 484.042414][ T5774] Bluetooth: hci3: command tx timeout [ 484.162290][ T9277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.203246][ T9277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.116139][ T5774] Bluetooth: hci2: command tx timeout [ 486.121859][ T5774] Bluetooth: hci3: command tx timeout [ 486.148731][ T9277] team0: Port device team_slave_0 added [ 486.163262][ T9277] team0: Port device team_slave_1 added [ 486.303767][ T1032] hsr_slave_0: left promiscuous mode [ 486.310681][ T1032] hsr_slave_1: left promiscuous mode [ 486.330117][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.337573][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.405265][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.422237][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.444948][ T1032] bridge_slave_1: left allmulticast mode [ 486.452825][ T1032] bridge_slave_1: left promiscuous mode [ 486.458671][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.480777][ T1032] bridge_slave_0: left allmulticast mode [ 486.486508][ T1032] bridge_slave_0: left promiscuous mode [ 486.520233][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.626513][ T1032] veth1_macvtap: left promiscuous mode [ 486.640212][ T1032] veth0_macvtap: left promiscuous mode [ 486.645946][ T1032] veth1_vlan: left promiscuous mode [ 486.666714][ T1032] veth0_vlan: left promiscuous mode [ 487.353065][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 487.364583][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 487.376607][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 487.390168][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 487.399287][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 487.406784][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 488.140014][ T5774] Bluetooth: hci3: command tx timeout [ 488.415506][ T1032] team0 (unregistering): Port device team_slave_1 removed [ 488.565472][ T1032] team0 (unregistering): Port device team_slave_0 removed [ 488.830285][ T1032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.819947][ T5774] Bluetooth: hci0: command tx timeout [ 489.944684][ T1032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.239930][ T5785] Bluetooth: hci3: command tx timeout [ 491.900055][ T5785] Bluetooth: hci0: command tx timeout [ 493.458676][ T9358] comedi comedi3: Buffer allocation failed [ 493.982368][ T5785] Bluetooth: hci0: command tx timeout [ 494.125907][ T1032] bond0 (unregistering): Released all slaves [ 494.613722][ T9277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.620823][ T9277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.650186][ T9277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.663837][ T9277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.671393][ T9277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.698463][ T9277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.948347][ T9277] hsr_slave_0: entered promiscuous mode [ 494.980857][ T9277] hsr_slave_1: entered promiscuous mode [ 495.006641][ T9277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.024623][ T9277] Cannot create hsr debugfs directory [ 495.694888][ T9314] chnl_net:caif_netlink_parms(): no params data found [ 496.059955][ T5785] Bluetooth: hci0: command tx timeout [ 496.421837][ T9336] chnl_net:caif_netlink_parms(): no params data found [ 496.705568][ T1032] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.716740][ T1032] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.727679][ T1032] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 496.749698][ T9385] batman_adv: batadv0: Adding interface: veth0 [ 496.756072][ T9385] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.783344][ T9385] batman_adv: batadv0: Interface activated: veth0 [ 496.798995][ T9391] batman_adv: batadv0: Interface deactivated: veth0 [ 496.817725][ T9391] batman_adv: batadv0: Removing interface: veth0 [ 496.824942][ T9391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.832699][ T9391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.841327][ T9391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.848825][ T9391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.059143][ T1032] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.069817][ T1032] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.080663][ T1032] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 497.105446][ T9314] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.115696][ T9314] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.125573][ T9314] bridge_slave_0: entered allmulticast mode [ 497.135254][ T9314] bridge_slave_0: entered promiscuous mode [ 497.148719][ T9314] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.157767][ T9314] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.165290][ T9314] bridge_slave_1: entered allmulticast mode [ 497.172974][ T9314] bridge_slave_1: entered promiscuous mode [ 497.289628][ T1032] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.301142][ T1032] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.315439][ T1032] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 497.359422][ T9314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.421748][ T1032] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.432371][ T1032] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.443242][ T1032] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 497.461590][ T9314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.473655][ T9336] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.493939][ T9336] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.504139][ T9336] bridge_slave_0: entered allmulticast mode [ 497.515273][ T9336] bridge_slave_0: entered promiscuous mode [ 497.525837][ T9336] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.533232][ T9336] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.540654][ T9336] bridge_slave_1: entered allmulticast mode [ 497.548314][ T9336] bridge_slave_1: entered promiscuous mode [ 497.589067][ T9314] team0: Port device team_slave_0 added [ 497.623870][ T9314] team0: Port device team_slave_1 added [ 497.756270][ T9336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.912596][ T9336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.930981][ T9314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.938017][ T9314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.969032][ T9314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.983094][ T9314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.990569][ T9314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.023027][ T9314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.193441][ T9336] team0: Port device team_slave_0 added [ 499.269104][ T9336] team0: Port device team_slave_1 added [ 499.313538][ T1032] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.343004][ T9314] hsr_slave_0: entered promiscuous mode [ 499.351462][ T9314] hsr_slave_1: entered promiscuous mode [ 499.357988][ T9314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.367158][ T9314] Cannot create hsr debugfs directory [ 499.395108][ T9277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 499.408769][ T9277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 499.425569][ T9277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 499.479730][ T1032] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.527618][ T9277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 499.584743][ T1032] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.633439][ T9336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.641067][ T9336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.696041][ T9336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.759314][ T1032] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.812806][ T9336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.825229][ T9336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.857422][ T9336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.068458][ T9336] hsr_slave_0: entered promiscuous mode [ 500.084491][ T9336] hsr_slave_1: entered promiscuous mode [ 500.093227][ T9336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.101474][ T9336] Cannot create hsr debugfs directory [ 500.555698][ T28] audit: type=1800 audit(1787358262.290:36): pid=9405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.832" name="file0" dev="overlay" ino=166 res=0 errno=0 [ 501.153830][ T1032] tipc: Disabling bearer [ 501.159516][ T1032] tipc: Left network mode [ 501.401380][ T9277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.477609][ T9277] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.501389][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.508650][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.526465][ T7899] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.533685][ T7899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.909043][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.916050][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.029671][ T9277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.188218][ T9277] veth0_vlan: entered promiscuous mode [ 502.468135][ T9277] veth1_vlan: entered promiscuous mode [ 502.713668][ T9277] veth0_macvtap: entered promiscuous mode [ 502.747761][ T9277] veth1_macvtap: entered promiscuous mode [ 502.924903][ T1032] hsr_slave_0: left promiscuous mode [ 502.931468][ T1032] hsr_slave_1: left promiscuous mode [ 502.937835][ T1032] bridge_slave_1: left allmulticast mode [ 502.944670][ T1032] bridge_slave_1: left promiscuous mode [ 502.953076][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.962520][ T1032] bridge_slave_0: left allmulticast mode [ 502.968320][ T1032] bridge_slave_0: left promiscuous mode [ 502.974502][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.988601][ T1032] hsr_slave_0: left promiscuous mode [ 502.997543][ T1032] hsr_slave_1: left promiscuous mode [ 503.004147][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.012713][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.021881][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.029449][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.040056][ T1032] bridge_slave_1: left allmulticast mode [ 503.045781][ T1032] bridge_slave_1: left promiscuous mode [ 503.052152][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.062737][ T1032] bridge_slave_0: left allmulticast mode [ 503.068466][ T1032] bridge_slave_0: left promiscuous mode [ 503.074713][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.139587][ T1032] veth1_macvtap: left promiscuous mode [ 503.145824][ T1032] veth0_macvtap: left promiscuous mode [ 503.153921][ T1032] veth1_vlan: left promiscuous mode [ 503.159548][ T1032] veth0_vlan: left promiscuous mode [ 503.179294][ T1032] veth1_macvtap: left promiscuous mode [ 503.191137][ T1032] veth0_macvtap: left promiscuous mode [ 503.203241][ T1032] veth1_vlan: left promiscuous mode [ 503.211547][ T1032] veth0_vlan: left promiscuous mode [ 503.358747][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.8.833'. [ 503.489579][ T9414] syz.8.834: attempt to access beyond end of device [ 503.489579][ T9414] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 503.513785][ T9414] hpfs: hpfs_map_sector(): read error [ 503.598211][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.8.834'. [ 504.262639][ T1032] team0 (unregistering): Port device team_slave_1 removed [ 504.335624][ T1032] team0 (unregistering): Port device team_slave_0 removed [ 504.423031][ T1032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.483451][ T1032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.916914][ T1032] bond0 (unregistering): Released all slaves [ 506.967951][ T1032] team0 (unregistering): Port device team_slave_1 removed [ 507.047576][ T1032] team0 (unregistering): Port device team_slave_0 removed [ 507.138751][ T1032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.232126][ T1032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.896585][ T1032] bond0 (unregistering): Released all slaves [ 508.022114][ T9277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.069224][ T9277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.266798][ T9314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 508.277904][ T9314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 508.298386][ T9277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.332111][ T9277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.345959][ T9277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.355489][ T9277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.377980][ T9314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 508.531024][ T9314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 508.600932][ T9433] syz.8.840: attempt to access beyond end of device [ 508.600932][ T9433] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 508.614029][ T9433] hpfs: hpfs_map_sector(): read error [ 508.694473][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.8.840'. [ 509.100687][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.108613][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.195928][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.205303][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.223541][ T9314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.371211][ T1032] IPVS: stop unused estimator thread 0... [ 509.413770][ T9314] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.435973][ T9336] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 509.454968][ T9336] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 509.485253][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.492506][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.560493][ T9336] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 509.581708][ T9336] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 509.610885][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.618183][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.045541][ T9336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.166093][ T9336] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.215254][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.222477][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.271722][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.278931][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.310663][ T9314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.563444][ T9314] veth0_vlan: entered promiscuous mode [ 511.638104][ T9314] veth1_vlan: entered promiscuous mode [ 511.783083][ T9314] veth0_macvtap: entered promiscuous mode [ 511.826868][ T9314] veth1_macvtap: entered promiscuous mode [ 511.905291][ T9314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.947495][ T9314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.982403][ T9314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.048557][ T9314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.073643][ T9314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.117194][ T9314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.152521][ T9314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.172526][ T9314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.195902][ T9314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.218693][ T9314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.408222][ T9336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.488099][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.522463][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.617380][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.652255][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.671670][ T9336] veth0_vlan: entered promiscuous mode [ 512.748740][ T9336] veth1_vlan: entered promiscuous mode [ 512.857327][ T9336] veth0_macvtap: entered promiscuous mode [ 512.922496][ T9336] veth1_macvtap: entered promiscuous mode [ 512.978074][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.013490][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.043242][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.064320][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.077861][ T9336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.097057][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.110427][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.121641][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.133148][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.145659][ T9336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.199389][ T9336] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.221091][ T9336] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.241076][ T9336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.260528][ T9336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.276786][ T9478] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 513.286387][ T8873] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 513.305339][ T9478] md: pers->run() failed ... [ 513.471774][ T8873] usb 3-1: config 0 has no interfaces? [ 513.477364][ T8873] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 513.533569][ T8873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.557099][ T8873] usb 3-1: config 0 descriptor?? [ 513.604779][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.634929][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.697646][ T9490] syz.8.848: attempt to access beyond end of device [ 513.697646][ T9490] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 513.717134][ T9490] hpfs: hpfs_map_sector(): read error [ 513.738394][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.767936][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.790359][ T9] usb 3-1: USB disconnect, device number 7 [ 513.845053][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.8.848'. [ 516.203189][ T9516] autofs4:pid:9516:autofs_fill_super: called with bogus options [ 517.309887][ T9096] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 517.534660][ T9096] usb 2-1: config 0 has no interfaces? [ 517.545088][ T9096] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 517.570357][ T9096] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.604008][ T9096] usb 2-1: config 0 descriptor?? [ 517.843391][ T789] usb 2-1: USB disconnect, device number 3 [ 517.989515][ T1032] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.361947][ T1032] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.555058][ T9563] autofs4:pid:9563:autofs_fill_super: called with bogus options [ 518.670332][ T1032] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.915659][ T1032] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.925772][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 519.939077][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 519.952728][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 519.970330][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 519.978179][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 519.986055][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 520.180376][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 520.191714][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 520.280232][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 520.298240][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 520.309361][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 520.318009][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 522.059974][ T5785] Bluetooth: hci0: command tx timeout [ 522.460842][ T5785] Bluetooth: hci1: command tx timeout [ 522.843424][ T9577] chnl_net:caif_netlink_parms(): no params data found [ 523.308599][ T9586] chnl_net:caif_netlink_parms(): no params data found [ 523.537550][ T9577] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.543619][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 523.554838][ T9577] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.564619][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 523.577904][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 523.579397][ T9577] bridge_slave_0: entered allmulticast mode [ 523.593024][ T9577] bridge_slave_0: entered promiscuous mode [ 523.601206][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 523.609082][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 523.616799][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 523.697534][ T9577] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.717440][ T9577] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.726948][ T9577] bridge_slave_1: entered allmulticast mode [ 523.738909][ T9577] bridge_slave_1: entered promiscuous mode [ 523.876552][ T9586] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.888148][ T9586] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.897089][ T9586] bridge_slave_0: entered allmulticast mode [ 523.906742][ T9586] bridge_slave_0: entered promiscuous mode [ 523.915796][ T9586] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.923037][ T9586] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.931951][ T9586] bridge_slave_1: entered allmulticast mode [ 523.939570][ T9586] bridge_slave_1: entered promiscuous mode [ 523.974211][ T9577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.023913][ T1032] hsr_slave_0: left promiscuous mode [ 524.034432][ T1032] hsr_slave_1: left promiscuous mode [ 524.045360][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.063441][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.077573][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.089911][ T8873] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 524.095734][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.109551][ T1032] bridge_slave_1: left allmulticast mode [ 524.119486][ T1032] bridge_slave_1: left promiscuous mode [ 524.136253][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.140642][ T5785] Bluetooth: hci0: command tx timeout [ 524.157217][ T1032] bridge_slave_0: left allmulticast mode [ 524.163294][ T1032] bridge_slave_0: left promiscuous mode [ 524.169110][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.226286][ T1032] veth1_macvtap: left promiscuous mode [ 524.237665][ T1032] veth0_macvtap: left promiscuous mode [ 524.248741][ T1032] veth1_vlan: left promiscuous mode [ 524.256503][ T1032] veth0_vlan: left promiscuous mode [ 524.291919][ T8873] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 524.316022][ T8873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.540754][ T5785] Bluetooth: hci1: command tx timeout [ 524.575710][ T8873] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 524.821559][ T9] usb 3-1: USB disconnect, device number 8 [ 525.029596][ T9634] netlink: 'syz.2.875': attribute type 1 has an invalid length. [ 525.641109][ T1032] team0 (unregistering): Port device team_slave_1 removed [ 525.662739][ T5785] Bluetooth: hci2: command tx timeout [ 525.771558][ T1032] team0 (unregistering): Port device team_slave_0 removed [ 525.884655][ T1032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.066855][ T1032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.223726][ T5785] Bluetooth: hci0: command tx timeout [ 526.578721][ T1032] bond0 (unregistering): Released all slaves [ 526.625117][ T5785] Bluetooth: hci1: command tx timeout [ 526.691798][ T9577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.735827][ T9586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.817783][ T9577] team0: Port device team_slave_0 added [ 526.827128][ T9586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.876094][ T9577] team0: Port device team_slave_1 added [ 526.923975][ T9586] team0: Port device team_slave_0 added [ 526.966311][ T9586] team0: Port device team_slave_1 added [ 527.019990][ T9577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.027159][ T9577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.056485][ T9577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.070296][ T9577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.077309][ T9577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.109699][ T9577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.176595][ T9586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.215830][ T9586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.264593][ T9586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.343271][ T9586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.361170][ T9586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.389194][ T9586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.542273][ T9577] hsr_slave_0: entered promiscuous mode [ 527.597048][ T9577] hsr_slave_1: entered promiscuous mode [ 527.620263][ T9577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.627914][ T9577] Cannot create hsr debugfs directory [ 527.673482][ T9586] hsr_slave_0: entered promiscuous mode [ 527.691052][ T9586] hsr_slave_1: entered promiscuous mode [ 527.709913][ T9586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.718471][ T9586] Cannot create hsr debugfs directory [ 527.739878][ T5785] Bluetooth: hci2: command tx timeout [ 