last executing test programs: 2m26.027556626s ago: executing program 0 (id=732): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000077911b800000000001801000020646c2500000000002020207b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0xeab2217637ebad3a}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xe6, 0x55e, 0xffffffff, 0x4, 0xfffffffffffffffd, 0xff, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0x80000000, 0x40, 0xc976, 0x1], 0x2, 0x20200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m24.332209864s ago: executing program 0 (id=736): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDDELIO(r0, 0x4b34, 0x3bf) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0xfffffffffffffe1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="d1ef32991b9151be26c8b5e5595838cc615f9ee19911f3a260cf78926f13f66edbced67eea822173e1d6a03277ea3954c24a84affa64695c9b70fdc47bff48426d809afb8ecbac900bb0bb19dac19e2a42dda1948d755c2ebd00000000ea63d0210a2212360dca4784f31e6cc463b3ad92f85c5e1261d66873cd6cef978cdfdef5766cae246869bb3090a6421dc21f3ccc1bb89505f6e1969c5a3ff2ad7322d7655628"], 0x0, 0x0, 0xffffffffffffffa1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) pipe2(&(0x7f0000000040), 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x2) sendfile(r4, r4, 0x0, 0x40008) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 2m20.506999468s ago: executing program 0 (id=739): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) getdents64(r0, 0x0, 0x20000) 2m20.225519973s ago: executing program 0 (id=742): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000014c0)={0x1c, r3, 0xf, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x20040080) 2m17.927211303s ago: executing program 0 (id=744): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000077911b800000000001801000020646c2500000000002020207b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0xeab2217637ebad3a}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xe6, 0x55e, 0xffffffff, 0x4, 0xfffffffffffffffd, 0xff, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0x80000000, 0x40, 0xc976, 0x1], 0x2, 0x20200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m17.492072191s ago: executing program 0 (id=745): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7fffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync() shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) getrlimit(0x9, &(0x7f00000001c0)) 2m2.319961857s ago: executing program 32 (id=745): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7fffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync() shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) getrlimit(0x9, &(0x7f00000001c0)) 2m1.280140968s ago: executing program 1 (id=774): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x20000) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) 2m0.400578084s ago: executing program 1 (id=776): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)={0x80000011}) 1m56.177183723s ago: executing program 1 (id=785): socket$netlink(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0xfffffc43, &(0x7f00000000c0)=0x40000800045) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002000000000044000500fe800000000000000000000000000044000004d42b0000000a000000e00000010000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 1m55.019042754s ago: executing program 2 (id=786): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14d556a626"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xe2bf268aaf6847d0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m53.679702502s ago: executing program 1 (id=787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)={0x7, 0x0, @auto=[0x2f, 0x35, 0x39, 0x13]}, 0xc, 0xfffffffffffffffa) r5 = request_key(&(0x7f0000000480)='encrypted\x00', &(0x7f0000001900)={'syz', 0x2}, &(0x7f0000001940)='./binderfs/binder0\x00', 0x0) syz_clone(0x20000000, &(0x7f0000000540)="92eeb52722e90cadb5dafd00ef9a7edd4f3aa491a75d7e24bc583d9e106e299b95a4596cda1c9eb06528", 0x2a, &(0x7f00000005c0), &(0x7f0000001a00), &(0x7f0000001a40)="553d0864c742d6c8bf299dcde6e61e2640ca02b539f0488901bad379ed") keyctl$instantiate_iov(0x14, r4, &(0x7f0000001880)=[{&(0x7f00000003c0)="092aa5062a8408090c57f255a217d0ae10f79d83de871ce34752ea49ba7e6237a5df969bf2e08b241795a31399d014458b2b003ac30370fd2ad2224b1c7935070cd7d34c1d4066ed452d70f211ef44f7ecdb7855ddbaa256547117134369ae7d9f580ed9331b7650e8efe43375a99675eba990f1be0787813d6da1234533973798bac78522cdf7739868beb2f3d4069ab2fcf810a855c8d8193879b495f16728fa6e7507cdb01759b721338cd75bd05766ee79fe1c120d274cc470ec", 0xbc}, {&(0x7f0000000240)="f2a696737fd2668b2601f047b06c37adc91a9fd964ff32450b3e2590581f0cf30f62b7362138900d416f95eb23fd157e500f07b5c6a25a5d8ec124dc0d85c7ee8b", 0x41}, {&(0x7f0000000500)}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000140)="7294ac1ab2826e6517bdfee20f446733b428d7c2600b474aeb464a2a146d54f8367368eddadd6d22c4637bac90f61b649e91c606a0940c8a91e966376efc55e1", 0x40}, {&(0x7f0000000600)="2173717dbfd936d1c82d23747a63a41c3255be7ee0157e8212f083b2809b13ea107a2e12030b7aad8d0739ea14d22ec9e1b796896e321fefcbf9f811a575cb82738b24d42e32755859c3f3e53337ac7c88014d673ad912e91a07fe49a2c41dc8868d78c588a99c5d4af4435da8e11a6ac2d761fe64712a18f06d5877b3ebc71b7206d35c7c84d15d9f8256c2dc9063348ab715d544b08ae686ed07bed207abbccffce97e8bca1f2e6108553aa40fd571", 0xb0}, {&(0x7f00000006c0)="ecffe148ae4307db342414d631764c07d3ced74a87025bfca02842e27f926a6abe499a36de7badee1f0b78bef97db93ea299667374c6cfabc66ce12e3ce17eed446f9e416047c5256e3e79195c103543cd6581304391d54a2bfeb2def680b9c5da70628dcb0354ca5028b3c24ffdfc15af63bb4d197931b8c478c78c13069e71624f0dd649bd3c9884ac4091deaa9deaed", 0x91}, {&(0x7f0000000340)="558a2331d9b68031908b7f0b619a615878", 0x11}, {&(0x7f00000007c0)="3cf97a0364fa967920af7f8010654ac0920b3c71706dbe9b27054e530925c5bbf8bde783b7d58484a16020889422bbd8c95f70e32a2749c182eb1e75d2c416e8a9cd445aefd97d9ec45a45248a894ae8f41051c91932c894b2ffdd77aa80930a629dc9cc627e66575d2332e1", 0x6c}], 0x9, r5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@bloom_filter={0x1e, 0x1, 0x4, 0x0, 0x34b0, r0, 0x6, '\x00', r6, r2, 0x1, 0x1, 0x0, 0x1}, 0x50) close(0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000001ac0)='ext4_prefetch_bitmaps\x00', r8}, 0xfffffe56) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xcb7c81791c937a57}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x8044) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f0000000040)={'hsr0\x00', @remote}) syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter\x00') prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) 1m53.289269725s ago: executing program 2 (id=790): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000810000000800000002"], 0x14) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r5, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r6}, 0x3f) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r5, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 1m51.715842903s ago: executing program 2 (id=792): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)={0x80000011}) 1m49.044260556s ago: executing program 1 (id=794): socket$netlink(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0xfffffc43, &(0x7f00000000c0)=0x40000800045) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002000000000044000500fe800000000000000000000000000044000004d42b0000000a000000e00000010000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 1m47.62347239s ago: executing program 1 (id=795): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1m46.618097058s ago: executing program 2 (id=797): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14d556a626"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xe2bf268aaf6847d0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m44.843705603s ago: executing program 2 (id=799): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000810000000800000002"], 0x14) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r5, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r6}, 0x3f) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r5, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 1m42.854230667s ago: executing program 2 (id=801): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x18, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa, 0x0, 0xa6}, [@typed={0x4}]}, 0x18}}, 0x8000) 1m32.450938105s ago: executing program 33 (id=795): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1m27.718234399s ago: executing program 34 (id=801): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x18, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa, 0x0, 0xa6}, [@typed={0x4}]}, 0x18}}, 0x8000) 24.230464644s ago: executing program 6 (id=894): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100)='H', 0x0}, 0x20) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="75fb134c6a2c936e517663a1b883becb58a8049dceb9f8135968eb8444a9212948f240e17ef8d1c9308695c61cedfc21e5f99cca42ba3929debc7037f2d9ece85339dd2c3b7e50fd23061dafa043f7df6e91dc2e85881db2d91b493de84560c9f71142fbf248d9052c312777e41bfa89ead62dd504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f00000062c0)={0x2020}, 0x2020) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name, &(0x7f0000000140)=0x10, 0x80000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000200)) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000300)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x20080108, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x400000000000, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@broadcast, @rand_addr=0x64010102, @loopback}, 0xc) syz_open_dev$sndmidi(&(0x7f0000000540), 0x6, 0x266340) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32340d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 22.479293607s ago: executing program 3 (id=897): r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffc43, &(0x7f00000000c0)=0x40000800045) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002000000000044000500fe800000000000000000000000000044000004d42b0000000a000000e00000010000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 19.312418083s ago: executing program 6 (id=901): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x9, &(0x7f0000000200)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff362}}], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x9, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 18.7772144s ago: executing program 6 (id=903): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x10) r5 = syz_open_dev$vbi(&(0x7f0000002100), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x4000000, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x7fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0xa, 0x3ff}], 0xca, 0x1, 0x6, 0x3}}) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='ext3\x00', 0xc, &(0x7f0000000400)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x125f, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) 16.704898791s ago: executing program 6 (id=905): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)={0x80000011}) 16.582281322s ago: executing program 5 (id=906): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x7, &(0x7f0000000000)={0xb, "1401003d876ff44271f19ca6e4482707dab729631eae010000004d70b41d4008e3"}}) 11.104246011s ago: executing program 5 (id=910): getpid() syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 10.948672804s ago: executing program 3 (id=911): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x106, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="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", 0x0, 0x10, 0x0, 0x0, 0x0}) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000002c0)) 10.565421717s ago: executing program 5 (id=912): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007a80)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x1, 0xa, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) 10.360225635s ago: executing program 3 (id=913): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) 10.114028487s ago: executing program 5 (id=914): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x10) r5 = syz_open_dev$vbi(&(0x7f0000002100), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x4000000, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x7fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0xa, 0x3ff}], 0xca, 0x1, 0x6, 0x3}}) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='ext3\x00', 0xc, &(0x7f0000000400)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x125f, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) 9.634474209s ago: executing program 4 (id=915): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14d556a62676"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xe2bf268aaf6847d0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.946969593s ago: executing program 6 (id=916): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 6.946751913s ago: executing program 3 (id=917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 6.718754383s ago: executing program 5 (id=918): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000810000"], 0x14) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r5, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r6}, 0x3f) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r5, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 6.684276926s ago: executing program 3 (id=919): r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffc43, &(0x7f00000000c0)=0x40000800045) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002000000000044000500fe800000000000000000000000000044000004d42b0000000a000000e00000010000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 6.544312208s ago: executing program 4 (id=920): r0 = socket(0x11, 0x2, 0x100001) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}, 0x1) 6.19082629s ago: executing program 4 (id=921): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) pread64(r2, &(0x7f0000000040)=""/123, 0x7b, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) 4.628428276s ago: executing program 3 (id=922): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x40047454, 0x0) 4.332209732s ago: executing program 4 (id=923): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = epoll_create(0x10001) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 4.160941197s ago: executing program 4 (id=924): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)={0x80000011}) 2.52517064s ago: executing program 4 (id=925): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="98b4edda0ee01f05943c87adb7b917617b126e4b8015914d1fa43c7c44eb0ebede75c79711b629268fc0b8c19f8bdd6d", 0x30}, {&(0x7f0000000200)="cc03d107b5c9dd48614435022d28a4e96ce9836a8184f31c5bffbc3c4d3d1d8736fb8a5385e2a0d62a2fd0e4f5bce1ce4185d26d0ac866f0f747f1aa8cccfc6f7edb430b05f9", 0x46}, {&(0x7f00000002c0)="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", 0xfc0}, {&(0x7f0000000040)="4fca462990d062900d0b7e79369174a1286ea099c11651cdf4ac04c011ec1e5e7643", 0x22}], 0x4, &(0x7f00000012c0)=[{0xf8c, 0x10f, 0x1, "935ab413270b203df2ce326425c3c3193b14a2781ed95465323583de9c9005576104cdeec3d6dc8eacb4bb38ff7cfa61828c92f639235349a1612738ccfa597eb509169aa59f7938ce6f972694ce792cb573f6cb4921538db317d826853517a6ee60c326ccfc83289166a6af07c90b704931b9e0ccb6dda675b0d817ca80edfb2021a5f42a28317c25ee12ff43168e780b838a7bd31d6048baf27673c82ad90e5e83cae6fb9001f500b0c15ef6cec73928468041655d2a8932d1a83f97852699e33dbd687888672f301d3d67bc9b3851e3e8588de7886713db19170fa024a4894f93ff39521ee2915b0ceb36aa0a5c28e8e1cd5f19a7eff92f40aaad936d39ebf18374fe3c9034f4148ea464361164d714b0b5bc226de64185f30982b23a4b2347958265735743a3430b8c1ca6cc24fa4f3362dd6cab7fa7b4d6442840fd8e02bb854be62d542331a08e3d975c2b783f51372d423af94e6e705437a3630f985632c27bc17b70544f12a5c7f6468c35cc8b4897bd5dbd30e75d43a742b115741aaae7b8b767efb6f6e9ed6ad6647be81f0baed5004abbb018a410920dbef8051dcebcd56c08135526521f3b1774578e4ca4ae1c9d6cacc240df7da3f7139f25bc946436a8ef26224a0da54967887f06898571f51364c328ada20b19e815a63d0beec26740dc6e9a39d4316e76838938fe5faf961fa850b5f2312ecd7724d7afbb0be1e4694cab5d74e6ea996d9fa0e2de2b85b131eac95e59a7a1abfd250f56aed37ced9faafa090403cc0e5979bde26e7312dbabf643b9d4b04e8a05533841c622bdd4fc9e82fd4c9c60da05392c1cec78fe89298224ab2963163683d87fbc0b99064a554e5a37413da2b85d662628d46bd43b9a9ad0d58785958364874be496d159375b93394bdc9b187ca6beac76f7a73ddef2dbbb395857112636d1bdfa9d2922497ba0c3f47f873c3727db3725bb91c4881f8d5ba1083e2b46c04c8cfe7cac68d4e99af0d454a6852daac11f106eee4e45025fcccc97fae5bd14e8767b27ab2b65203c96404d9cb40b5cfea41e488e793d3b5e3db7542b4ba537a05d989681299692afa945b5a2f28dc446ec10d7018b2249c6773490458f2a30f2c53ac61be9ee29ba52f98f76e50968995d613a972b09d427120ee51e1adbae7d1d473201724b2ecad8d515e09c853510b06029a7ef1deea48e7c2c8d460e6e7372180d70ecfdc5b9b718c0b7087b6c943d57d0bc4fc36dc2349bbc3446256b97b24a7069ed39aef1de73199312b22a31ac4633ca3337a30613e100b3df41bca34cae317cf3230b46ffedd9e695a8826249fc4cd457648375ee3264d3bfe09a37748e577d0c85038fe2aab3ad06218c4d81588ac5442532a7cad732984ec8debf363aba56a706adf215c3b68564bb2190d09687d5802cb0dbecaee55e2fc2c95504c2ed0564e5454eb364097467621a8f2ea93d449ec7033e72ea253345eaa0646ca9a53b3833116fe8c142358ff6b2b0f84fbf3811fc52ede3009c9b8fcd1e0ed66950fcfe6be543c14be3178d915e38b51ba6e19892f47e7fca0643ae14a90cbf6b6b0b8b586a990102631726b4ae0e55514393211ee78f1810c0616205a07cebeb2a4ca9ee6e68cb399e8842a09e287a20bd82459930f2abb224671d170662737268f09e30d62603607d608de47ae9bf39262f051da52ff22850ef1d1880021e5596521facb3ddac306f068c1c46c15f48f92cb9a620d465693049306ba9d8311829e4fc9fb96bf3a7724b14f4878a362de2f83499e1682c6d1ac7ab9b8cdf8a6ebfa91efbcc74cf6b362296579e007abf53b18d8372a0efbba234ba27afa68eab56a5198861f313c791ab60f0acc074da97f4803b92de3c7fbb27f2a4de292c20faea9d3138e82d309c50a6eccbc32d1ff7c93a39c923fa16772ebcc531bcd04c9dd0782a429ec4356df9d0725a961d976df72dd51fe1ce9148f24157a673491c6d2c824bd83a89a887a56bca9efedd268255557e168076b158b963f11dbc70ac2230ce736408c7c093c0ed5228b7c39d19580d8cd464a330edc46efc58ed01cdaa132dcbd75c48b2df596b89adbd5aee11e6168c6ee7786864b52cf7b4f90bcfb2e7666798fe477efc42fc5b9c551e65e25d1ba0a5cd4df35a528cd098d43967a9d51b3fe0e1550654b0702efdd6dcd642160ea170bba6343ff502308e128fd23c5f379113554ba269a956477531ff19709bca4b2f2cca465fdf733fb0e2fb2f313efb2e2ea8a1f30520e21434afbfb3f57a164e0d2597138fcb136f41cf851a245bae7f877d87038bde91d75560660d903c987b69b488e969b3e471d6c63fc3d3a62b3f4507a210c6d7e9f4089fc308547e29d438bb3a254317738ad975672d2381c13bc1d7cc59c8e54bc229d3d8178ebac2c3f2e4d2ce0341d4975fe8222fa8a5b17725d566074714781c0aad3f4561cc31155aef6d0914425e0b0699a9843bbbd484f43a2017f1a755ca202e19c952f881965943b16be61a5a03bd10c78755808df1c6a92dcb53e83707b9580e5f97aef2c16ed209a6f671c9f0311b2b722962c3c17f1ceb153bcc1249f2ed5a89fef506586578be7bec9a14ff20a74929fd6d3a84b722d33d9173d4fbcae60fdd2765d8dd965a16bbbab1bb6ff3bf1d7f5c1476e3c2dd90cd352523b16fbc8fd8ccb2df2120773929384506407ee40cbdb2aac5fa6e7d7b1a94c9a390314ba1d6b854e1be1d82875e37b97cc81d34bfbdf3f2b061bd65ecd676e9033f4d06945ef75dbb8b5fbcee438885ab7c7ffa1f76e706e50561b61940c8d4b42f2d7d809026d67ad059f466aef9896b1f9054caac72e3170a4fe498f4af800dfd09e3bf2cda9139eb056beb78d15599738791da3bfa206be59e2104442cd36d82ba80ade0df630d61556ad91b90c2e48ff5bb26b873c47ac91db785e9ff61fb76ae8b0a3c5940ee31a8f88550ca67c4c642febd0d70645d9e57adf6bbbde9f5b1543e0c2c86190ee05105152e901e446dcf034db8b243a4b8beec606a6c2be0b945cf9560966bb6e69e6811d0c33856b1c3ff8ecc380443f2766b1aa2d28e8d7b717dfd7c587df5f42639c4dbf9080954722d7bd215b3820f66be758c7e1acdb077dce8b5380a41be8654797ca28958450ed220b9baa5dd4308e6c07921195c00dde507b0b280824fb9eaa082f3ac458bf66c4153375115c0d7fb042d86e37d74be535d1f2b9bb850c6890adb0b220ae6737111e3ae9bcdfbc3d1c5b35e1c17c3475fa869f6bde35ec971ef0786016acc6bddb0568591db3336bb71212f08deef3d34008785a5d9d5b98ac09a2b5e6c0110581045f82ec4e36bc91076f72031e4f55cc70f05f1fbb7e20819ddd517ecb3c11bc562ac140ad58a7fd06917c826fdc5dd63e567a404138bc79356db351b11d47142bfc3592c3503897d4c9cd682489f1e888dc23e5ca96a35e7063ce78dad22bba6fbea9302ad16fa76564fce03d43a810aa338ed91196a7c7a303e3a8ac16f955b45caaeed039c1722aea2c53bc8019eaaec6b99c7fdba4110f8bf285adae5e9a2ba5a777af0cc3504344c973c77d79843f9a7180f33425f593ce702ab9aa97e115112dbfd76b6b35f81c40f6157ec07d0094169262cb7b1144d38099996bd66d5906fdbc24414e2b1b8db3b31974aeb6ed62c006134279d6a6bab9b286f4308e0726b9db029b9517f6f1a385b76e4d085ead63119c94e5742e2cb9193b975d098c22f71d799d9e64d46b0439aa7336ffca5c5ba755f3f649a602bfb571bb8eb96d7a9e16d22ca11b093b7d6acca9ddeae9cffb28ad42e88d948b4609cc5465c2bf8f11fddb35661f1a4f03198e2ec2fe72d15f87453b22b280774933bd3d8883abce6dca64f05cae6e75b1ef3d09105f6f2b080958c6caee7e6e6f976fec7906ae2f0ae8c3e69d4e4e3874da4cc58e366fa38506ca02a9111fe3d56ebafa4526a58ad292876f2b7ebd857b5b323779134495b539a83cb2f2f020a1d5470290dc08aae1eac2f12782b3667950a767bc5178810f22a7c2fb565a56420c727048b3ea52842c039302ccaf04e2810e7c2a0270c0e23ed76b2c42c8a91241fcfe7f6b33385a32ddc9b130ba1fee354db181d398f7f13cfa00bc9eed3471b0f0684e4c58137a1edac1bb086ca6909eb9550b9731c7c83b626ad8babdcf124d7bc23ad23a6cac495f69e3effd169e64591210e6b31eaedd7c0bb703ec7bcdce459fdb29194411fcdfed3829540cf9b9100b03c6ea261ebef31179921c21c772fc841d4c5b94bdcb69915eafb84bc6842151d4f1d2c214d57f67350db20ca14fac787ffde508e3afd829ba1e760cc402a2631aef6a2463e4292f36de72913e17622b9d3d6fef84957369bedddd2c746e5560ed4f92c24761c67712370eb5ec170ef601e7f72008ae2f7b133e9b13ca1979ebf4785e5bd387502998a68b1f2fac3b966d4f23ae80b99a32a1245f19af37c0cd6b7fff49caccfe58eaf6144ab98791242eeaea96a4158e483bd81ca0f78b25af2f2baf28299d51549851b316691782e9e312cdeb92cac70782cfac6154d9bbc8ca897fad8e38ee44ee120ca62fd9fba61bad09ba3c186b0a608b6ef0a578318c9f957574eb67f0d636de3c03b27b64aec47131884cf0dba43c82cd998c842cca7f070c46bd6b1e421ef33afe4592d887248480f4cfe00ae5865f5cb5262f6e6f66f2cf449028eafaec4a85cf3081302af6b6bdc7fec8e485cda54434806b20828afc5867f8dd5c3e583d4c4cb3e44ade678b7eadab0b4853b5506f738038dc8d2c618b8c26c2b0d89c331260827503cf12aa0330fe5ae68ba8462bf66a51d3a4a9a1e4d8d828f64d25a14500eef63a6199742ae1349dbe25db9e6c8d9b50ff5d75976be9b95bd8799e862e5ebd6a0b7e63198e23542d2054114766a5976783bcfc63d3a02a6a35f34a4b78ceb341c83b33fdb1d9d05c029f859821fadb7d8b7d89b494faf7262917994dcfd0a1a5d08fc8f7b8ff83c639bbde9384cc926bd07035f63909b3bf6ba45efa41dfe7084657aca963b8901cc4f2321c09c952aeb4f97dd7a33fc23bebc1e962cb1a737bcf49888036d1317016132430477f78409c43f1d0eccc86f1ea5e17e9c70ba77cff4dcee6911623526ebaee007902d0d5461fc04a4d83732a628d61676d00c32ca15c7b117a6f2c0efc7ae7023fe67324d81eae7cde7725178a1d5a2ae76a1ddc8d60e20991697e4b92a52b02cdc96f345727a13c366242fb04c05cea4458a49a56f1457cb77497e8d6fba839a9e8683745fff6b16561aaa456b90a9c668641d2fdf0fc10025469c49ce717995517f6740f33bb33478ca6dea4ed9599d2db727c91aa68644b4910757e54efa5feb76bd7450fbb781fd28ce51ad21d91a9ede42555b382f3d1cbd48ab6ee73fb5ba6b992d110e11c56e1e17e51b3043eb239935e44d0a68791df483d365c5d58637082b5086eef0df5224932464cf16033f9faecff50c5335929cd629616d0d573539fc4476e44db3d4e7131a48dae18fecea5b96c6aa4513f1d738e0ff8dcbe1c8330319c084f4a561a981709e8b56cd16067a35fded55c44cd3"}, {0x18, 0x104, 0x1000, "766a3fc361a7e0129e"}, {0x30, 0x16, 0xb8000, "e24d0763cd665cb5d2556fe3d1cd92916e50122b55a6be62be417b883cd5b4633d"}, {0x98, 0x6, 0xffffc32b, "78aae2a2e28fcec49b0f3f741afb228cbcf2a57a531899a06e4c47c2dfefe5094dcb58577fb5b7a2046f3c9d318f0a35d1bd018b0218dcd20f122dda294cd4024ed43c398755ea11d51359a94d57871177b36be7a29f690b0bd65966991244a772620053cc54625f978655886d4ee3867672f35516ac04acc1883631f83f948f5ed8be4975684f66cd3676"}, {0x48, 0x6, 0x6, "6447598d494dc5b62f059667a7a6df354fbb67a64110bcb7ee02928ca01a780078ae06cc96efd3cf70d006eaa753bbcf948056bf185afb22b5961d42"}, {0x60, 0x10d, 0xffffffff, "76e6a228da864c9d0eb1b9e6cf6d736a044bc74f8dbe62e5541288ab4ed29cb2c22c1093c4cc1c681433380fa1a2fd9b35e7e34580e16db1bc8e56e4e010d629d3b2cecfae7d83be72c790556cf08c0a10"}, {0x1c, 0x109, 0x8, "8896e65ef1c8e03a402ae8141a00ad7b"}], 0x1130}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140), &(0x7f0000000180)=[{0x2, 0x5, 0x10, 0x6}, {0x4, 0x4, 0x4, 0x3}, {0x4, 0x3, 0xc, 0xb}], 0x10, 0x6}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 601.761058ms ago: executing program 5 (id=926): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x10) r5 = syz_open_dev$vbi(&(0x7f0000002100), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x4000000, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x7fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0xa, 0x3ff}], 0xca, 0x1, 0x6, 0x3}}) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='ext3\x00', 0xc, &(0x7f0000000400)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x125f, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) 0s ago: executing program 6 (id=927): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r0, &(0x7f0000000080), 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) socket$inet(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, 0x0, 0x75809, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000200)) syz_open_dev$audion(&(0x7f0000000180), 0x40, 0x343000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.23' (ED25519) to the list of known hosts. [ 73.255335][ T5758] cgroup: Unknown subsys name 'net' [ 73.418533][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.120901][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.362374][ T5769] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.390801][ T5769] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.400656][ T5769] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.411700][ T5769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.421014][ T5769] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.430983][ T5769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.461131][ T5769] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.477203][ T5769] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.485557][ T5769] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.499142][ T5769] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.510843][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.521536][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.529338][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.545061][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.553330][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.561817][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.570113][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.578333][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.608703][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.623029][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.631716][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.640798][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.649041][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.671381][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.852391][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 77.994172][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.002340][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.010139][ T5767] bridge_slave_0: entered allmulticast mode [ 78.018440][ T5767] bridge_slave_0: entered promiscuous mode [ 78.033079][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.040831][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.048288][ T5767] bridge_slave_1: entered allmulticast mode [ 78.056106][ T5767] bridge_slave_1: entered promiscuous mode [ 78.099859][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.124851][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.166887][ T5767] team0: Port device team_slave_0 added [ 78.198696][ T5767] team0: Port device team_slave_1 added [ 78.277673][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.285498][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.312249][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.356558][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.363769][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.391011][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.461414][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 78.479095][ T5767] hsr_slave_0: entered promiscuous mode [ 78.486093][ T5767] hsr_slave_1: entered promiscuous mode [ 78.531514][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 78.684272][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 78.754237][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.763682][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.771929][ T5776] bridge_slave_0: entered allmulticast mode [ 78.779368][ T5776] bridge_slave_0: entered promiscuous mode [ 78.789116][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.796854][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.804544][ T5775] bridge_slave_0: entered allmulticast mode [ 78.812350][ T5775] bridge_slave_0: entered promiscuous mode [ 78.835001][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.842953][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.851050][ T5776] bridge_slave_1: entered allmulticast mode [ 78.858386][ T5776] bridge_slave_1: entered promiscuous mode [ 78.865787][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.873286][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.880831][ T5775] bridge_slave_1: entered allmulticast mode [ 78.887958][ T5775] bridge_slave_1: entered promiscuous mode [ 78.993257][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.027268][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.054292][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.066661][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.156758][ T5776] team0: Port device team_slave_0 added [ 79.166417][ T5776] team0: Port device team_slave_1 added [ 79.177028][ T5775] team0: Port device team_slave_0 added [ 79.187562][ T5775] team0: Port device team_slave_1 added [ 79.193933][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.202288][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.209881][ T5771] bridge_slave_0: entered allmulticast mode [ 79.217088][ T5771] bridge_slave_0: entered promiscuous mode [ 79.248692][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.256403][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.284142][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.308964][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.316763][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.327234][ T5771] bridge_slave_1: entered allmulticast mode [ 79.334910][ T5771] bridge_slave_1: entered promiscuous mode [ 79.356684][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.364129][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.391870][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.446669][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.455076][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.482877][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.495634][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.502910][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.533033][ T5769] Bluetooth: hci0: command tx timeout [ 79.533823][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.566382][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.610619][ T5769] Bluetooth: hci1: command tx timeout [ 79.613100][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.669938][ T5776] hsr_slave_0: entered promiscuous mode [ 79.677072][ T5776] hsr_slave_1: entered promiscuous mode [ 79.684664][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.693220][ T5776] Cannot create hsr debugfs directory [ 79.693446][ T5769] Bluetooth: hci2: command tx timeout [ 79.714678][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.730837][ T5771] team0: Port device team_slave_0 added [ 79.762708][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.771385][ T5769] Bluetooth: hci3: command tx timeout [ 79.782214][ T5771] team0: Port device team_slave_1 added [ 79.808688][ T5775] hsr_slave_0: entered promiscuous mode [ 79.816179][ T5775] hsr_slave_1: entered promiscuous mode [ 79.823290][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.832240][ T5775] Cannot create hsr debugfs directory [ 79.838060][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.879606][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.887148][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.915252][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.929433][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.966831][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.974353][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.003643][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.159538][ T5771] hsr_slave_0: entered promiscuous mode [ 80.166742][ T5771] hsr_slave_1: entered promiscuous mode [ 80.173367][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.182637][ T5771] Cannot create hsr debugfs directory [ 80.392841][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.424389][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.438342][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.449158][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.532905][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.547691][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.558399][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.572950][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.669404][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.692808][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.704938][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.732356][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.754357][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.824577][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.875467][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.882955][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.917596][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.925059][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.963896][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.980035][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.058469][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.084835][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.100043][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.108049][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.129222][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.142738][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.150715][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.172050][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.179473][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.225913][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.256462][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.264968][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.281429][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.288792][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.363199][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.370531][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.473887][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.612814][ T5769] Bluetooth: hci0: command tx timeout [ 81.665106][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.691515][ T5769] Bluetooth: hci1: command tx timeout [ 81.770828][ T5769] Bluetooth: hci2: command tx timeout [ 81.827627][ T5767] veth0_vlan: entered promiscuous mode [ 81.850982][ T5769] Bluetooth: hci3: command tx timeout [ 81.885772][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.898666][ T5767] veth1_vlan: entered promiscuous mode [ 82.008761][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.026809][ T5767] veth0_macvtap: entered promiscuous mode [ 82.052605][ T5767] veth1_macvtap: entered promiscuous mode [ 82.079916][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.089538][ T5776] veth0_vlan: entered promiscuous mode [ 82.127917][ T5776] veth1_vlan: entered promiscuous mode [ 82.142432][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.186428][ T5771] veth0_vlan: entered promiscuous mode [ 82.202398][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.262947][ T5767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.276454][ T5767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.285581][ T5767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.294928][ T5767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.310071][ T5771] veth1_vlan: entered promiscuous mode [ 82.328600][ T5775] veth0_vlan: entered promiscuous mode [ 82.368770][ T5775] veth1_vlan: entered promiscuous mode [ 82.413968][ T5776] veth0_macvtap: entered promiscuous mode [ 82.455212][ T5776] veth1_macvtap: entered promiscuous mode [ 82.493397][ T5771] veth0_macvtap: entered promiscuous mode [ 82.523805][ T5771] veth1_macvtap: entered promiscuous mode [ 82.620201][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.632641][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.646443][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.656455][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.668886][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.680091][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.691405][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.704712][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.747440][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.759043][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.773481][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.784925][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.797126][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.807910][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.819547][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.832954][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.841999][ T5775] veth0_macvtap: entered promiscuous mode [ 82.853412][ T3438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.870466][ T3438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.884232][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.903490][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.913493][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.924305][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.966041][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.976661][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.987078][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.998004][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.011615][ T5775] veth1_macvtap: entered promiscuous mode [ 83.103664][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.117659][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.141166][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.154660][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.167145][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.178485][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.189168][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.200225][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.214225][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.249716][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.261582][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.274375][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.285696][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.297200][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.311803][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.324394][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.337391][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.346806][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.355784][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.365311][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.427746][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.444471][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.471807][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.495397][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.593003][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.613867][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.691710][ T5769] Bluetooth: hci0: command tx timeout [ 83.758182][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.781901][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.789877][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.800006][ T5769] Bluetooth: hci1: command tx timeout [ 83.818885][ T3438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.839638][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.864166][ T5769] Bluetooth: hci2: command tx timeout [ 83.924104][ T3438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.941481][ T5769] Bluetooth: hci3: command tx timeout [ 85.010741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.019715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.100916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.875185][ T5769] Bluetooth: hci0: command tx timeout [ 85.881785][ T5769] Bluetooth: hci1: command tx timeout [ 85.931082][ T5769] Bluetooth: hci2: command tx timeout [ 86.011246][ T5769] Bluetooth: hci3: command tx