last executing test programs: 19.919728617s ago: executing program 1 (id=74): socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="7ba9"], 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x9a000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x2, 0x7fff, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='port', &(0x7f00000002c0)='0', 0x0) r4 = fsopen(&(0x7f00000003c0)='ntfs3\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000001}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000340)={"81234738091a21bc05bb14892bebfcdcb38721cbfc1d366337371fa0aa1bd846"}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x20) shutdown(r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x8000000) socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr(0xffffffffffffffff, &(0x7f0000000200)=@known='user.incfs.id\x00', &(0x7f0000000280)='+.%+\x00', 0x5, 0x2) 19.750083663s ago: executing program 4 (id=76): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x68ab, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x16cc89b4, 0x200, 0x80, 0x10, 0x80000000, 0x4, 0x2, 0xffff6576, 0xd6a6, 0x9, 0x6, 0x9, 0x8, 0x1d, 0x3, 0x81, 0x7, 0x8, 0x8, 0x3f, 0x5, 0xfffffff7, 0x7fffffff, 0x1, 0x10001, 0xfffffff6, 0x5, 0x0, 0x80000001, 0x2, 0x1, 0x7, 0xb, 0x7, 0x0, 0x9bc100, 0x7, 0x999, 0x6, 0x4, 0xfe, 0x3, 0x8c1, 0xffff, 0x1, 0x9fc, 0x7fffffff, 0x2, 0x8, 0x4, 0x10000, 0x200, 0xe, 0x1, 0x0, 0x40, 0x7, 0xa5d8, 0x4, 0x6, 0x7000000, 0x3, 0x9, 0x4, 0x9, 0x0, 0x6, 0x9, 0x4, 0x80, 0x8, 0x10001, 0x6, 0x8, 0x200, 0x0, 0x7, 0x9, 0xffffffff, 0x100, 0x5, 0xff6, 0x35, 0x53, 0x7fffffff, 0x80000000, 0x200, 0x480000, 0x4, 0xfff, 0x6fd, 0x4, 0x3d4a3d97, 0xd4, 0x56, 0x7, 0x392a, 0x2, 0x2, 0x7, 0xe6, 0x7, 0x6, 0x8, 0xffff1362, 0x7, 0xe47a, 0x6, 0x6, 0x5, 0x9000000, 0x3, 0xc7, 0x708, 0x3, 0x0, 0x10, 0x9, 0x2, 0xd0, 0x1000, 0xf4, 0x432, 0x1ff, 0x401, 0x5, 0x97b2, 0x0, 0x1, 0x7, 0x80000000, 0x1, 0xdc, 0x10001, 0x9, 0x6, 0x1cd7, 0x6, 0xfffffffd, 0x1, 0x1, 0x9, 0xc, 0x1, 0x10, 0x747, 0x2, 0xffffff25, 0x7, 0x2, 0x97, 0x3, 0x7de8, 0x2, 0x6, 0x5, 0x3, 0x10000, 0x0, 0xf, 0x101, 0x2, 0x200, 0x4, 0x1, 0x3, 0x4, 0x4, 0x1c000000, 0x9, 0x200, 0x3, 0xc, 0xb, 0x9, 0x8000, 0x101, 0x8, 0x0, 0x2, 0x7, 0x6ac, 0x5, 0x1, 0x8, 0x101, 0x1, 0x65, 0xfffffff6, 0x0, 0x9, 0x401, 0x0, 0x3, 0x3744, 0x28, 0x2, 0x3, 0xfff, 0x0, 0x563d, 0x7, 0x8, 0x6, 0xb6, 0x8, 0x6, 0x4d, 0x7fff, 0xff, 0x2, 0x4, 0x3, 0x7, 0x3, 0x8, 0x2, 0xff, 0x0, 0x1, 0x2, 0x3, 0x4, 0x5, 0x4, 0x0, 0x8, 0xd, 0xe, 0x2, 0x4, 0x6, 0x4, 0x1, 0x401, 0x2, 0x5, 0xfff, 0x96b4, 0x2, 0x92ed36b9, 0x8000, 0x40, 0x4, 0x9, 0x9, 0x0, 0x0, 0xf4, 0x5, 0x0, 0x7, 0x7, 0x2, 0x9f14, 0x2]}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x5, 0x401, 0x0, 0x9, 0x18, 0x1, 0x80, 0x7000000, 0x5, 0x8, 0x9, 0x8, 0xd8c, 0x10f8000, 0x1, 0x4, 0x6, 0xf, 0x7ff, 0x1, 0x88d, 0x8, 0xfffffff9, 0x7, 0x6, 0x7f, 0x4, 0xc824, 0x4, 0xe3, 0x6, 0x0, 0xe, 0x7, 0xe, 0x101, 0xf, 0x0, 0x7, 0x8, 0x6, 0x4, 0x3, 0x7ff, 0xe55, 0x5, 0x4b19, 0x8, 0x8, 0xc5c, 0x9, 0x3, 0x5, 0x8001, 0xfffffff8, 0x9, 0x5, 0x9, 0x2, 0x8, 0xfffffffa, 0xfffffff7, 0x1, 0x6a41, 0xffffffff, 0xf, 0x4, 0x3ff, 0x7f, 0x3, 0x81, 0x10, 0x3, 0x400, 0x9, 0x7ff, 0x5, 0x40, 0x2, 0x2e, 0x0, 0x1, 0x5, 0xcf9, 0x2, 0x0, 0x4, 0x4, 0x4, 0x4, 0x3, 0x7ff, 0x5, 0xfffffffc, 0x3, 0x2, 0x6, 0xa5, 0xfffff000, 0x2, 0x6, 0x1, 0x8, 0x80000000, 0x800, 0x9, 0x6, 0x2, 0x0, 0x80, 0x3, 0xfffffffd, 0xfff, 0x7f, 0x7, 0x2, 0x7, 0x1, 0x89c, 0x9fae562, 0x6, 0x5, 0xff, 0x7, 0x401, 0x1, 0x6, 0x9, 0x7, 0x3ff, 0x800, 0x2, 0x803, 0x6, 0xc71, 0x81, 0x80000000, 0x3ff, 0x8, 0x7, 0x2, 0x7, 0x200, 0x2, 0x7, 0x8000, 0xe265, 0x7fffffff, 0x0, 0x0, 0x2e, 0xc, 0x7, 0x0, 0xc88f, 0x2, 0xffffffff, 0x6, 0x5, 0x8000, 0xe, 0xfffffff9, 0x6, 0x8, 0x990, 0x800, 0x5, 0x7, 0x1, 0xfffffffa, 0xb, 0x9, 0x2, 0x7ff, 0x8000, 0x5, 0x1, 0x10000, 0xd41b, 0x128b5072, 0xf, 0x4eac, 0xf918, 0x7f, 0x3, 0x8, 0x2, 0x0, 0x0, 0xff, 0xb, 0x4, 0x96a3, 0x1, 0x8001, 0x7, 0x4, 0x1, 0x9, 0x6, 0x1, 0x3, 0x5, 0x631, 0x8001, 0x3, 0x10001, 0x44c, 0x5827, 0xa99, 0x3, 0x400, 0x0, 0x3, 0x7, 0x10000000, 0x3, 0x3, 0x0, 0x1d99, 0x3, 0x4, 0x7, 0xb78b, 0x1, 0x3, 0x10000000, 0x7, 0x8, 0x4, 0x9, 0x7, 0x4, 0x5, 0x7, 0x0, 0xfffffff9, 0xffff, 0x81, 0x9, 0x6, 0x3, 0x19f2, 0x3, 0xe, 0x4259, 0x6, 0x3, 0x81, 0x58783dd6, 0xed2, 0x5, 0x5, 0x9]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r9 = dup3(r7, r8, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3b000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58004b78b9a21a00"], 0x0) ioctl$MON_IOCX_GETX(r9, 0x4018920a, &(0x7f00000001c0)={&(0x7f00000012c0), 0x0}) 14.317699655s ago: executing program 2 (id=77): syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x60040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c000000060a01040000000000000000010000000900020073797a3200000000200004801c0001800c00010062697477697365000c00028000000340000000040900010073797a3000000000140000001100010000000000000000000700000af3b384b387077bde72bdcb708bc08adaef39f1d253f2050a96d2d28a36d9dd32e038354dabb555"], 0x74}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 14.033426729s ago: executing program 4 (id=78): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0xffffff37, 0xc934, 0x0, 0x10001, 0x40003, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) 13.764712353s ago: executing program 1 (id=79): syz_open_dev$vcsu(&(0x7f00000003c0), 0x7, 0x200000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) 13.59877559s ago: executing program 3 (id=80): unshare(0x22020600) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0x21, 0x0, 0x0) 13.504316156s ago: executing program 0 (id=81): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000002700)=""/4088, 0xff8}], 0x1, 0x15c, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="170000000a0001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f93150", 0x64) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f00000003c0), 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe}, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) read(r4, &(0x7f0000000140)=""/116, 0x74) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04223d04"], 0x40) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 13.225211788s ago: executing program 4 (id=82): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x22}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000480)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) fcntl$dupfd(r1, 0x0, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x3d}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 11.064743391s ago: executing program 2 (id=83): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) unshare(0x22020600) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) 11.013520376s ago: executing program 1 (id=84): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x50}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xe, 0x2, {0x8, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x20004804) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x1, 0x3f0, 0x0, 0x80d613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x2000000, 0x0, 0x0, 0x100, 0x0, 0x1}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r8, 0x5459, &(0x7f0000000380)) ioctl$NILFS_IOCTL_GET_SUSTAT(r7, 0x80306e85, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 11.013193889s ago: executing program 3 (id=85): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'team_slave_1\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x4b, 0x16, "5c76276f6c86622447099377e66e2ebe40decbab5fbe"}}) creat(&(0x7f00000003c0)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) ftruncate(r2, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x200, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r1, 0x4148, 0x0) preadv(r4, 0x0, 0x0, 0x7, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_emit_ethernet(0x22, &(0x7f0000000700)={@remote, @empty, @val={@val, {0x88ca}}, {@x25={0x805, {0x0, 0x0, 0x0, "a67fb3ede2addfa3f1"}}}}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'batadv0\x00', @ifru_map={0x4, 0x6, 0x8, 0xb6, 0xf4, 0x9}}}) 10.769639402s ago: executing program 4 (id=86): socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="7ba9"], 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x9a000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x2, 0x7fff, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='port', &(0x7f00000002c0)='0', 0x0) r4 = fsopen(&(0x7f00000003c0)='ntfs3\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000001}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000340)={"81234738091a21bc05bb14892bebfcdcb38721cbfc1d366337371fa0aa1bd846"}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000200)='hybla', 0x5) shutdown(r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x8000000) socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr(0xffffffffffffffff, &(0x7f0000000200)=@known='user.incfs.id\x00', &(0x7f0000000280)='+.