528.202433][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 528.217031][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 528.227146][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 528.235468][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 528.250330][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 528.259004][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 528.300183][ T5785] Bluetooth: hci0: command tx timeout [ 528.335188][ T1032] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.398024][ T9628] chnl_net:caif_netlink_parms(): no params data found [ 528.492506][ T1032] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.581488][ T1032] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.700919][ T5785] Bluetooth: hci1: command tx timeout [ 528.739971][ T1032] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.038358][ T9628] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.047317][ T9628] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.054999][ T9628] bridge_slave_0: entered allmulticast mode [ 529.064048][ T9628] bridge_slave_0: entered promiscuous mode [ 529.073567][ T9628] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.082686][ T9628] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.090444][ T9628] bridge_slave_1: entered allmulticast mode [ 529.097921][ T9628] bridge_slave_1: entered promiscuous mode [ 529.332339][ T9628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.345428][ T9628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.615087][ T9628] team0: Port device team_slave_0 added [ 529.672378][ T1032] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.705377][ T9628] team0: Port device team_slave_1 added [ 529.820425][ T5785] Bluetooth: hci2: command tx timeout [ 529.827045][ T1032] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.848901][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.856018][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.884021][ T9628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.897380][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.908115][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.942471][ T9628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.037712][ T1032] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.205313][ T9628] hsr_slave_0: entered promiscuous mode [ 530.212149][ T9628] hsr_slave_1: entered promiscuous mode [ 530.219077][ T9628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 530.228588][ T9628] Cannot create hsr debugfs directory [ 530.289403][ T1032] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.306412][ T5785] Bluetooth: hci3: command tx timeout [ 530.362517][ T9695] chnl_net:caif_netlink_parms(): no params data found [ 530.745263][ T9695] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.757833][ T9695] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.766107][ T9695] bridge_slave_0: entered allmulticast mode [ 530.773720][ T9695] bridge_slave_0: entered promiscuous mode [ 530.782987][ T9695] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.791730][ T9695] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.799143][ T9695] bridge_slave_1: entered allmulticast mode [ 530.807232][ T9695] bridge_slave_1: entered promiscuous mode [ 530.994181][ T1032] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.085543][ T9695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.104105][ T9577] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 531.137743][ T1032] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.203155][ T9695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.235615][ T9577] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 531.283677][ T1032] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.366116][ T9577] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 531.378066][ T9577] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 531.413090][ T1032] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.445580][ T9695] team0: Port device team_slave_0 added [ 531.461607][ T9695] team0: Port device team_slave_1 added [ 531.473825][ T9586] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 531.598218][ T9695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.606576][ T9695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.634891][ T9695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.646766][ T9586] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 531.690294][ T9695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.697336][ T9695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.733896][ T9695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.759488][ T9586] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 531.817783][ T9586] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 531.900226][ T5785] Bluetooth: hci2: command tx timeout [ 532.058125][ T9695] hsr_slave_0: entered promiscuous mode [ 532.128616][ T9695] hsr_slave_1: entered promiscuous mode [ 532.141607][ T9695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.149330][ T9695] Cannot create hsr debugfs directory [ 532.389428][ T5785] Bluetooth: hci3: command tx timeout [ 532.752521][ T9628] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 532.767446][ T9628] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 532.809283][ T9628] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 533.035322][ T9628] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 533.696635][ T9577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.712304][ T9586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.956360][ T9586] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.098714][ T7898] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.106057][ T7898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.184103][ T9577] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.213476][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.220724][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.306055][ T9628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.319524][ T7898] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.326811][ T7898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.445698][ T7898] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.452962][ T7898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.461242][ T5785] Bluetooth: hci3: command tx timeout [ 534.655518][ T9695] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 534.714836][ T9628] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.724281][ T9695] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 534.788145][ T9695] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 534.817635][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.824915][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.912793][ T9695] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 534.947264][ T7898] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.954598][ T7898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.269641][ T1032] hsr_slave_0: left promiscuous mode [ 535.288766][ T1032] hsr_slave_1: left promiscuous mode [ 535.300775][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.308315][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.331576][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.339353][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.367074][ T1032] bridge_slave_1: left allmulticast mode [ 535.380270][ T1032] bridge_slave_1: left promiscuous mode [ 535.386212][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.413442][ T1032] bridge_slave_0: left allmulticast mode [ 535.419278][ T1032] bridge_slave_0: left promiscuous mode [ 535.440931][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.468675][ T1032] hsr_slave_0: left promiscuous mode [ 535.476911][ T1032] hsr_slave_1: left promiscuous mode [ 535.483893][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.499118][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.511305][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.518902][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.539048][ T1032] bridge_slave_1: left allmulticast mode [ 535.545895][ T1032] bridge_slave_1: left promiscuous mode [ 535.552384][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.570788][ T1032] bridge_slave_0: left allmulticast mode [ 535.576537][ T1032] bridge_slave_0: left promiscuous mode [ 535.590190][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.618632][ T1032] hsr_slave_0: left promiscuous mode [ 535.632269][ T1032] hsr_slave_1: left promiscuous mode [ 535.638646][ T1032] bridge_slave_1: left allmulticast mode [ 535.654455][ T1032] bridge_slave_1: left promiscuous mode [ 535.663498][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.681338][ T1032] bridge_slave_0: left allmulticast mode [ 535.687076][ T1032] bridge_slave_0: left promiscuous mode [ 535.694563][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.782548][ T1032] veth1_macvtap: left promiscuous mode [ 535.788194][ T1032] veth0_macvtap: left promiscuous mode [ 535.794468][ T1032] veth1_vlan: left promiscuous mode [ 535.801550][ T1032] veth0_vlan: left promiscuous mode [ 535.809508][ T1032] veth1_macvtap: left promiscuous mode [ 535.816917][ T1032] veth0_macvtap: left promiscuous mode [ 535.827114][ T1032] veth1_vlan: left promiscuous mode [ 535.837778][ T1032] veth0_vlan: left promiscuous mode [ 535.848532][ T1032] veth1_macvtap: left promiscuous mode [ 535.855332][ T1032] veth0_macvtap: left promiscuous mode [ 535.871653][ T1032] veth1_vlan: left promiscuous mode [ 535.877251][ T1032] veth0_vlan: left promiscuous mode [ 536.540578][ T5785] Bluetooth: hci3: command tx timeout [ 537.460501][ T1032] team0 (unregistering): Port device team_slave_1 removed [ 537.518039][ T1032] team0 (unregistering): Port device team_slave_0 removed [ 537.573800][ T1032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.636192][ T1032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.115673][ T1032] bond0 (unregistering): Released all slaves [ 538.889733][ T1032] team0 (unregistering): Port device team_slave_1 removed [ 538.947840][ T1032] team0 (unregistering): Port device team_slave_0 removed [ 539.005471][ T1032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.064261][ T1032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.514855][ T1032] bond0 (unregistering): Released all slaves [ 540.226568][ T1032] team0 (unregistering): Port device team_slave_1 removed [ 540.283585][ T1032] team0 (unregistering): Port device team_slave_0 removed [ 540.345191][ T1032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.411488][ T1032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.823415][ T1032] bond0 (unregistering): Released all slaves [ 541.055388][ T9586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.318491][ T9695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.403134][ T9695] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.458318][ T7898] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.465566][ T7898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.543753][ T7898] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.551029][ T7898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.603748][ T9577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.760723][ T9628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.351034][ T9586] veth0_vlan: entered promiscuous mode [ 542.409430][ T9586] veth1_vlan: entered promiscuous mode [ 542.583807][ T9586] veth0_macvtap: entered promiscuous mode [ 542.635607][ T9586] veth1_macvtap: entered promiscuous mode [ 542.772444][ T9695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.784614][ T9586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.814875][ T9586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.854083][ T9586] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.880056][ T9586] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.888946][ T9586] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.909871][ T9586] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.982721][ T9577] veth0_vlan: entered promiscuous mode [ 543.083065][ T9577] veth1_vlan: entered promiscuous mode [ 543.185875][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.211463][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.267106][ T9628] veth0_vlan: entered promiscuous mode [ 543.334538][ T9628] veth1_vlan: entered promiscuous mode [ 543.361253][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.369244][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.394654][ T9577] veth0_macvtap: entered promiscuous mode [ 543.448917][ T9577] veth1_macvtap: entered promiscuous mode [ 543.531751][ T9628] veth0_macvtap: entered promiscuous mode [ 543.540099][ T9577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.560600][ T9577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.589196][ T9577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.615897][ T9628] veth1_macvtap: entered promiscuous mode [ 543.652766][ T9577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.669697][ T9577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.261290][ T9577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.305970][ T9577] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.323718][ T9577] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.336924][ T9577] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.349396][ T9577] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.398234][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.413674][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.427734][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.442971][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.458103][ T9628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.541650][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.569891][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.601011][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.619947][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.641564][ T9628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.698574][ T9695] veth0_vlan: entered promiscuous mode [ 545.724328][ T9628] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.740343][ T9628] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.749214][ T9628] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.780101][ T9628] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.830964][ T9695] veth1_vlan: entered promiscuous mode [ 545.972942][ T7900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.000204][ T7900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.111064][ T9695] veth0_macvtap: entered promiscuous mode [ 546.126601][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.148774][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.176464][ T9695] veth1_macvtap: entered promiscuous mode [ 546.225329][ T9695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.244886][ T9695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.259713][ T9695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.295417][ T9695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.337629][ T9695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.348771][ T9695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.369067][ T9695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.420700][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.428615][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.436220][ T9695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.436307][ T9695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.436319][ T9695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.436333][ T9695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.436348][ T9695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.556459][ T9695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.584266][ T9931] syz.4.862: attempt to access beyond end of device [ 546.584266][ T9931] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 546.585289][ T9695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.622743][ T9931] hpfs: hpfs_map_sector(): read error [ 546.647628][ T9695] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.679923][ T9695] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.692796][ T9695] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.720967][ T9695] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.732464][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.862'. [ 546.850209][ T7898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.886582][ T7898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.067759][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.116337][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.223579][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.238835][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.280923][ T9941] autofs4:pid:9941:autofs_fill_super: called with bogus options [ 548.683375][ T9962] overlayfs: failed to resolve './file0': -2 [ 551.368937][ T28] audit: type=1800 audit(1787358313.010:37): pid=9980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.886" name="file0" dev="overlay" ino=43 res=0 errno=0 [ 551.404605][ T9981] syz.9.889: attempt to access beyond end of device [ 551.404605][ T9981] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 551.724110][ T9981] hpfs: hpfs_map_sector(): read error [ 552.242863][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.9.889'. [ 554.111629][ T9995] autofs4:pid:9995:autofs_fill_super: called with bogus options [ 554.201639][ T9995] overlayfs: workdir and upperdir must reside under the same mount [ 557.521153][T10032] syz.5.900: attempt to access beyond end of device [ 557.521153][T10032] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 557.557412][T10032] hpfs: hpfs_map_sector(): read error [ 557.655191][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.900'. [ 558.665950][T10035] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 558.959551][T10041] autofs4:pid:10041:autofs_fill_super: called with bogus options [ 559.068908][T10041] overlayfs: workdir and upperdir must reside under the same mount [ 564.252454][T10071] comedi comedi3: Buffer allocation failed [ 564.334208][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.340866][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.730413][T10084] syz.4.910: attempt to access beyond end of device [ 564.730413][T10084] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 564.764344][T10084] hpfs: hpfs_map_sector(): read error [ 564.861665][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'. [ 565.868415][ T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.756489][ T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.921106][ T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.833888][ T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.758836][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 569.772030][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 569.787270][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 569.821340][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 569.839678][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 569.847534][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 571.023049][ T789] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 571.251875][T10162] autofs4:pid:10162:autofs_fill_super: called with bogus options [ 571.283218][ T789] usb 10-1: unable to get BOS descriptor or descriptor too short [ 571.345031][ T789] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.389920][ T789] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 32, changing to 7 [ 571.451022][ T789] usb 10-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 571.490214][ T789] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.514988][ T789] usb 10-1: Product: syz [ 571.519334][ T789] usb 10-1: Manufacturer: syz [ 571.545804][ T789] usb 10-1: SerialNumber: syz [ 571.900353][ T5785] Bluetooth: hci2: command tx timeout [ 571.948447][ T789] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 571.978530][T10134] chnl_net:caif_netlink_parms(): no params data found [ 571.985561][ T789] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 572.021881][ T789] usb 10-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 572.059863][ T789] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 572.084240][ T789] usb 10-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 572.239708][ T49] hsr_slave_0: left promiscuous mode [ 572.250494][ T49] hsr_slave_1: left promiscuous mode [ 572.261028][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.268529][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.283639][ T789] usb 10-1: USB disconnect, device number 2 [ 572.309946][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.317472][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.342083][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 572.352455][ T49] bridge_slave_1: left allmulticast mode [ 572.358201][ T49] bridge_slave_1: left promiscuous mode [ 572.377900][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 572.388345][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 572.400979][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.413969][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 572.425182][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 572.434768][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 572.515554][ T49] bridge_slave_0: left allmulticast mode [ 572.543553][T10060] udevd[10060]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 572.582118][ T49] bridge_slave_0: left promiscuous mode [ 572.592683][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.816055][ T49] veth1_macvtap: left promiscuous mode [ 572.839944][ T49] veth0_macvtap: left promiscuous mode [ 572.845807][ T49] veth1_vlan: left promiscuous mode [ 572.903311][ T49] veth0_vlan: left promiscuous mode [ 573.981606][ T5785] Bluetooth: hci2: command tx timeout [ 575.557953][T10202] comedi comedi3: Buffer allocation failed [ 575.639893][ T5785] Bluetooth: hci0: command tx timeout [ 576.059846][ T5785] Bluetooth: hci2: command tx timeout [ 577.149720][ T49] team0 (unregistering): Port device team_slave_1 removed [ 577.243154][ T49] team0 (unregistering): Port device team_slave_0 removed [ 577.302705][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.366855][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.670144][ T5785] Bluetooth: hci0: command tx timeout [ 577.834730][ T49] bond0 (unregistering): Released all slaves [ 578.140059][ T5785] Bluetooth: hci2: command tx timeout [ 578.280393][T10134] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.295796][T10134] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.317998][T10134] bridge_slave_0: entered allmulticast mode [ 578.353797][T10134] bridge_slave_0: entered promiscuous mode [ 578.389048][T10134] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.434540][T10134] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.452481][T10134] bridge_slave_1: entered allmulticast mode [ 578.482643][T10134] bridge_slave_1: entered promiscuous mode [ 578.625355][T10134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.732726][T10134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.887682][T10134] team0: Port device team_slave_0 added [ 578.936515][T10134] team0: Port device team_slave_1 added [ 579.157522][T10134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.181920][T10134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.209403][ T28] audit: type=1800 audit(1787358340.990:38): pid=10254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.935" name="attr_qid_max" dev="configfs" ino=30712 res=0 errno=0 [ 579.249814][T10134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.301581][T10134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.308621][T10134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.426654][T10134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.757861][ T5785] Bluetooth: hci0: command tx timeout [ 579.796396][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.525548][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.570869][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 580.591180][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 580.602180][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 580.621052][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 580.634516][ T5774] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 580.642016][ T5774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 580.693001][T10134] hsr_slave_0: entered promiscuous mode [ 580.761540][T10134] hsr_slave_1: entered promiscuous mode [ 580.851114][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.877310][T10177] chnl_net:caif_netlink_parms(): no params data found [ 581.066569][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.684097][T10278] syzkaller0: entered promiscuous mode [ 581.702605][T10278] syzkaller0: entered allmulticast mode [ 581.829946][ T5785] Bluetooth: hci0: command tx timeout [ 