last executing test programs: 6m52.279481515s ago: executing program 32 (id=67): socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r2, &(0x7f0000000140)='never', 0x5) 6m2.852760447s ago: executing program 3 (id=177): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r5, &(0x7f0000000140)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="885f", 0x2}], 0x1}}], 0x1, 0x24008001) syz_open_dev$mouse(&(0x7f00000000c0), 0x4, 0x18000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(r7, r7, 0xee01) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 6m1.801226639s ago: executing program 3 (id=179): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0xfc, 0x13, 0x101, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe, 0x40000}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x2, 0x48, 0xfffffffe, 0xffff, 0x5}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000"], 0xfdef) 6m0.56554464s ago: executing program 3 (id=182): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4048850) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='nv', 0x2) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000240)="44001d", 0x3, 0x2004c015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) r2 = socket$kcm(0x10, 0x5, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x404c000) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x44}}, @can, @qipcrtr={0x2a, 0x0, 0x7ffe}, 0xa5b5, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)='wg1\x00', 0x20009, 0x0, 0x8}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x80000002, 0x12) socket(0x400000000010, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x2bed3000) sendto$packet(r4, &(0x7f0000000280)="0b031260fe0064ff02005400f6a13bb1000000086086dd480300", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd}, 0x50) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x4e, 0x37, 0x27, 0x40, 0x1d50, 0x60c6, 0xa460, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0x20, 0xe8, 0x1, 0xf, 0x3b, 0xe8, 0x3, [], [{{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x9, 0x81}}]}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 5m57.679442302s ago: executing program 3 (id=185): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @remote, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/afs/sysname\x00', 0x0, 0x23) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000000)={r5, 0x0, 0x0, 0x1, 0x1, 0xf}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000180)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r6, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) 5m56.106638839s ago: executing program 3 (id=188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './mnt\x00'}) 5m55.936917128s ago: executing program 3 (id=189): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000400)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4}, 0x0, 0x0, 0x0, 0x0) 5m55.460758252s ago: executing program 2 (id=192): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x3, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x0, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0xd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500250000000000080004"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) 5m55.376978575s ago: executing program 2 (id=193): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4048850) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='nv', 0x2) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000240)="44001d", 0x3, 0x2004c015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) r2 = socket$kcm(0x10, 0x5, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x404c000) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x44}}, @can, @qipcrtr={0x2a, 0x0, 0x7ffe}, 0xa5b5, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)='wg1\x00', 0x20009, 0x0, 0x8}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x80000002, 0x12) socket(0x400000000010, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x2bed3000) sendto$packet(r4, &(0x7f0000000280)="0b031260fe0064ff02005400f6a13bb1000000086086dd480300", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd}, 0x50) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x4e, 0x37, 0x27, 0x40, 0x1d50, 0x60c6, 0xa460, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0x20, 0xe8, 0x1, 0xf, 0x3b, 0xe8, 0x3, [], [{{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x9, 0x81}}]}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 5m54.038272541s ago: executing program 2 (id=194): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000300)="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", 0x24e}, {&(0x7f00000005c0)="0456d4856c4b88b97e45594f0ae6bff7d3ae9a40b7bd9bc564c9516b939abd7e0e204453a9bffc037cb73bc5fef9de25180231f9dd5f0663c0093c594de5dc81cb1f638308ba1228e76cd56d8f18cf325b5608e2fd59232cdab01480b8e36c6b8b179ae19b388dea13c9a8429dd4e528929af3733ecd6b773c10132ee6bc3b", 0x7f}], 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) 5m53.012284562s ago: executing program 2 (id=195): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)) 5m51.801363122s ago: executing program 33 (id=170): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x10, 0x3, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x222, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x38, 0xc6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f00000000c0)={0x0, 0x30, 0x4, {0x4, 0xe, "c706"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5m51.780533573s ago: executing program 2 (id=197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './mnt\x00'}) 5m51.597656251s ago: executing program 2 (id=198): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nomblk_io_submit}, {@nombcache}]}, 0x1, 0x4dd, &(0x7f0000001040)="$eJzs3U1vG1sZAODXk8/m5t6kUIkPAS2lpaCqduK2UdUFKhsQqiohKlYs2pC4URQ7jmKnNCGL9D8gUYkV/AQWSCyQumLPDnYIqSyQCkSgBomF0diTNkltE0pqV/HzSKOZM+OZ95y6c87kdeITwMC6EBE7ETEaEQ8jYirbn8uWuNNa0te92t1e2NvdXsjFaNz/W655PN0XB85JfZRdczwivvftiB/m3o5b29xamS+XS+tZuVCvrBVqm1t/Wq7ML5WWSqvF4tzs3Myt6zeLJ9bW85VfvvzW8t3v/+bXX3zxu52v/zit1mR27GA7Dpo+3qWHOh1oNX3kdZzUcETc/V8q/gEbytoz2u+K8E6SiPhURFxM7/9Gv2sDAPRCozEVjamDZQDgtEuaObBcks9yAZORJPl8K4d3LiaScrVWv/qourG62MqVTcdI8mi5XJrJcoXTMZJLy7NZrmy/XDxSvh4RZyPiJ2NnmuX8QrW82M8HHwAYYB8dGf//OdYa/wGAU2683xUAAHrO+A8Ag8f4DwCDx/gPAIPH+A8Ag8f4DwCDx/gPAAPlu/fupUtjL/v+68XHmxsr1cfXFku1lXxlYyG/UF1fyy9Vq0vN7+yp/LfrlavVtdkbsfGkUC/V6oXa5taDSnVjtf6g+b3eD0ojPWkVANDN2fPP/5CLiJ3bZ5pLHJjLwVgNp1vS7woAfdNx4irg1BvudwWAvvEzPtBmit7XRrr9itCzrqcBH7Arn5P/h0El/w+DS/4fBpf8PwyuRiNnzn8AGDBy/EC3z//j3T7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFNvsrnkknw2F/hkJEk+H/FxREzHSO7Rcrk0ExGfRMTvx0bG0vJseuJov2sOALy75C+5bP6vK1OXJo8eHc39ayyy4f5HP7v/0yfz9fr6bLr/72NnstfUn2X7i10DmWoQAPpkf5zeH8f3vdrdXpjc3V5I172sz8tvtiYXTePuZUvryHAMN9fjzQeHiX/ksnJL+rwydALxd55GxGdb8V8dan+umRuZzmY+PRo/jf1xT+Mnh+InzWOtdfpv8ekTqAsMmudp/3On3f2XxIXmuv39P97sof5/+/3f3lv9X/K6/xvq0P9dOG6MG7/9TsdjTyM+P9wufi7rXscvf6ND/EvHjP/HL3zp4uEz32j8POJKtI1/6IxCvbJWqG1uXVuuzC+VlkqrxeLc7NzMres3i4Vmjrqwn6l+219vX/2kW/snOsRvvfPjzfjt2n/5mO3/xb8f/uDLXeJ/7Svt3/9zXeKnY+JXjxl/fuJXHafvTuMvtm9/dk7n9l89ZvwXf95aPOZLAYAeqG1urcyXy6V1Gz3bSJ/dPoBq2OjbRvo/4CSu85n3WNV+90zA+/bmpu93TQAAAAAAAAAAAAAAgE568QdP/W4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9d/AgAA//+9GtUM") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x0) pwrite64(r0, 0x0, 0x0, 0xfecc) 5m46.454560775s ago: executing program 34 (id=180): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) io_uring_setup(0x62d2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) setsockopt$inet_mtu(r5, 0x111, 0xa, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r3, 0x0, 0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r6, 0x1) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x80) 5m43.335883358s ago: executing program 5 (id=201): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) shutdown(r0, 0x1) 5m43.141518438s ago: executing program 5 (id=202): r0 = syz_open_dev$mtd(&(0x7f0000000240), 0x0, 0x2) ioctl$MEMUNLOCK(r0, 0x40084d06, 0x0) 5m42.993297965s ago: executing program 5 (id=203): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000300)="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", 0x24e}, {&(0x7f00000005c0)="0456d4856c4b88b97e45594f0ae6bff7d3ae9a40b7bd9bc564c9516b939abd7e0e204453a9bffc037cb73bc5fef9de25180231f9dd5f0663c0093c594de5dc81cb1f638308ba1228e76cd56d8f18cf325b5608e2fd59232cdab01480b8e36c6b8b179ae19b388dea13c9a8429dd4e528929af3733ecd6b773c10132ee6bc3b", 0x7f}], 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) 5m41.922454438s ago: executing program 5 (id=204): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)) 5m40.710434598s ago: executing program 5 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './mnt\x00'}) 5m40.674310129s ago: executing program 35 (id=189): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000400)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4}, 0x0, 0x0, 0x0, 0x0) 5m40.509410857s ago: executing program 5 (id=207): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$netlink(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x38, 0x0, 0x0) mlock(&(0x7f0000638000/0x4000)=nil, 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) 5m36.429736328s ago: executing program 36 (id=198): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nomblk_io_submit}, {@nombcache}]}, 0x1, 0x4dd, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x0) pwrite64(r0, 0x0, 0x0, 0xfecc) 5m32.684595063s ago: executing program 6 (id=209): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0xfc, 0x13, 0x101, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe, 0x40000}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x2, 0x48, 0xfffffffe, 0xffff, 0x5}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff0200"/51], 0xfdef) 5m32.115132611s ago: executing program 6 (id=210): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r5, &(0x7f0000000140)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="885f", 0x2}], 0x1}}], 0x1, 0x24008001) syz_open_dev$mouse(&(0x7f00000000c0), 0x4, 0x18000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 5m30.917798009s ago: executing program 6 (id=211): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000300)="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", 0x262}, {&(0x7f00000005c0)="0456d4856c4b88b97e45594f0ae6bff7d3ae9a40b7bd9bc564c9516b939abd7e0e204453a9bffc037cb73bc5fef9de25180231f9dd5f0663c0093c594de5dc81cb1f638308ba1228e76cd56d8f18cf325b5608e2fd59232cdab01480b8e36c6b8b179ae19b388dea13c9a8429dd4e528929af3733ecd6b773c10132ee6bc3b", 0x7f}], 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) 5m29.699555919s ago: executing program 6 (id=212): r0 = syz_io_uring_setup(0x4172, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) syz_usb_connect(0x6, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000180)=[0x6, 0x8001], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 5m28.67383008s ago: executing program 6 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './mnt\x00'}) 5m28.487913989s ago: executing program 6 (id=214): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x2000200a}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xfffffdfb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x94) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000009b80)={0x40000012}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) 5m24.885560887s ago: executing program 37 (id=207): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$netlink(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x38, 0x0, 0x0) mlock(&(0x7f0000638000/0x4000)=nil, 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) 5m13.253966469s ago: executing program 38 (id=214): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x2000200a}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xfffffdfb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x94) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000009b80)={0x40000012}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000000e00)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d3f0a8b089b3f383163030890e0879b0a71c6e70a9b336c959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e804e000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae13f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c30900000000000000752716286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4402bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea77b5602984e4de7c6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cff7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96050000000000000080f146684078416d59fdee5325928974d12dad99dac44c3f0008047096ac4002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999b596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efe5496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5ca00000000000000008734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebd078ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0003f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e36b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce212659414900005b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c2769310123cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1de51f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72932b99b380000000000000006859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002601e87b162dadc600", 0x1000}}, 0x1006) 5m7.628045646s ago: executing program 7 (id=236): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, 0x0, 0x2000c08d) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) shutdown(r0, 0x1) 5m6.476734893s ago: executing program 7 (id=239): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x2, 0x400000, 0x0, 0x4}}, 0x2e) r1 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0xaf02, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001000000000000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000102240)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000103440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000103640)={0x0, 0x0, "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", "d418f0d62fc88505fe297ec8289ce54cbd6f5bf1aebca1ecbf80d241967589250e962c73b4372ea44743a6307903e5d733062979ca6ea91a22d6994a708752c4a368371c1208c1876464d8ca13b38a94b5367e3c311bbf657a85d2ee6f4349b4b9ff2cd0fd11a8523ff23984007a74920a665d9139b1c40007656caaf5ec3d9f7fe1d35e5b01bf216e77f286985288cd16cd6d91905a76e9d88c9ffc6c3e02d1cefe1ea1c05912b217d267bb1ca399e4e32008e8cd382426c3f09f3e396e9c5ab466b54be3f8ddea319fb8f7383859cbbcd2e8b34e7335bf67d48171111e448fc07418fe81b3a7726a6fea72c89aa26f93926b44d5e904647e552249f7ce732131701f9931c6c57fbddb8b20f5facbc6171256e93440ac03674539a303e1c1f51a6d28b4bcff5ebf9a4fc13357dbcd14bd6eed0068c822a833274f7f1b81cf447705fdbc375a975956a24448804cefed10a73c370017e95301fb51ec790c78e96af9a3de26627207de809870d853aade901c82543f767e040b81c742be19b1471aa5987d7c22b10bd17ab797075e450b551f50f3f428aeabf7a8f4c0c547bb9abbd0f6b2ae4041cbaf306413ff4bd38d4e6d2cd4a0c2c83149c220c6e87bd379a8c7a69083adfe56baa513c56f4abd2704376df0b7fba487c93e6e9ec3a42ccbe8bae91b1a85f6b27d193d36de08b1acde544dc3404f13cc89ce02773f7e8a1501fe797942e57727b55bc27bcf0e63f2fbff98f31ed7e46f21bb96d54ae0fa4e458b4ea4aab59b42a5ad6fddf08b57e8b0e95ff31498fab7c243b8bd1cf21175b3d0363a437008807188c0a714f39d84ac4dcbe88df38fb05a6d66ef30db33c305007d6bff861de87c80c379895e583558c5ea519ac74f3188b1c22ee56179b974bc8f378b6d1ac647b1b24045a4f1e44d431e63ec253cd3e26ac5281e5922e9748c3c62fbb6b0130fcf7307734fdb70d1390c28cd6ea5bc50811fd45648008c8d7a3d29e648140724834720405c0ededf0559e04148ad05bb274f09b2adea3d09d795c8f1771d13febbc407f14b724298554c7975906fce3e1c15aa75e1da7faafcf50e1d53022b9ff1891f1ad8626e360ae746b2670b3a18549afbe96b691858b14a7becfbc2160fd9b3cf0ea3acb7212d3e9c18df750317261e80fb351a175cc8e8e0a6bb0a6426adb68158be61a5081f150b2347d587d694d2b8768715cff4cbe6fdaf52724c8be68d5beafba24ad65ceab2abab89852db524c75b4a5472a28179a750f987e98049e41a0ab276362762bdf800ae164ded9731cec215e968ea4b0055bd837f937526b345740d463391b0c43c7ae509b10e61bcec14ec38456a7417338a4076843ce8f2f728012690a910cf7d9f654d1f89ecc50639f2a328837783d502f2537f8073be5668f7b93f5d59cb8af1a02214bcf37c894eace62e128f08fbbab75c1fffa32f14f6486f29ecd7d195d1e5854ceebfb7719bee510a35dd9a6af4b0bdc6df2c1a0a45a7936d4fc5a1027790838b547d7876733a6e94710b4958220e92f21c555dfd89ace2f86baa8c2830ba8894332924f5ffe3d463a4819857f09a6f8ae2990fa1c6da7911ce8dbf05d493c2930722bcd83be44ae7d52401946747ee2e329d931552b232045c01748e3f4bb04a2d3907000c1c2829075d9c0069082f88d5ae3e45c2609995b5b6348e484d34d900dc16e421a7d14c330f1cc3c297ce8632d2db454b6c21910b54c5b2fad971fe35ff17d859a1ba9b4d39475beab92b94d13b2c0baa2bd6f16ca2da6ffb3fc635ea459bddb08be12ecc99bcc640a1b331e42ffaf0d92a1db7681fb7d5696073aca11e77855df6d5fca32a00b7dee6eca9cf35dff8cea9cd31108ebddcb2a1b678ed2e35ccb730e49c45e48e927a94a4824719846ac2e67d07eabe84bfe992ddd00e31ffd3de642c8cf561b8a97c33e62785bd483fce62510b6d8bc84bbffcd488df7d94f80d30f2d1c21909ab0197aad16dbaf1cb7ce79b6c1414c11a74dd4a0555511e8f4a6dca8fcd44e21b494aafd7f7e3ba60bf6dc230481c69c0483e8f051ca767b5ccd72f8e619cb3e3e0bb9abfc08e3700dfc3f2a8a81ec1c76f4c1cfc3c569a378f9fdfc31285fc16ac82c3f2471919228bcfd8e2fe0a3147090106192b020aef219393c13d6cf798f37bd23b5c9e8a0feaf6be72df90d536ac4a53c293a01c0edc1270872b7f524116e0e4b0959316a08683867e0d73a7a01d2b067595943b19eb72d251a99364c0cf062136ebac859dc4716f41f5106e80339ca96075c3a2d316a8148f96f2b93f7645b1dd743e45f51b4e8d1964c6f78a8f017fd4e63d2fe32e206c86e807f5bcfb7cc2b4b4f987da9fa09d4197631c803b8422fe4fe6316505eb7c0d775e6ce32906cf665bb24ea83b2c653639596d12d6d1dee3001cd9b94394d066b2e1745a5bb8c9729e2b492d8f45e8fe1c20a18877a34fa2e17c6673e52aabc8ccaab3290f5d7a4f99cf6bece9c2a43bc587133b615dccf12c4e1a253eb3f9df3f9a0b9a503889dcc86a48cc4fba29497771fa40e62754d3177382acb7bc42f282fb5398ce7ad086956ee5677bfda37bdbf1324c1b87de1aafac6b7041411fd3b755ce925948c0d8b1c2a0e644c1643ef3830260ff953c0b7b87893528a59f3cdbb1d7af21e7ce8e906fb37cfd335f7dae4dc823a0eaf252fcebc4a3ecf04b3143657ed6707baa4e0ac536fd8dfc517d15a6e4a85eb2f5b0e3e9c63f0a843de32626f69615e0066917d351f34b83f267cbfc1d567606d7de975b852d0c68b95b97f203e945bdf864a0495ba71b949f3ef17b2c33563040a9ef3324575e8217ab1825cba21f2175bd5dd347e25b8196bfdc8ec427065963cfa0b85fb65ab451717fa7a35c851134c4d4e6aed99300e442fca95b53d9e03ea5842f2015a37f498ae62b55dbfc80e615614f736270aa64eb1043c2c2e5eb760ddd2fa575075bc1b600d707decfde