%+\x00', 0x5, 0x2) 10.374187995s ago: executing program 0 (id=87): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x10010}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x60040004}, 0x0) r2 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r7], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01"], 0x3c}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r7, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f00010000003e11859a3351e595fc6522"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000002000/0x4000)=nil, 0x4000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') gettid() 10.222800086s ago: executing program 2 (id=88): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f00000003c0)={"637bf629b5896eeb77e137c6e7f24b7891d6f012acc9fe23b2a34566bb56", 0x2, 0x1, 0x0, 0x101, 0x81, 0x5, 0x1, 0x6, [0x5, 0x4, 0x1, 0x401, 0x3, 0x2ab9, 0x4e2edc8b, 0x80000001, 0x8, 0x7, 0x3, 0x4, 0x7ef, 0xc, 0xffff0000, 0x2, 0x6, 0x7, 0x46]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, 0x0, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r0, 0x36, 0x0, 0x1, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540), 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB='6\x00'/12, @ANYRES32=r0, @ANYBLOB="97c39819b2ea7f507def44776b9161ba8a1cbca3890f4de593822da7224a4d6b5db27220f32921d3d3e7220f055b94d833123e8981c034484a4f0faccf33bd0ee5c584980be4561c76b945618f48b65fb1eb2ba29258fe9068286fd767f5df93f0382cb037982b81ed382e326dd5d20eacc912ed2af005037efb00000ee6432675ba35bff2304e2d84b20417e507508798939c09a310a23fb59881ddfadc869bdb60e5a810470549a8764e4aa9c25e654900000000", @ANYRES64=r6], 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb8", @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x104) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000040)=@x86={0x81, 0x7, 0x63, 0x0, 0x7, 0xa, 0x0, 0x3, 0x7, 0x92, 0x3, 0x6, 0x0, 0x7f, 0x5ab, 0x2, 0xc9, 0x9, 0x1, '\x00', 0x8, 0x800}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000180)=@arm64={0x8, 0xe, 0x6, '\x00', 0x1}) 8.472917862s ago: executing program 3 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x40, 0x40, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000000)={0x10001e, 0x100074, 0x40000}, 0x20) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r1, 0x0, 0x0, 0x4000000) sendmsg$netlink(r7, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB], 0x50}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r8, &(0x7f0000000440)="3bb1b7239bb05ce714f1471bf7e9c05df657add2a30faeb9ce539100da55cdb19c169f7c24cb39895af80a71f778e24b2fb256b5470012e1979e362a3d93d4c104152b12191fa7b2dfefb554bfba434b1dbac70957ed3963b52fedac92013437d511baf71db10efea606938225e8ea06f361d4cc2d31e55af9d494273c257d4f5cc2c0f9a314c167f437bebeb8946c06fd2f5902d1457120da18ad3ba16527", &(0x7f0000000680)=""/222}, 0x20) r9 = fsopen(&(0x7f0000000000)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000080)='source', &(0x7f0000000640)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, 0x0}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x28, 0x7fffffff, 0x269a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000006200)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x100000005, {0x1, 0x3, 0x34, 0x200, 0x8, 0xffff672b, {0x2, 0x7, 0x101, 0xffff, 0xfffffffffdffffff, 0x8, 0x7, 0xce90cbb, 0xffffff4d, 0x1000, 0x0, r3, 0xee01, 0x7fff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.337483895s ago: executing program 3 (id=92): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0xffffff37, 0xc934, 0x0, 0x10001, 0x40003, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) 6.293207704s ago: executing program 2 (id=93): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28) sendmsg$inet(r2, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x70}, 0x24044051) unshare(0x2c020400) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) mmap(&(0x7f0000030000/0x1000)=nil, 0x1000, 0x1, 0x10010, r0, 0x92cb3000) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) io_uring_setup(0x5, &(0x7f00000003c0)={0x0, 0x29ea, 0x1000, 0x0, 0x3e6}) r5 = socket(0x400000000010, 0x4, 0x80) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x25cb}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6020}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 6.222298523s ago: executing program 1 (id=94): syz_open_dev$vcsu(&(0x7f00000003c0), 0x7, 0x200000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) 6.062927051s ago: executing program 0 (id=95): r0 = syz_open_dev$admmidi(&(0x7f0000000080), 0x16, 0x109000) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xfff}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'wlc\x00', 0x11, 0x80006, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) socket(0x2, 0x4, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r4, &(0x7f00000026c0)=[{&(0x7f0000002700)=""/4088, 0xff8}], 0x1, 0xc, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x80000000, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_setup(0xc, &(0x7f0000000100)=0x0) r6 = timerfd_create(0x0, 0x0) io_submit(r5, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) timerfd_settime(r6, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x0, 0x61, 0x2, 0x0, 0x100, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x9, 0x0, 0xa5, 0x0, 0x4000, 0xfffffffffffffffd, 0x1}) io_setup(0x71, &(0x7f0000000140)) 5.309329136s ago: executing program 3 (id=96): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r2, @ANYBLOB="ae"], 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000fddbdf2507000000080003", @ANYRES32=r5, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x4000000, &(0x7f0000000380)={0x11, 0x4, r8, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 4.586282719s ago: executing program 1 (id=97): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000002700)=""/4088, 0xff8}], 0x1, 0x15c, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="170000000a0001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f93150", 0x64) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f00000003c0), 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe}, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) read(r4, &(0x7f0000000140)=""/116, 0x74) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04223d04"], 0x40) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 4.010792891s ago: executing program 2 (id=98): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) unshare(0x22020600) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) 3.659682542s ago: executing program 0 (id=99): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'team_slave_1\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x4b, 0x16, "5c76276f6c86622447099377e66e2ebe40decbab5fbe"}}) creat(&(0x7f00000003c0)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) ftruncate(r2, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x200, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r1, 0x4148, 0x0) preadv(r4, 0x0, 0x0, 0x7, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_emit_ethernet(0x22, &(0x7f0000000700)={@remote, @empty, @val={@val, {0x88ca}}, {@x25={0x805, {0x0, 0x0, 0x0, "a67fb3ede2addfa3f1"}}}}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'batadv0\x00', @ifru_map={0x4, 0x6, 0x8, 0xb6, 0xf4, 0x9}}}) 2.268281323s ago: executing program 2 (id=100): r0 = gettid() r1 = socket$inet_sctp(0x2, 0x1, 0x84) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, 0x0, 0x0) r4 = epoll_create(0x9) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000180)={r4, r1, 0x9}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0xfed0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000200)={0x24, &(0x7f0000000080)={0x0, 0x5, 0x2, {0x2, 0x10}}, 0x0, 0x0, 0x0}, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, 0x0, &(0x7f0000000280)=0x4a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x1, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@getqdisc={0x34, 0x26, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xfff3, 0x10}, {0xd, 0xfff2}, {0x6, 0xe}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}}, 0xc010) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2.079853349s ago: executing program 4 (id=101): socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="7ba9"], 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x9a000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x2, 0x7fff, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='port', &(0x7f00000002c0)='0', 0x0) r4 = fsopen(&(0x7f00000003c0)='ntfs3\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000001}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000340)={"81234738091a21bc05bb14892bebfcdcb38721cbfc1d366337371fa0aa1bd846"}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000200)='hybla', 0x5) shutdown(r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x8000000) socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr(0xffffffffffffffff, &(0x7f0000000200)=@known='user.incfs.id\x00', &(0x7f0000000280)='+.