timeout [ 86.700003][ T5878] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 86.727299][ T5878] CIFS mount error: No usable UNC path provided in device string! [ 86.727299][ T5878] [ 86.739846][ T5878] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 86.961558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.970696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.630569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 90.743246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.812718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.937634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.142881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.143111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.296696][ T5897] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.423825][ T27] cfg80211: failed to load regulatory.db [ 93.144091][ T5906] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 94.751572][ T5913] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 95.980207][ T5927] ======================================================= [ 95.980207][ T5927] WARNING: The mand mount option has been deprecated and [ 95.980207][ T5927] and is ignored by this kernel. Remove the mand [ 95.980207][ T5927] option from the mount to silence this warning. [ 95.980207][ T5927] ======================================================= [ 96.251995][ T5928] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 98.800865][ T5834] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.000435][ T5834] usb 1-1: Using ep0 maxpacket: 8 [ 99.019006][ T5834] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.040401][ T5834] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.070698][ T5834] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.090844][ T5834] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.120545][ T5834] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.140576][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.087582][ T5834] usb 1-1: usb_control_msg returned -71 [ 101.093541][ T5834] usbtmc 1-1:16.0: can't read capabilities [ 101.360993][ T5834] usb 1-1: USB disconnect, device number 2 [ 102.640312][ C1] sched: RT throttling activated [ 103.093284][ T5966] Zero length message leads to an empty skb [ 103.347230][ T5967] can0: slcan on ttyS3. [ 104.952365][ T5959] can0 (unregistered): slcan off ttyS3. [ 105.510455][ T5973] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 105.697111][ T5975] netlink: 72 bytes leftover after parsing attributes in process `syz.3.27'. [ 106.220393][ T5854] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.189074][ T5854] usb 2-1: Using ep0 maxpacket: 8 [ 107.212649][ T5854] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.175212][ T5854] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.270563][ T5854] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.307610][ T5854] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.353047][ T5854] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.376425][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.746860][ T5854] usb 2-1: GET_CAPABILITIES returned 0 [ 108.821457][ T5854] usbtmc 2-1:16.0: can't read capabilities [ 109.216652][ T5854] usb 2-1: USB disconnect, device number 2 [ 109.520584][ T5998] overlayfs: workdir and upperdir must be separate subtrees [ 113.282504][ T6020] netlink: 72 bytes leftover after parsing attributes in process `syz.0.42'. [ 117.244974][ T6048] netlink: 'syz.2.48': attribute type 10 has an invalid length. [ 117.270812][ T6048] netlink: 40 bytes leftover after parsing attributes in process `syz.2.48'. [ 117.318737][ T6048] batman_adv: batadv0: Adding interface: virt_wifi0 [ 117.359228][ T6048] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.425260][ T6048] batman_adv: batadv0: Interface activated: virt_wifi0 [ 119.300920][ T6064] netlink: 72 bytes leftover after parsing attributes in process `syz.1.52'. [ 120.689839][ T6075] capability: warning: `syz.2.59' uses deprecated v2 capabilities in a way that may be insecure [ 120.744268][ T6077] Set syz0 is full, maxelem 0 reached [ 121.120925][ T6085] netlink: 72 bytes leftover after parsing attributes in process `syz.3.64'. [ 128.805992][ T6118] netlink: 72 bytes leftover after parsing attributes in process `syz.3.74'. [ 132.370589][ T5852] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 132.577406][ T5852] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 132.600397][ T5852] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 134.034763][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.051032][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.062551][ T5852] usb 2-1: config 220 interface 0 has no altsetting 0 [ 134.114895][ T5852] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 134.152126][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.190467][ T5852] usb 2-1: Product: syz [ 134.205286][ T5852] usb 2-1: Manufacturer: syz [ 134.210033][ T5852] usb 2-1: SerialNumber: syz [ 136.414203][ T5852] usb 2-1: USB disconnect, device number 3 [ 138.271471][ T6159] netlink: 72 bytes leftover after parsing attributes in process `syz.3.84'. [ 139.920559][ T28] audit: type=1326 audit(1766579900.228:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19398f749 code=0x7fc00000 [ 140.970534][ T5852] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 142.612703][ T5852] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 142.650821][ T5852] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 142.695381][ T5852] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 142.709524][ T5852] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 142.730628][ T5852] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 142.771177][ T28] audit: type=1326 audit(1766579903.088:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd19398f749 code=0x7fc00000 [ 142.780383][ T5852] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 142.891144][ T5852] usb 3-1: unable to read config index 2 descriptor/start: -71 [ 142.898958][ T5852] usb 3-1: can't read configurations, error -71 [ 143.336415][ T5852] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 143.541381][ T5852] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 143.553647][ T5852] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.589548][ T5852] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.640504][ T5852] usb 3-1: config 0 interface 0 has no altsetting 0 [ 143.683404][ T5852] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.700662][ T5852] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.720365][ T5852] usb 3-1: config 0 interface 0 has no altsetting 0 [ 143.731545][ T5852] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.750432][ T5852] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.784330][ T5852] usb 3-1: config 0 interface 0 has no altsetting 0 [ 143.808329][ T5852] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.822184][ T5852] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.850496][ T5852] usb 3-1: config 0 interface 0 has no altsetting 0 [ 143.861484][ T5852] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.881330][ T5852] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.911274][ T5852] usb 3-1: config 0 interface 0 has no altsetting 0 [ 143.919789][ T5852] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.950425][ T5852] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.981056][ T5852] usb 3-1: config 0 interface 0 has no altsetting 0 [ 144.021555][ T5852] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.060406][ T5852] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.092822][ T5852] usb 3-1: config 0 interface 0 has no altsetting 0 [ 144.128187][ T5852] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.197768][ T5852] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.220381][ T5852] usb 3-1: config 0 interface 0 has no altsetting 0 [ 144.230138][ T5852] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 144.251891][ T5852] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 144.270345][ T5852] usb 3-1: Product: syz [ 144.274758][ T5852] usb 3-1: Manufacturer: syz [ 144.279402][ T5852] usb 3-1: SerialNumber: syz [ 144.300132][ T5852] usb 3-1: config 0 descriptor?? [ 144.326932][ T5852] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 144.666285][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 144.697764][ T5773] usb 3-1: USB disconnect, device number 3 [ 144.737917][ T5773] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 147.760928][ T5852] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 147.990422][ T5852] usb 4-1: Using ep0 maxpacket: 8 [ 148.184404][ T5852] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 148.194646][ T5852] usb 4-1: config 0 has no interface number 0 [ 148.201589][ T5852] usb 4-1: config 0 interface 102 altsetting 6 has an invalid endpoint with address 0xDA, skipping [ 148.213149][ T5852] usb 4-1: config 0 interface 102 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 148.229190][ T5852] usb 4-1: config 0 interface 102 has no altsetting 0 [ 148.315533][ T5852] usb 4-1: New USB device found, idVendor=0fb8, idProduct=3002, bcdDevice=a8.f7 [ 148.363423][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.407145][ T5852] usb 4-1: Product: syz [ 148.427443][ T5852] usb 4-1: Manufacturer: syz [ 148.447885][ T5852] usb 4-1: SerialNumber: syz [ 148.496494][ T5852] usb 4-1: config 0 descriptor?? [ 148.766189][ T5852] usb 4-1: USB disconnect, device number 2 [ 172.710068][ T6297] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 180.104950][ T6349] syz.3.139: attempt to access beyond end of device [ 180.104950][ T6349] loop3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 180.119175][ T6349] gfs2: error 10 reading superblock [ 180.756772][ T5779] Bluetooth: hci3: command 0x0405 tx timeout [ 181.475743][ T6362] trusted_key: encrypted_key: key user:syz not found [ 193.499229][ T6433] netlink: 20 bytes leftover after parsing attributes in process `syz.3.161'. [ 195.446674][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.456784][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.920442][ T5773] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 196.160531][ T5773] usb 3-1: Using ep0 maxpacket: 16 [ 197.161885][ T5773] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 197.172166][ T5773] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.184917][ T5773] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.198550][ T5773] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.209070][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.230609][ T5773] usb 3-1: Product: syz [ 197.239050][ T5773] usb 3-1: Manufacturer: syz [ 197.244557][ T5773] usb 3-1: SerialNumber: syz [ 198.193299][ T5773] usb 3-1: 0:2 : does not exist [ 198.215142][ T5773] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 199.780752][ T5773] usb 3-1: USB disconnect, device number 4 [ 200.170727][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 201.806238][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 201.832506][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 201.863452][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 201.880312][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.888819][ T8] usb 4-1: Product: syz [ 201.894053][ T8] usb 4-1: Manufacturer: syz [ 201.898868][ T8] usb 4-1: SerialNumber: syz [ 201.911309][ T8] usb 4-1: config 0 descriptor?? [ 202.012337][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 202.018521][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 202.025268][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 202.247705][ T6480] mmap: syz.0.173 (6480) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 202.267167][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'. [ 202.319343][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'. [ 202.956578][ T6485] netlink: 48 bytes leftover after parsing attributes in process `syz.1.178'. [ 204.034554][ T5773] usb 4-1: USB disconnect, device number 3 [ 206.642271][ T6503] trusted_key: encrypted_key: key user:syz not found [ 210.835691][ T6517] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 210.863071][ T6521] capability: warning: `syz.1.179' uses 32-bit capabilities (legacy support in use) [ 217.780593][ T5773] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 218.941445][ T5773] usb 4-1: Using ep0 maxpacket: 16 [ 218.962214][ T5773] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.973766][ T5773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.421736][ T5773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 220.433115][ T5773] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 220.443960][ T5773] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.460841][ T5773] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 220.482243][ T5773] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 220.491331][ T5773] usb 4-1: Manufacturer: syz [ 220.502116][ T5773] usb 4-1: config 0 descriptor?? [ 220.598201][ T5773] usb 4-1: can't set config #0, error -71 [ 220.630830][ T5773] usb 4-1: USB disconnect, device number 4 [ 222.210669][ T5852] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 222.420536][ T5852] usb 2-1: Using ep0 maxpacket: 8 [ 222.433512][ T5852] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 222.450535][ T5852] usb 2-1: config 0 has no interface number 0 [ 222.460710][ T5852] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 222.500398][ T5852] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 222.524257][ T5852] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 222.564141][ T5852] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 