7a2633c8cef6401a231ddee99cd8936062ecdbbbb2c17ad882a1aaeb1cf5dbd2d198a90697742ce6187eccb0e883f974aa612eac7e8f8e6dba8bfc018fde03849a87e6138c4b27736f58a5ea059b0276f140e346df216f5f4efa107a67b4ae7fe9e15c68878ab07ac632f395a62a33bf417b2dbaa6679b60138859853b939c27e44b1cdd50a17b9a811d218f7c92eac592dfa2cf2d8ac8881b8845e73728b019e4f4a3770dc4f8fcc3ae0e34a607274220c4a48e384dcdd78e0d1d4971ed2ed5bfbe82ef609ae2bfea8acbecba792e64f435e0aea0f26e646797247003b60ba252ddd1ce5db05a8c7d66aa88b3cd7e4b22c891c8c3598c1b723195c36cd1205f3a10dd491c8f37ac96873d1413693c9bd0a6744dee0daa39fa63b8e983ed111c3d2b562387017ca321f912a42c021c30a6e90c2bb34e306fd99a792049b6fdcafa40d01414fa8d32e9967c2f4daa66e29f4a345183ce8c464727ad737c5fe4c24fa203842c23e3d39e417e12db6749eb8b6568e59eaf3050b6a1e4ca44c711014dd1ebe037a49bfbddc2d622a8db7e8e7ae137e0803d92c6ccc482a065ed0e95139ca5d8cdba861905312f2a9096daa5c9c7de69b7184835dfead405cbbce72eab3898f58283d0c03f5a093b9fe7f406b35719081d6d039c1a827ccfd6003627c8957e3c56bc870ea2581250a45ae64b4c4210f525bb327237958b752bd3eef409809bd9ab1eda22da4ebf5aeb722b832fdbc83cff7644881d162ee171997a705fa48d2327820e8f7cf70c143d5ccd4fc2c15a77382a80c62e0825687f2983034507397f8e23f9955ae9dd3ce32ea274d7d86f768a1c554fe8ea6e840e1d89e108d2130348c3e8af6425104a4c0fc047ae2a5db545a7fb6675482d9a08b7391b84346bff5aca9648ce8352cc4e3e3cbb637c7e6a70c5125686dac36600ac60181660f4c42ba8b0011f71ae873c676400d6f7e284fa3c1ad41416ac96de3f16c386253065f468920f68d37f7b2ffe7b29aad8f33f5c1de4e44999df45ce3b0fd952d0356aa9990784b93c11f962c1c5c8066a64abc61e45a396e8404a795473cb40efba1eb91db7f62146ca317d52160fb9ad0ed32679f66930f89731471948ea42b2ca29d7e2362e13e903e95a9ffd6fa640532e1696e77526a06710cb48ff202d948fb82793b7fe2cd990d835fe74a5ccd7d0fcd91a3e6bc6f0ac4a0e038edd84b5218c05c1c8ecd626fe82ed4ab959877d200110f3fde3121d0f94375d2cfd72054de4b6c24b1d6088ed5a9d25e7df0590601f4e8a3a6fe348a49b834c0837fc34919364fdf7fbed030a1110678eff634ab27892b8eef729cce52ae7212ab3a2d97b0fa8dd10b816922987fd282aa129ee0bce1524b849b14c9ec4424100c8fb95b92ae3f819c2a61fbb88204dca8aba8ab1b6a83b60d3483cdd77e67056d965ac4331664d374bd4c612d1e054fa3c921e597136025397e0f64b96ed6480c24751a29157f73935c43a3337193c20fc425cbae896da7e51b18fb8d9e991c7c604247ca9eb9da489ce38f10c6ab1944b633e89b5745905ee94b84fbbac24f27d2668b07c1bb33d19b9864a97bd3987beb84df12003494ae60305076f1b68bb18fe15a148841e827ada1f314cf005adeebfcd7c860f3789792585f06d8320292de73f10ee4247209559c18488ca25c0e00f6caa1bafba4ddfe55b87182e9a4896d2764efb3b7a67531c3917313aa768d8ddff8ec1b6a3438501442d313e3744aed594ee6599ab6d87cd0318ec027ffd6345790029eff64e9f9d6985bc348166e0ebaf4edd5e583d7f44f7c419df4a702dd048303d6e80224c61805cf110f6188062c3834dd9c912bb6a5f717b94698e2a9b3a91ffae3cdb83cfa37f0272291572cc77c764819d5e388ec2891a9baf5ace3169d042c730403b720e826a60dd7dd53b1d5c43d32c4f26345feacc0dc233ab2b353cd6f5121d6e1251b892b10524ca708376c80239785dcf07ee620f18d761595143b7de6b94a81b422ffc94f025db834e85a319c636b552b55d256bf8c6f604b83be90981b2e685050b938b5803459630f8afdc78a72305e4de7563e7f4d013f3785eef395e7a702bcd4e8e66a4dbde2ae4458302c1a30dee9ecb572616493e36b43cf0d31b50cf719f9c380bb7f997d60d6527e7f13ba2a77a9623c281c92b9d27e0954d50664c2922ab3b09fd13064b58d81a7f3938df8a085a193a98416f6e9198719212c3070824b4bc953289c0546575f7c7ff81a28a2ca04f3db3cffd7e2d6f9fe171a7746b3a6f8bf188c07a749b378fff7c150185e062be5a1910f3948f934626c32f1c80f5d8308e857bfdcdc694ce2f48e1a84588d1ced20167262b6b0ca3818b29ed87e1d8f3d6dfdc86d5fa2e5582f462e10c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000104640)={{0x0, 0x3be, 0x51e, 0x9, 0x0, 0xfffffffffffffdee, 0x80b, 0xf, 0x5d, 0x0, 0x2, 0x0, 0xfffffffffffffff9, 0x8, 0x8000000000000001}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00001048c0)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {0x0, r8}, {0x0, r9}, {r10}], 0xd4, "d65dd32b44df19"}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 5m5.154845108s ago: executing program 7 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d1501000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000340)=0x8000, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) close(0x3) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x80000000}, @TCA_GRED_LIMIT={0x8, 0x5, 0x71}, @TCA_GRED_PARMS={0x38, 0x1, {0xf, 0x0, 0x9, 0x7, 0x8de3, 0x4, 0x1d, 0x3, 0x80000001, 0x58c, 0x7, 0x15, 0x5, 0xfc, 0x2}}]}}]}, 0x7c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0x20, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @rand_addr=0x64010101}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x8d0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x401) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xcc) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/4, 0x4, 0x7) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000640)={0x0}) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX]) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) 5m3.918251979s ago: executing program 7 (id=243): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x126) 5m3.648850902s ago: executing program 7 (id=245): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) shutdown(r0, 0x1) 5m2.528617087s ago: executing program 7 (id=248): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x11}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pipe2(0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x100002, 0x9) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x28a40, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0xc0403d11, 0x0) 5m2.239419671s ago: executing program 39 (id=248): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x11}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pipe2(0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x100002, 0x9) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x28a40, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0xc0403d11, 0x0) 2m18.630149426s ago: executing program 4 (id=492): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x28) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 2m17.343570309s ago: executing program 4 (id=493): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000340)=0x8000, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) close(0x3) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x80000000}, @TCA_GRED_LIMIT={0x8, 0x5, 0x71}, @TCA_GRED_PARMS={0x38, 0x1, {0xf, 0x0, 0x9, 0x7, 0x8de3, 0x4, 0x1d, 0x3, 0x80000001, 0x58c, 0x7, 0x15, 0x5, 0xfc, 0x2}}]}}]}, 0x7c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0x20, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @rand_addr=0x64010101}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x8d0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x401) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xcc) r7 = syz_io_uring_setup(0x574b, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/4, 0x4, 0x7) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000640)={0x0}) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) 2m11.360213474s ago: executing program 4 (id=500): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000013c0)) 2m11.000855371s ago: executing program 4 (id=501): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x100) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$eJzs3W9v09YewPGfS6vm5koI3XuFUG+Bs8KkInXFSSAo4pHnnKQeiR3ZDmqfDFW0RRUBJNgk6BPUB2P/tdewp3sR017F3gXaO1gnHzuQtvnT9V8q9v1EYMc+Pud3HMu/uo2PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiOVWbbtgScPz28tqMLcaBs0h67v13dg1GdKuiJX8k1xOLqWLLv3v/eqLyX9zMpu+m5VcMsnJ1r8vXrj738mJ7vZDAjoVL15tPV7tdNafjzuQManrexIFXtOpa+VFgaqUy/bNpVqkal5DRytRrJvKDbUTB6Gad2+oQqVSUnpxJWj79arT0N2Fdz4p2nZZfZVPP2//5meLkbvkNRqeXzdlktVJmTvJgXjPi1WsnaZSG5ud9dKg4LazwyMpVBjVk6RQcVShol0sFgrFYqF8u3L7jm1P7ltg7yH7Soz/oMV4HefpGziSiSz/S0M88aUty6L6vlypSiiBNAesz3Tz/8c39dB2e/N/N8tfer96Rkz+v5K+uzIo/w+I5W+/ppPqs/k/d3Z2DrDN+f+nsb2SLXksq9KRjqzL8+OK6BhfXSdRd120+OJJJIF40hTHLFHZEiUVKUtZbHkgS1KTSJTUxJOGaIlkRSKJRZsjypVQtDjyvQQSipJ5ceWGKClIRSpSEiVaFmVFAmmLL3WpimNq2ZBNs99Lw/rfLVQ4SKHikELkfxzdcZ26gSPb6eZ/AAAAAADwwbLMb9+T6/8puWzmctLQ9rjDAgAAAAAAx8j85X82mUwlc5fFqnlc/wMAAAAA8GGxzD12lojk5Wo6170Til8CAAAAAADwgTB//7+STMzYa1fFOtD1/9SpBQgAAAAAAI7sm0Fj7P9mllqWRK1p69c/JAynrO3W8nXriZOscJ6cS7c7t7fGuDZjnc8qMZPyZPbO1bNWNvrlu0Ew32aTjZ44rH5j/Vp7Avi8W0OfAH6S/gHID/JR2q1u2bXumrSVf2WLG3cL4jjnJ2K9HH/5dPOlmO5/6zcnswIPn3XWTCzbybvtJ1mF+8ZRHLwz5Asz3oK556Lv6MZT5kaMrN28JRubnXW79wOYSDefGNqmXEgXpm2+kbn07Vw20n5+d/9zSZuFxUG9r5sopkXE9Nw6ZM/fyLW0zLX5a+mkTxTFvlFMJTGn+6LYWr6+k+7/CTnQvjhEFKWB+yKLotR7FBwiCgAYl43BWei7nXTN3sR/iLPcxqgn+ezN7of58ULeyHxaZn7GnFgnZ/qc0e1RZ3T7iHn9l33PQBqUY5N2f3zXbsG0+3MStwxsN2oULclJ7uXv75etPlp/tP60WCyV7Vu2fbsoU6Yb2YTcAwDoY/QzdkaWsG6Zq+pk5Vpacs9V9X/efaVgUR7KM+nImiyYuw3MNw761prv+RrCwoir1nzPE14WRlzV5Xse9HLwsqXT+TAAADglcyPy8EHy/8KI6+7duXz41XFvLgcAACdDh2+tfPy1FYZe60GhUik48ZJWYeDeU6FXrWvl+bEO3SXHr2vVCoM4cINGMnPfq+pIRe1WKwhjVQtC1Qoib9k8+V1lj36PdNPxY8+NWg3tRFq5gR87bqyqXuSqVvvThhct6dBsHLW069U814m9wFdR0A5dvahUpHVPQa+q/direcmsr1qh13TCFXU/aLSbWlV15IZeKw7SCrtteX4tCJum2sVx72wAAM6IF6+2Hq92OuvPT3Bm3H0EAAC7kaUBAAAAAAAAAAAAAAAAAAAAADj7hty359SO90bAaTmFew2PKdSzEcY/dea1iGRLdl5L72HTHXT6xFo/N+6+n5mZMZ+YAJy4vwIAAP//NVpGnw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @mcast2, 0x2}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffff", 0x45}], 0x1) ioprio_set$uid(0x3, 0xee00, 0x0) 2m9.744457053s ago: executing program 4 (id=503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() syz_io_uring_setup(0x386c, 0x0, 0x0, &(0x7f0000000000), 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0xfc92) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f00000000c0), &(0x7f00000001c0)}, 0x20) 2m7.864619695s ago: executing program 4 (id=505): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) 1m51.500139841s ago: executing program 40 (id=505): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) 14.284383197s ago: executing program 0 (id=690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40014}, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r3, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200ffff48000480440001800b0001006578746864720000340002800500020094000000080003400000"], 0x9c}}, 0x4008000) 12.713235854s ago: executing program 0 (id=692): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x4, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nomblk_io_submit}, {@nombcache}]}, 0x1, 0x4dd, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x0) 7.889816192s ago: executing program 0 (id=695): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000180)=0x5) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x6, 0x6, 0x1}}, 0x30) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./nfsd/portlist\x00', 0x910) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) pipe2$9p(&(0x7f0000000240), 0x84000) r4 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) fsmount(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r5, &(0x7f0000000380), 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x4c00, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x21a, &(0x7f0000000180)="$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") 7.568935428s ago: executing program 0 (id=697): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x5, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x9, 0x8, 0x0, 0x4, 0x2, 0x20}, 0xe) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0xfff, 0xa}, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) 7.408582386s ago: executing program 1 (id=698): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket(0xa, 0x5, 0x0) ioctl$PPPOEIOCDFWD(r4, 0x541b, 0xf0ff1f00000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40188d0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000300), 0x0, 0x1, 0x0, 0x0, r5}) 6.819162244s ago: executing program 9 (id=701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40014}, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r3, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200ffff48000480440001800b000100657874686472000034000280050002009400000008000340000000f5080004600000005e0800064000000002080001400000001308000540000000010900010073"], 0x9c}}, 0x4008000) 6.078843911s ago: executing program 1 (id=702): r0 = syz_io_uring_setup(0x4172, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) syz_usb_connect(0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000180)=[0x6, 0x8001], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 4.752746056s ago: executing program 9 (id=703): r0 = socket(0x10, 0x803, 0x0) nanosleep(0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000300)={0x7, 0xeeee0000, 0x0, r3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.721722588s ago: executing program 0 (id=704): r0 = socket$packet(0x11, 0x2, 0x300) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) 4.652915341s ago: executing program 8 (id=705): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000180)=0x5) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x6, 0x6, 0x1}}, 0x30) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./nfsd/portlist\x00', 0x910) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) pipe2$9p(&(0x7f0000000240), 0x84000) r4 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) fsmount(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r5, &(0x7f0000000380), 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x4c00, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x21a, &(0x7f0000000180)="$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") 4.412889093s ago: executing program 8 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000100)=0x20b, 0x4) sendmmsg$inet6(r3, 0x0, 0x0, 0x4000001) 4.412492153s ago: executing program 9 (id=707): syz_init_net_socket$x25(0x9, 0x5, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100', @ANYRESDEC=0x0]) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x18, 0x3a, 0xff, @loopback, @private2, {[], @mld={0x82, 0x0, 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x20, 0x2, 0x3, 0x5, 0x0, 0x0, {0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004094}, 0x40400d4) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, 0x0, 0x4) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 4.293558039s ago: executing program 1 (id=708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_80211_inject_frame(0x0, 0x0, 0x47) 3.25657607s ago: executing program 8 (id=709): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4004080) syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, &(0x7f0000000280)}}, &(0x7f0000000100)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) wait4(0x0, 0x0, 0x2, 0x0) 2.524934606s ago: executing program 9 (id=710): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket(0xa, 0x5, 0x0) ioctl$PPPOEIOCDFWD(r4, 0x541b, 0xf0ff1f00000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40188d0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000300), 0x0, 0x1, 0x0, 0x0, r5}) 2.420518431s ago: executing program 1 (id=711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40014}, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r3, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200ffff48000480440001800b000100657874686472000034000280050002009400000008000340000000f5080004600000005e0800064000000002080001400000001308000540000000010900010073"], 0x9c}}, 0x4008000) 1.272484818s ago: executing program 9 (id=712): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/mycluster/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/cluster/mycluster/node/node0/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='127.0.0.1', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/cluster/mycluster/node/node0/ipv4_port\x00', 0x1, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000d00)='777', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/mycluster/node/node0/num\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0\n\x00', 0x2) 1.104794986s ago: executing program 8 (id=713): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x30, 0x400, 0x20, 0x600, 0x7, 0xa, 0xf, 0x1, {0xef, 0x4, 0x1}, {0x931d, 0x4e26837, 0x1}, {0x4}, {0x3, 0x200, 0xfffffffe}, 0x3, 0x100, 0xfff, 0x3, 0x0, 0x3, 0x2, 0x184, 0x3, 0x8d, 0x6, 0x6, 0x8, 0x200, 0x2, 0x8}) 1.061845698s ago: executing program 1 (id=714): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000180)=0x5) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x6, 0x6, 0x1}}, 0x30) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./nfsd/portlist\x00', 0x910) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) pipe2$9p(&(0x7f0000000240), 0x84000) r4 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) fsmount(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r5, &(0x7f0000000380), 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x4c00, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x21a, &(0x7f0000000180)="$eJzs3bFqU1EYB/AvbaqlIOkgFEXwiotTaCruEVEQCgqSwc1iU5QkFgwE2qHVyZfQV9DRVXAQV19ABKmCi906CJF6Y2NL2kRqcov9/ZZ8JOd/z3cuIYcMObl3rlFbXG4ubW5uxORkLvLlKMdWLqZjLMYj9SQAgP/JVrsd39uprHsBAEbD/g8Ax8+A+//tEbYEAAzZwN//x0bWEgAwZHfutnNplUxGNJ61Kq1K+pg+e3UpHkY9qjEbhfgR0d6R1jduzl+fTbZ9mY5KY72TX29VxnfnS1GI6d75UpLanZ+IqU7+41RUYy4Kcbp3fq5n/kRcuvjH/MUoxIf7sRz1WIztbDe/VkqSa7fm9+RP/hoHAAAAAAAAAAAAAAAAAAAAAADDUEx29Dy/p1jc7/U0n56vk4/+5wPtPZ8nH2fz2a4dAAAAAAAAAAAAAAAAAAAAjormymptoV6vPj6oePT+5dt+YwYscp15D3udwxenLnx+vv+Yp39zf/5t8eZ8lrdlwOLdxoMzl5szV45KPyurtYmD3lrfChFDmv1Vpmv/veq+g2delBder336OuiVM/gwAgAAAAAAAAAAAAAAAACAY677o9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT//394RdZrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnwEAAP//Rp2fMw==") 830.43921ms ago: executing program 9 (id=715): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x42902, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/43, 0x2b) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x4c, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) ioctl(r0, 0x40186f40, &(0x7f0000000300)="ffffffff") 672.552207ms ago: executing program 1 (id=716): r0 = syz_io_uring_setup(0x4172, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) syz_usb_connect(0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000180)=[0x6, 0x8001], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 593.294951ms ago: executing program 8 (id=717): unshare(0x8040480) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) 553.198373ms ago: executing program 0 (id=718): syz_init_net_socket$x25(0x9, 0x5, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100', @ANYRESDEC=0x0]) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x18, 