%+\x00', 0x5, 0x2) 384.054573ms ago: executing program 3 (id=102): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r1, 0x9, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000d80)=@v={0x93, 0x8, 0x80, 0x4, @MIDI_NOTEON=@special, 0x6, 0x200}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000240)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$qrtr(0x2a, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0xfe6c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4000000) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) umount2(0x0, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast2, @in6}}, {{}, 0x0, @in6=@private1}}, &(0x7f00000002c0)=0xe8) 278.49577ms ago: executing program 0 (id=103): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x22}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000480)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) dup3(r4, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000200)=0x8000000) fcntl$dupfd(r2, 0x0, r0) setrlimit(0x7, &(0x7f00000001c0)={0x5, 0x81}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x3d}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) syncfs(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400090404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 0s ago: executing program 1 (id=104): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x50}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xe, 0x2, {0x8, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x20004804) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x1, 0x3f0, 0x0, 0x80d613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x2000000, 0x0, 0x0, 0x100, 0x0, 0x1}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r8, 0x5459, &(0x7f0000000380)) ioctl$NILFS_IOCTL_GET_SUSTAT(r7, 0x80306e85, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.201' (ED25519) to the list of known hosts. [ 177.567531][ T5557] cgroup: Unknown subsys name 'net' [ 177.723554][ T5557] cgroup: Unknown subsys name 'cpuset' [ 177.738362][ T5557] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 183.897381][ T5557] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 188.626115][ T5576] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.637386][ T5576] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.650493][ T5576] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.669703][ T5576] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.687762][ T5576] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.705365][ T5582] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 188.716255][ T5582] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 188.727038][ T5582] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 188.740724][ T5582] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 188.756776][ T4875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 188.825227][ T4875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 188.834391][ T4875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 188.844018][ T4875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 188.859046][ T4875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 188.870492][ T4875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 188.991270][ T5583] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.001120][ T5583] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.011806][ T5583] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.033254][ T5583] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.037232][ T5582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.051920][ T5583] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 189.052965][ T5582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.071548][ T5576] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.092930][ T5582] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.105935][ T5582] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.816681][ T5582] Bluetooth: hci0: command tx timeout [ 190.824852][ T5582] Bluetooth: hci1: command tx timeout [ 190.989268][ T5582] Bluetooth: hci2: command tx timeout [ 191.136823][ T5582] Bluetooth: hci4: command tx timeout [ 191.142606][ T5582] Bluetooth: hci3: command tx timeout [ 192.902495][ T4875] Bluetooth: hci1: command tx timeout [ 192.911175][ T5582] Bluetooth: hci0: command tx timeout [ 193.055756][ T4875] Bluetooth: hci2: command tx timeout [ 193.217911][ T4875] Bluetooth: hci3: command tx timeout [ 193.223676][ T5582] Bluetooth: hci4: command tx timeout [ 193.388112][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.413249][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.423060][ T5578] bridge_slave_0: entered allmulticast mode [ 193.434164][ T5578] bridge_slave_0: entered promiscuous mode [ 193.500841][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.512787][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.575224][ T5578] bridge_slave_1: entered allmulticast mode [ 193.591441][ T5578] bridge_slave_1: entered promiscuous mode [ 193.886182][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.990684][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.001073][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.011145][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.020361][ T5588] bridge_slave_0: entered allmulticast mode [ 194.031086][ T5588] bridge_slave_0: entered promiscuous mode [ 194.051540][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.061171][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.070156][ T5586] bridge_slave_0: entered allmulticast mode [ 194.082009][ T5586] bridge_slave_0: entered promiscuous mode [ 194.181084][ T5578] team0: Port device team_slave_0 added [ 194.187639][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.199667][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.207722][ T5588] bridge_slave_1: entered allmulticast mode [ 194.217738][ T5588] bridge_slave_1: entered promiscuous mode [ 194.229021][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.237520][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.245334][ T5586] bridge_slave_1: entered allmulticast mode [ 194.253707][ T5586] bridge_slave_1: entered promiscuous mode [ 194.304973][ T5578] team0: Port device team_slave_1 added [ 194.622103][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.658081][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.666238][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.673706][ T5580] bridge_slave_0: entered allmulticast mode [ 194.683414][ T5580] bridge_slave_0: entered promiscuous mode [ 194.704186][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.714245][ T5575] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.722128][ T5575] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.729893][ T5575] bridge_slave_0: entered allmulticast mode [ 194.739583][ T5575] bridge_slave_0: entered promiscuous mode [ 194.759766][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.771433][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.778862][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.805877][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.819185][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.827788][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.835584][ T5580] bridge_slave_1: entered allmulticast mode [ 194.844371][ T5580] bridge_slave_1: entered promiscuous mode [ 194.863246][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.873493][ T5575] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.881358][ T5575] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.889070][ T5575] bridge_slave_1: entered allmulticast mode [ 194.897962][ T5575] bridge_slave_1: entered promiscuous mode [ 194.937153][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.944371][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.971169][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.982137][ T5582] Bluetooth: hci1: command tx timeout [ 194.987868][ T4875] Bluetooth: hci0: command tx timeout [ 195.135115][ T5582] Bluetooth: hci2: command tx timeout [ 195.234288][ T5586] team0: Port device team_slave_0 added [ 195.261621][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.285960][ T5588] team0: Port device team_slave_0 added [ 195.296549][ T5582] Bluetooth: hci4: command tx timeout [ 195.302240][ T5582] Bluetooth: hci3: command tx timeout [ 195.318755][ T5575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.365366][ T5586] team0: Port device team_slave_1 added [ 195.391225][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.465066][ T5588] team0: Port device team_slave_1 added [ 195.490082][ T5575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.693945][ T5580] team0: Port device team_slave_0 added [ 195.755166][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.762663][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.789221][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.815531][ T5578] hsr_slave_0: entered promiscuous mode [ 195.824146][ T5578] hsr_slave_1: entered promiscuous mode [ 195.841211][ T5580] team0: Port device team_slave_1 added [ 195.849279][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.856995][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.883766][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.903319][ T5575] team0: Port device team_slave_0 added [ 195.912004][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.919194][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.945544][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.988729][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.996480][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.022804][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.042344][ T5575] team0: Port device team_slave_1 added [ 196.181103][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.188394][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.214875][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.305206][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.312302][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.338723][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.354280][ T5575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.361837][ T5575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.388084][ T5575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.511914][ T5575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.519104][ T5575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.545453][ T5575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.589205][ T5586] hsr_slave_0: entered promiscuous mode [ 196.598072][ T5586] hsr_slave_1: entered promiscuous mode [ 196.606869][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 196.612805][ T5586] Cannot create hsr debugfs directory [ 196.665417][ T5588] hsr_slave_0: entered promiscuous mode [ 196.675984][ T5588] hsr_slave_1: entered promiscuous mode [ 196.683941][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 196.690066][ T5588] Cannot create hsr debugfs directory [ 196.957630][ T5580] hsr_slave_0: entered promiscuous mode [ 196.967111][ T5580] hsr_slave_1: entered promiscuous mode [ 196.974988][ T5580] debugfs: 'hsr0' already exists in 'hsr' [ 196.981296][ T5580] Cannot create hsr debugfs directory [ 197.065032][ T4875] Bluetooth: hci1: command tx timeout [ 197.070783][ T5582] Bluetooth: hci0: command tx timeout [ 197.126638][ T5575] hsr_slave_0: entered promiscuous mode [ 197.135924][ T5575] hsr_slave_1: entered promiscuous mode [ 197.144076][ T5575] debugfs: 'hsr0' already exists in 'hsr' [ 197.150228][ T5575] Cannot create hsr debugfs directory [ 197.226284][ T4875] Bluetooth: hci2: command tx timeout [ 197.376491][ T4875] Bluetooth: hci3: command tx timeout [ 197.382206][ T5582] Bluetooth: hci4: command tx timeout [ 198.280088][ T5578] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 198.307534][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.318827][ T5578] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 198.338107][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.365297][ T5578] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 198.385707][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.411551][ T5578] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 198.432885][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 198.531234][ T5586] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 198.566619][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.581923][ T5586] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 198.605386][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.638307][ T5586] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 198.660010][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.697101][ T5586] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 198.720104][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 198.840108][ T5588] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 198.867529][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.904851][ T5588] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 198.924338][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.961577][ T5588] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 198.982911][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.032000][ T5588] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 199.056921][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.190201][ T5580] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 199.218188][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.228168][ T5580] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 199.250358][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.282729][ T5580] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 199.307468][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.318848][ T5580] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 199.338773][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.598826][ T5575] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 199.622110][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.646196][ T5575] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 199.664335][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.706559][ T5575] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 199.732518][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.746152][ T5575] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 199.766311][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 200.067889][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.291097][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.309827][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.439875][ T182] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.447347][ T182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.502508][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.551095][ T182] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.558651][ T182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.590344][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.703067][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.710572][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.796907][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.846732][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.870709][ T182] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.878258][ T182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.969202][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.976676][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.078138][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.085747][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.115128][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.170364][ T5575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.273641][ T182] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.281261][ T182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.442090][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.449681][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.515127][ T5575] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.658254][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.665911][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.774343][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.781878][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.024205][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.035155][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.279614][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.943591][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.053869][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.534079][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.640616][ T5575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.672423][ T5588] veth0_vlan: entered promiscuous mode [ 206.691329][ T5586] veth0_vlan: entered promiscuous mode [ 206.782822][ T5586] veth1_vlan: entered promiscuous mode [ 206.817788][ T5588] veth1_vlan: entered promiscuous mode [ 207.013902][ T5578] veth0_vlan: entered promiscuous mode [ 207.192072][ T5578] veth1_vlan: entered promiscuous mode [ 207.252415][ T5580] veth0_vlan: entered promiscuous mode [ 207.332553][ T5586] veth0_macvtap: entered promiscuous mode [ 207.346024][ T5575] veth0_vlan: entered promiscuous mode [ 207.406546][ T5588] veth0_macvtap: entered promiscuous mode [ 207.424064][ T5586] veth1_macvtap: entered promiscuous mode [ 207.447799][ T5580] veth1_vlan: entered promiscuous mode [ 207.477461][ T5588] veth1_macvtap: entered promiscuous mode [ 207.542923][ T5575] veth1_vlan: entered promiscuous mode [ 207.659056][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.745093][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.799331][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.828019][ T5578] veth0_macvtap: entered promiscuous mode [ 207.892870][ T182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.911948][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.942348][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.952113][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.970539][ T5580] veth0_macvtap: entered promiscuous mode [ 208.002708][ T5578] veth1_macvtap: entered promiscuous mode [ 208.036737][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.080423][ T5580] veth1_macvtap: entered promiscuous mode [ 208.147890][ T34] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.164300][ T34] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.227808][ T34] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.241879][ T34] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.323282][ T5575] veth0_macvtap: entered promiscuous mode [ 208.461538][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.499182][ T5575] veth1_macvtap: entered promiscuous mode [ 208.562199][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.641987][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.704117][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.809460][ T1026] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.827005][ T1026] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.874756][ T5575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.887075][ T1026] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.902336][ T1026] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.991540][ T5575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.008529][ T1026] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.030007][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.131310][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.176604][ T182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.327428][ T182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.355870][ T182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.412409][ T182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.446261][ T182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.719901][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.754158][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.034376][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.061400][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.531787][ T5586] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 214.987382][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.021121][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.237011][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.273187][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.343095][ T9] IPVS: starting estimator thread 0... [ 215.444991][ T5839] IPVS: using max 192 ests per chain, 9600 per kthread [ 215.675692][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.714163][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.810838][ T182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.846267][ T182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.166512][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.262814][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.587033][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.619077][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.705680][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 216.769140][ T5785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.828764][ T5785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.890083][ T9] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.948855][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 216.985419][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 217.103131][ T5852] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 217.137013][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 217.241370][ T9] usb 3-1: Product: syz [ 217.298638][ T9] usb 3-1: Manufacturer: syz [ 217.393258][ T9] usb 3-1: SerialNumber: syz [ 218.069371][ T9] usb 3-1: config 0 descriptor?? [ 218.155714][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.261070][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.939630][ T9] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 219.599809][ T5858] ucma_write: process 3 (syz.4.5) changed security contexts after opening file descriptor, this is not allowed. [ 219.643594][ T9] usb 3-1: USB disconnect, device number 2 [ 219.707382][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.155199][ T24] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 220.379838][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 175, changing to 4 [ 220.474112][ T24] usb 4-1: New USB device found, idVendor=04b4, idProduct=931f, bcdDevice= 0.40 [ 220.514775][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.558491][ T24] usb 4-1: Product: syz [ 220.585361][ T24] usb 4-1: Manufacturer: à°‰ [ 220.620097][ T24] usb 4-1: SerialNumber: syz [ 220.726967][ T5879] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 221.263701][ T24] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 221.409172][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 221.678379][ T9] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 221.692217][ T9] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 221.713706][ T9] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 221.737088][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.780819][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 221.799463][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 221.833572][ T9] usb 5-1: Product: syz [ 221.849340][ T9] usb 5-1: Manufacturer: syz [ 221.914394][ T9] usb 5-1: SerialNumber: syz [ 222.052212][ T9] usb 5-1: config 0 descriptor?? [ 222.075705][ T5885] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 222.160687][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 222.188062][ T9] usb 5-1: selecting invalid altsetting 0 [ 222.213372][ T24] usb 4-1: can't set first interface for hiFace device. [ 222.287554][ T24] snd-usb-hiface 4-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 222.406008][ T24] usb 4-1: can't set first interface for hiFace device. [ 222.432642][ T24] snd-usb-hiface 4-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 222.662917][ T24] usb 4-1: can't set first interface for hiFace device. [ 222.740331][ T24] snd-usb-hiface 4-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 222.884851][ T24] usb 4-1: USB disconnect, device number 2 [ 223.109481][ T5894] binder: 5892:5894 ioctl c0285840 0 returned -22 [ 223.205930][ T5899] netlink: 80 bytes leftover after parsing attributes in process `syz.0.14'. [ 223.839197][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.923527][ T5903] Zero length message leads to an empty skb [ 224.174219][ T5884] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow! [ 224.255628][ T9] usb 5-1: USB disconnect, device number 2 [ 224.514366][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.167300][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 226.216061][ T5923] tipc: Started in network mode [ 226.242988][ T5923] tipc: Node identity 2d1414aa, cluster identity 4711 [ 226.293858][ T5923] tipc: Enabling of bearer rejected, failed to enable media [ 226.342168][ T5925] loop3: detected capacity change from 0 to 128 [ 226.404482][ T5925] msdos: Bad value for 'gid' [ 226.439927][ T5925] msdos: Bad value for 'gid' [ 226.569453][ T5927] mmap: syz.1.19 (5927) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 226.670866][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 227.010222][ T5926] binder: 5924:5926 ioctl c0306201 800003c0 returned -14 [ 228.119642][ T29] audit: type=1326 audit(1781023019.155:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.4.20" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcf038 code=0x7ffc0000 [ 228.161989][ T29] audit: type=1326 audit(1781023019.195:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.4.20" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf01c code=0x7ffc0000 [ 228.256609][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 228.293206][ T29] audit: type=1326 audit(1781023019.195:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.4.20" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcf038 code=0x7ffc0000 [ 228.438924][ T11] IPVS: starting estimator thread 0... [ 228.550615][ T29] audit: type=1326 audit(1781023019.195:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.4.20" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=460 compat=1 ip=0xf6fcf01c code=0x7ffc0000 [ 228.593092][ T5939] IPVS: using max 240 ests per chain, 12000 per kthread [ 228.832314][ T29] audit: type=1326 audit(1781023019.195:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.4.20" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf01c code=0x7ffc0000 [ 228.967269][ T5934] binder: 5928:5934 ioctl c0306201 0 returned -14 [ 229.010311][ T5940] random: crng reseeded on system resumption [ 229.031967][ T29] audit: type=1326 audit(1781023019.195:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.4.20" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcf038 code=0x7ffc0000 [ 229.182957][ T29] audit: type=1326 audit(1781023019.195:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.4.20" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcf038 code=0x7ffc0000 [ 229.296079][ T5940] warning: `syz.0.