582.131302][T10177] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.170019][T10177] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.185613][T10177] bridge_slave_0: entered allmulticast mode [ 582.209276][T10177] bridge_slave_0: entered promiscuous mode [ 582.315470][T10177] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.346450][T10177] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.358486][T10177] bridge_slave_1: entered allmulticast mode [ 582.386455][T10177] bridge_slave_1: entered promiscuous mode [ 582.548131][T10177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.571794][T10177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.608599][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.686992][T10177] team0: Port device team_slave_0 added [ 582.700967][T10177] team0: Port device team_slave_1 added [ 582.725943][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.780147][ T5785] Bluetooth: hci1: command tx timeout [ 582.844689][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.877090][T10177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.894862][T10177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.969813][T10177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.994391][T10177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.007646][T10177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.041775][T10177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.066074][ T28] audit: type=1800 audit(1787358344.850:39): pid=10312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.941" name="attr_qid_max" dev="configfs" ino=30987 res=0 errno=0 [ 583.203651][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.905155][T10177] hsr_slave_0: entered promiscuous mode [ 583.977003][T10177] hsr_slave_1: entered promiscuous mode [ 584.065636][T10177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 584.129996][T10177] Cannot create hsr debugfs directory [ 584.258108][T10270] chnl_net:caif_netlink_parms(): no params data found [ 584.873897][ T5785] Bluetooth: hci1: command tx timeout [ 585.572001][T10134] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 585.738315][T10134] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 585.773741][T10134] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 585.864070][T10270] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.872251][T10270] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.880487][T10270] bridge_slave_0: entered allmulticast mode [ 585.888056][T10270] bridge_slave_0: entered promiscuous mode [ 585.896814][T10134] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 585.930781][T10270] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.945318][T10270] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.953141][T10270] bridge_slave_1: entered allmulticast mode [ 585.960841][T10270] bridge_slave_1: entered promiscuous mode [ 586.220414][T10355] veth0_macvtap: entered allmulticast mode [ 586.255687][T10270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.278847][T10270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.667799][T10270] team0: Port device team_slave_0 added [ 586.836448][T10270] team0: Port device team_slave_1 added [ 586.939909][ T5785] Bluetooth: hci1: command tx timeout [ 587.104038][T10270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.111570][T10270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.141728][T10270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.216756][T10270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.224157][T10270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.253764][T10270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.583982][ T28] audit: type=1800 audit(1787358349.370:40): pid=10381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.947" name="attr_qid_max" dev="configfs" ino=31961 res=0 errno=0 [ 587.586330][T10270] hsr_slave_0: entered promiscuous mode [ 587.637559][T10270] hsr_slave_1: entered promiscuous mode [ 587.644515][T10270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 587.666938][T10270] Cannot create hsr debugfs directory [ 588.221719][T10134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.393960][T10177] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 588.427420][T10177] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 588.453872][T10177] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 588.523484][T10134] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.547522][T10177] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 588.723564][ T6314] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.730861][ T6314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.844910][ T6314] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.852294][ T6314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.021438][ T5785] Bluetooth: hci1: command tx timeout [ 589.238242][ T49] hsr_slave_0: left promiscuous mode [ 589.288293][ T49] hsr_slave_1: left promiscuous mode [ 589.302682][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.313299][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.321537][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.329121][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.337625][ T49] bridge_slave_1: left allmulticast mode [ 589.343630][ T49] bridge_slave_1: left promiscuous mode [ 589.349438][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.372733][ T49] bridge_slave_0: left allmulticast mode [ 589.378473][ T49] bridge_slave_0: left promiscuous mode [ 589.390258][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.416846][ T49] hsr_slave_0: left promiscuous mode [ 589.424357][ T49] hsr_slave_1: left promiscuous mode [ 589.433139][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.446335][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.454967][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.471091][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.479416][ T49] bridge_slave_1: left allmulticast mode [ 589.490789][ T49] bridge_slave_1: left promiscuous mode [ 589.496632][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.515753][ T49] bridge_slave_0: left allmulticast mode [ 589.527464][ T49] bridge_slave_0: left promiscuous mode [ 589.534642][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.560078][ T173] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 589.645102][ T49] veth1_macvtap: left promiscuous mode [ 589.652001][ T49] veth0_macvtap: left promiscuous mode [ 589.657778][ T49] veth1_vlan: left promiscuous mode [ 589.670402][ T49] veth0_vlan: left promiscuous mode [ 589.687297][ T49] veth1_macvtap: left promiscuous mode [ 589.695398][ T49] veth0_macvtap: left promiscuous mode [ 589.716766][ T49] veth1_vlan: left promiscuous mode [ 589.729558][ T49] veth0_vlan: left promiscuous mode [ 589.774810][ T173] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 589.791999][ T173] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.040201][ T173] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 590.898278][ T49] team0 (unregistering): Port device team_slave_1 removed [ 590.966132][ T49] team0 (unregistering): Port device team_slave_0 removed [ 591.026686][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.089335][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.598311][ T49] bond0 (unregistering): Released all slaves [ 592.501710][ T49] team0 (unregistering): Port device team_slave_1 removed [ 592.567819][ T49] team0 (unregistering): Port device team_slave_0 removed [ 592.633048][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.698073][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.256881][ T49] bond0 (unregistering): Released all slaves [ 593.448139][T10134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 593.796622][T10177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.853731][T10177] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.912163][ T2957] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.919384][ T2957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.961733][ T2957] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.969036][ T2957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.175300][T10177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 594.258290][T10134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.346129][T10270] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 594.390874][T10270] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 594.429547][T10270] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 594.509943][T10270] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 594.851580][T10270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.921365][T10270] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.956193][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.963485][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.988246][T10177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.008542][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.015895][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.252173][T10177] veth0_vlan: entered promiscuous mode [ 595.276272][T10134] veth0_vlan: entered promiscuous mode [ 595.313776][T10177] veth1_vlan: entered promiscuous mode [ 595.358271][T10134] veth1_vlan: entered promiscuous mode [ 595.446423][T10177] veth0_macvtap: entered promiscuous mode [ 595.460897][ T27] usb 10-1: USB disconnect, device number 3 [ 595.480914][T10177] veth1_macvtap: entered promiscuous mode [ 595.493217][T10134] veth0_macvtap: entered promiscuous mode [ 595.530912][T10134] veth1_macvtap: entered promiscuous mode [ 595.589632][T10177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.618052][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.661910][T10177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.703273][T10177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.735418][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.775566][T10177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.811831][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.828529][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.847327][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.858764][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.877133][T10134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.904788][T10177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.916038][T10177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.926902][T10177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.936259][T10177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.982033][T10270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.014992][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.028045][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.045066][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.056392][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.072067][T10134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.113127][T10134] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.128619][T10134] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.138567][T10134] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.149460][T10134] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.355528][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.388308][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.423410][T10270] veth0_vlan: entered promiscuous mode [ 596.499282][T10270] veth1_vlan: entered promiscuous mode [ 596.517268][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.563742][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.705875][ T6314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.720687][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.728595][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.749558][T10270] veth0_macvtap: entered promiscuous mode [ 596.759616][ T6314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.805116][T10270] veth1_macvtap: entered promiscuous mode [ 596.904772][T10270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.960124][T10270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.999784][T10270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.020187][T10270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.040816][T10270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.080868][T10270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.104994][T10270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.169685][T10270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.205096][T10270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.220526][T10270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.231963][T10270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.341805][T10270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.394769][T10270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.425211][ T789] kernel write not supported for file /sequencer2 (pid: 789 comm: kworker/1:2) [ 597.493615][T10270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.808424][T10270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.900614][T10270] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.982497][T10270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.075538][T10270] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.797776][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.812613][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.906561][T10514] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 599.577994][ T2957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.613468][ T2957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.802138][ T5815] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 600.146890][T10520] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 600.183411][ T5815] usb 8-1: config 1 has an invalid descriptor of length 163, skipping remainder of the config [ 600.327454][ T5815] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 600.478172][ T5815] usb 8-1: New USB device found, idVendor=0cb7, idProduct=0000, bcdDevice= 0.00 [ 600.566921][ T5815] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 600.659867][ T5815] usb 8-1: SerialNumber: syz [ 602.778233][ T5815] usb 8-1: 0:2 : does not exist [ 602.804723][ T5815] usb 8-1: USB disconnect, device number 3 [ 603.970141][T10531] udevd[10531]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 604.480694][T10548] snd_dummy snd_dummy.0: control 0:9:3142:syz0:16385 is already present [ 604.701927][T10560] batman_adv: batadv0: Adding interface: veth0 [ 604.718605][T10560] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.780533][T10560] batman_adv: batadv0: Interface activated: veth0 [ 605.091985][T10564] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 609.435107][T10583] snd_dummy snd_dummy.0: control 0:9:3142:syz0:16385 is already present [ 609.750059][T10593] batman_adv: batadv0: Adding interface: veth0 [ 609.756312][T10593] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.836189][T10593] batman_adv: batadv0: Interface activated: veth0 [ 610.339884][ T9096] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 610.637202][ T9096] usb 8-1: config 0 has no interfaces? [ 610.822344][ T9096] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 610.986173][ T9096] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.123246][ T9096] usb 8-1: Product: syz [ 611.198637][ T9096] usb 8-1: Manufacturer: syz [ 611.245736][ T9096] usb 8-1: SerialNumber: syz [ 611.298266][ T9096] usb 8-1: config 0 descriptor?? [ 611.594034][T10617] input: syz1 as /devices/virtual/input/input7 [ 614.236664][ T5815] usb 8-1: USB disconnect, device number 4 [ 615.383466][T10654] syz_tun: entered allmulticast mode [ 615.403501][T10654] pimreg: entered allmulticast mode [ 617.136680][T10652] syz_tun: left allmulticast mode [ 617.180036][T10652] pimreg: left allmulticast mode [ 618.882972][T10674] netlink: 96 bytes leftover after parsing attributes in process `syz.7.995'. [ 619.228100][T10677] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 620.419941][ T27] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 620.819820][ T27] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.830867][ T27] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.841123][ T27] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 620.854338][ T27] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 620.863774][ T27] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.907350][ T27] usb 8-1: config 0 descriptor?? [ 621.018011][T10702] can0: slcan on ttyS3. [ 621.703498][T10692] can0 (unregistered): slcan off ttyS3. [ 621.796834][ T27] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 621.894765][ T27] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 623.826277][ T9096] usb 8-1: reset high-speed USB device number 5 using dummy_hcd [ 623.931880][T10714] udevd[10714]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 624.104979][ T5818] IPVS: starting estimator thread 0... [ 624.113053][T10729] IPVS: rr: TCP 127.0.0.1:5376 - no destination available [ 624.219903][T10732] IPVS: using max 20 ests per chain, 48000 per kthread [ 624.339833][ T5815] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 624.470117][ T5817] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 624.541650][ T5815] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 624.560247][ T5815] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.679955][ T5817] usb 4-1: Using ep0 maxpacket: 8 [ 624.691293][ T5817] usb 4-1: unable to get BOS descriptor or descriptor too short [ 624.730066][ T5817] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.760262][ T27] usb 8-1: USB disconnect, device number 5 [ 624.769101][ T5817] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 624.802449][ T5815] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 624.813395][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.823020][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.861867][ T5817] usb 4-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 624.890668][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.905380][ T5817] usb 4-1: Product: syz [ 624.909646][ T5817] usb 4-1: Manufacturer: syz [ 624.914942][ T5817] usb 4-1: SerialNumber: syz [ 625.071118][ T5815] usb 10-1: USB disconnect, device number 4 [ 625.179922][ C0] IPVS: rr: TCP 127.0.0.1:5376 - no destination available [ 625.221364][ T5817] usb 4-1: 0:1 : does not exist [ 625.238026][ T5817] usb 4-1: unit 5 not found! [ 625.248137][ T5817] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to g@b4.vu [ 625.280255][ T5817] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 625.348687][ T5817] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 625.397753][ T5817] usb 4-1: USB disconnect, device number 11 [ 625.496497][T10531] udevd[10531]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 625.755277][T10752] Cannot find add_set index 0 as target [ 627.555046][T10772] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1015'. [ 631.961944][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1024'. [ 632.131781][T10804] Cannot find add_set index 0 as target [ 635.352183][T10817] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 636.010332][ T5818] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 636.225175][ T5818] usb 8-1: not running at top speed; connect to a high speed hub [ 636.280490][ T5818] usb 8-1: config 1 interface 0 altsetting 160 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 636.329328][ T5818] usb 8-1: config 1 interface 0 has no altsetting 0 [ 636.352166][ T5818] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 636.370368][ T5818] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.389185][ T5818] usb 8-1: Product: syz [ 636.393999][ T5818] usb 8-1: Manufacturer: 深Ԛ䳫犃ꓥ檫䡾廕끟擅焋坶䁬年醭䒮鐷젶ᕂ̴灷舛渻ꂾ⭫痯튆儺夳錄㩝 [ 636.439933][ T5818] usb 8-1: SerialNumber: syz [ 636.956959][ T5818] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 160 proto 1 vid 0x04B8 pid 0x0202 [ 636.999496][ T5818] usb 8-1: USB disconnect, device number 6 [ 637.039170][ T5818] usblp0: removed [ 637.223041][T10842] retu-mfd 0-0001: could not read Retu revision: -5 [ 637.272214][T10842] retu-mfd: probe of 0-0001 failed with error -5 [ 637.306257][T10842] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 637.370532][T10844] retu-mfd 0-0002: could not read Tahvo revision: -5 [ 637.433932][T10844] retu-mfd: probe of 0-0002 failed with error -5 [ 637.480197][T10844] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 643.823614][T10893] can0: slcan on ttyS3. [ 644.693169][ T5814] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 644.841474][T10889] can0 (unregistered): slcan off ttyS3. [ 644.960167][ T5814] usb 4-1: Using ep0 maxpacket: 16 [ 644.967672][ T5814] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 644.997460][ T5814] usb 4-1: config 0 has no interface number 0 [ 645.038155][ T5814] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 645.118774][ T5814] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 645.188544][ T5814] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 645.233444][ T5814] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 645.283451][ T5814] usb 4-1: Product: syz [ 645.314776][ T5814] usb 4-1: Manufacturer: syz [ 646.885509][ T5814] usb 4-1: SerialNumber: syz [ 646.912519][ T5814] usb 4-1: config 0 descriptor?? [ 647.144314][ T5814] usb 4-1: can't set config #0, error -71 [ 647.240141][ T5814] usb 4-1: USB disconnect, device number 12 [ 647.405574][ T5840] IPVS: starting estimator thread 0... [ 647.429320][T10913] syz.0.1042: attempt to access beyond end of device [ 647.429320][T10913] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 647.616553][T10914] IPVS: using max 16 ests per chain, 38400 per kthread [ 652.460189][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 656.911149][T10961] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 656.990098][T10961] i2c i2c-0: Failed to register i2c client tahvo at 0x02 (-16) [ 661.666848][T11008] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 669.735582][T11067] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1071'. [ 673.577570][T11083] netlink: 'syz.3.1077': attribute type 1 has an invalid length. [ 673.640837][T11083] netlink: 'syz.3.1077': attribute type 2 has an invalid length. [ 685.024199][T11185] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1086'. [ 686.226899][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.234435][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.127228][ T27] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 689.464306][ T27] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.632207][ T27] usb 10-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 689.869451][ T27] usb 10-1: config 0 interface 0 has no altsetting 0 [ 690.009486][ T27] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 690.083934][ T27] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 690.179801][ T27] usb 10-1: Product: syz [ 690.184201][ T27] usb 10-1: Manufacturer: syz [ 690.262517][ T27] usb 10-1: SerialNumber: syz [ 690.311823][ T27] usb 10-1: config 0 descriptor?? [ 690.404066][ T27] snd-usb-audio: probe of 10-1:0.0 failed with error -22 [ 690.512679][T11131] udevd[11131]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 690.571221][ T5814] usb 10-1: USB disconnect, device number 5 [ 694.385792][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 697.569989][ T9097] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 697.679902][ T27] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 697.750030][ T9097] usb 8-1: Using ep0 maxpacket: 8 [ 697.780740][ T9097] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 697.809803][ T9097] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.862299][ T9097] pvrusb2: Hardware description: Terratec Grabster AV400 [ 697.869530][ T9097] pvrusb2: ********** [ 697.882993][ T27] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.909535][ T9097] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 697.925459][ T27] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 697.941289][ T9097] pvrusb2: Important functionality might not be entirely working. [ 697.949212][ T27] usb 10-1: New USB device found, idVendor=0e8d, idProduct=0608, bcdDevice= 1.00 [ 697.958814][ T9097] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 697.970306][ T27] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.992338][ T9097] pvrusb2: ********** [ 698.004133][ T27] usb 10-1: config 0 descriptor?? [ 698.077340][ T2323] pvrusb2: Invalid write control endpoint [ 698.097110][ T9097] usb 8-1: USB disconnect, device number 7 [ 698.355075][ T2323] pvrusb2: Invalid write control endpoint [ 698.362306][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 698.376721][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 698.385737][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 698.423165][ T2323] pvrusb2: Device being rendered inoperable [ 698.455264][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 698.478527][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 698.509023][ T2323] pvrusb2: Attached sub-driver