0x3a, 0xff, @loopback, @private2, {[], @mld={0x82, 0x0, 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x20, 0x2, 0x3, 0x5, 0x0, 0x0, {0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004094}, 0x40400d4) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, 0x0, 0x4) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 8 (id=719): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="520000002300010100020600"/41, 0x29) write(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): duct=0, SerialNumber=0 [ 180.530293][ T23] usb 5-1: config 0 descriptor?? [ 181.045589][ T6419] Process accounting resumed [ 181.341677][ T23] usbhid 5-1:0.0: can't add hid device: -71 [ 181.347874][ T23] usbhid: probe of 5-1:0.0 failed with error -71 [ 181.377559][ T23] usb 5-1: USB disconnect, device number 2 [ 181.471394][ T5820] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 181.694184][ T5820] usb 2-1: unable to get BOS descriptor or descriptor too short [ 181.723042][ T5820] usb 2-1: config 114 has an invalid interface number: 32 but max is 0 [ 181.745684][ T5820] usb 2-1: config 114 has no interface number 0 [ 181.765303][ T5820] usb 2-1: config 114 interface 32 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 181.785232][ T6439] loop3: detected capacity change from 0 to 256 [ 181.821643][ T5820] usb 2-1: config 114 interface 32 has no altsetting 0 [ 181.859460][ T5820] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=a4.60 [ 181.885541][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.931453][ T5820] usb 2-1: Product: syz [ 181.935705][ T5820] usb 2-1: Manufacturer: syz [ 181.940363][ T5820] usb 2-1: SerialNumber: syz [ 182.037198][ T6427] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 182.339735][ T5820] usb 2-1: USB disconnect, device number 4 [ 183.721744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 184.116378][ T6459] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 187.538933][ T6464] Process accounting resumed [ 187.862361][ T6477] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 188.641453][ T5868] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 188.784003][ T6494] Zero length message leads to an empty skb [ 188.838287][ T5868] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.867475][ T5868] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 188.883522][ T5868] usb 3-1: config 0 interface 0 has no altsetting 0 [ 188.890539][ T5868] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 188.901037][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.927195][ T5868] usb 3-1: config 0 descriptor?? [ 188.961420][ T5821] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 189.141776][ T5821] usb 5-1: Using ep0 maxpacket: 16 [ 189.158659][ T5821] usb 5-1: unable to get BOS descriptor or descriptor too short [ 189.173514][ T5821] usb 5-1: config 121 has an invalid interface number: 127 but max is 1 [ 189.191461][ T5821] usb 5-1: config 121 has an invalid interface number: 127 but max is 1 [ 189.210670][ T5821] usb 5-1: config 121 has 1 interface, different from the descriptor's value: 2 [ 189.239237][ T5821] usb 5-1: config 121 has no interface number 0 [ 189.256412][ T5821] usb 5-1: config 121 interface 127 has no altsetting 0 [ 189.354073][ T5821] usb 5-1: New USB device found, idVendor=07aa, idProduct=9601, bcdDevice=89.4c [ 189.399047][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 189.462257][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.575310][ T5821] usb 5-1: Product: syz [ 189.625396][ T5821] usb 5-1: Manufacturer: syz [ 189.684672][ T5821] usb 5-1: SerialNumber: syz [ 189.708345][ T5868] usbhid 3-1:0.0: can't add hid device: -71 [ 189.738604][ T5868] usbhid: probe of 3-1:0.0 failed with error -71 [ 189.753937][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 189.948083][ T23] usb 2-1: config 114 has an invalid interface number: 32 but max is 0 [ 190.026253][ T5868] usb 3-1: USB disconnect, device number 6 [ 190.092418][ T23] usb 2-1: config 114 has no interface number 0 [ 190.140834][ T5821] dm9601: probe of 5-1:121.127 failed with error -22 [ 190.171939][ T23] usb 2-1: config 114 interface 32 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 190.259080][ T23] usb 2-1: config 114 interface 32 has no altsetting 0 [ 190.318042][ T5821] usb 5-1: USB disconnect, device number 3 [ 190.444279][ T23] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=a4.60 [ 190.570268][ T6510] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 190.749908][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.885704][ T23] usb 2-1: Product: syz [ 190.972234][ T23] usb 2-1: Manufacturer: syz [ 191.024575][ T23] usb 2-1: SerialNumber: syz [ 191.582361][ T6499] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 193.902421][ T27] audit: type=1326 audit(1789172685.029:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.2.162" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea6479e159 code=0x0 [ 194.253821][ T23] usb 2-1: USB disconnect, device number 5 [ 194.636348][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.642894][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.704719][ T6532] autofs4:pid:6532:autofs_fill_super: called with bogus options [ 196.564517][ T6538] loop2: detected capacity change from 0 to 1024 [ 196.625600][ T6538] hfsplus: failed to load catalog file [ 197.251361][ T1192] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 197.551668][ T1192] usb 3-1: Using ep0 maxpacket: 32 [ 198.022033][ T28] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 198.149011][ T6560] bridge0: port 3(syz_tun) entered blocking state [ 198.156252][ T6560] bridge0: port 3(syz_tun) entered disabled state [ 198.168229][ T6560] syz_tun: entered allmulticast mode [ 198.183741][ T6560] syz_tun: entered promiscuous mode [ 198.191465][ T6560] bridge0: port 3(syz_tun) entered blocking state [ 198.198445][ T6560] bridge0: port 3(syz_tun) entered forwarding state [ 198.217132][ T6561] bridge0: port 4(ip6gretap0) entered blocking state [ 198.224065][ T6561] bridge0: port 4(ip6gretap0) entered disabled state [ 198.232230][ T6561] ip6gretap0: entered allmulticast mode [ 198.239464][ T6561] ip6gretap0: entered promiscuous mode [ 198.246011][ T6561] bridge0: port 4(ip6gretap0) entered blocking state [ 198.252878][ T6561] bridge0: port 4(ip6gretap0) entered forwarding state [ 198.320603][ T28] usb 4-1: unable to get BOS descriptor or descriptor too short [ 198.349663][ T28] usb 4-1: config 114 has an invalid interface number: 32 but max is 0 [ 198.412578][ T28] usb 4-1: config 114 has no interface number 0 [ 198.461880][ T28] usb 4-1: config 114 interface 32 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 198.586009][ T28] usb 4-1: config 114 interface 32 has no altsetting 0 [ 198.609936][ T28] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=a4.60 [ 198.637846][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.656075][ T28] usb 4-1: Product: syz [ 198.671058][ T28] usb 4-1: Manufacturer: syz [ 198.680887][ T28] usb 4-1: SerialNumber: syz [ 198.704088][ T6551] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 198.980073][ T28] usb 4-1: USB disconnect, device number 8 [ 199.024176][ T1192] usb 3-1: unable to get BOS descriptor or descriptor too short [ 199.042675][ T1192] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 199.050356][ T1192] usb 3-1: can't read configurations, error -71 [ 200.900296][ T6600] autofs4:pid:6600:autofs_fill_super: called with bogus options [ 202.225037][ T6611] kvm: pic: level sensitive irq not supported [ 203.191502][ T28] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 203.433995][ T28] usb 4-1: unable to get BOS descriptor or descriptor too short [ 203.471563][ T28] usb 4-1: config 114 has an invalid interface number: 32 but max is 0 [ 203.490648][ T28] usb 4-1: config 114 has no interface number 0 [ 203.521169][ T28] usb 4-1: config 114 interface 32 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 203.568533][ T28] usb 4-1: config 114 interface 32 has no altsetting 0 [ 203.863365][ T28] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=a4.60 [ 204.519281][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.527843][ T28] usb 4-1: Product: syz [ 204.532420][ T28] usb 4-1: Manufacturer: syz [ 204.537067][ T28] usb 4-1: SerialNumber: syz [ 204.557012][ T6617] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 204.787703][ T28] usb 4-1: USB disconnect, device number 9 [ 207.301127][ T6659] loop2: detected capacity change from 0 to 512 [ 207.319062][ T6659] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.383303][ T6659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.407268][ T6659] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.426158][ T6659] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.187: corrupted xattr block 33: invalid ea_ino [ 207.474082][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.887086][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.192'. [ 207.900894][ T6671] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.909550][ T6671] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.271462][ T28] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 208.453780][ T28] usb 3-1: unable to get BOS descriptor or descriptor too short [ 208.465944][ T28] usb 3-1: config 114 has an invalid interface number: 32 but max is 0 [ 208.474373][ T28] usb 3-1: config 114 has no interface number 0 [ 208.480712][ T28] usb 3-1: config 114 interface 32 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 208.492026][ T28] usb 3-1: config 114 interface 32 has no altsetting 0 [ 208.503531][ T28] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=a4.60 [ 208.512878][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.520892][ T28] usb 3-1: Product: syz [ 208.525185][ T28] usb 3-1: Manufacturer: syz [ 208.529827][ T28] usb 3-1: SerialNumber: syz [ 208.537997][ T6673] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 208.758033][ T28] usb 3-1: USB disconnect, device number 9 [ 212.080952][ T5088] Bluetooth: hci0: command 0x0406 tx timeout [ 212.088678][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 212.120519][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.130172][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.139414][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.148571][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.157002][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.165052][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.653639][ T6699] chnl_net:caif_netlink_parms(): no params data found [ 212.810337][ T995] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.864897][ T6699] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.872331][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.879624][ T6699] bridge_slave_0: entered allmulticast mode [ 212.887762][ T6699] bridge_slave_0: entered promiscuous mode [ 212.898874][ T6699] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.914345][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.927225][ T6699] bridge_slave_1: entered allmulticast mode [ 212.935202][ T6699] bridge_slave_1: entered promiscuous mode [ 212.966822][ T995] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.043982][ T6699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.065278][ T6699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.103322][ T995] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.207203][ T995] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.240375][ T6699] team0: Port device team_slave_0 added [ 213.256038][ T6699] team0: Port device team_slave_1 added [ 213.290894][ T6699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.305609][ T6699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.335091][ T6699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.356665][ T6699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.364381][ T6699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.390387][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.397122][ T6699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.534167][ T6699] hsr_slave_0: entered promiscuous mode [ 213.542952][ T6699] hsr_slave_1: entered promiscuous mode [ 214.130630][ T6699] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 214.156116][ T6699] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 214.207001][ T6699] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 214.218241][ T6699] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 214.232923][ T5791] Bluetooth: hci3: command tx timeout [ 214.454231][ T6699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.509472][ T6699] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.529489][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.536768][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.597934][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.605252][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.797530][ T995] hsr_slave_0: left promiscuous mode [ 214.813340][ T995] hsr_slave_1: left promiscuous mode [ 214.820345][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.833935][ T995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.847562][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.859713][ T995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.871983][ T995] bridge_slave_1: left allmulticast mode [ 214.877702][ T995] bridge_slave_1: left promiscuous mode [ 214.888897][ T995] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.905917][ T995] bridge_slave_0: left allmulticast mode [ 214.913011][ T995] bridge_slave_0: left promiscuous mode [ 214.918985][ T995] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.980340][ T995] veth1_macvtap: left promiscuous mode [ 214.986107][ T995] veth0_macvtap: left promiscuous mode [ 214.992429][ T995] veth1_vlan: left promiscuous mode [ 214.997839][ T995] veth0_vlan: left promiscuous mode [ 215.714829][ T995] team0 (unregistering): Port device team_slave_1 removed [ 215.760259][ T995] team0 (unregistering): Port device team_slave_0 removed [ 215.817815][ T995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.872595][ T995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.226915][ T995] bond0 (unregistering): Released all slaves [ 216.311538][ T5791] Bluetooth: hci3: command tx timeout [ 216.541128][ T6699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.158555][ T6699] veth0_vlan: entered promiscuous mode [ 217.218567][ T6699] veth1_vlan: entered promiscuous mode [ 217.320529][ T6699] veth0_macvtap: entered promiscuous mode [ 217.341186][ T6699] veth1_macvtap: entered promiscuous mode [ 217.421135][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.439996][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.450801][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.467094][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.480746][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.499053][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.525622][ T6699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.555542][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.570959][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.590924][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.623297][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.635606][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.648671][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.666596][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.675199][ T6699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.683803][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.701958][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.711785][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.720078][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.727743][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.727883][ T6699] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.747593][ T6699] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.756457][ T6699] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.778641][ T6699] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.812559][ T5778] bridge0: port 3(syz_tun) entered disabled state [ 217.837360][ T5778] syz_tun (unregistering): left allmulticast mode [ 217.849820][ T5778] syz_tun (unregistering): left promiscuous mode [ 217.857514][ T5778] bridge0: port 3(syz_tun) entered disabled state [ 217.989651][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.022574][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.107549][ T2973] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.187166][ T2973] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.205576][ T984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.220971][ T984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.270604][ T2973] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.347915][ T2973] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.391516][ T51] Bluetooth: hci3: command tx timeout [ 218.488773][ T6793] chnl_net:caif_netlink_parms(): no params data found [ 218.939601][ T6793] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.967428][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.980222][ T6793] bridge_slave_0: entered allmulticast mode [ 218.990836][ T6793] bridge_slave_0: entered promiscuous mode [ 219.003427][ T6793] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.014239][ T6793] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.023063][ T6793] bridge_slave_1: entered allmulticast mode [ 219.030623][ T6793] bridge_slave_1: entered promiscuous mode [ 219.109589][ T2973] tipc: Left network mode [ 219.140185][ T6793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.157081][ T6793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.200271][ T2973] bridge0: port 4(ip6gretap0) entered disabled state [ 219.237412][ T2973] ip6gretap0 (unregistering): left allmulticast mode [ 219.244361][ T2973] ip6gretap0 (unregistering): left promiscuous mode [ 219.251190][ T2973] bridge0: port 4(ip6gretap0) entered disabled state [ 219.278344][ T6793] team0: Port device team_slave_0 added [ 219.289840][ T6793] team0: Port device team_slave_1 added [ 219.371775][ T6793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.380985][ T6793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.412573][ T6793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.438429][ T6793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.450008][ T6793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.502610][ T6793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.739763][ T6793] hsr_slave_0: entered promiscuous mode [ 219.747253][ T6793] hsr_slave_1: entered promiscuous mode [ 219.755699][ T6793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.763764][ T6793] Cannot create hsr debugfs directory [ 219.835719][ T51] Bluetooth: hci4: command tx timeout [ 220.449600][ T6793] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 220.476160][ T6793] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 220.483969][ T51] Bluetooth: hci3: command tx timeout [ 220.507220][ T6793] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 220.530388][ T6793] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 221.466873][ T6793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.542141][ T2973] hsr_slave_0: left promiscuous mode [ 221.548645][ T2973] hsr_slave_1: left promiscuous mode [ 221.566496][ T2973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.579993][ T2973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.588903][ T2973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.604073][ T2973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.614798][ T2973] bridge_slave_1: left allmulticast mode [ 221.620521][ T2973] bridge_slave_1: left promiscuous mode [ 221.627071][ T2973] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.637594][ T2973] bridge_slave_0: left allmulticast mode [ 221.644245][ T2973] bridge_slave_0: left promiscuous mode [ 221.650189][ T2973] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.738483][ T2973] veth1_macvtap: left promiscuous mode [ 221.756624][ T2973] veth0_macvtap: left promiscuous mode [ 221.780618][ T2973] veth1_vlan: left promiscuous mode [ 221.790384][ T2973] veth0_vlan: left promiscuous mode [ 221.922781][ T51] Bluetooth: hci4: command tx timeout [ 223.328758][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.341077][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.364953][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.378612][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.394531][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 223.411940][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.730205][ T2973] team0 (unregistering): Port device team_slave_1 removed [ 223.787507][ T2973] team0 (unregistering): Port device team_slave_0 removed [ 223.835993][ T2973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.889581][ T2973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.994225][ T5791] Bluetooth: hci4: command tx timeout [ 224.279396][ T2973] bond0 (unregistering): Released all slaves [ 224.417467][ T6793] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.499124][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.506450][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.569029][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.576281][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.054194][ T6864] chnl_net:caif_netlink_parms(): no params data found [ 225.275441][ T984] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.389810][ T6793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.433508][ T6864] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.440815][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.467816][ T6864] bridge_slave_0: entered allmulticast mode [ 225.475903][ T6864] bridge_slave_0: entered promiscuous mode [ 225.512041][ T5791] Bluetooth: hci0: command tx timeout [ 225.556712][ T984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.593545][ T6864] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.600798][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.615317][ T6864] bridge_slave_1: entered allmulticast mode [ 225.624493][ T6864] bridge_slave_1: entered promiscuous mode [ 225.665313][ T984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.740550][ T984] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.773407][ T6864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.789053][ T6864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.857764][ T6864] team0: Port device team_slave_0 added [ 225.877585][ T6864] team0: Port device team_slave_1 added [ 225.936289][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.948967][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.987501][ T6864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.037182][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.053276][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.080404][ T5791] Bluetooth: hci4: command tx timeout [ 226.097709][ T6864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.354681][ T6864] hsr_slave_0: entered promiscuous mode [ 226.362148][ T6864] hsr_slave_1: entered promiscuous mode [ 226.372359][ T6864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.379989][ T6864] Cannot create hsr debugfs directory [ 226.673634][ T6793] veth0_vlan: entered promiscuous mode [ 226.786000][ T6793] veth1_vlan: entered promiscuous mode [ 227.180949][ T6864] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 227.287871][ T6864] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 227.321937][ T6864] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 227.355334][ T6793] veth0_macvtap: entered promiscuous mode [ 227.479935][ T6864] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 227.519219][ T6793] veth1_macvtap: entered promiscuous mode [ 227.591643][ T5791] Bluetooth: hci0: command tx timeout [ 227.840782][ T984] hsr_slave_0: left promiscuous mode [ 227.858787][ T984] hsr_slave_1: left promiscuous mode [ 227.868260][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.883965][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.893310][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.901643][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.910257][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 227.918856][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.949552][ T984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.963342][ T984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.972385][ T984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.980027][ T984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.989120][ T984] bridge_slave_1: left allmulticast mode [ 227.995825][ T984] bridge_slave_1: left promiscuous mode [ 228.004311][ T984] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.014367][ T984] bridge_slave_0: left allmulticast mode [ 228.020208][ T984] bridge_slave_0: left promiscuous mode [ 228.026734][ T984] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.058698][ T984] veth1_macvtap: left promiscuous mode [ 228.065169][ T984] veth0_macvtap: left promiscuous mode [ 228.070853][ T984] veth1_vlan: left promiscuous mode [ 228.078789][ T984] veth0_vlan: left promiscuous mode [ 228.699130][ T984] team0 (unregistering): Port device team_slave_1 removed [ 228.749216][ T984] team0 (unregistering): Port device team_slave_0 removed [ 228.797074][ T984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.846611][ T984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.211061][ T984] bond0 (unregistering): Released all slaves [ 229.375369][ T6793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.401581][ T6793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.413251][ T6793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.423875][ T6793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.435774][ T6793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.483369][ T6793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.493936][ T6793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.506697][ T6793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.519258][ T6793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.532158][ T6793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.545511][ T6793] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.555315][ T6793] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.565926][ T6793] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.575435][ T6793] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.672368][ T51] Bluetooth: hci0: command tx timeout [ 229.806238][ T6864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.927342][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.945224][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.992925][ T51] Bluetooth: hci1: command tx timeout [ 230.026006][ T6864] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.094336][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.101597][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.119019][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.126277][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.159237][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.176504][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.304687][ T6864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.329804][ T6924] chnl_net:caif_netlink_parms(): no params data found [ 230.419719][ T984] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.615545][ T984] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.765160][ T984] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.963218][ T984] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.996042][ T6924] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.003623][ T6924] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.011084][ T6924] bridge_slave_0: entered allmulticast mode [ 231.018958][ T6924] bridge_slave_0: entered promiscuous mode [ 231.029614][ T6924] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.045092][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.052650][ T6924] bridge_slave_1: entered allmulticast mode [ 231.060715][ T6924] bridge_slave_1: entered promiscuous mode [ 231.176898][ T6924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.205839][ T6924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.348043][ T6864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.496419][ T6924] team0: Port device team_slave_0 added [ 231.534954][ T6924] team0: Port device team_slave_1 added [ 231.709341][ T6973] autofs4:pid:6973:autofs_fill_super: called with bogus options [ 231.775356][ T51] Bluetooth: hci0: command tx timeout [ 232.071340][ T5791] Bluetooth: hci1: command tx timeout [ 232.340389][ T6924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.374640][ T6924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.425741][ T6924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.507780][ T6924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.532964][ T6924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.605144][ T6924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.847876][ T6924] hsr_slave_0: entered promiscuous mode [ 232.869060][ T6924] hsr_slave_1: entered promiscuous mode [ 233.090322][ T6924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.173875][ T6924] Cannot create hsr debugfs directory [ 233.275318][ T984] tipc: Left network mode [ 234.158120][ T5791] Bluetooth: hci1: command tx timeout [ 234.294671][ T6864] veth0_vlan: entered promiscuous mode [ 234.354390][ T6864] veth1_vlan: entered promiscuous mode [ 234.589429][ T6864] veth0_macvtap: entered promiscuous mode [ 234.639495][ T6864] veth1_macvtap: entered promiscuous mode [ 234.664489][ T6924] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 234.680738][ T6924] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 234.754129][ T6924] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 234.768292][ T6924] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 234.815323][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.851611][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.862966][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.874018][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.886699][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.897686][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.912251][ T6864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.980115][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.999025][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.009979][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.021856][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.032491][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.043335][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.055013][ T6864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.130807][ T6864] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.140885][ T6864] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.150213][ T6864] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.159678][ T6864] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.215986][ T984] hsr_slave_0: left promiscuous mode [ 235.230667][ T984] hsr_slave_1: left promiscuous mode [ 235.237279][ T984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.244893][ T984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.254313][ T984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.262074][ T984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.270133][ T984] bridge_slave_1: left allmulticast mode [ 235.276130][ T984] bridge_slave_1: left promiscuous mode [ 235.282112][ T984] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.294001][ T984] bridge_slave_0: left allmulticast mode [ 235.299754][ T984] bridge_slave_0: left promiscuous mode [ 235.305819][ T984] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.330398][ T984] veth1_macvtap: left promiscuous mode [ 235.336870][ T984] veth0_macvtap: left promiscuous mode [ 235.342763][ T984] veth1_vlan: left promiscuous mode [ 235.348108][ T984] veth0_vlan: left promiscuous mode [ 236.020147][ T984] team0 (unregistering): Port device team_slave_1 removed [ 236.069054][ T984] team0 (unregistering): Port device team_slave_0 removed [ 236.117321][ T984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.169322][ T984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.231927][ T5791] Bluetooth: hci1: command tx timeout [ 236.523971][ T984] bond0 (unregistering): Released all slaves [ 236.902549][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.910452][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.924626][ T6924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.998902][ T6924] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.012597][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.027995][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.058592][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.068625][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.108582][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.116251][ T2973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.275364][ T6924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.581714][ T5888] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 237.643894][ T6924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.785194][ T5888] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.804100][ T5888] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 237.816545][ T5888] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 237.841575][ T5888] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.871479][ T5888] usb 8-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 237.880649][ T5888] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.912629][ T5888] usb 8-1: config 0 descriptor?? [ 238.170188][ T5843] usb 8-1: USB disconnect, device number 2 [ 238.229602][ T6924] veth0_vlan: entered promiscuous mode [ 238.249967][ T6924] veth1_vlan: entered promiscuous mode [ 238.297798][ T6924] veth0_macvtap: entered promiscuous mode [ 238.309696][ T6924] veth1_macvtap: entered promiscuous mode [ 238.335273][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.350370][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.361014][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.372624][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.382567][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.393260][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.405541][ T6924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.434040][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.449448][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.472883][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.506981][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.542633][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.557306][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.584332][ T6924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.649612][ T6924] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.659235][ T6924] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.673507][ T6924] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.685807][ T6924] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.150302][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.176677][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.278496][ T984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.311541][ T984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.481662][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.523553][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.539071][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.550136][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.564761][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 239.582009][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.054514][ T2973] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.144296][ T7068] autofs4:pid:7068:autofs_fill_super: called with bogus options [ 240.910324][ T2973] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.589655][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.7.219'. [ 242.699252][ T5791] Bluetooth: hci2: command tx timeout [ 242.868575][ T2973] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.045011][ T2973] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.577103][ T7057] chnl_net:caif_netlink_parms(): no params data found [ 243.878256][ T7057] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.891755][ T7057] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.899177][ T7057] bridge_slave_0: entered allmulticast mode [ 243.941041][ T7057] bridge_slave_0: entered promiscuous mode [ 243.990185][ T7057] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.012271][ T7057] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.030853][ T7057] bridge_slave_1: entered allmulticast mode [ 244.042580][ T7057] bridge_slave_1: entered promiscuous mode [ 244.711869][ T5791] Bluetooth: hci2: command tx timeout [ 244.812616][ T7057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.527804][ T7057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.927403][ T7057] team0: Port device team_slave_0 added [ 246.047895][ T7057] team0: Port device team_slave_1 added [ 246.276251][ T7057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.316380][ T7057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.347770][ T7057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.478885][ T7057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.497666][ T7057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.567467][ T7057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.678868][ T7126] loop8: detected capacity change from 0 to 256 [ 246.791569][ T5791] Bluetooth: hci2: command tx timeout [ 247.048865][ T7057] hsr_slave_0: entered promiscuous mode [ 247.068122][ T7057] hsr_slave_1: entered promiscuous mode [ 247.079251][ T7057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.090607][ T7057] Cannot create hsr debugfs directory [ 247.123778][ T2973] hsr_slave_0: left promiscuous mode [ 247.130142][ T2973] hsr_slave_1: left promiscuous mode [ 247.143914][ T2973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.157982][ T2973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.187101][ T2973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.357721][ T2973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.406102][ T2973] bridge_slave_1: left allmulticast mode [ 247.442980][ T2973] bridge_slave_1: left promiscuous mode [ 247.448851][ T2973] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.499030][ T2973] bridge_slave_0: left allmulticast mode [ 247.531524][ T2973] bridge_slave_0: left promiscuous mode [ 247.550186][ T2973] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.823013][ T2973] veth1_macvtap: left promiscuous mode [ 247.828971][ T2973] veth0_macvtap: left promiscuous mode [ 248.163326][ T2973] veth1_vlan: left promiscuous mode [ 248.193104][ T2973] veth0_vlan: left promiscuous mode [ 248.871521][ T5791] Bluetooth: hci2: command tx timeout [ 252.747138][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 252.758911][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 252.767638][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 252.777960][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 252.787238][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 252.796290][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.529592][ T2973] team0 (unregistering): Port device team_slave_1 removed [ 253.586893][ T2973] team0 (unregistering): Port device team_slave_0 removed [ 253.636536][ T2973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.695727][ T2973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.077618][ T7216] loop8: detected capacity change from 0 to 256 [ 254.249210][ T2973] bond0 (unregistering): Released all slaves [ 254.871575][ T5791] Bluetooth: hci3: command tx timeout [ 255.019188][ T7223] netlink: 68 bytes leftover after parsing attributes in process `syz.8.235'. [ 256.079397][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.086011][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.700567][ T2973] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.828877][ T7057] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 256.914594][ T7057] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 256.955865][ T5791] Bluetooth: hci3: command tx timeout [ 257.054752][ T7254] loop8: detected capacity change from 0 to 256 [ 257.084597][ T2973] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.179556][ T7057] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 257.235843][ T7057] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 257.595112][ T2973] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.241729][ T7213] chnl_net:caif_netlink_parms(): no params data found [ 258.764380][ T7270] 9pnet_fd: Insufficient options for proto=fd [ 259.051522][ T5791] Bluetooth: hci3: command tx timeout [ 259.250780][ T2973] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.893958][ T7279] autofs4:pid:7279:autofs_fill_super: called with bogus options [ 260.068320][ T7213] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.165867][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.248457][ T7213] bridge_slave_0: entered allmulticast mode [ 260.335545][ T7213] bridge_slave_0: entered promiscuous mode [ 260.416265][ T7213] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.438297][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.447760][ T7213] bridge_slave_1: entered allmulticast mode [ 260.463928][ T7213] bridge_slave_1: entered promiscuous mode [ 260.693817][ T7213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.777957][ T7213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.880447][ T7283] loop8: detected capacity change from 0 to 256 [ 261.010903][ T7057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.113880][ T5791] Bluetooth: hci3: command tx timeout [ 261.768049][ T7213] team0: Port device team_slave_0 added [ 261.795868][ T7213] team0: Port device team_slave_1 added [ 261.865808][ T7057] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.079667][ T7213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.098434][ T7213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.140535][ T7213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.156770][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 262.167619][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 262.177768][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.191525][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.199383][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 262.208107][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.254562][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.261833][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.337845][ T7213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.355754][ T7213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.399148][ T7213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.460892][ T7213] hsr_slave_0: entered promiscuous mode [ 262.468987][ T7213] hsr_slave_1: entered promiscuous mode [ 262.478447][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.485721][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.577659][ T7300] autofs4:pid:7300:autofs_fill_super: called with bogus options [ 264.319084][ T51] Bluetooth: hci0: command tx timeout [ 264.770684][ T2973] hsr_slave_0: left promiscuous mode [ 264.777481][ T2973] hsr_slave_1: left promiscuous mode [ 264.786075][ T2973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.793775][ T2973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.804589][ T2973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.812524][ T2973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.820432][ T2973] bridge_slave_1: left allmulticast mode [ 264.827214][ T2973] bridge_slave_1: left promiscuous mode [ 264.834424][ T2973] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.845028][ T2973] bridge_slave_0: left allmulticast mode [ 264.850779][ T2973] bridge_slave_0: left promiscuous mode [ 264.857034][ T2973] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.883349][ T2973] veth1_macvtap: left promiscuous mode [ 264.888949][ T2973] veth0_macvtap: left promiscuous mode [ 264.894993][ T2973] veth1_vlan: left promiscuous mode [ 264.900414][ T2973] veth0_vlan: left promiscuous mode [ 265.314069][ T7311] loop8: detected capacity change from 0 to 256 [ 265.799456][ T2973] team0 (unregistering): Port device team_slave_1 removed [ 265.846766][ T28] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 265.859874][ T2973] team0 (unregistering): Port device team_slave_0 removed [ 265.909619][ T2973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.965743][ T2973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.046885][ T28] usb 9-1: unable to get BOS descriptor or descriptor too short [ 266.058498][ T28] usb 9-1: config 114 has an invalid interface number: 32 but max is 0 [ 266.069091][ T28] usb 9-1: config 114 has no interface number 0 [ 266.081392][ T28] usb 9-1: config 114 interface 32 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 266.098006][ T28] usb 9-1: config 114 interface 32 has no altsetting 0 [ 266.108006][ T28] usb 9-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=a4.60 [ 266.123216][ T28] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.136140][ T28] usb 9-1: Product: syz [ 266.140437][ T28] usb 9-1: Manufacturer: syz [ 266.147409][ T28] usb 9-1: SerialNumber: syz [ 266.164766][ T7315] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 266.401854][ T51] Bluetooth: hci0: command tx timeout [ 266.511027][ T2973] bond0 (unregistering): Released all slaves [ 266.799503][ T28] usb 9-1: USB disconnect, device number 2 [ 266.820915][ T7057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.977607][ T7293] chnl_net:caif_netlink_parms(): no params data found [ 267.353850][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.361073][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.396181][ T7293] bridge_slave_0: entered allmulticast mode [ 267.423787][ T7293] bridge_slave_0: entered promiscuous mode [ 267.438606][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.896355][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.911547][ T7293] bridge_slave_1: entered allmulticast mode [ 267.919193][ T7293] bridge_slave_1: entered promiscuous mode [ 267.928581][ T7213] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 267.964852][ T7213] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 268.013206][ T7213] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 268.035312][ T7213] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.205761][ T51] Bluetooth: hci0: command tx timeout [ 269.317417][ T7293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.363114][ T7293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.484037][ T7293] team0: Port device team_slave_0 added [ 269.497034][ T7293] team0: Port device team_slave_1 added [ 269.614743][ T7057] veth0_vlan: entered promiscuous mode [ 269.636740][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.646186][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.673741][ T7293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.715145][ T7057] veth1_vlan: entered promiscuous mode [ 269.727992][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.736464][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.765362][ T7293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.907479][ T7293] hsr_slave_0: entered promiscuous mode [ 269.923018][ T7293] hsr_slave_1: entered promiscuous mode [ 269.929991][ T7293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.937824][ T7293] Cannot create hsr debugfs directory [ 269.976429][ T7057] veth0_macvtap: entered promiscuous mode [ 270.010427][ T7057] veth1_macvtap: entered promiscuous mode [ 270.029744][ T7213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.114940][ T7057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.127933][ T7057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.138751][ T7057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.150849][ T7057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.166947][ T7057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.207037][ T7057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.219118][ T7057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.232530][ T7057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.244290][ T7057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.257287][ T7057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.303557][ T7213] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.356353][ T7176] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.363565][ T7176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.445071][ T7057] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.460658][ T7057] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.470634][ T7057] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.486804][ T7057] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.548807][ T7176] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.556109][ T7176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.018540][ T7336] autofs4:pid:7336:autofs_fill_super: called with bogus options [ 271.311623][ T51] Bluetooth: hci0: command tx timeout [ 271.672648][ T2926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.742228][ T2926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.216247][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.248357][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.273448][ T7213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.443405][ T7213] veth0_vlan: entered promiscuous mode [ 272.577348][ T7213] veth1_vlan: entered promiscuous mode [ 272.684146][ T28] Process accounting resumed [ 272.844207][ T7293] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 273.495866][ T7293] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.543991][ T7293] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 273.577262][ T7293] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 273.610931][ T7348] loop8: detected capacity change from 0 to 256 [ 273.651579][ T7213] veth0_macvtap: entered promiscuous mode [ 273.685726][ T7213] veth1_macvtap: entered promiscuous mode [ 273.813471][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.826230][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.839264][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.850137][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.860355][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.861936][ T5843] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 273.873344][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.895081][ T7213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.344659][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.371181][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.392382][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.421482][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.441592][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.452199][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.464069][ T7213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.547070][ T7213] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.581395][ T5843] usb 10-1: unable to get BOS descriptor or descriptor too short [ 274.595978][ T7213] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.605277][ T7213] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.614728][ T5843] usb 10-1: config 114 has an invalid interface number: 32 but max is 0 [ 274.623411][ T7213] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.633367][ T5843] usb 10-1: config 114 has no interface number 0 [ 274.639816][ T5843] usb 10-1: config 114 interface 32 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 274.671352][ T5843] usb 10-1: config 114 interface 32 has no altsetting 0 [ 274.681902][ T5843] usb 10-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=a4.60 [ 274.691140][ T5843] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.722654][ T5843] usb 10-1: Product: syz [ 274.727001][ T5843] usb 10-1: Manufacturer: syz [ 274.740133][ T5843] usb 10-1: SerialNumber: syz [ 274.760032][ T7350] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 275.058787][ T5843] usb 10-1: USB disconnect, device number 2 [ 275.573729][ T7293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.756517][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.818052][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.903631][ T7293] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.116638][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.123876][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.144076][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.151394][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.187878][ T7363] autofs4:pid:7363:autofs_fill_super: called with bogus options [ 276.888564][ T7293] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 276.987725][ T7293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.026643][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.043335][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.177194][ T7365] input: syz1 as /devices/virtual/input/input5 [ 277.559497][ T7372] loop0: detected capacity change from 0 to 4096 [ 277.663243][ T7376] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.742585][ T28] Process accounting resumed [ 279.576949][ T7293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.638702][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.8.269'. [ 279.950002][ T7394] loop0: detected capacity change from 0 to 1024 [ 280.338276][ T7398] autofs4:pid:7398:autofs_fill_super: called with bogus options [ 281.219628][ T7394] hfsplus: xattr searching failed [ 282.550656][ T7182] hfsplus: b-tree write err: -5, ino 3 [ 282.845273][ T7293] veth0_vlan: entered promiscuous mode [ 282.908157][ T7293] veth1_vlan: entered promiscuous mode [ 283.124437][ T7418] loop0: detected capacity change from 0 to 32768 [ 283.276953][ T7418] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 283.368105][ T7293] veth0_macvtap: entered promiscuous mode [ 283.377627][ T7418] XFS (loop0): Ending clean mount [ 284.126838][ T7418] XFS (loop0): Quotacheck needed: Please wait. [ 