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 229.373217][ T29] audit: type=1326 audit(1781023019.225:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.4.20" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcf038 code=0x7ffc0000 [ 229.530382][ T29] audit: type=1326 audit(1781023019.225:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.4.20" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf01c code=0x7ffc0000 [ 229.723846][ T29] audit: type=1326 audit(1781023019.195:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.4.20" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf01c code=0x7ffc0000 [ 230.177504][ T5952] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.23'. [ 230.854250][ T5946] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 230.869684][ T5946] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 230.887583][ T5946] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 230.930229][ T5946] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 230.953741][ T5950] netlink: 14 bytes leftover after parsing attributes in process `syz.1.24'. [ 231.092565][ T5946] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 231.513981][ T5950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.602096][ T5950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.017299][ T5950] bond0 (unregistering): Released all slaves [ 233.233990][ T5972] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 233.261121][ T9] syz1: Port: 1 Link DOWN [ 233.595120][ T182] smbdirect: ib_dev[syz1] removed [ 236.166276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 236.305760][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 236.412402][ T5986] autofs: Bad value for 'fd' [ 236.561704][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'. [ 236.994899][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 237.227694][ T5983] hsr_slave_1 (unregistering): left promiscuous mode [ 237.507884][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 237.541869][ T24] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 237.563486][ T24] usb 2-1: config 0 has no interface number 0 [ 237.585804][ T24] usb 2-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 237.647626][ T24] usb 2-1: config 0 interface 246 has no altsetting 0 [ 237.700778][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 237.738620][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.772017][ T24] usb 2-1: Product: syz [ 237.784498][ T24] usb 2-1: Manufacturer: syz [ 237.813407][ T24] usb 2-1: SerialNumber: syz [ 237.856295][ T24] usb 2-1: config 0 descriptor?? [ 238.227776][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 238.244244][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.31'. [ 238.340167][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 238.475059][ T24] usb 2-1: USB disconnect, device number 2 [ 238.633932][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'. [ 238.648739][ T5997] loop4: detected capacity change from 0 to 1024 [ 238.666163][ T9] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 238.708151][ T5997] ======================================================= [ 238.708151][ T5997] WARNING: The mand mount option has been deprecated and [ 238.708151][ T5997] and is ignored by this kernel. Remove the mand [ 238.708151][ T5997] option from the mount to silence this warning. [ 238.708151][ T5997] ======================================================= [ 238.877552][ T5997] ext4: Bad value for 'commit' [ 238.951973][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 238.995013][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 239.058049][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 239.110973][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 239.152976][ T6001] loop3: detected capacity change from 0 to 512 [ 239.187218][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 239.299207][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 239.338459][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 239.366317][ T6001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.385818][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 239.406495][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 239.462661][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 239.498137][ T6002] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 239.582000][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 239.640323][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 239.716279][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 239.786589][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 239.852190][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 240.008889][ T9] usb 1-1: string descriptor 0 read error: -22 [ 240.045566][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 240.126282][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.251620][ T5580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.316970][ T9] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 240.575347][ T4875] Bluetooth: hci0: command 0x0401 tx timeout [ 243.005824][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38'. [ 243.051460][ T4897] usb 1-1: USB disconnect, device number 2 [ 243.086370][ T6026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.38'. [ 243.414127][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'. [ 243.565857][ T6036] binder: 6032:6036 ioctl c0306201 800003c0 returned -14 [ 243.928111][ T6040] binder: 6038:6040 ioctl 4018620d 80000000 returned -22 [ 244.112421][ T6042] netlink: 80 bytes leftover after parsing attributes in process `syz.2.42'. [ 246.475839][ T6058] autofs: Bad value for 'fd' [ 249.354417][ T6066] 9pnet_virtio: no channels available for device syz [ 249.535856][ T4897] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 249.716836][ T6066] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 249.744145][ T4897] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.793819][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 249.801502][ T4897] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.868529][ T4897] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 249.933663][ T4897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 249.970520][ T4897] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 250.011315][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 250.027832][ T4897] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 250.045230][ T11] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 250.068148][ T4897] usb 3-1: Product: syz [ 250.097897][ T4897] usb 3-1: Manufacturer: syz [ 250.116105][ T4897] usb 3-1: SerialNumber: syz [ 250.154443][ T4897] usb 3-1: config 0 descriptor?? [ 250.196188][ T6065] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 250.258391][ T11] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.258516][ T11] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 250.258652][ T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 250.258857][ T11] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 250.258991][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.262215][ T4897] usb 3-1: selecting invalid altsetting 0 [ 250.327282][ T6071] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 250.372353][ T11] hub 5-1:1.0: bad descriptor, ignoring hub [ 250.372508][ T11] hub 5-1:1.0: probe with driver hub failed with error -5 [ 250.380012][ T11] cdc_wdm 5-1:1.0: skipping garbage [ 250.380193][ T11] cdc_wdm 5-1:1.0: skipping garbage [ 250.449589][ T11] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 250.449700][ T11] cdc_wdm 5-1:1.0: Unknown control protocol [ 250.620741][ T6071] fuse: Unknown parameter 'user_i00000000000000000000' [ 250.805244][ T6069] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 250.896778][ T40] usb 5-1: USB disconnect, device number 4 [ 251.371690][ T6063] snd-usb-audio 3-1:0.0: Runtime PM usage count underflow! [ 251.391867][ T11] usb 3-1: USB disconnect, device number 3 [ 251.507048][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 251.728529][ T5873] udevd[5873]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.775394][ T4875] Bluetooth: hci0: command 0x0401 tx timeout [ 251.805173][ T4897] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 251.977705][ T4897] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 252.000099][ T4897] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 252.017103][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 252.043638][ T4897] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.062675][ T4897] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 252.115904][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 252.117172][ T4897] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 252.170951][ T6097] binder: 6094:6097 ioctl c0306201 800003c0 returned -14 [ 252.216250][ T4897] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 252.255095][ T4897] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 252.277669][ T4897] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.301818][ T9] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.315245][ T4897] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 252.331417][ T9] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 252.371273][ T4897] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 252.375135][ T9] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 252.427006][ T4897] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 252.457936][ T4897] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 252.474315][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 252.493179][ T4897] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.529964][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 252.550957][ T4897] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 252.567208][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 