222.580705][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.612059][ T5852] usb 2-1: config 0 descriptor?? [ 222.623138][ T5852] ldusb 2-1:0.55: Interrupt in endpoint not found [ 222.640970][ T6595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.212'. [ 222.649924][ T6595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.212'. [ 222.836444][ T5852] usb 2-1: USB disconnect, device number 4 [ 228.330342][ T5852] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 228.570517][ T5852] usb 4-1: Using ep0 maxpacket: 16 [ 228.594346][ T5852] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 228.608151][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.630436][ T5852] usb 4-1: Product: syz [ 228.635818][ T5852] usb 4-1: Manufacturer: syz [ 228.663627][ T5852] usb 4-1: SerialNumber: syz [ 228.683180][ T5852] usb 4-1: config 0 descriptor?? [ 228.707036][ T5852] as10x_usb: device has been detected [ 228.722205][ T5852] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 228.790325][ T5852] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 228.874309][ T5852] as10x_usb: error during firmware upload part1 [ 228.905350][ T6630] random: crng reseeded on system resumption [ 228.908167][ T5852] Registered device Sky IT Digital Key (green led) [ 231.150204][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 231.555505][ T5773] usb 4-1: USB disconnect, device number 5 [ 231.642467][ T5773] Unregistered device Sky IT Digital Key (green led) [ 231.644490][ T5773] as10x_usb: device has been disconnected [ 236.892759][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 237.095115][ T6680] syz.1.242 (6680) used greatest stack depth: 17064 bytes left [ 239.420443][ T5854] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 239.640365][ T5854] usb 1-1: Invalid ep0 maxpacket: 64 [ 239.810442][ T5854] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 240.020369][ T5854] usb 1-1: Invalid ep0 maxpacket: 64 [ 240.030795][ T5854] usb usb1-port1: attempt power cycle [ 241.350819][ T5854] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 241.658804][ T5854] usb 1-1: device not accepting address 5, error -71 [ 244.841143][ T6750] Bluetooth: MGMT ver 1.22 [ 245.067128][ T6756] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 247.873145][ T6778] process 'syz.3.258' launched './file0' with NULL argv: empty string added [ 248.833425][ T5769] Bluetooth: hci3: command 0x0405 tx timeout [ 250.267822][ T6793] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 253.988621][ T6806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.271'. [ 254.101333][ T6806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.271'. [ 255.164960][ T6822] netlink: 72 bytes leftover after parsing attributes in process `syz.0.286'. [ 256.755639][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.763847][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.044905][ T6863] JFS: discard option not supported on device [ 260.053713][ T6862] netlink: 72 bytes leftover after parsing attributes in process `syz.2.297'. [ 260.069834][ T6863] Mount JFS Failure: -22 [ 260.085296][ T6863] jfs_mount failed w/return code = -22 [ 264.014353][ T5769] Bluetooth: hci4: command 0x1003 tx timeout [ 264.023627][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 264.259493][ T6896] netlink: 72 bytes leftover after parsing attributes in process `syz.1.307'. [ 266.070446][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 266.273771][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 266.296421][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.320537][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 266.341407][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.360841][ T9] usb 1-1: Product: syz [ 266.370477][ T9] usb 1-1: Manufacturer: syz [ 266.375137][ T9] usb 1-1: SerialNumber: syz [ 266.393477][ T9] usb 1-1: config 0 descriptor?? [ 267.201507][ T6917] binder: 6899:6917 ioctl 40046205 0 returned -22 [ 267.215351][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 268.531889][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 268.565989][ T27] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 268.589229][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 268.611470][ T27] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 268.632367][ T27] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 268.656949][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.683320][ T27] usb 4-1: config 0 descriptor?? [ 268.927791][ T9] usb 1-1: USB disconnect, device number 7 [ 268.950624][ T27] hdpvr 4-1:0.0: firmware version 0x0 dated [ 268.985202][ T27] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 269.027549][ T6923] program syz.2.317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.055244][ T6925] netlink: 72 bytes leftover after parsing attributes in process `syz.0.318'. [ 270.662936][ T27] hdpvr 4-1:0.0: device init failed [ 270.668481][ T27] hdpvr: probe of 4-1:0.0 failed with error -12 [ 270.720707][ T27] usb 4-1: USB disconnect, device number 6 [ 270.796764][ T6929] vcan1: entered promiscuous mode [ 271.923258][ T6941] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 274.143397][ T6953] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 274.584096][ T6960] netlink: 72 bytes leftover after parsing attributes in process `syz.1.328'. [ 276.531636][ T6968] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 279.092285][ T6997] sg_write: data in/out 131036/120 bytes for SCSI command 0x0-- guessing data in; [ 279.092285][ T6997] program syz.1.329 not setting count and/or reply_len properly [ 280.193439][ T7009] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 284.023054][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 285.219140][ T7057] netlink: 72 bytes leftover after parsing attributes in process `syz.3.356'. [ 288.711402][ T7090] loop2: detected capacity change from 0 to 7 [ 288.743421][ T6807] Dev loop2: unable to read RDB block 7 [ 288.749264][ T6807] loop2: AHDI p1 p2 p3 [ 288.796668][ T6807] loop2: partition table partially beyond EOD, truncated [ 288.837361][ T6807] loop2: p1 start 1818582900 is beyond EOD, truncated [ 288.856684][ T6807] loop2: p3 start 335544320 is beyond EOD, truncated [ 288.878710][ T7090] Dev loop2: unable to read RDB block 7 [ 288.896396][ T7090] loop2: AHDI p1 p2 p3 [ 288.920588][ T7090] loop2: partition table partially beyond EOD, truncated [ 289.567269][ T7090] loop2: p1 start 1818582900 is beyond EOD, truncated [ 290.082108][ T7090] loop2: p3 start 335544320 is beyond EOD, truncated [ 290.150896][ T7096] netlink: 72 bytes leftover after parsing attributes in process `syz.0.368'. [ 297.484856][ T7141] IPVS: sync thread started: state = BACKUP, mcast_ifn = vxcan1, syncid = 3, id = 0 [ 299.346093][ T968] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 299.416974][ T7155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.388'. [ 299.586680][ T968] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.633984][ T968] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 299.661616][ T968] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 299.680403][ T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.701921][ T968] usb 4-1: config 0 descriptor?? [ 301.575695][ T5834] usb 4-1: USB disconnect, device number 7 [ 305.573533][ T5779] Bluetooth: hci3: command 0x0405 tx timeout [ 307.174283][ T7210] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 309.175999][ T7236] netlink: 72 bytes leftover after parsing attributes in process `syz.3.401'. [ 312.370471][ T28] audit: type=1326 audit(1766580072.668:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebb78f749 code=0x7ffc0000 [ 312.416412][ T28] audit: type=1326 audit(1766580072.668:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebb78f749 code=0x7ffc0000 [ 312.439205][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.480411][ T28] audit: type=1326 audit(1766580072.668:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebb78f749 code=0x7ffc0000 [ 312.503511][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.547059][ T28] audit: type=1326 audit(1766580072.668:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebb78f749 code=0x7ffc0000 [ 312.569849][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.644377][ T28] audit: type=1326 audit(1766580072.668:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5ebb78f749 code=0x7ffc0000 [ 312.740514][ T28] audit: type=1326 audit(1766580072.668:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebb78f749 code=0x7ffc0000 [ 312.826688][ T28] audit: type=1326 audit(1766580072.718:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebb78f749 code=0x7ffc0000 [ 312.865808][ T28] audit: type=1326 audit(1766580072.718:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5ebb7c2005 code=0x7ffc0000 [ 312.894877][ T28] audit: type=1326 audit(1766580072.718:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5ebb7c2005 code=0x7ffc0000 [ 312.930365][ T28] audit: type=1326 audit(1766580072.718:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5ebb7c2005 code=0x7ffc0000 [ 313.060568][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 313.262636][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 313.278746][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.316832][ T9] usb 2-1: config 0 descriptor?? [ 313.743661][ T9] ath6kl: Unsupported hardware version: 0x0 [ 313.765275][ T9] ath6kl: Failed to init ath6kl core: -22 [ 313.850823][ T9] ath6kl_usb: probe of 2-1:0.0 failed with error -22 [ 314.095521][ T9] usb 2-1: USB disconnect, device number 5 [ 316.340059][ T7284] random: crng reseeded on system resumption [ 318.091991][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.098463][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.529367][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 327.040460][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 327.058250][ T9] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 327.076428][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.105745][ T9] usb 1-1: config 0 descriptor?? [ 327.149190][ T9] as10x_usb: device has been detected [ 327.167890][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 327.281994][ T9] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 327.302418][ T9] as10x_usb: error during firmware upload part1 [ 327.360527][ T9] Registered device nBox DVB-T Dongle [ 327.363475][ T9] usb 1-1: USB disconnect, device number 8 [ 327.434406][ T9] Unregistered device nBox DVB-T Dongle [ 327.438719][ T9] as10x_usb: device has been disconnected [ 327.485559][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'. [ 330.653991][ T7361] netlink: 72 bytes leftover after parsing attributes in process `syz.1.447'. [ 332.123930][ T5779] Bluetooth: hci3: command 0x0405 tx timeout [ 337.649689][ T7392] netlink: 72 bytes leftover after parsing attributes in process `syz.0.457'. [ 338.474895][ T7396] hub 8-0:1.0: USB hub found [ 338.481449][ T7396] hub 8-0:1.0: 1 port detected [ 341.206058][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 341.571395][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 341.880474][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 341.962527][ T8] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.020468][ T8] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.072834][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 342.110498][ T8] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 342.119931][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.188330][ T8] usb 3-1: config 0 descriptor?? [ 344.260459][ T7409] sp0: Synchronizing with TNC [ 344.291238][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 344.328274][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 344.381730][ T8] usb 3-1: USB disconnect, device number 5 [ 344.573005][ T7425] netlink: 72 bytes leftover after parsing attributes in process `syz.3.466'. [ 347.057550][ T7433] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 352.180402][ T7452] netlink: 72 bytes leftover after parsing attributes in process `syz.1.475'. [ 373.319725][ T7565] netlink: 72 bytes leftover after parsing attributes in process `syz.2.516'. [ 376.941564][ T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 377.155763][ T27] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 377.176035][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.199819][ T27] usb 1-1: Product: syz [ 377.206046][ T27] usb 1-1: Manufacturer: syz [ 377.221181][ T27] usb 1-1: SerialNumber: syz [ 377.239872][ T27] hub 1-1:24.0: bad descriptor, ignoring hub [ 377.257031][ T27] hub: probe of 1-1:24.0 failed with error -5 [ 377.500519][ T27] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 377.537644][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 377.561494][ T27] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 377.570888][ T27] usb 1-1: media controller created [ 377.604057][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 377.701338][ T27] DVB: Unable to find symbol dib7000p_attach() [ 377.709385][ T27] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 378.021646][ T27] rc_core: IR keymap rc-dib0700-rc5 not found [ 378.279651][ T27] Registered IR keymap rc-empty [ 378.334949][ T27] dvb-usb: could not initialize remote control. [ 378.525678][ T27] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 378.673717][ T27] usb 1-1: USB disconnect, device number 9 [ 379.134548][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.144458][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.954450][ T7626] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 380.274131][ T27] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 