284.443976][ T7293] veth1_macvtap: entered promiscuous mode [ 284.574842][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.642128][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.670045][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.688793][ T7418] XFS (loop0): Quotacheck: Done. [ 284.895870][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.251010][ T7434] loop9: detected capacity change from 0 to 1024 [ 285.261599][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.321309][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.495839][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.541376][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.562837][ T7434] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.651597][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.729614][ T7213] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 285.742816][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.753473][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.763395][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.774075][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.785744][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.797102][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.807519][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.861656][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.924894][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.054176][ T7293] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.074688][ T7293] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.106034][ T7293] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.134028][ T7293] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.185225][ T7057] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.561168][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.644319][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.673593][ T7450] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 289.807473][ T7192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.851077][ T7192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.998364][ T1208] Process accounting resumed [ 291.326249][ T7458] loop0: detected capacity change from 0 to 32768 [ 292.178308][ T7462] 9pnet_fd: Insufficient options for proto=fd [ 292.334483][ T7458] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 292.750006][ T7458] XFS (loop0): Ending clean mount [ 292.758902][ T7458] XFS (loop0): Quotacheck needed: Please wait. [ 292.871973][ T7458] XFS (loop0): Quotacheck: Done. [ 293.619423][ T7213] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 296.436446][ T7501] loop4: detected capacity change from 0 to 16 [ 296.578487][ T7501] erofs: (device loop4): mounted with root inode @ nid 36. [ 301.141411][ T788] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 301.414059][ T788] usb 9-1: unable to get BOS descriptor or descriptor too short [ 301.483083][ T788] usb 9-1: config 114 has an invalid interface number: 32 but max is 0 [ 301.529276][ T788] usb 9-1: config 114 has no interface number 0 [ 301.571927][ T788] usb 9-1: config 114 interface 32 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 301.641442][ T788] usb 9-1: config 114 interface 32 has no altsetting 0 [ 301.725564][ T788] usb 9-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=a4.60 [ 301.771833][ T788] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.779926][ T788] usb 9-1: Product: syz [ 302.265815][ T788] usb 9-1: Manufacturer: syz [ 302.286858][ T788] usb 9-1: SerialNumber: syz [ 302.310995][ T7518] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 302.727001][ T788] usb 9-1: USB disconnect, device number 3 [ 303.415950][ T7543] autofs4:pid:7543:autofs_fill_super: called with bogus options [ 306.884538][ T7569] block device autoloading is deprecated and will be removed. [ 307.900765][ T7587] autofs4:pid:7587:autofs_fill_super: called with bogus options [ 312.153235][ T7627] syzkaller0: entered promiscuous mode [ 312.159018][ T7627] syzkaller0: entered allmulticast mode [ 314.534559][ T7645] hub 8-0:1.0: USB hub found [ 314.541637][ T7645] hub 8-0:1.0: 1 port detected [ 316.868240][ T7672] syzkaller0: entered promiscuous mode [ 316.932956][ T7672] syzkaller0: entered allmulticast mode [ 318.177791][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.187413][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.951397][ T5843] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 321.119773][ T7708] loop4: detected capacity change from 0 to 1024 [ 321.186844][ T5843] usb 9-1: Using ep0 maxpacket: 8 [ 321.193773][ T7708] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 321.232328][ T5843] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 321.286640][ T5843] usb 9-1: config 0 has no interface number 0 [ 321.296368][ T5843] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 321.391531][ T5843] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 321.403240][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.490314][ T5843] usb 9-1: config 0 descriptor?? [ 321.510495][ T7708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.565164][ T5843] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 321.933563][ T7293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.462256][ T5863] usb 9-1: USB disconnect, device number 4 [ 323.736698][ T7739] syzkaller0: entered promiscuous mode [ 323.779428][ T7739] syzkaller0: entered allmulticast mode [ 329.330754][ T7772] nvme nvme0: failed to connect socket: -111 [ 332.267046][ T7795] loop4: detected capacity change from 0 to 16 [ 332.277942][ T7795] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 336.847942][ T7808] loop8: detected capacity change from 0 to 256 [ 338.555930][ T7824] loop8: detected capacity change from 0 to 1024 [ 338.612178][ T7824] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 338.696788][ T7824] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.139618][ T6924] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.814651][ T7841] syzkaller0: entered promiscuous mode [ 340.820446][ T7841] syzkaller0: entered allmulticast mode [ 348.341900][ T5843] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 348.596721][ T5843] usb 10-1: not running at top speed; connect to a high speed hub [ 348.651555][ T5843] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 348.696102][ T5843] usb 10-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 348.736885][ T5843] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 348.786584][ T5843] usb 10-1: Product: syz [ 348.815479][ T5843] usb 10-1: Manufacturer: syz [ 348.886345][ T5843] usb 10-1: USB2VGA dongle found at address 3 [ 348.996684][ T5843] usb 10-1: Allocated 8 output buffers [ 349.044657][ T5843] usb 10-1: Not attached to USB 2.0 hub, deferring init [ 349.353209][ T7885] usb 10-1: Device not attached to USB 2.0 hub [ 349.394070][ T5843] usb 10-1: USB disconnect, device number 3 [ 349.873944][ T7898] loop8: detected capacity change from 0 to 256 [ 350.043063][ T7902] loop4: detected capacity change from 0 to 1024 [ 350.080335][ T7902] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 350.222674][ T7908] syzkaller0: entered promiscuous mode [ 350.232961][ T7902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.281449][ T7908] syzkaller0: entered allmulticast mode [ 350.311667][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 350.527343][ T7293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.683043][ T7937] loop0: detected capacity change from 0 to 32768 [ 352.703929][ T51] Bluetooth: hci0: command tx timeout [ 352.874471][ T7937] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.376 (7937) [ 353.437611][ T7937] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 353.448591][ T7937] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 353.457627][ T7937] BTRFS info (device loop0): use zlib compression, level 3 [ 353.465026][ T7937] BTRFS info (device loop0): turning on sync discard [ 353.472021][ T7937] BTRFS info (device loop0): using free space tree [ 353.671972][ T7937] BTRFS info (device loop0): enabling ssd optimizations [ 354.251525][ T27] audit: type=1800 audit(1789172845.239:4): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.376" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 354.658480][ T28] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 354.962713][ T28] usb 5-1: unable to get BOS descriptor or descriptor too short [ 355.012370][ T28] usb 5-1: config 114 has an invalid interface number: 32 but max is 0 [ 355.067474][ T28] usb 5-1: config 114 has no interface number 0 [ 355.115238][ T28] usb 5-1: config 114 interface 32 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 355.193729][ T28] usb 5-1: config 114 interface 32 has no altsetting 0 [ 355.269875][ T28] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=a4.60 [ 355.322682][ T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.373157][ T28] usb 5-1: Product: syz [ 355.377421][ T28] usb 5-1: Manufacturer: syz [ 355.419708][ T7213] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 355.421399][ T28] usb 5-1: SerialNumber: syz [ 357.207081][ T28] usb 5-1: can't set config #114, error -71 [ 357.237904][ T28] usb 5-1: USB disconnect, device number 4 [ 358.938786][ T7980] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (7980) [ 362.229096][ T8017] syzkaller0: entered promiscuous mode [ 362.262722][ T8017] syzkaller0: entered allmulticast mode [ 363.410224][ T8034] md: array md0 already initialised! [ 366.067299][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 370.253340][ T7192] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.417542][ T7192] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.562822][ T7192] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.770432][ T7192] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.053653][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 377.495525][ T8154] syzkaller0: entered promiscuous mode [ 377.501112][ T8154] syzkaller0: entered allmulticast mode [ 379.443628][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.450107][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.908778][ T1192] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 382.112512][ T1192] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 382.133241][ T1192] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 382.160427][ T1192] usb 9-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 382.171515][ T28] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 382.182333][ T1192] usb 9-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 382.254667][ T1192] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 382.281308][ T1192] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 382.291048][ T1192] usb 9-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 382.362520][ T1192] usb 9-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 382.422645][ T28] usb 5-1: unable to get BOS descriptor or descriptor too short [ 382.439492][ T28] usb 5-1: config 114 has an invalid interface number: 32 but max is 0 [ 382.452587][ T1192] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 382.461519][ T28] usb 5-1: config 114 has no interface number 0 [ 382.476915][ T1192] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.488527][ T28] usb 5-1: config 114 interface 32 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 382.501003][ T1192] usb 9-1: Product: syz [ 382.519676][ T28] usb 5-1: config 114 interface 32 has no altsetting 0 [ 382.522509][ T1192] usb 9-1: Manufacturer: syz [ 382.541701][ T28] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=a4.60 [ 382.654832][ T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.786219][ T28] usb 5-1: Product: syz [ 382.865822][ T28] usb 5-1: Manufacturer: syz [ 382.925872][ T28] usb 5-1: SerialNumber: syz [ 382.968066][ T7192] hsr_slave_0: left promiscuous mode [ 383.066971][ T7192] hsr_slave_1: left promiscuous mode [ 383.084690][ T8192] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 383.362751][ T1192] usb 9-1: SerialNumber: syz [ 383.425001][ T7192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.444333][ T1192] usb 9-1: can't set config #2, error -71 [ 383.450277][ T7192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.458443][ T1192] usb 9-1: USB disconnect, device number 5 [ 383.523044][ T28] usb 5-1: USB disconnect, device number 5 [ 383.594489][ T7192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.633780][ T7192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.699244][ T7192] bridge_slave_1: left allmulticast mode [ 383.716314][ T7192] bridge_slave_1: left promiscuous mode [ 383.748706][ T7192] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.800063][ T7192] bridge_slave_0: left allmulticast mode [ 383.937981][ T7192] bridge_slave_0: left promiscuous mode [ 383.944019][ T7192] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.352067][ T7192] veth1_macvtap: left promiscuous mode [ 384.359057][ T7192] veth0_macvtap: left promiscuous mode [ 384.392367][ T7192] veth1_vlan: left promiscuous mode [ 384.399934][ T7192] veth0_vlan: left promiscuous mode [ 386.231029][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 388.691386][ T5820] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 389.083821][ T5820] usb 9-1: unable to get BOS descriptor or descriptor too short [ 389.112667][ T5820] usb 9-1: config 114 has an invalid interface number: 32 but max is 0 [ 389.942798][ T5820] usb 9-1: config 114 has no interface number 0 [ 389.949194][ T5820] usb 9-1: config 114 interface 32 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 390.054257][ T5820] usb 9-1: config 114 interface 32 has no altsetting 0 [ 390.089221][ T5820] usb 9-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=a4.60 [ 390.109329][ T5820] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.151341][ T5820] usb 9-1: Product: syz [ 390.166184][ T5820] usb 9-1: Manufacturer: syz [ 390.170872][ T5820] usb 9-1: SerialNumber: syz [ 390.213270][ T8250] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 395.162951][ T7192] team0 (unregistering): Port device team_slave_1 removed [ 395.564999][ T7192] team0 (unregistering): Port device team_slave_0 removed [ 395.601737][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 395.882054][ T7192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.052956][ T7192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.141802][ T7192] bond0 (unregistering): Released all slaves [ 399.298110][ T8292] bridge0: port 3(syz_tun) entered blocking state [ 399.306767][ T8292] bridge0: port 3(syz_tun) entered disabled state [ 399.313716][ T8292] syz_tun: entered allmulticast mode [ 399.320354][ T8292] syz_tun: entered promiscuous mode [ 399.327314][ T8292] bridge0: port 3(syz_tun) entered blocking state [ 399.333898][ T8292] bridge0: port 3(syz_tun) entered forwarding state [ 399.420330][ T9] usb 9-1: USB disconnect, device number 6 [ 404.523388][ T8349] loop0: detected capacity change from 0 to 40427 [ 404.602223][ T8349] F2FS-fs (loop0): invalid crc value [ 404.640776][ T8349] F2FS-fs (loop0): Found nat_bits in checkpoint [ 404.726311][ T8349] F2FS-fs (loop0): Start checkpoint disabled! [ 404.753165][ T8349] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 405.629098][ T8358] md: array md0 already initialised! [ 405.734340][ T8358] md: md0 stopped. [ 406.032683][ T7192] kworker/u4:22: attempt to access beyond end of device [ 406.032683][ T7192] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 406.066389][ T7192] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 406.080755][ T7192] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 408.823011][ T5767] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 409.159018][ T8388] bridge0: port 3(syz_tun) entered blocking state [ 409.166140][ T8388] bridge0: port 3(syz_tun) entered disabled state [ 409.174188][ T8388] syz_tun: entered allmulticast mode [ 409.187259][ T8388] syz_tun: entered promiscuous mode [ 409.194962][ T8388] bridge0: port 3(syz_tun) entered blocking state [ 409.201581][ T8388] bridge0: port 3(syz_tun) entered forwarding state [ 409.902489][ T5767] usb 10-1: unable to get BOS descriptor or descriptor too short [ 409.938620][ T5767] usb 10-1: config 114 has an invalid interface number: 32 but max is 0 [ 409.953489][ T5767] usb 10-1: config 114 has no interface number 0 [ 409.979320][ T5767] usb 10-1: config 114 interface 32 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 410.023143][ T5767] usb 10-1: config 114 interface 32 has no altsetting 0 [ 410.050960][ T5767] usb 10-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=a4.60 [ 410.081641][ T5767] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.089869][ T5767] usb 10-1: Product: syz [ 410.105073][ T5767] usb 10-1: Manufacturer: syz [ 410.109829][ T5767] usb 10-1: SerialNumber: syz [ 410.173414][ T8376] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 410.402618][ T8395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.462'. [ 410.432531][ T5767] usb 10-1: USB disconnect, device number 4 [ 410.482243][ T8395] bridge0: port 3(syz_tun) entered disabled state [ 410.489011][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.496777][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.031782][ T1208] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 418.722929][ T1208] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.011548][ T1208] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 419.031885][ T1208] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 419.171585][ T1208] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 419.230359][ T1208] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 419.438316][ T1208] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 419.447986][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.456365][ T1208] usb 5-1: Product: syz [ 419.473032][ T1208] usb 5-1: Manufacturer: syz [ 419.477713][ T1208] usb 5-1: SerialNumber: syz [ 419.486822][ T8488] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 419.503049][ T1208] cdc_mbim 5-1:1.0: skipping garbage [ 419.512458][ T8509] autofs4:pid:8509:autofs_fill_super: called with bogus options [ 419.894591][ T8488] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 