252.596183][ T4897] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 252.607827][ T9] usb 4-1: Product: syz [ 252.618822][ T9] usb 4-1: Manufacturer: syz [ 252.639248][ T9] usb 4-1: SerialNumber: syz [ 252.677664][ T9] usb 4-1: config 0 descriptor?? [ 252.680525][ T4897] usb 2-1: string descriptor 0 read error: -22 [ 252.694997][ T4897] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 252.732500][ T6093] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 252.755897][ T4897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.806060][ T6099] binder: 6098:6099 ioctl 4018620d 80000000 returned -22 [ 252.827147][ T9] usb 4-1: selecting invalid altsetting 0 [ 252.879827][ T4897] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 252.966355][ T6099] binder: 6098:6099 ioctl c0306201 800001c0 returned -14 [ 253.308151][ T4897] usb 2-1: USB disconnect, device number 3 [ 253.780978][ T6092] snd-usb-audio 4-1:0.0: Runtime PM usage count underflow! [ 253.852180][ T9] usb 4-1: USB disconnect, device number 3 [ 254.060253][ T6107] openvswitch: netlink: Key type 200 is out of range max 32 [ 255.685058][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.279216][ T6129] autofs: Bad value for 'fd' [ 260.208550][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'. [ 260.261508][ T6137] netlink: 24 bytes leftover after parsing attributes in process `syz.3.63'. [ 260.513792][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 260.777869][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 260.925271][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 261.202622][ T9] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.202789][ T9] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 261.202953][ T9] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 261.203113][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 261.251312][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 261.251473][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 261.251604][ T9] usb 5-1: Product: syz [ 261.251708][ T9] usb 5-1: Manufacturer: syz [ 261.251812][ T9] usb 5-1: SerialNumber: syz [ 261.305598][ T9] usb 5-1: config 0 descriptor?? [ 261.308516][ T6146] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 261.381384][ T6139] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 261.403353][ T9] usb 5-1: selecting invalid altsetting 0 [ 261.541281][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'. [ 261.653908][ T6162] binder: 6157:6162 ioctl c0306201 800003c0 returned -14 [ 262.041495][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 262.041568][ T29] audit: type=1800 audit(1781023053.072:76): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.69" name="bus" dev="tmpfs" ino=95 res=0 errno=0 [ 262.390013][ T6145] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow! [ 262.397038][ T9] usb 5-1: USB disconnect, device number 5 [ 262.496918][ T4875] Bluetooth: hci0: command 0x0401 tx timeout [ 262.644371][ T6115] udevd[6115]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.114486][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 263.465700][ T9] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 264.145616][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 264.278940][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 264.471589][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 264.660109][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 264.853210][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 265.071242][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 265.095414][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 265.120845][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.170488][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 265.741438][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 265.768101][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.723685][ T11] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 266.746286][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.776733][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 266.785113][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 267.087137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 267.188457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 267.395964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 267.497091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 267.599406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 268.009247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 268.489484][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.737999][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 268.843021][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 269.114236][ T11] usb 2-1: device descriptor read/all, error -71 [ 269.263827][ T9] usb 4-1: string descriptor 0 read error: -71 [ 269.300199][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 269.355792][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.492972][ T9] usb 4-1: can't set config #168, error -71 [ 269.570384][ T9] usb 4-1: USB disconnect, device number 4 [ 269.724014][ T6195] syz.2.77 uses obsolete (PF_INET,SOCK_PACKET) [ 270.145384][ T6199] autofs: Bad value for 'fd' [ 270.839106][ T6207] binder: 6205:6207 ioctl c0306201 800003c0 returned -14 [ 272.468742][ T29] audit: type=1800 audit(1781023063.502:77): pid=6217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.85" name="bus" dev="tmpfs" ino=100 res=0 errno=0 [ 272.512456][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 273.045104][ T11] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 273.209012][ T6229] netlink: 'syz.0.87': attribute type 1 has an invalid length. [ 273.261486][ T11] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.261664][ T11] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 273.261823][ T11] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 273.261981][ T11] usb 5-1: config 0 interface 0 has no altsetting 0 [ 273.322348][ T11] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 273.322486][ T11] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 273.322647][ T11] usb 5-1: Product: syz [ 273.322741][ T11] usb 5-1: Manufacturer: syz [ 273.322835][ T11] usb 5-1: SerialNumber: syz [ 273.374462][ T11] usb 5-1: config 0 descriptor?? [ 273.382790][ T6234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.87'. [ 273.395803][ T6224] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 273.504995][ T11] usb 5-1: selecting invalid altsetting 0 [ 274.633578][ T6230] bond1: (slave geneve2): making interface the new active one [ 274.643512][ T6230] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 274.710648][ T6234] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.735806][ T6235] lo speed is unknown, defaulting to 1000 [ 274.736015][ T6235] lo speed is unknown, defaulting to 1000 [ 274.739448][ T6235] lo speed is unknown, defaulting to 1000 [ 274.741672][ T34] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 274.741961][ T34] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 274.742173][ T34] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 274.742382][ T34] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 274.749455][ T6235] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 274.749592][ T6235] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 274.749753][ T6235] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 275.016026][ T6235] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 275.372630][ T11] usb 5-1: USB disconnect, device number 6 [ 275.455142][ T6242] netlink: 24 bytes leftover after parsing attributes in process `syz.3.89'. [ 275.521399][ T6235] lo speed is unknown, defaulting to 1000 [ 275.577868][ T6235] lo speed is unknown, defaulting to 1000 [ 275.667096][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 275.667177][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 275.870554][ T5873] udevd[5873]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.060032][ T6242] bond1: entered promiscuous mode [ 276.065139][ T6242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.239332][ T6235] lo speed is unknown, defaulting to 1000 [ 276.259765][ T6235] lo speed is unknown, defaulting to 1000 [ 276.275236][ T6235] lo speed is unknown, defaulting to 1000 [ 276.569867][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'. [ 276.769079][ T11] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 276.992176][ T11] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.060048][ T11] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 277.090770][ T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 277.092827][ T6254] netlink: 'syz.2.93': attribute type 12 has an invalid length. [ 277.181419][ T11] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 277.233011][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.336096][ T6256] autofs: Bad value for 'fd' [ 277.529339][ T6250] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 277.552215][ T11] hub 5-1:1.0: bad descriptor, ignoring hub [ 277.558659][ T11] hub 5-1:1.0: probe with driver hub failed with error -5 [ 277.569684][ T11] cdc_wdm 