cx25840 [ 698.519142][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 698.544461][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 698.544466][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 699.590907][ T5859] usb 10-1: USB disconnect, device number 6 [ 702.089787][ T9097] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 703.000178][ T9097] usb 10-1: not running at top speed; connect to a high speed hub [ 703.014748][ T9097] usb 10-1: config 1 interface 0 altsetting 160 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 703.036189][ T9097] usb 10-1: config 1 interface 0 has no altsetting 0 [ 703.057968][ T9097] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 703.077793][ T9097] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.096997][ T9097] usb 10-1: Product: syz [ 703.112045][ T9097] usb 10-1: Manufacturer: 深Ԛ䳫犃ꓥ檫䡾廕끟擅焋坶䁬年醭䒮鐷젶ᕂ̴灷舛渻ꂾ⭫痯튆儺夳錄㩝 [ 703.174852][ T9097] usb 10-1: SerialNumber: syz [ 703.385403][T11318] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 703.667908][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 704.010800][ T9097] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 160 proto 1 vid 0x04B8 pid 0x0202 [ 704.025735][ T9097] usb 10-1: USB disconnect, device number 7 [ 704.049932][ T9097] usblp0: removed [ 707.385927][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1132'. [ 707.500096][ T5859] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 707.729907][ T5859] usb 10-1: Using ep0 maxpacket: 8 [ 707.763248][ T5859] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 707.793677][ T5859] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.827056][ T5859] pvrusb2: Hardware description: Terratec Grabster AV400 [ 707.855007][ T5859] pvrusb2: ********** [ 707.864756][ T5859] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 707.876327][ T5859] pvrusb2: Important functionality might not be entirely working. [ 707.884548][ T5859] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 707.896440][ T5859] pvrusb2: ********** [ 708.044715][ T2323] pvrusb2: Invalid write control endpoint [ 708.058799][ T5859] usb 10-1: USB disconnect, device number 8 [ 708.119841][ T789] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 708.223187][ T2323] pvrusb2: Invalid write control endpoint [ 708.228996][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 708.257844][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 708.274395][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 708.295442][ T2323] pvrusb2: Device being rendered inoperable [ 708.309949][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 708.325075][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 708.345463][ T789] usb 8-1: not running at top speed; connect to a high speed hub [ 708.359886][ T2323] pvrusb2: Attached sub-driver cx25840 [ 708.372343][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 708.409887][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 708.423285][ T789] usb 8-1: config 1 interface 0 altsetting 160 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 708.469371][ T789] usb 8-1: config 1 interface 0 has no altsetting 0 [ 708.492726][ T789] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 708.509784][ T789] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.534250][ T789] usb 8-1: Product: syz [ 708.538496][ T789] usb 8-1: Manufacturer: 深Ԛ䳫犃ꓥ檫䡾廕끟擅焋坶䁬年醭䒮鐷젶ᕂ̴灷舛渻ꂾ⭫痯튆儺夳錄㩝 [ 708.609802][ T789] usb 8-1: SerialNumber: syz [ 709.280384][ T789] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 160 proto 1 vid 0x04B8 pid 0x0202 [ 709.887026][ T789] usb 8-1: USB disconnect, device number 8 [ 709.912068][ T789] usblp0: removed [ 715.710201][T11432] md: array md0 already has disks! [ 716.280251][ T5859] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 716.482920][ T5859] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 716.491669][ T5859] usb 8-1: config 0 has no interface number 0 [ 716.498404][ T5859] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 716.529034][ T5859] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 716.580207][ T5859] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.600162][ T5859] usb 8-1: Product: syz [ 716.604763][ T5859] usb 8-1: Manufacturer: syz [ 716.609835][ T5859] usb 8-1: SerialNumber: syz [ 716.668864][ T5859] usb 8-1: config 0 descriptor?? [ 717.162869][ T5859] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 717.529817][T11437] syz_tun: entered allmulticast mode [ 719.814142][T11452] syz_tun: left allmulticast mode [ 719.894713][ T5859] usb 8-1: USB disconnect, device number 9 [ 719.903739][ T5859] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 720.139145][T11467] nvme_fabrics: missing parameter 'host_traddr=%s' [ 722.043004][ T5774] Bluetooth: unknown link type 81 [ 722.048254][ T5774] Bluetooth: hci1: connection err: -111 [ 722.420573][T11497] misc userio: Invalid payload size [ 724.230068][T11520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'. [ 728.219496][T11553] misc userio: Invalid payload size [ 729.729135][ T789] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 730.675502][ T5774] Bluetooth: hci3: unexpected event for opcode 0x080d [ 730.741477][ T789] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 730.759736][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.052448][ T789] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 731.261069][ T789] usb 4-1: USB disconnect, device number 13 [ 733.440574][T11616] xt_cgroup: invalid path, errno=-2 [ 733.465705][T11619] misc userio: Invalid payload size [ 733.707004][T11630] syz_tun: entered allmulticast mode [ 733.750493][T11630] syz_tun: left allmulticast mode [ 734.731547][ T5774] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 734.742637][ T5774] Bluetooth: hci3: Injecting HCI hardware error event [ 734.754755][ T5774] Bluetooth: hci3: hardware error 0x00 [ 736.861178][ T5774] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 736.906159][ T9] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 737.189382][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 737.219740][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.121713][ T9] usb 10-1: can't set config #1, error -71 [ 738.141143][ T9] usb 10-1: USB disconnect, device number 9 [ 739.299763][ T9] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 739.495750][ T9] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 739.518591][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.548127][ T9] usb 10-1: Product: syz [ 739.560146][ T9] usb 10-1: Manufacturer: syz [ 740.383404][ T9] usb 10-1: SerialNumber: syz [ 740.396623][ T2181] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm kworker/0:3: No space for directory leaf checksum. Please run e2fsck -D. [ 740.430623][ T2181] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm kworker/0:3: checksumming directory block 0 [ 740.461457][ T2181] usb 10-1: loading /lib/firmware/updates/syzkaller/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 740.518729][ T2181] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm kworker/0:3: No space for directory leaf checksum. Please run e2fsck -D. [ 740.660002][ T2181] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm kworker/0:3: checksumming directory block 0 [ 740.746350][ T2181] usb 10-1: loading /lib/firmware/updates/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 740.783555][ T2181] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm kworker/0:3: No space for directory leaf checksum. Please run e2fsck -D. [ 740.812531][ T2181] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm kworker/0:3: checksumming directory block 0 [ 740.825512][ T2181] usb 10-1: loading /lib/firmware/syzkaller/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 741.983702][T11714] comedi comedi3: Buffer allocation failed [ 742.012053][ T2181] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm kworker/0:3: No space for directory leaf checksum. Please run e2fsck -D. [ 742.033307][ T2181] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm kworker/0:3: checksumming directory block 0 [ 742.046486][ T2181] usb 10-1: loading /lib/firmware/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 742.056053][ T2181] usb 10-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 742.079835][ T2181] usb 10-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 742.090499][T11709] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 742.200406][ T5815] usb 10-1: USB disconnect, device number 10 [ 743.719276][T11732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1217'. [ 744.664189][T11735] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1218'. [ 747.741094][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.747485][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.096397][T11748] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 750.659773][ T5859] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 751.572085][ T5859] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 751.584184][ T5859] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 751.594015][ T5859] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 751.603803][ T5859] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 751.653690][ T5859] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 751.690684][ T5859] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.090000][ T5859] usb 8-1: USB disconnect, device number 10 [ 756.499803][ T789] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 756.718361][ T789] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 756.727889][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.936300][T11793] syzkaller0: entered promiscuous mode [ 756.943460][T11793] syzkaller0: entered allmulticast mode [ 757.130485][ T789] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 757.459900][ T5859] usb 4-1: USB disconnect, device number 14 [ 758.106374][T11815] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 759.022506][T11814] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1228'. [ 759.644609][T11821] xt_nfacct: accounting object `syz0' does not exist [ 762.240114][T11842] comedi comedi3: Buffer allocation failed [ 762.266844][T11839] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 762.761728][T11853] loop4: detected capacity change from 0 to 7 [ 762.803106][T11853] Dev loop4: unable to read RDB block 7 [ 762.809095][T11853] loop4: unable to read partition table [ 762.852335][T11853] loop4: partition table beyond EOD, truncated [ 762.858627][T11853] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 763.316659][T11858] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 763.656609][T11865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1245'. [ 767.750233][ T173] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 767.929965][ T173] usb 8-1: Using ep0 maxpacket: 16 [ 767.938451][ T173] usb 8-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 767.958381][ T173] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 767.983882][ T173] usb 8-1: config 0 interface 0 has no altsetting 0 [ 767.992731][ T173] usb 8-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 768.005537][ T173] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.017770][ T173] usb 8-1: config 0 descriptor?? [ 768.231829][T11919] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 768.512238][T11926] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1255'. [ 769.221674][ T173] hid (null): usage index exceeded [ 769.291894][ T173] lg-g15 0003:046D:C227.0003: unknown main item tag 0x3 [ 769.341912][ T173] lg-g15 0003:046D:C227.0003: ignoring exceeding usage max [ 769.403582][ T173] lg-g15 0003:046D:C227.0003: ignoring exceeding usage max [ 769.456726][ T173] lg-g15 0003:046D:C227.0003: usage index exceeded [ 769.497512][ T173] lg-g15 0003:046D:C227.0003: item 0 1 2 2 parsing failed [ 769.521294][ T173] lg-g15: probe of 0003:046D:C227.0003 failed with error -22 [ 769.577676][ T173] usb 8-1: USB disconnect, device number 11 [ 771.325171][T11946] md: array md0 already has disks! [ 771.345991][T11946] md: could not open device unknown-block(1,1). [ 771.368768][T11946] md: error, md_import_device() returned -16 [ 771.485303][T11951] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 771.497588][T11951] md: pers->run() failed ... [ 771.827857][T11962] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1265'. [ 772.968329][T11976] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1267'. [ 773.795800][ T28] audit: type=1800 audit(1787358535.580:41): pid=11981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1269" name="attr_qid_max" dev="configfs" ino=38961 