421.355495][ T8519] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 421.724291][ T1208] cdc_mbim 5-1:1.0: bind() failure [ 421.741388][ T1208] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 421.760432][ T1208] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 421.777748][ T1208] usbtest: probe of 5-1:1.1 failed with error -71 [ 421.851891][ T1208] usb 5-1: USB disconnect, device number 6 [ 422.401392][ T1208] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 422.658471][ T1208] usb 5-1: unable to get BOS descriptor or descriptor too short [ 422.703064][ T1208] usb 5-1: config 114 has an invalid interface number: 32 but max is 0 [ 422.744016][ T1208] usb 5-1: config 114 has no interface number 0 [ 422.750484][ T1208] usb 5-1: config 114 interface 32 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 422.789292][ T1208] usb 5-1: config 114 interface 32 has no altsetting 0 [ 422.830236][ T1208] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=a4.60 [ 422.873019][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.913102][ T1208] usb 5-1: Product: syz [ 422.977938][ T1208] usb 5-1: Manufacturer: syz [ 423.003214][ T1208] usb 5-1: SerialNumber: syz [ 423.015321][ T8525] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 423.318345][ T1208] usb 5-1: USB disconnect, device number 7 [ 427.941201][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 432.399534][ T8603] autofs4:pid:8603:autofs_fill_super: called with bogus options [ 432.445220][ T8602] loop4: detected capacity change from 0 to 164 [ 440.448888][ T8653] autofs4:pid:8653:autofs_fill_super: called with bogus options [ 440.458424][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.464935][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.669900][ T8655] bridge0: port 3(syz_tun) entered blocking state [ 440.677302][ T8655] bridge0: port 3(syz_tun) entered disabled state [ 440.684892][ T8655] syz_tun: entered allmulticast mode [ 440.698049][ T8655] syz_tun: entered promiscuous mode [ 440.706304][ T8655] bridge0: port 3(syz_tun) entered blocking state [ 440.712935][ T8655] bridge0: port 3(syz_tun) entered forwarding state [ 444.089582][ T8676] i2c i2c-0: new_device: Invalid device name [ 444.972348][ T8690] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 448.597003][ T8704] autofs4:pid:8704:autofs_fill_super: called with bogus options [ 453.072349][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 453.085347][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 453.099238][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 453.116920][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 453.140235][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 453.148154][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 453.483208][ T5843] Process accounting resumed [ 453.617586][ T7190] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.345857][ T8734] loop9: detected capacity change from 0 to 2048 [ 454.385928][ T8734] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 454.417728][ T7190] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.551538][ T5767] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 454.661859][ T7190] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.764536][ T5767] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.796388][ T5767] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 454.824271][ T5767] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 454.846191][ T7190] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.857420][ T5767] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.882460][ T5767] usb 9-1: config 0 descriptor?? [ 454.892779][ T5767] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 454.900091][ T5767] dvb-usb: bulk message failed: -22 (3/0) [ 455.030639][ T5767] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 455.112992][ T5767] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 455.382659][ T5767] usb 9-1: media controller created [ 455.430664][ T5767] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 455.471562][ T51] Bluetooth: hci0: command tx timeout [ 455.537791][ T5767] dvb-usb: bulk message failed: -22 (6/0) [ 455.548522][ T5767] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 455.586840][ T5767] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input7 [ 455.622546][ T8744] dvb-usb: bulk message failed: -22 (2/0) [ 455.717151][ T5767] dvb-usb: schedule remote query interval to 150 msecs. [ 455.724677][ T5767] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 455.755346][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 455.886467][ T5767] dvb-usb: bulk message failed: -22 (1/0) [ 455.929163][ T5767] dvb-usb: error while querying for an remote control event. [ 456.332472][ T5767] dvb-usb: bulk message failed: -22 (1/0) [ 456.387629][ T5767] dvb-usb: error while querying for an remote control event. [ 456.512547][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b73a800: rx timeout, send abort [ 457.022832][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b73a800: abort rx timeout. Force session deactivation [ 457.512236][ T51] Bluetooth: hci0: command tx timeout [ 458.415975][ T5843] usb 9-1: USB disconnect, device number 7 [ 460.011325][ T51] Bluetooth: hci0: command tx timeout [ 460.146381][ T5843] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 460.588615][ T8723] chnl_net:caif_netlink_parms(): no params data found [ 461.691922][ T8723] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.699139][ T8723] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.751892][ T8723] bridge_slave_0: entered allmulticast mode [ 461.759508][ T8723] bridge_slave_0: entered promiscuous mode [ 461.917643][ T8723] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.955988][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.002221][ T8723] bridge_slave_1: entered allmulticast mode [ 462.032681][ T8723] bridge_slave_1: entered promiscuous mode [ 462.071352][ T51] Bluetooth: hci0: command tx timeout [ 462.308769][ T8782] autofs4:pid:8782:autofs_fill_super: called with bogus options [ 462.498235][ T5863] Process accounting resumed [ 463.095749][ T8723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.906762][ T8723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.141020][ T8723] team0: Port device team_slave_0 added [ 465.179793][ T8723] team0: Port device team_slave_1 added [ 465.911116][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.951550][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.019472][ T8723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.621395][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.767559][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.951188][ T8723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.118263][ T8810] netlink: 68 bytes leftover after parsing attributes in process `syz.8.542'. [ 467.990906][ T8723] hsr_slave_0: entered promiscuous mode [ 468.194844][ T8813] autofs4:pid:8813:autofs_fill_super: called with bogus options [ 468.336596][ T23] Process accounting resumed [ 468.374708][ T8723] hsr_slave_1: entered promiscuous mode [ 468.491862][ T8723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.618917][ T8723] Cannot create hsr debugfs directory [ 470.651480][ T5868] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 470.858320][ T7190] hsr_slave_0: left promiscuous mode [ 470.868199][ T7190] hsr_slave_1: left promiscuous mode [ 470.881635][ T7190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.889131][ T7190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.901938][ T5868] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 470.911058][ T5868] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.922658][ T7190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.930130][ T7190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.949935][ T5868] usb 9-1: Product: syz [ 470.959759][ T5868] usb 9-1: Manufacturer: syz [ 470.970605][ T5868] usb 9-1: SerialNumber: syz [ 470.976242][ T7190] bridge_slave_1: left allmulticast mode [ 470.984590][ T5868] usb 9-1: config 0 descriptor?? [ 470.992592][ T5868] hub 9-1:0.0: bad descriptor, ignoring hub [ 470.992857][ T7190] bridge_slave_1: left promiscuous mode [ 470.998546][ T5868] hub: probe of 9-1:0.0 failed with error -5 [ 471.017984][ T7190] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.043910][ T7190] bridge_slave_0: left allmulticast mode [ 471.049647][ T7190] bridge_slave_0: left promiscuous mode [ 471.066137][ T7190] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.155267][ T7190] veth1_macvtap: left promiscuous mode [ 471.174383][ T7190] veth0_macvtap: left promiscuous mode [ 471.180168][ T7190] veth1_vlan: left promiscuous mode [ 471.205629][ T7190] veth0_vlan: left promiscuous mode [ 471.278068][ T5868] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 471.305003][ T5868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 471.332195][ T5868] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 471.934278][ T5868] usb 9-1: media controller created [ 471.960146][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 472.089741][ T5868] DVB: Unable to find symbol dib7000p_attach() [ 472.111233][ T5868] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 472.262008][ T5868] rc_core: IR keymap rc-dib0700-rc5 not found [ 472.268271][ T5868] Registered IR keymap rc-empty [ 472.292995][ T5868] dvb-usb: could not initialize remote control. [ 472.299340][ T5868] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 472.495952][ T5868] usb 9-1: USB disconnect, device number 8 [ 472.599749][ T8840] loop0: detected capacity change from 0 to 512 [ 472.612843][ T8840] EXT4-fs: Ignoring removed orlov option [ 472.635091][ T8840] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 472.671441][ T8840] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 472.711813][ T8840] EXT4-fs (loop0): group descriptors corrupted! [ 473.146319][ T8842] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7213] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8842] [ 473.548074][ T8824] dib0700: tx buffer length is larger than 4. Not supported. [ 473.730429][ T5868] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 474.752268][ T7190] team0 (unregistering): Port device team_slave_1 removed [ 474.867717][ T7190] team0 (unregistering): Port device team_slave_0 removed [ 474.978725][ T7190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.054783][ T7190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.266233][ T8852] autofs4:pid:8852:autofs_fill_super: called with bogus options [ 475.670101][ T7190] bond0 (unregistering): Released all slaves [ 475.751724][ T5868] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 476.059419][ T8859] loop9: detected capacity change from 0 to 512 [ 476.064469][ T5868] usb 9-1: Using ep0 maxpacket: 16 [ 476.093194][ T5868] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 476.119677][ T8859] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 476.122839][ T5868] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 476.171464][ T8859] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 476.183287][ T5868] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 476.202897][ T5868] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 476.236623][ T5868] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 476.248163][ T8859] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 476.282379][ T5868] usb 9-1: config 0 has no interface number 0 [ 476.288681][ T5868] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 476.315701][ T8859] EXT4-fs (loop9): 1 truncate cleaned up [ 476.331619][ T8859] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.349952][ T5868] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 476.372055][ T5868] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 476.410396][ T5868] usb 9-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 476.432081][ T5868] usb 9-1: config 0 interface 125 has no altsetting 0 [ 476.649349][ T5868] usb 9-1: config 0 interface 125 has no altsetting 2 [ 476.661021][ T5868] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 476.674920][ T5868] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.685319][ T5868] usb 9-1: Product: syz [ 476.691772][ T5868] usb 9-1: Manufacturer: syz [ 476.696534][ T5868] usb 9-1: SerialNumber: syz [ 476.720045][ T5868] usb 9-1: config 0 descriptor?? [ 476.739817][ T5868] usb 9-1: selecting invalid altsetting 2 [ 476.829608][ T8871] process 'syz.9.554' launched './file0' with NULL argv: empty string added [ 477.628747][ T7057] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.722560][ T8855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.786508][ T8855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.827205][ T8855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.849145][ T5868] get_1284_register timeout [ 477.859303][ T8855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.875815][ C1] usb 9-1: async_complete: urb error -104 [ 477.881904][ C1] usb 9-1: async_complete: urb error -104 [ 477.887837][ C1] usb 9-1: async_complete: urb error -104 [ 477.893763][ C1] usb 9-1: async_complete: urb error -104 [ 480.583563][ T9] usb 9-1: USB disconnect, device number 9 [ 480.606053][ T8884] CIFS: Attempting to mount //127.0.0.1/share [ 481.034939][ T8884] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 481.063427][ T8884] CIFS: VFS: cifs_mount failed w/return code = -112 [ 486.767707][ T8723] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 486.800019][ T8723] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 487.177800][ T8723] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 487.470744][ T8723] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 487.923740][ T8723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.983035][ T8723] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.002991][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.010248][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.041952][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.049214][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.212209][ T5888] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 489.137337][ T5888] usb 10-1: unable to get BOS descriptor or descriptor too short [ 489.175500][ T5888] usb 10-1: config 114 has an invalid interface number: 32 but max is 0 [ 489.202834][ T5888] usb 10-1: config 114 has no interface number 0 [ 489.209393][ T5888] usb 10-1: config 114 interface 32 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 489.274868][ T5888] usb 10-1: config 114 interface 32 has no altsetting 0 [ 489.299036][ T5888] usb 10-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=a4.60 [ 489.331521][ T5888] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.339696][ T5888] usb 10-1: Product: syz [ 489.391937][ T5888] usb 10-1: Manufacturer: syz [ 489.396724][ T5888] usb 10-1: SerialNumber: syz [ 489.437550][ T8924] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 489.504668][ T8723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.761396][ T5888] usb 10-1: USB disconnect, device number 5 [ 489.786736][ T8723] veth0_vlan: entered promiscuous mode [ 489.930274][ T8723] veth1_vlan: entered promiscuous mode [ 490.591439][ T8723] veth0_macvtap: entered promiscuous mode [ 490.604093][ T8723] veth1_macvtap: entered promiscuous mode [ 490.628150][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.639649][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.691482][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.702086][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.712551][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.731401][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.772987][ T8723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.829040][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.884384][ T8961] loop8: detected capacity change from 0 to 64 [ 490.894802][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.914468][ T8953] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 490.927141][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.951643][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.982016][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.024918][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.078096][ T8723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.148781][ T8723] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.180261][ T8723] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.201222][ T8723] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.210014][ T8723] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.478111][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.510491][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.566672][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.596793][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.632890][ T8967] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.017828][ T8973] loop8: detected capacity change from 0 to 32768 [ 493.157005][ T8973] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.576 (8973) [ 493.256261][ T8973] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 493.257471][ T8993] sg_write: data in/out 19942/1 bytes for SCSI command 0x32-- guessing data in; [ 493.257471][ T8993] program syz.1.579 not setting count and/or reply_len properly [ 493.281697][ T8973] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 493.330227][ T8973] BTRFS info (device loop8): setting nodatasum [ 493.366862][ T8973] BTRFS info (device loop8): metadata ratio 4 [ 493.393565][ T8973] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_LZO (0x8) [ 493.422397][ T8973] BTRFS info (device loop8): use lzo compression, level 0 [ 493.453314][ T8973] BTRFS info (device loop8): enabling auto defrag [ 493.462268][ T8973] BTRFS info (device loop8): max_inline at 4096 [ 493.468615][ T8973] BTRFS info (device loop8): using free space tree [ 493.595242][ T8973] BTRFS info (device loop8): enabling ssd optimizations [ 493.690084][ T8973] BTRFS info (device loop8): checking UUID tree [ 494.459565][ T6924] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 494.721766][ T7309] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 495.214228][ T9029] loop8: detected capacity change from 0 to 40427 [ 495.262015][ T9029] F2FS-fs (loop8): invalid crc value [ 495.293715][ T9029] F2FS-fs (loop8): Found nat_bits in checkpoint [ 495.335604][ T7309] usb 10-1: unable to get BOS descriptor or descriptor too short [ 495.346031][ T7309] usb 10-1: config 114 has an invalid interface number: 32 but max is 0 [ 495.375234][ T9029] F2FS-fs (loop8): Start checkpoint disabled! [ 495.401565][ T7309] usb 10-1: config 114 has no interface number 0 [ 495.408054][ T7309] usb 10-1: config 114 interface 32 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 495.421373][ T9029] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 495.432376][ T7309] usb 10-1: config 114 interface 32 has no altsetting 0 [ 495.460658][ T7309] usb 10-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=a4.60 [ 495.715786][ T7309] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.724092][ T7309] usb 10-1: Product: syz [ 495.728411][ T7309] usb 10-1: Manufacturer: syz [ 495.733331][ T7309] usb 10-1: SerialNumber: syz [ 495.749315][ T8996] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 495.989800][ T7309] usb 10-1: USB disconnect, device number 6 [ 496.034810][ T9042] loop1: detected capacity change from 0 to 64 [ 496.198925][ T2973] kworker/u4:10: attempt to access beyond end of device [ 496.198925][ T2973] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 496.225139][ T2973] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 496.270509][ T2973] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 496.379735][ T9046] loop0: detected capacity change from 0 to 256 [ 496.834722][ T9054] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 496.845327][ T9054] FAT-fs (loop0): Filesystem has been set read-only [ 496.854322][ T9054] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 496.867563][ T9054] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 496.885168][ T9054] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 497.095827][ T27] audit: type=1800 audit(1789172988.009:5): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.587" name="file1" dev="loop0" ino=1048701 res=0 errno=0 [ 497.352470][ T9054] syz.0.587 (9054) used greatest stack depth: 20264 bytes left [ 498.887332][ T9086] md: md0 stopped. [ 498.914927][ T9087] loop8: detected capacity change from 0 to 256 [ 499.202855][ T9091] loop9: detected capacity change from 0 to 512 [ 499.238565][ T9091] EXT4-fs: Ignoring removed orlov option [ 499.363476][ T9091] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 499.431350][ T9091] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 499.512860][ T9091] EXT4-fs (loop9): group descriptors corrupted! [ 502.934300][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.940690][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.995279][ T9118] loop8: detected capacity change from 0 to 16 [ 503.028728][ T9118] erofs: (device loop8): mounted with root inode @ nid 36. [ 503.327411][ T9124] loop8: detected capacity change from 0 to 256 [ 505.728895][ T9150] loop9: detected capacity change from 0 to 512 [ 505.804370][ T9150] EXT4-fs: Ignoring removed orlov option [ 505.877786][ T9150] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 505.948029][ T9150] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 506.141702][ T9150] EXT4-fs (loop9): group descriptors corrupted! [ 507.227580][ T9164] loop9: detected capacity change from 0 to 256 [ 508.988807][ T9172] loop8: detected capacity change from 0 to 256 [ 509.105976][ T9172] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 512.323977][ T9205] loop8: detected capacity change from 0 to 512 [ 512.414405][ T9205] EXT4-fs: Ignoring removed orlov option [ 512.646232][ T9205] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 513.019853][ T9205] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 513.185755][ T9205] EXT4-fs (loop8): group descriptors corrupted! [ 516.986347][ T9222] loop8: detected capacity change from 0 to 256 [ 519.263502][ T9247] loop8: detected capacity change from 0 to 256 [ 526.106022][ T9284] loop1: detected capacity change from 0 to 256 [ 537.120058][ T9370] netlink: 52 bytes leftover after parsing attributes in process `syz.9.661'. [ 537.481610][ T7309] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 537.695179][ T7309] usb 10-1: Using ep0 maxpacket: 8 [ 537.725812][ T7309] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 537.744704][ T7309] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 537.767161][ T7309] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 537.777729][ T7309] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 537.788401][ T7309] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 537.804441][ T7309] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 537.833265][ T7309] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.925893][ T9384] loop0: detected capacity change from 0 to 256 [ 538.077024][ T7309] usb 10-1: usb_control_msg returned -32 [ 538.105120][ T7309] usbtmc 10-1:16.0: can't read capabilities [ 538.529105][ T7309] usb 10-1: USB disconnect, device number 7 [ 538.536006][ T9370] usbtmc 10-1:16.0: usb_control_msg returned -71 [ 541.194839][ T9425] tipc: Started in network mode [ 541.219408][ T9425] tipc: Node identity e6393974c41d, cluster identity 4711 [ 541.233355][ T9425] tipc: Enabled bearer , priority 0 [ 541.563035][ T9436] tipc: Disabling bearer [ 542.222182][ T9429] loop9: detected capacity change from 0 to 256 [ 544.963258][ T9467] netlink: 24 bytes leftover after parsing attributes in process `syz.8.678'. [ 547.090639][ T9487] loop0: detected capacity change from 0 to 256 [ 548.311479][ T5868] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 549.145904][ T5868] usb 10-1: unable to get BOS descriptor or descriptor too short [ 549.175646][ T5868] usb 10-1: config 114 has an invalid interface number: 32 but max is 0 [ 549.204119][ T5868] usb 10-1: config 114 has no interface number 0 [ 549.253793][ T5868] usb 10-1: config 114 interface 32 has no altsetting 0 [ 549.374738][ T9510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.690'. [ 550.132512][ T5868] usb 10-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=a4.60 [ 550.144099][ T5868] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.201384][ T5868] usb 10-1: Product: syz [ 550.220283][ T5868] usb 10-1: Manufacturer: syz [ 550.251934][ T5868] usb 10-1: SerialNumber: syz [ 550.509548][ T5868] usb 10-1: USB disconnect, device number 8 [ 551.080966][ T9525] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 551.100253][ T9525] loop0: detected capacity change from 0 to 512 [ 551.107845][ T9525] EXT4-fs: Ignoring removed nomblk_io_submit option [ 552.618593][ T9523] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 555.238250][ T9525] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 555.585499][ T9533] loop0: detected capacity change from 0 to 256 [ 557.340650][ T9554] netlink: 12 bytes leftover after parsing attributes in process `syz.9.701'. [ 558.733749][ T9562] netlink: 44 bytes leftover after parsing attributes in process `syz.9.703'. [ 558.771900][ T9569] loop8: detected capacity change from 0 to 256 [ 559.984545][ T9577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.056112][ T9566] syz.0.704: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 560.121260][ T9566] CPU: 1 PID: 9566 Comm: syz.0.704 Not tainted syzkaller #0 [ 560.128654][ T9566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 560.138770][ T9566] Call Trace: [ 560.142228][ T9566] [ 560.145241][ T9566] dump_stack_lvl+0x18c/0x250 [ 560.150099][ T9566] ? show_regs_print_info+0x20/0x20 [ 560.155358][ T9566] ? load_image+0x420/0x420 [ 560.159903][ T9566] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 560.166373][ T9566] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 560.173440][ T9566] warn_alloc+0x246/0x340 [ 560.177826][ T9566] ? zone_watermark_ok_safe+0x230/0x230 [ 560.183402][ T9566] ? _raw_spin_unlock+0x28/0x40 [ 560.188357][ T9566] __vmalloc_node_range+0x661/0x1320 [ 560.193690][ T9566] ? free_vm_area+0x50/0x50 [ 560.198330][ T9566] ? packet_set_ring+0x77d/0x2490 [ 560.203451][ T9566] vzalloc+0x79/0x90 [ 560.207368][ T9566] ? packet_set_ring+0x77d/0x2490 [ 560.212413][ T9566] packet_set_ring+0x77d/0x2490 [ 560.217336][ T9566] ? packet_mmap+0x510/0x510 [ 560.221959][ T9566] ? __lock_acquire+0x7d80/0x7d80 [ 560.227131][ T9566] ? __local_bh_enable_ip+0x13a/0x1c0 [ 560.232602][ T9566] ? lockdep_hardirqs_on+0x98/0x150 [ 560.237851][ T9566] ? __might_fault+0xaa/0x120 [ 560.242565][ T9566] ? __might_fault+0xc6/0x120 [ 560.247260][ T9566] ? __might_fault+0xaa/0x120 [ 560.251958][ T9566] ? _copy_from_user+0xa5/0xe0 [ 560.256802][ T9566] packet_setsockopt+0xdb0/0x1500 [ 560.261906][ T9566] ? packet_ioctl+0x350/0x350 [ 560.266608][ T9566] ? aa_sk_perm+0x83c/0x970 [ 560.271180][ T9566] ? __fget_files+0x28/0x460 [ 560.275847][ T9566] ? do_set_mempolicy+0x262/0x2f0 [ 560.280912][ T9566] ? aa_af_perm+0x330/0x330 [ 560.285468][ T9566] ? __fget_files+0x28/0x460 [ 560.290129][ T9566] ? aa_sock_opt_perm+0x74/0x100 [ 560.295144][ T9566] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 560.300800][ T9566] ? security_socket_setsockopt+0x7e/0xa0 [ 560.306602][ T9566] ? packet_ioctl+0x350/0x350 [ 560.311341][ T9566] do_sock_setsockopt+0x175/0x1a0 [ 560.316564][ T9566] ? __fdget+0x180/0x210 [ 560.320875][ T9566] __x64_sys_setsockopt+0x182/0x200 [ 560.326158][ T9566] do_syscall_64+0x55/0xb0 [ 560.330640][ T9566] ? clear_bhb_loop+0x40/0x90 [ 560.335477][ T9566] ? clear_bhb_loop+0x40/0x90 [ 560.340230][ T9566] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 560.346194][ T9566] RIP: 0033:0x7fda2999e159 [ 560.350775][ T9566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.370704][ T9566] RSP: 002b:00007fda2a853028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 560.379149][ T9566] RAX: ffffffffffffffda RBX: 00007fda29c25fa0 RCX: 00007fda2999e159 [ 560.387156][ T9566] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 560.395145][ T9566] RBP: 00007fda29a3503b R08: 000000000000001c R09: 0000000000000000 [ 560.403139][ T9566] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 560.411154][ T9566] R13: 00007fda29c26038 R14: 00007fda29c25fa0 R15: 00007ffd3c9ac198 [ 560.419344][ T9566] [ 560.471897][ T9566] Mem-Info: [ 560.483666][ T9566] active_anon:8983 inactive_anon:0 isolated_anon:0 [ 560.483666][ T9566] active_file:18131 inactive_file:40158 isolated_file:0 [ 560.483666][ T9566] unevictable:1792 dirty:107 writeback:0 [ 560.483666][ T9566] slab_reclaimable:11315 slab_unreclaimable:95098 [ 560.483666][ T9566] mapped:28811 shmem:5301 pagetables:645 [ 560.483666][ T9566] sec_pagetables:0 bounce:0 [ 560.483666][ T9566] kernel_misc_reclaimable:0 [ 560.483666][ T9566] free:1327764 free_pcp:10231 free_cma:0 [ 560.529539][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.552123][ T9566] Node 0 active_anon:35932kB inactive_anon:0kB active_file:72524kB inactive_file:160432kB unevictable:5632kB isolated(anon):0kB isolated(file):0kB mapped:115244kB dirty:428kB writeback:0kB shmem:19668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10984kB pagetables:2580kB sec_pagetables:0kB all_unreclaimable? no [ 560.586153][ T9566] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 560.617158][ T9566] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 560.691495][ T9566] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 560.700850][ T9566] Node 0 DMA32 free:1413188kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:36088kB inactive_anon:0kB active_file:72524kB inactive_file:159608kB unevictable:5632kB writepending:428kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:24000kB local_pcp:18048kB free_cma:0kB [ 560.770880][ T9566] lowmem_reserve[]: 0 0 0 0 0 [ 560.811035][ T9566] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 560.838442][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.905987][ T9566] lowmem_reserve[]: 0 0 0 0 0 [ 560.910822][ T9566] Node 1 Normal free:3882280kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16464kB local_pcp:7400kB free_cma:0kB [ 561.056827][ T9566] lowmem_reserve[]: 0 0 0 0 0 [ 561.062256][ T9566] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 561.159897][ T9566] Node 0 DMA32: 20*4kB (UME) 17*8kB (UME) 52*16kB (ME) 683*32kB (UME) 390*64kB (UME) 217*128kB (UME) 82*256kB (UME) 73*512kB (UM) 32*1024kB (ME) 13*2048kB (UM) 297*4096kB (UM) = 1409912kB [ 561.184556][ T9566] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 561.945124][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.711'. [ 562.065085][ T9566] Node 1 Normal: 6*4kB (UME) 10*8kB (ME) 6*16kB (ME) 7*32kB (UME) 4*64kB (UME) 5*128kB (UME) 2*256kB (ME) 1*512kB (U) 1*1024kB (E) 2*2048kB (UE) 946*4096kB (M) = 3882280kB [ 562.190313][ T9566] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 562.202243][ T9566] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 562.212573][ T9566] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 562.222879][ T9566] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 562.232585][ T9566] 60710 total pagecache pages [ 562.237441][ T9566] 0 pages in swap cache [ 562.241796][ T9566] Free swap = 124984kB [ 562.246131][ T9566] Total swap = 124996kB [ 562.250471][ T9566] 2097051 pages RAM [ 562.254751][ T9566] 0 pages HighMem/MovableOnly [ 562.259567][ T9566] 416960 pages reserved [ 562.263909][ T9566] 0 pages cma reserved [ 562.490176][ T9606] loop1: detected capacity change from 0 to 256 [ 562.654957][ T9609] ubi0: attaching mtd0 [ 562.679018][ T9609] ubi0: scanning is finished [ 562.713361][ T9609] ubi0: empty MTD device detected [ 563.238377][ T9609] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 563.292404][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.298815][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.310185][ T9609] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 563.331193][ T9609] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 563.348758][ T9609] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 563.368763][ T9609] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 563.398211][ T9622] Bluetooth: MGMT ver 1.22 [ 563.411736][ T9609] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 563.425707][ T51] list_del corruption, ffff88802d362080->next is LIST_POISON1 (dead000000000100) [ 563.441773][ T51] ------------[ cut here ]------------ [ 563.447461][ T51] kernel BUG at lib/list_debug.c:58! [ 563.459957][ T51] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 563.466267][ T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 563.473680][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 563.478224][ T9609] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1599198148 [ 563.483763][ T51] Workqueue: hci0 hci_cmd_sync_work SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 563.499181][ T51] RIP: 0010:__list_del_entry_valid_or_report+0xe9/0x130 [ 563.506168][ T51] Code: 48 89 de e8 69 78 49 06 0f 0b 48 c7 c7 60 39 1d 8b 48 89 de e8 58 78 49 06 0f 0b 48 c7 c7 c0 39 1d 8b 48 89 de e8 47 78 49 06 <0f> 0b 48 c7 c7 20 3a 1d 8b 48 89 de e8 36 78 49 06 0f 0b 48 c7 c7 [ 563.525829][ T51] RSP: 0000:ffffc90000bbfa00 EFLAGS: 00010246 [ 563.532053][ T51] RAX: 000000000000004e RBX: ffff88802d362080 RCX: b960c148858b2800 [ 563.540073][ T51] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 563.548273][ T51] RBP: 1ffff11005a6c413 R08: ffffc90000bbf707 R09: 1ffff92000177ee0 [ 563.556302][ T51] R10: dffffc0000000000 R11: fffff52000177ee1 R12: dffffc0000000000 [ 563.564361][ T51] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 563.572382][ T51] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 563.581367][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.588011][ T51] CR2: 00007fda2a832d58 CR3: 000000002fdda000 CR4: 00000000003506e0 [ 563.596041][ T51] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 563.604077][ T51] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 563.612114][ T51] Call Trace: [ 563.615435][ T51] [ 563.618421][ T51] mgmt_pending_remove+0x53/0x1f0 [ 563.623520][ T51] mgmt_add_adv_patterns_monitor_complete+0x45d/0x730 [ 563.630415][ T51] ? mgmt_add_adv_patterns_monitor_sync+0x90/0x90 [ 563.636983][ T51] ? msft_monitor_supported+0x69/0x80 [ 563.642488][ T51] ? hci_add_adv_monitor+0x17d/0x2a0 [ 563.647924][ T51] ? mgmt_add_adv_patterns_monitor_sync+0x90/0x90 [ 563.654400][ T51] hci_cmd_sync_work+0x24b/0x380 [ 563.659409][ T51] ? process_scheduled_works+0x975/0x1600 [ 563.665188][ T51] process_scheduled_works+0xa60/0x1600 [ 563.667558][ T9609] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 563.670787][ T51] ? worker_attach_to_pool+0x370/0x370 [ 563.686223][ T51] ? assign_work+0x3cc/0x5d0 [ 563.690962][ T51] worker_thread+0xa5e/0xfe0 [ 563.695619][ T51] kthread+0x2fa/0x390 [ 563.699734][ T51] ? pr_cont_work+0x550/0x550 [ 563.704726][ T51] ? kthread_blkcg+0xd0/0xd0 [ 563.709467][ T51] ret_from_fork+0x48/0x80 [ 563.713971][ T51] ? kthread_blkcg+0xd0/0xd0 [ 563.718614][ T51] ret_from_fork_asm+0x11/0x20 [ 563.723464][ T51] [ 563.726530][ T51] Modules linked in: [ 563.748474][ T51] ---[ end trace 0000000000000000 ]--- [ 563.754125][ T51] RIP: 0010:__list_del_entry_valid_or_report+0xe9/0x130 [ 563.761917][ T51] Code: 48 89 de e8 69 78 49 06 0f 0b 48 c7 c7 60 39 1d 8b 48 89 de e8 58 78 49 06 0f 0b 48 c7 c7 c0 39 1d 8b 48 89 de e8 47 78 49 06 <0f> 0b 48 c7 c7 20 3a 1d 8b 48 89 de e8 36 78 49 06 0f 0b 48 c7 c7 [ 563.830848][ T51] RSP: 0000:ffffc90000bbfa00 EFLAGS: 00010246 [ 563.859642][ T51] RAX: 000000000000004e RBX: ffff88802d362080 RCX: b960c148858b2800 [ 563.878827][ T51] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 563.900542][ T51] RBP: 1ffff11005a6c413 R08: ffffc90000bbf707 R09: 1ffff92000177ee0 [ 563.919136][ T51] R10: dffffc0000000000 R11: fffff52000177ee1 R12: dffffc0000000000 [ 563.931063][ T51] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 563.947872][ T51] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 563.962831][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.971505][ T51] CR2: 000020000000f000 CR3: 000000002fdda000 CR4: 00000000003506f0 [ 563.984678][ T51] Kernel panic - not syncing: Fatal exception [ 563.991499][ T51] Kernel Offset: disabled [ 563.995839][ T51] Rebooting in 86400 seconds..