5-1:1.0: skipping garbage [ 277.576343][ T11] cdc_wdm 5-1:1.0: skipping garbage [ 277.588523][ T11] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 277.646881][ T11] cdc_wdm 5-1:1.0: Unknown control protocol [ 277.995581][ T6250] fuse: Bad value for 'fd' [ 278.197797][ T4897] IPVS: starting estimator thread 0... [ 278.396952][ T6265] IPVS: using max 192 ests per chain, 9600 per kthread [ 278.413476][ T4897] usb 5-1: USB disconnect, device number 7 [ 280.974157][ T29] audit: type=1800 audit(1781023072.002:78): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.99" name="bus" dev="tmpfs" ino=127 res=0 errno=0 [ 281.200668][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.210996][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.651567][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.710945][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.745077][ T4897] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 281.922877][ T4897] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 281.970903][ T40] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 281.980823][ T4897] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 282.008871][ T4897] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 282.026682][ T4897] usb 5-1: config 0 interface 0 has no altsetting 0 [ 282.067677][ T4897] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 282.081764][ T4897] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 282.092202][ T4897] usb 5-1: Product: syz [ 282.107794][ T4897] usb 5-1: Manufacturer: syz [ 282.112748][ T4897] usb 5-1: SerialNumber: syz [ 282.143031][ T4897] usb 5-1: config 0 descriptor?? [ 282.149646][ T40] usb 3-1: Using ep0 maxpacket: 32 [ 282.179286][ T40] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 282.207438][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 282.219295][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 282.222601][ T6295] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 282.261664][ T40] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 282.272321][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.309126][ T4897] usb 5-1: selecting invalid altsetting 0 [ 282.321278][ T40] usb 3-1: config 0 descriptor?? [ 282.362881][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.393561][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.426498][ T40] hub 3-1:0.0: USB hub found [ 282.443337][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.500625][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.575042][ T40] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 282.972536][ T40] hid-generic 0003:046D:C31C.0001: item fetching failed at offset 0/1 [ 283.051229][ T40] hid-generic 0003:046D:C31C.0001: probe with driver hid-generic failed with error -22 [ 283.173823][ T40] usb 3-1: USB disconnect, device number 4 [ 283.366280][ T6293] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow! [ 283.471376][ T807] usb 5-1: USB disconnect, device number 8 [ 283.547466][ T6301] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 283.563045][ T6301] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 283.582518][ T6301] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 284.032521][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 284.382482][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 284.560143][ T6310] binder: 6302:6310 ioctl c0306201 800003c0 returned -14 [ 284.566588][ T6115] udevd[6115]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.898839][ T12] ===================================================== [ 284.899528][ T12] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xd32/0xc780 [ 284.900080][ T12] n_tty_receive_buf_standard+0xd32/0xc780 [ 284.900228][ T12] n_tty_receive_buf_common+0x1a63/0x25a0 [ 284.900369][ T12] n_tty_receive_buf2+0x4c/0x60 [ 284.900491][ T12] tty_ldisc_receive_buf+0xc6/0x2c0 [ 284.901816][ T12] tty_port_default_receive_buf+0xd7/0x1a0 [ 284.902021][ T12] flush_to_ldisc+0x43e/0xe40 [ 284.902170][ T12] process_scheduled_works+0xb65/0x1e40 [ 284.902913][ T12] worker_thread+0xee4/0x1590 [ 284.903404][ T12] kthread+0x53a/0x5f0 [ 284.903559][ T12] ret_from_fork+0x20f/0x8d0 [ 284.903685][ T12] ret_from_fork_asm+0x1a/0x30 [ 284.903832][ T12] [ 284.903858][ T12] Uninit was stored to memory at: [ 284.905534][ T12] n_tty_receive_buf_standard+0xd2b/0xc780 [ 284.906223][ T12] n_tty_receive_buf_common+0x1a63/0x25a0 [ 284.906708][ T12] n_tty_receive_buf2+0x4c/0x60 [ 284.906833][ T12] tty_ldisc_receive_buf+0xc6/0x2c0 [ 284.907014][ T12] tty_port_default_receive_buf+0xd7/0x1a0 [ 284.907208][ T12] flush_to_ldisc+0x43e/0xe40 [ 284.908247][ T12] process_scheduled_works+0xb65/0x1e40 [ 284.908388][ T12] worker_thread+0xee4/0x1590 [ 284.908532][ T12] kthread+0x53a/0x5f0 [ 284.909169][ T12] ret_from_fork+0x20f/0x8d0 [ 284.909294][ T12] ret_from_fork_asm+0x1a/0x30 [ 284.909745][ T12] [ 284.909770][ T12] Uninit was created at: [ 284.909945][ T12] __kmalloc_noprof+0x482/0x1660 [ 284.910054][ T12] __tty_buffer_request_room+0x3d4/0x7a0 [ 284.910231][ T12] __tty_insert_flip_string_flags+0x157/0x6e0 [ 284.910947][ T12] uart_insert_char+0x368/0x930 [ 284.911413][ T12] serial8250_read_char+0x1ba/0x670 [ 284.911558][ T12] serial8250_handle_irq_locked+0x6d4/0xa40 [ 284.911716][ T12] serial8250_handle_irq+0x189/0x710 [ 284.911866][ T12] serial8250_default_handle_irq+0x116/0x350 [ 284.912578][ T12] serial8250_interrupt+0xcb/0x3f0 [ 284.913031][ T12] __handle_irq_event_percpu+0x118/0xf30 [ 284.913160][ T12] handle_irq_event+0xe0/0x2a0 [ 284.913299][ T12] handle_edge_irq+0x2a9/0xaf0 [ 284.913418][ T12] __common_interrupt+0x9d/0x180 [ 284.913548][ T12] common_interrupt+0x94/0xb0 [ 284.914878][ T12] asm_common_interrupt+0x2b/0x40 [ 284.915000][ T12] [ 284.915572][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(lazy) [ 284.915696][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 284.916182][ T12] Workqueue: ttyS-serial_8250 flush_to_ldisc [ 284.916364][ T12] ===================================================== [ 284.916407][ T12] Disabling lock debugging due to kernel taint [ 284.959956][ T12] Kernel panic - not syncing: kmsan.panic set ... [ 284.960041][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 284.960181][ T12] Tainted: [B]=BAD_PAGE [ 284.960228][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 284.960304][ T12] Workqueue: ttyS-serial_8250 flush_to_ldisc [ 284.960472][ T12] Call Trace: [ 284.960512][ T12] [ 284.960550][ T12] __dump_stack+0x26/0x30 [ 284.960674][ T12] dump_stack_lvl+0x50/0x1c0 [ 284.960792][ T12] ? dump_stack+0x12/0x25 [ 284.960921][ T12] dump_stack+0x1e/0x25 [ 284.961040][ T12] vpanic+0x7b4/0x1430 [ 284.961207][ T12] panic+0x15d/0x160 [ 284.961385][ T12] kmsan_report+0x31a/0x320 [ 284.961544][ T12] ? __msan_warning+0x1b/0x30 [ 284.961675][ T12] ? n_tty_receive_buf_standard+0xd32/0xc780 [ 284.961834][ T12] ? n_tty_receive_buf_common+0x1a63/0x25a0 [ 284.961979][ T12] ? n_tty_receive_buf2+0x4c/0x60 [ 284.962134][ T12] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 284.962329][ T12] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 284.962505][ T12] ? flush_to_ldisc+0x43e/0xe40 [ 284.962660][ T12] ? process_scheduled_works+0xb65/0x1e40 [ 284.962798][ T12] ? worker_thread+0xee4/0x1590 [ 284.962928][ T12] ? kthread+0x53a/0x5f0 [ 284.963081][ T12] ? ret_from_fork+0x20f/0x8d0 [ 284.963201][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 284.963330][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 284.963464][ T12] ? rpm_suspend+0xa4/0x2630 [ 284.963608][ T12] ? kmsan_get_metadata+0x146/0x160 [ 284.963756][ T12] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 284.963902][ T12] ? kmsan_get_metadata+0x146/0x160 [ 284.964050][ T12] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 284.964219][ T12] ? n_tty_receive_char+0xf83/0x14a0 [ 284.964344][ T12] ? kmsan_get_metadata+0xf1/0x160 [ 284.964493][ T12] ? kmsan_get_metadata+0xf1/0x160 [ 284.964679][ T12] __msan_warning+0x1b/0x30 [ 284.964831][ T12] n_tty_receive_buf_standard+0xd32/0xc780 [ 284.965031][ T12] ? kmsan_get_metadata+0xf1/0x160 [ 284.965235][ T12] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 284.965417][ T12] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 284.965604][ T12] n_tty_receive_buf_common+0x1a63/0x25a0 [ 284.965878][ T12] n_tty_receive_buf2+0x4c/0x60 [ 284.966002][ T12] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 284.966129][ T12] tty_ldisc_receive_buf+0xc6/0x2c0 [ 284.966316][ T12] tty_port_default_receive_buf+0xd7/0x1a0 [ 284.966504][ T12] flush_to_ldisc+0x43e/0xe40 [ 284.966680][ T12] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 284.966881][ T12] ? __pfx_flush_to_ldisc+0x10/0x10 [ 284.967055][ T12] process_scheduled_works+0xb65/0x1e40 [ 284.967266][ T12] worker_thread+0xee4/0x1590 [ 284.967479][ T12] kthread+0x53a/0x5f0 [ 284.967649][ T12] ? __pfx_worker_thread+0x10/0x10 [ 284.967803][ T12] ? __pfx_kthread+0x10/0x10 [ 284.967972][ T12] ret_from_fork+0x20f/0x8d0 [ 284.968110][ T12] ? __switch_to+0x573/0x7a0 [ 284.968294][ T12] ? __pfx_kthread+0x10/0x10 [ 284.968480][ T12] ret_from_fork_asm+0x1a/0x30 [ 284.968702][ T12] [ 284.969375][ T12] Kernel Offset: disabled