res=0 errno=0 [ 774.179837][ T9096] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 775.569929][ T9096] usb 4-1: Using ep0 maxpacket: 8 [ 775.592841][ T9096] usb 4-1: unable to get BOS descriptor or descriptor too short [ 775.611790][ T9096] usb 4-1: config 6 has an invalid interface number: 114 but max is 0 [ 775.629854][ T9096] usb 4-1: config 6 has no interface number 0 [ 775.640148][ T9096] usb 4-1: config 6 interface 114 has no altsetting 0 [ 775.681633][ T9096] usb 4-1: string descriptor 0 read error: -22 [ 775.691075][ T9096] usb 4-1: New USB device found, idVendor=0506, idProduct=00df, bcdDevice=76.6a [ 775.723584][ T9096] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.771908][ T9096] gspca_main: spca501-2.14.0 probing 0506:00df [ 776.583487][ T9096] gspca_spca501: reg write: error -110 [ 776.694338][ T9096] spca501 4-1:6.114: Reg write failed for 0x00,0x02,0x01 [ 776.817511][ T9096] spca501: probe of 4-1:6.114 failed with error -22 [ 776.938253][ T9096] usb 4-1: USB disconnect, device number 15 [ 777.209027][ T28] audit: type=1800 audit(1787358538.990:42): pid=12018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1280" name="attr_qid_max" dev="configfs" ino=40125 res=0 errno=0 [ 778.020006][ T9096] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 779.010017][ T9096] usb 4-1: Using ep0 maxpacket: 8 [ 779.025380][ T9096] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 779.045658][ T9096] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 779.066422][ T9096] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 779.077045][ T9096] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 779.107657][ T9096] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 779.139806][ T9096] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 779.229203][ T9096] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.532287][ T9096] usb 4-1: usb_control_msg returned -32 [ 779.538141][ T9096] usbtmc 4-1:16.0: can't read capabilities [ 779.912036][ T28] audit: type=1800 audit(1787358541.670:43): pid=12067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1289" name="attr_qid_max" dev="configfs" ino=39128 res=0 errno=0 [ 781.534034][T12109] input: syz0 as /devices/virtual/input/input17 [ 783.072545][ T23] usb 4-1: USB disconnect, device number 16 [ 783.215123][ T28] audit: type=1800 audit(1787358544.990:44): pid=12120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1298" name="attr_qid_max" dev="configfs" ino=39214 res=0 errno=0 [ 789.361009][ T28] audit: type=1800 audit(1787358551.130:45): pid=12156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1309" name="attr_qid_max" dev="configfs" ino=40321 res=0 errno=0 [ 789.587913][T12161] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 793.396180][ T28] audit: type=1800 audit(1787358555.180:46): pid=12196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1318" name="attr_qid_max" dev="configfs" ino=40375 res=0 errno=0 [ 796.134735][T12210] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 796.798023][T12225] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 797.636842][ T28] audit: type=1800 audit(1787358559.420:47): pid=12234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1329" name="attr_qid_max" dev="configfs" ino=39334 res=0 errno=0 [ 797.810818][T12237] xt_nfacct: accounting object `syz0' does not exist [ 798.060011][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 798.625863][T12247] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 801.554421][T12272] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1340'. [ 801.705891][ T28] audit: type=1800 audit(1787358563.340:48): pid=12271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1340" name="attr_qid_max" dev="configfs" ino=40604 res=0 errno=0 [ 803.987488][ T8873] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm kworker/0:0: No space for directory leaf checksum. Please run e2fsck -D. [ 804.009709][ T8873] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm kworker/0:0: checksumming directory block 0 [ 804.080024][ T8873] usb 10-1: loading /lib/firmware/updates/syzkaller/htc_9271.fw failed with error -74 [ 804.116748][ T8873] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm kworker/0:0: No space for directory leaf checksum. Please run e2fsck -D. [ 804.168151][ T8873] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm kworker/0:0: checksumming directory block 0 [ 804.210797][ T8873] usb 10-1: loading /lib/firmware/updates/htc_9271.fw failed with error -74 [ 804.231820][T12286] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 804.247425][ T8873] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm kworker/0:0: No space for directory leaf checksum. Please run e2fsck -D. [ 804.286574][ T8873] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm kworker/0:0: checksumming directory block 0 [ 804.351655][ T8873] usb 10-1: loading /lib/firmware/syzkaller/htc_9271.fw failed with error -74 [ 805.326007][T12299] can0: slcan on ttyS3. [ 805.407754][ T8873] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm kworker/0:0: No space for directory leaf checksum. Please run e2fsck -D. [ 805.560120][ T8873] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm kworker/0:0: checksumming directory block 0 [ 805.583711][ T8873] usb 10-1: loading /lib/firmware/htc_9271.fw failed with error -74 [ 805.602594][ T8873] usb 10-1: Direct firmware load for htc_9271.fw failed with error -74 [ 805.618778][ T8873] usb 10-1: Falling back to sysfs fallback for: htc_9271.fw [ 805.691761][T12290] can0 (unregistered): slcan off ttyS3. [ 805.740691][ T28] audit: type=1800 audit(1787358567.530:49): pid=12306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1351" name="attr_qid_max" dev="configfs" ino=40666 res=0 errno=0 [ 805.762876][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1351'. [ 805.945387][T12310] dummy_hcd dummy_hcd.0: remove, state 1 [ 805.960736][T12310] usb usb1: USB disconnect, device number 1 [ 806.113004][T12310] dummy_hcd dummy_hcd.0: stopped [ 806.203288][T12310] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 807.487437][T12332] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 808.028129][ T5785] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 809.107378][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.114223][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.594128][ T28] audit: type=1800 audit(1787358572.380:50): pid=12352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1360" name="attr_qid_max" dev="configfs" ino=40721 res=0 errno=0 [ 810.664210][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1360'. [ 812.049478][T12371] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 814.207380][ T28] audit: type=1800 audit(1787358575.990:51): pid=12416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1376" name="attr_qid_max" dev="configfs" ino=40777 res=0 errno=0 [ 814.233192][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1376'. [ 814.519047][T12423] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 821.462780][T12455] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 821.584699][ T28] audit: type=1800 audit(1787358583.370:52): pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1388" name="attr_qid_max" dev="configfs" ino=39585 res=0 errno=0 [ 821.617254][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1388'. [ 822.045219][T12466] md: array md0 already has disks! [ 822.212755][T12464] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 822.249973][T12464] md: pers->run() failed ... [ 823.569471][T12482] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 823.581462][T12482] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 823.590035][T12482] CPU: 0 PID: 12482 Comm: syz.0.1384 Not tainted syzkaller #0 [ 823.597549][T12482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 823.607666][T12482] RIP: 0010:dummy_udc_start+0xcd/0x1e0 [ 823.613343][T12482] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 8e 00 00 00 e8 58 50 cb fa eb 0c e8 51 50 cb fa eb 05 e8 4a 50 cb fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 24 c9 23 fb 4d 8b 36 4c 89 f7 e8 [ 823.633057][T12482] RSP: 0018:ffffc9000f31f850 EFLAGS: 00010246 [ 823.639257][T12482] RAX: 0000000000000000 RBX: ffff88802e664050 RCX: 0000000000080000 [ 823.647294][T12482] RDX: ffffc9001393f000 RSI: 0000000000003e06 RDI: 0000000000003e07 [ 823.655398][T12482] RBP: ffff888025cb1000 R08: ffff888024fb9e00 R09: 0000000000000004 [ 823.663394][T12482] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 823.671385][T12482] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 823.679435][T12482] FS: 00007fcf189ee6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 823.688400][T12482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 823.695202][T12482] CR2: 00007fcf17b87240 CR3: 0000000065fef000 CR4: 00000000003506f0 [ 823.703219][T12482] Call Trace: [ 823.706571][T12482] [ 823.709559][T12482] ? dummy_pullup+0x120/0x120 [ 823.714402][T12482] gadget_bind_driver+0x390/0x770 [ 823.719504][T12482] ? gadget_match_driver+0x130/0x130 [ 823.724930][T12482] really_probe+0x247/0xae0 [ 823.729485][T12482] ? pm_runtime_barrier+0x14b/0x1c0 [ 823.734702][T12482] __driver_probe_device+0x1f5/0x390 [ 823.740134][T12482] driver_probe_device+0x4f/0x420 [ 823.745190][T12482] __driver_attach+0x444/0x6d0 [ 823.749998][T12482] bus_for_each_dev+0x235/0x2b0 [ 823.754867][T12482] ? driver_attach+0x50/0x50 [ 823.759480][T12482] ? bus_remove_file+0x140/0x140 [ 823.764439][T12482] ? do_raw_spin_unlock+0x121/0x230 [ 823.769795][T12482] bus_add_driver+0x340/0x630 [ 823.774505][T12482] driver_register+0x23a/0x310 [ 823.779297][T12482] usb_gadget_register_driver_owner+0xf9/0x270 [ 823.785667][T12482] raw_ioctl+0x1613/0x3d80 [ 823.790474][T12482] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 823.796192][T12482] ? tomoyo_path_number_perm+0x217/0x5e0 [ 823.802053][T12482] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 823.807577][T12482] ? make_qualifier+0x260/0x260 [ 823.812466][T12482] ? __fget_files+0x28/0x460 [ 823.817240][T12482] ? bpf_lsm_file_ioctl+0x9/0x10 [ 823.822232][T12482] ? security_file_ioctl+0x80/0xa0 [ 823.827390][T12482] ? make_qualifier+0x260/0x260 [ 823.832263][T12482] __se_sys_ioctl+0xfd/0x170 [ 823.836885][T12482] do_syscall_64+0x55/0xb0 [ 823.841389][T12482] ? clear_bhb_loop+0x40/0x90 [ 823.846171][T12482] ? clear_bhb_loop+0x40/0x90 [ 823.850900][T12482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 823.857062][T12482] RIP: 0033:0x7fcf17b9dd6b [ 823.861515][T12482] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 823.881226][T12482] RSP: 002b:00007fcf189ebf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 823.889699][T12482] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fcf17b9dd6b [ 823.897713][T12482] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 823.905851][T12482] RBP: 00007fcf189ecfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 823.913858][T12482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.921873][T12482] R13: 0000200000001000 R14: 0000000000000000 R15: 0000000000000000 [ 823.929870][T12482] [ 823.932905][T12482] Modules linked in: [ 823.971544][T12482] ---[ end trace 0000000000000000 ]--- [ 824.194274][T12482] RIP: 0010:dummy_udc_start+0xcd/0x1e0 [ 824.420302][T12482] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 8e 00 00 00 e8 58 50 cb fa eb 0c e8 51 50 cb fa eb 05 e8 4a 50 cb fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 24 c9 23 fb 4d 8b 36 4c 89 f7 e8 [ 824.441527][T12482] RSP: 0018:ffffc9000f31f850 EFLAGS: 00010246 [ 824.448677][T12482] RAX: 0000000000000000 RBX: ffff88802e664050 RCX: 0000000000080000 [ 824.456951][T12482] RDX: ffffc9001393f000 RSI: 0000000000003e06 RDI: 0000000000003e07 [ 824.467968][T12482] RBP: ffff888025cb1000 R08: ffff888024fb9e00 R09: 0000000000000004 [ 824.477486][T12482] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 824.485588][T12482] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 824.493712][T12482] FS: 00007fcf189ee6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 824.502813][T12482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 824.509549][T12482] CR2: 0000200000003000 CR3: 0000000065fef000 CR4: 00000000003506e0 [ 824.517705][T12482] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 824.525869][T12482] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 824.534313][T12482] Kernel panic - not syncing: Fatal exception [ 824.541022][T12482] Kernel Offset: disabled [ 824.545562][T12482] Rebooting in 86400 seconds..