381.234615][ T7645] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 382.185989][ T7649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.526'. [ 382.281911][ T7652] input: syz0 as /devices/virtual/input/input7 [ 382.490443][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 382.639031][ T7654] netlink: 72 bytes leftover after parsing attributes in process `syz.3.528'. [ 384.098813][ T27] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 384.130468][ T27] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 384.160369][ T27] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 384.170087][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.223146][ T7651] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 384.254763][ T27] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 384.468535][ T9] usb 3-1: USB disconnect, device number 6 [ 384.789980][ T7664] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 385.372866][ T7682] netlink: 72 bytes leftover after parsing attributes in process `syz.2.537'. [ 388.622153][ T7712] block nbd0: shutting down sockets [ 390.161198][ T7717] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 390.273795][ T7717] MPI: mpi too large (130952 bits) [ 393.658541][ T7747] syzkaller0: entered promiscuous mode [ 393.671010][ T7747] syzkaller0: entered allmulticast mode [ 399.547347][ T7784] 9pnet_virtio: no channels available for device syz [ 402.441755][ T7792] 9pnet_virtio: no channels available for device syz [ 405.048454][ T7816] Bluetooth: MGMT ver 1.22 [ 405.353785][ T7819] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 408.611402][ T7838] netlink: 36 bytes leftover after parsing attributes in process `syz.3.579'. [ 411.300631][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 411.515396][ T23] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 411.550280][ T23] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 411.573310][ T7865] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 411.582566][ T23] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 411.610448][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.642925][ T7857] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 411.676590][ T23] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 412.461123][ T7871] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 412.496203][ T7871] random: crng reseeded on system resumption [ 413.172163][ T7877] 9pnet_fd: Insufficient options for proto=fd [ 413.960915][ T7879] Bluetooth: MGMT ver 1.22 [ 414.192791][ T5834] usb 4-1: USB disconnect, device number 8 [ 419.010836][ T7914] bridge0: port 3(vlan2) entered blocking state [ 419.052395][ T7914] bridge0: port 3(vlan2) entered disabled state [ 419.115225][ T7914] vlan2: entered allmulticast mode [ 419.147620][ T7914] bridge0: entered allmulticast mode [ 419.191983][ T7914] vlan2: left allmulticast mode [ 419.216744][ T7914] bridge0: left allmulticast mode [ 420.701770][ T7926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.357474][ T7947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 423.967471][ T7947] bond_slave_0: entered promiscuous mode [ 423.973685][ T7947] bond_slave_1: entered promiscuous mode [ 424.033480][ T7947] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 424.063622][ T7947] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 424.850576][ T7969] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 425.043070][ T7972] netlink: 72 bytes leftover after parsing attributes in process `syz.3.621'. [ 427.510378][ T7985] nbd3: detected capacity change from 0 to 63 [ 427.550839][ T5779] block nbd3: Receive control failed (result -104) [ 429.770865][ T8001] netlink: 32 bytes leftover after parsing attributes in process `syz.2.633'. [ 429.786949][ T8001] netlink: 44 bytes leftover after parsing attributes in process `syz.2.633'. [ 430.548397][ T8001] 9pnet: Could not find request transport: fdÎ~é*no=0x0000000000000011 [ 430.707842][ T8004] IPVS: Error connecting to the multicast addr [ 431.505692][ T8006] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.514609][ T8006] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.988068][ T8006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.141597][ T8006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.414982][ T8042] binder: BINDER_SET_CONTEXT_MGR already set [ 433.421715][ T8042] binder: 8041:8042 ioctl 4018620d 2000000002c0 returned -16 [ 433.490959][ T8006] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 433.808170][ T8006] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.820349][ T8006] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.852830][ T8006] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.883708][ T8006] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.102206][ T8006] vcan1: left promiscuous mode [ 434.271820][ T8057] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 434.571100][ T8065] 9pnet_virtio: no channels available for device syz [ 434.579819][ T8065] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 434.598992][ T8065] overlayfs: overlapping lowerdir path [ 438.239423][ T8093] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 440.575816][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.587040][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.740437][ T8054] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 442.970468][ T8054] usb 1-1: Using ep0 maxpacket: 8 [ 442.979328][ T8054] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 443.000487][ T8054] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 443.030318][ T8054] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 443.059894][ T8054] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 443.078356][ T8054] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 443.130688][ T8054] usb 1-1: config 168 interface 0 has no altsetting 0 [ 443.145971][ T8054] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 443.158538][ T8054] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 443.190311][ T8054] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 443.211906][ T8054] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 443.244015][ T8054] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 443.272075][ T8054] usb 1-1: config 168 interface 0 has no altsetting 0 [ 443.284256][ T8054] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 443.303576][ T8054] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 443.335913][ T8054] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 443.369042][ T8054] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 443.398315][ T8054] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 443.420672][ T8054] usb 1-1: config 168 interface 0 has no altsetting 0 [ 443.442259][ T8054] usb 1-1: string descriptor 0 read error: -22 [ 443.451672][ T8054] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 443.471644][ T8054] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.513592][ T8054] adutux 1-1:168.0: interrupt endpoints not found [ 443.757006][ T8054] usb 1-1: USB disconnect, device number 10 [ 444.250366][ T8052] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 444.450276][ T8052] usb 4-1: Using ep0 maxpacket: 16 [ 444.458192][ T8052] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 444.479200][ T8052] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 444.504080][ T8052] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.521386][ T8052] usb 4-1: Product: syz [ 444.530411][ T8052] usb 4-1: Manufacturer: syz [ 444.546755][ T8052] usb 4-1: SerialNumber: syz [ 446.139188][ T8052] usb 4-1: config 0 descriptor?? [ 446.182422][ T8052] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 446.247852][ T8052] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 448.034017][ T8052] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 448.147864][ T8052] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 448.221744][ T8052] em28xx 4-1:0.0: board has no eeprom [ 448.320461][ T8052] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 448.338923][ T8052] em28xx 4-1:0.0: dvb set to bulk mode. [ 448.371163][ T8019] em28xx 4-1:0.0: Binding DVB extension [ 448.392784][ T8163] syz.3.678[8163]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 448.397023][ T8052] usb 4-1: USB disconnect, device number 9 [ 448.459520][ T8052] em28xx 4-1:0.0: Disconnecting em28xx [ 448.535673][ T8019] em28xx 4-1:0.0: Registering input extension [ 448.569836][ T8052] em28xx 4-1:0.0: Closing input extension [ 448.675374][ T8052] em28xx 4-1:0.0: Freeing device [ 449.683130][ T8175] syz.2.676 uses obsolete (PF_INET,SOCK_PACKET) [ 453.301593][ T8198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.688'. [ 457.866434][ T10] block nbd3: Possible stuck request ffff888021b70000: control (read@0,1024B). Runtime 30 seconds [ 457.880240][ T10] block nbd3: Possible stuck request ffff888021b70200: control (read@1024,1024B). Runtime 30 seconds [ 457.891820][ T10] block nbd3: Possible stuck request ffff888021b70400: control (read@2048,1024B). Runtime 30 seconds [ 457.903298][ T10] block nbd3: Possible stuck request ffff888021b70600: control (read@3072,1024B). Runtime 30 seconds [ 461.236470][ T8054] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 461.496175][ T8054] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 461.555408][ T8054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.580318][ T8054] usb 2-1: Product: syz [ 461.585279][ T8054] usb 2-1: Manufacturer: syz [ 461.601294][ T8054] usb 2-1: SerialNumber: syz [ 461.616423][ T8054] usb 2-1: config 0 descriptor?? [ 461.636271][ T8054] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 461.883312][ T8054] usb 2-1: USB disconnect, device number 6 [ 466.295240][ T8294] netlink: 20 bytes leftover after parsing attributes in process `syz.3.723'. [ 466.424218][ T8298] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 468.471504][ T8314] overlayfs: overlapping lowerdir path [ 471.666228][ T8331] 9pnet_virtio: no channels available for device syz [ 474.693299][ T8363] netlink: 56 bytes leftover after parsing attributes in process `syz.0.736'. [ 474.882782][ T8019] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 475.110582][ T8019] usb 4-1: Using ep0 maxpacket: 32 [ 475.124566][ T8019] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 475.146676][ T8019] usb 4-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 475.202677][ T8019] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 475.239994][ T8019] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 475.254103][ T8019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.294522][ T8019] usb 4-1: Product: syz [ 475.298949][ T8019] usb 4-1: Manufacturer: syz [ 475.315186][ T8019] usb 4-1: SerialNumber: syz [ 475.366693][ T8019] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 475.384179][ T8019] imon 4-1:155.0: unable to initialize intf0, err -19 [ 475.391690][ T8019] imon:imon_probe: failed to initialize context! [ 475.400844][ T8019] imon 4-1:155.0: unable to register, err -19 [ 477.667706][ T8054] usb 4-1: USB disconnect, device number 10 [ 477.700777][ T8371] 9pnet_virtio: no channels available for device syz [ 479.679864][ T8375] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.688013][ T8375] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.041345][ T8375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.221618][ T8375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.453619][ T8392] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 482.781274][ T5779] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 482.790431][ T8375] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.834121][ T8375] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.854947][ T8375] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.874798][ T8375] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.930449][ T10] block nbd3: Possible stuck request ffff888021b70000: control (read@0,1024B). Runtime 60 seconds [ 487.941322][ T10] block nbd3: Possible stuck request ffff888021b70200: control (read@1024,1024B). Runtime 60 seconds [ 487.953399][ T10] block nbd3: Possible stuck request ffff888021b70400: control (read@2048,1024B). Runtime 60 seconds [ 487.965225][ T10] block nbd3: Possible stuck request ffff888021b70600: control (read@3072,1024B). Runtime 60 seconds [ 488.729142][ T8044] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 488.952960][ T8044] usb 2-1: Using ep0 maxpacket: 32 [ 488.995876][ T8044] usb 2-1: config 0 has no interfaces? [ 489.020344][ T8044] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 489.029780][ T8044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.070585][ T8044] usb 2-1: config 0 descriptor?? [ 489.332852][ T8052] usb 2-1: USB disconnect, device number 7 [ 492.183938][ T8451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.761'. [ 492.200545][ T8451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.761'. [ 493.132618][ T8458] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 497.232099][ T5769] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 497.244328][ T5769] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 497.255329][ T5769] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 497.266372][ T5769] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 497.275171][ T5769] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 497.283701][ T5769] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 497.647725][ T8496] chnl_net:caif_netlink_parms(): no params data found [ 497.939088][ T8496] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.958491][ T8496] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.967301][ T8496] bridge_slave_0: entered allmulticast mode [ 497.978560][ T8496] bridge_slave_0: entered promiscuous mode [ 497.988929][ T8496] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.998234][ T8496] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.006791][ T8496] bridge_slave_1: entered allmulticast mode [ 498.020329][ T8496] bridge_slave_1: entered promiscuous mode [ 498.055952][ T8512] kernel profiling enabled (shift: 5) [ 498.109291][ T8496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.157977][ T8496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.031604][ T8496] team0: Port device team_slave_0 added [ 499.043211][ T8496] team0: Port device team_slave_1 added [ 499.259833][ T8496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.282258][ T8496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.309630][ T8496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.348287][ T8496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.368862][ T8496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.423563][ T5769] Bluetooth: hci4: command tx timeout [ 499.470567][ T8496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.625989][ T8496] hsr_slave_0: entered promiscuous mode [ 499.666747][ T8496] hsr_slave_1: entered promiscuous mode [ 499.944683][ T8496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.985026][ T8496] Cannot create hsr debugfs directory [ 500.523701][ T8525] sd 0:0:1:0: device reset [ 500.637311][ T8527] kernel read not supported for file /file1 (pid: 8527 comm: syz.2.782) [ 500.653513][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 500.653530][ T28] audit: type=1800 audit(1766580260.968:81): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.782" name="file1" dev="mqueue" ino=21298 res=0 errno=0 [ 501.738389][ T5769] Bluetooth: hci4: command tx timeout [ 502.016903][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.031958][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.211145][ T8496] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 502.245450][ T8496] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 502.264670][ T8496] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 502.298409][ T8496] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 502.502835][ T8534] input: syz1 as /devices/virtual/input/input9 [ 502.668376][ T8496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.725658][ T8496] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.762761][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.770217][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.792344][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.799836][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.349091][ T5769] Bluetooth: hci4: command tx timeout [ 504.691445][ T8496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.410285][ T5779] Bluetooth: hci4: command tx timeout [ 507.933300][ T8496] veth0_vlan: entered promiscuous mode [ 507.986221][ T8496] veth1_vlan: entered promiscuous mode [ 508.288025][ T8496] veth0_macvtap: entered promiscuous mode [ 508.507071][ T8581] bridge2: entered allmulticast mode [ 508.531886][ T8583] ªªªªª»: renamed from hsr0 [ 508.685853][ T8496] veth1_macvtap: entered promiscuous mode [ 508.896581][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.911018][ T8576] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 508.983636][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.994396][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.005777][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.018281][ T8496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.044935][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.080186][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.091310][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.102495][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.121456][ T8496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.180597][ T8496] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.220328][ T8496] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.250191][ T8496] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.266835][ T8496] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.032513][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.069423][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.098134][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.221027][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.474702][ T8596] netlink: 72 bytes leftover after parsing attributes in process `syz.3.796'. [ 518.310333][ T10] block nbd3: Possible stuck request ffff888021b70000: control (read@0,1024B). Runtime 90 seconds [ 518.321562][ T10] block nbd3: Possible stuck request ffff888021b70200: control (read@1024,1024B). Runtime 90 seconds [ 518.332705][ T10] block nbd3: Possible stuck request ffff888021b70400: control (read@2048,1024B). Runtime 90 seconds [ 518.350671][ T10] block nbd3: Possible stuck request ffff888021b70600: control (read@3072,1024B). Runtime 90 seconds [ 518.792197][ T5140] udevd[5140]: worker [7582] /devices/virtual/block/nbd3 is taking a long time [ 521.121722][ T5779] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 521.131951][ T5779] CPU: 0 PID: 5779 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 521.139639][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 521.149833][ T5779] Workqueue: hci2 hci_rx_work [ 521.154679][ T5779] Call Trace: [ 521.157991][ T5779] [ 521.161186][ T5779] dump_stack_lvl+0x16c/0x230 [ 521.165961][ T5779] ? show_regs_print_info+0x20/0x20 [ 521.171512][ T5779] ? load_image+0x3b0/0x3b0 [ 521.176239][ T5779] sysfs_create_dir_ns+0x256/0x280 [ 521.181433][ T5779] ? hci_rx_work+0x43a/0xd80 [ 521.186164][ T5779] ? sysfs_warn_dup+0xa0/0xa0 [ 521.190897][ T5779] ? do_raw_spin_unlock+0x121/0x230 [ 521.196169][ T5779] kobject_add_internal+0x6b8/0xc70 [ 521.201619][ T5779] kobject_add+0x156/0x220 [ 521.206431][ T5779] ? __rwlock_init+0x150/0x150 [ 521.211525][ T5779] ? kobject_init+0x1e0/0x1e0 [ 521.216857][ T5779] ? _raw_spin_unlock+0x28/0x40 [ 521.221943][ T5779] ? get_device_parent+0x366/0x390 [ 521.227120][ T5779] device_add+0x408/0xc20 [ 521.231625][ T5779] hci_conn_add_sysfs+0xd5/0x1e0 [ 521.236775][ T5779] le_conn_complete_evt+0xf36/0x1500 [ 521.242349][ T5779] ? hci_event_packet+0x4a7/0x1210 [ 521.247886][ T5779] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 521.254460][ T5779] ? __copy_skb_header+0xa7/0x550 [ 521.259603][ T5779] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 521.265733][ T5779] ? skb_pull_data+0xfb/0x200 [ 521.270628][ T5779] hci_le_enh_conn_complete_evt+0x189/0x460 [ 521.276752][ T5779] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 521.283267][ T5779] ? hci_remote_host_features_evt+0x160/0x160 [ 521.289699][ T5779] hci_event_packet+0x795/0x1210 [ 521.294822][ T5779] ? bis_list+0x290/0x290 [ 521.299187][ T5779] ? lockdep_hardirqs_on+0x98/0x150 [ 521.304709][ T5779] ? hci_send_to_monitor+0xd7/0x4f0 [ 521.309954][ T5779] hci_rx_work+0x43a/0xd80 [ 521.314669][ T5779] ? process_scheduled_works+0x957/0x15b0 [ 521.320591][ T5779] process_scheduled_works+0xa45/0x15b0 [ 521.326191][ T5779] ? assign_work+0x400/0x400 [ 521.330809][ T5779] ? assign_work+0x39e/0x400 [ 521.335713][ T5779] worker_thread+0xa55/0xfc0 [ 521.340582][ T5779] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 521.346821][ T5779] ? _raw_spin_unlock+0x40/0x40 [ 521.351689][ T5779] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 521.357621][ T5779] kthread+0x2fa/0x390 [ 521.361705][ T5779] ? pr_cont_work+0x560/0x560 [ 521.366496][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 521.371189][ T5779] ret_from_fork+0x48/0x80 [ 521.375861][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 521.380465][ T5779] ret_from_fork_asm+0x11/0x20 [ 521.385346][ T5779] [ 521.400223][ T5779] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 521.414560][ T5779] Bluetooth: hci2: failed to register connection device [ 521.754672][ T8641] netlink: 72 bytes leftover after parsing attributes in process `syz.4.806'. [ 523.530438][ T8637] Bluetooth: hci2: command 0x0406 tx timeout [ 526.932555][ T5769] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 526.946315][ T5769] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 526.958070][ T5769] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 526.972681][ T5769] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 526.990437][ T5769] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 526.998614][ T5769] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 528.251008][ T8662] chnl_net:caif_netlink_parms(): no params data found [ 530.247280][ T5769] Bluetooth: hci5: command tx timeout [ 530.693061][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.718442][ T8662] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.739829][ T8662] bridge_slave_0: entered allmulticast mode [ 530.761318][ T8662] bridge_slave_0: entered promiscuous mode [ 530.792675][ T8662] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.820498][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.828716][ T8662] bridge_slave_1: entered allmulticast mode [ 530.840788][ T8662] bridge_slave_1: entered promiscuous mode [ 531.065163][ T8662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.114601][ T8662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.455978][ T8662] team0: Port device team_slave_0 added [ 531.581057][ T8637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 531.592000][ T8637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 531.600569][ T8637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 531.609585][ T8637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 531.617698][ T8637] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 531.625402][ T8637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 531.732511][ T8662] team0: Port device team_slave_1 added [ 531.778241][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.787536][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.840326][ T8662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.861891][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.869314][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.950440][ T8662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.187540][ T8662] hsr_slave_0: entered promiscuous mode [ 532.207198][ T8662] hsr_slave_1: entered promiscuous mode [ 532.236889][ T8662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.260481][ T8662] Cannot create hsr debugfs directory [ 532.330831][ T8637] Bluetooth: hci5: command tx timeout [ 533.125051][ T8692] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.224259][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.693509][ T8637] Bluetooth: hci1: command tx timeout [ 534.701893][ T5769] Bluetooth: hci5: command tx timeout [ 534.965677][ T8694] netlink: 'syz.4.818': attribute type 16 has an invalid length. [ 536.730482][ T8637] Bluetooth: hci1: command tx timeout [ 536.730561][ T8637] Bluetooth: hci5: command tx timeout [ 536.758072][ T8662] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 536.970950][ T8662] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 537.344140][ T8686] chnl_net:caif_netlink_parms(): no params data found [ 537.460675][ T8662] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 537.595915][ T8662] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 538.812202][ T5779] Bluetooth: hci1: command tx timeout [ 538.981233][ T8686] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.988837][ T8686] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.010727][ T8686] bridge_slave_0: entered allmulticast mode [ 539.018452][ T8686] bridge_slave_0: entered promiscuous mode [ 539.112609][ T8686] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.212569][ T8686] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.274929][ T8686] bridge_slave_1: entered allmulticast mode [ 539.289290][ T8686] bridge_slave_1: entered promiscuous mode [ 539.805100][ T8686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.838763][ T8686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.775960][ T5779] Bluetooth: hci1: command tx timeout [ 541.843263][ T8686] team0: Port device team_slave_0 added [ 541.896194][ T8686] team0: Port device team_slave_1 added [ 542.282218][ T8686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.300319][ T8686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.370259][ T8686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.422764][ T8686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.440370][ T8686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.540545][ T8686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.124256][ T8686] hsr_slave_0: entered promiscuous mode [ 544.660796][ T8686] hsr_slave_1: entered promiscuous mode [ 544.668735][ T8686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 544.688013][ T8686] Cannot create hsr debugfs directory [ 544.937013][ T8662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.961011][ T59] IPVS: stopping backup sync thread 7141 ... [ 545.503475][ T8662] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.606089][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.613990][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.670831][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.678706][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.849485][ T59] hsr_slave_0: left promiscuous mode [ 545.876748][ T59] hsr_slave_1: left promiscuous mode [ 545.891889][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.922864][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.940380][ T59] batman_adv: batadv0: Removing interface: virt_wifi0 [ 545.948897][ T59] bridge_slave_1: left allmulticast mode [ 545.960018][ T59] bridge_slave_1: left promiscuous mode [ 545.968382][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.017785][ T59] bridge_slave_0: left allmulticast mode [ 546.040713][ T59] bridge_slave_0: left promiscuous mode [ 546.065702][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.920253][ T10] block nbd3: Possible stuck request ffff888021b70000: control (read@0,1024B). Runtime 120 seconds [ 549.940341][ T10] block nbd3: Possible stuck request ffff888021b70200: control (read@1024,1024B). Runtime 120 seconds [ 549.952494][ T10] block nbd3: Possible stuck request ffff888021b70400: control (read@2048,1024B). Runtime 120 seconds [ 549.964357][ T10] block nbd3: Possible stuck request ffff888021b70600: control (read@3072,1024B). Runtime 120 seconds [ 550.388097][ T59] team0 (unregistering): Port device team_slave_1 removed [ 550.535959][ T59] team0 (unregistering): Port device team_slave_0 removed [ 550.734921][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.877196][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.520419][ T968] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 551.710192][ T968] usb 5-1: Using ep0 maxpacket: 8 [ 551.722455][ T968] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 551.750298][ T968] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 551.772439][ T968] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 551.783911][ T968] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.809765][ T968] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 551.820786][ T968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.945262][ T59] bond0 (unregistering): Released all slaves [ 552.037362][ T968] usb 5-1: GET_CAPABILITIES returned 0 [ 552.050256][ T968] usbtmc 5-1:16.0: can't read capabilities [ 552.256573][ T5852] usb 5-1: USB disconnect, device number 2 [ 552.363686][ T8686] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 552.397668][ T8686] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 552.428752][ T8686] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 552.464874][ T8686] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 553.155371][ T8792] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.163665][ T8792] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.549307][ T8819] overlayfs: failed to resolve './file0': -2 [ 554.254975][ T8792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.327989][ T8792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.004739][ T8792] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.021103][ T8792] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.038751][ T8792] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.048681][ T8792] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.298853][ T8824] dvmrp0: entered allmulticast mode [ 555.547121][ T8662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.819801][ T8686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.001551][ T8686] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.127380][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.134805][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.186008][ T8844] syz.4.839: attempt to access beyond end of device [ 556.186008][ T8844] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 556.200564][ T8844] syz.4.839: attempt to access beyond end of device [ 556.200564][ T8844] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 556.213982][ T8844] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 556.223945][ T8844] syz.4.839: attempt to access beyond end of device [ 556.223945][ T8844] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 556.237712][ T8844] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 556.249560][ T8844] syz.4.839: attempt to access beyond end of device [ 556.249560][ T8844] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 556.263874][ T8844] syz.4.839: attempt to access beyond end of device [ 556.263874][ T8844] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 556.277583][ T8844] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 556.287603][ T8844] syz.4.839: attempt to access beyond end of device [ 556.287603][ T8844] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 556.300685][ T8844] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 556.311504][ T8844] syz.4.839: attempt to access beyond end of device [ 556.311504][ T8844] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 556.325185][ T8844] syz.4.839: attempt to access beyond end of device [ 556.325185][ T8844] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 556.348190][ T8844] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 556.358401][ T8844] syz.4.839: attempt to access beyond end of device [ 556.358401][ T8844] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 556.371871][ T8844] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 556.382021][ T8844] syz.4.839: attempt to access beyond end of device [ 556.382021][ T8844] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 556.395194][ T8844] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 556.405280][ T8844] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 556.415170][ T8844] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 556.551265][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.559816][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.814180][ T8856] netlink: 72 bytes leftover after parsing attributes in process `syz.4.841'. [ 557.092626][ T8662] veth0_vlan: entered promiscuous mode [ 557.169456][ T8662] veth1_vlan: entered promiscuous mode [ 557.404278][ T8662] veth0_macvtap: entered promiscuous mode [ 557.447424][ T8662] veth1_macvtap: entered promiscuous mode [ 558.404725][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.426719][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.457031][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.468230][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.483467][ T8662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.546406][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.557554][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.582029][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.593654][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.607768][ T8662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.639875][ T8686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.675065][ T8662] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.708409][ T8662] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.737177][ T8662] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.757058][ T8662] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.901360][ T8871] netlink: 224 bytes leftover after parsing attributes in process `syz.3.842'. [ 559.099993][ T3438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.140342][ T3438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.294712][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.306266][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.476525][ T8686] veth0_vlan: entered promiscuous mode [ 559.528030][ T8686] veth1_vlan: entered promiscuous mode [ 559.717734][ T8686] veth0_macvtap: entered promiscuous mode [ 559.743827][ T8686] veth1_macvtap: entered promiscuous mode [ 559.823138][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.883928][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.934434][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.983239][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.034217][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.080162][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.123241][ T8686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.183547][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.240160][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.278345][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.340159][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.385371][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.420161][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.447205][ T8686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.614790][ T8686] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.680722][ T8686] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.689804][ T8686] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.832917][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.840767][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.892833][ T8686] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.377763][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.411742][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.514115][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.550489][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.738927][ T8915] netlink: 72 bytes leftover after parsing attributes in process `syz.4.850'. [ 574.036207][ T8999] netlink: 72 bytes leftover after parsing attributes in process `syz.3.863'. [ 575.100464][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.860'. [ 580.095089][ T10] block nbd3: Possible stuck request ffff888021b70000: control (read@0,1024B). Runtime 150 seconds [ 580.106983][ T10] block nbd3: Possible stuck request ffff888021b70200: control (read@1024,1024B). Runtime 150 seconds [ 580.118734][ T10] block nbd3: Possible stuck request ffff888021b70400: control (read@2048,1024B). Runtime 150 seconds [ 580.130279][ T10] block nbd3: Possible stuck request ffff888021b70600: control (read@3072,1024B). Runtime 150 seconds [ 580.472490][ T9054] 9pnet_virtio: no channels available for device syz [ 580.815513][ T5779] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 583.252900][ T9079] netlink: 72 bytes leftover after parsing attributes in process `syz.5.878'. [ 589.600298][ T8012] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 589.890196][ T8012] usb 7-1: Using ep0 maxpacket: 16 [ 590.684330][ T8012] usb 7-1: unable to get BOS descriptor or descriptor too short [ 590.740909][ T8012] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 590.780288][ T8012] usb 7-1: can't read configurations, error -71 [ 591.417681][ T9148] netlink: 72 bytes leftover after parsing attributes in process `syz.6.891'. [ 595.556080][ T9176] futex_wake_op: syz.6.894 tries to shift op by 144; fix this program [ 599.720491][ T9212] netlink: 72 bytes leftover after parsing attributes in process `syz.6.903'. [ 607.111674][ T5779] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 607.122767][ T5779] CPU: 1 PID: 5779 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 607.130509][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 607.141200][ T5779] Workqueue: hci5 hci_rx_work [ 607.146091][ T5779] Call Trace: [ 607.149579][ T5779] [ 607.152537][ T5779] dump_stack_lvl+0x16c/0x230 [ 607.157257][ T5779] ? show_regs_print_info+0x20/0x20 [ 607.162576][ T5779] ? load_image+0x3b0/0x3b0 [ 607.168511][ T5779] sysfs_create_dir_ns+0x256/0x280 [ 607.173906][ T5779] ? hci_rx_work+0x43a/0xd80 [ 607.178953][ T5779] ? sysfs_warn_dup+0xa0/0xa0 [ 607.183799][ T5779] ? do_raw_spin_unlock+0x121/0x230 [ 607.189402][ T5779] kobject_add_internal+0x6b8/0xc70 [ 607.194897][ T5779] kobject_add+0x156/0x220 [ 607.199335][ T5779] ? __rwlock_init+0x150/0x150 [ 607.204480][ T5779] ? kobject_init+0x1e0/0x1e0 [ 607.209466][ T5779] ? _raw_spin_unlock+0x28/0x40 [ 607.215310][ T5779] ? get_device_parent+0x366/0x390 [ 607.221068][ T5779] device_add+0x408/0xc20 [ 607.225753][ T5779] hci_conn_add_sysfs+0xd5/0x1e0 [ 607.231319][ T5779] le_conn_complete_evt+0xf36/0x1500 [ 607.237067][ T5779] ? hci_event_packet+0x4a7/0x1210 [ 607.242769][ T5779] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 607.249493][ T5779] ? __copy_skb_header+0xa7/0x550 [ 607.254637][ T5779] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 607.260297][ T5779] ? skb_pull_data+0xfb/0x200 [ 607.265065][ T5779] hci_le_conn_complete_evt+0x187/0x440 [ 607.270719][ T5779] ? hci_remote_host_features_evt+0x160/0x160 [ 607.277730][ T5779] hci_event_packet+0x795/0x1210 [ 607.282856][ T5779] ? bis_list+0x290/0x290 [ 607.287263][ T5779] ? lockdep_hardirqs_on+0x98/0x150 [ 607.293240][ T5779] ? hci_send_to_monitor+0xd7/0x4f0 [ 607.298936][ T5779] hci_rx_work+0x43a/0xd80 [ 607.303728][ T5779] ? process_scheduled_works+0x957/0x15b0 [ 607.309947][ T5779] process_scheduled_works+0xa45/0x15b0 [ 607.316210][ T5779] ? assign_work+0x400/0x400 [ 607.321050][ T5779] ? assign_work+0x39e/0x400 [ 607.326152][ T5779] worker_thread+0xa55/0xfc0 [ 607.331214][ T5779] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 607.338143][ T5779] ? _raw_spin_unlock+0x40/0x40 [ 607.343534][ T5779] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 607.349690][ T5779] kthread+0x2fa/0x390 [ 607.353840][ T5779] ? pr_cont_work+0x560/0x560 [ 607.358753][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 607.363678][ T5779] ret_from_fork+0x48/0x80 [ 607.368327][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 607.373249][ T5779] ret_from_fork_asm+0x11/0x20 [ 607.378540][ T5779] [ 607.390213][ T5779] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 607.405427][ T5779] Bluetooth: hci5: failed to register connection device [ 608.114718][ T9271] netlink: 72 bytes leftover after parsing attributes in process `syz.5.914'. [ 611.064408][ T10] block nbd3: Possible stuck request ffff888021b70000: control (read@0,1024B). Runtime 180 seconds [ 611.075680][ T10] block nbd3: Possible stuck request ffff888021b70200: control (read@1024,1024B). Runtime 180 seconds [ 611.087640][ T10] block nbd3: Possible stuck request ffff888021b70400: control (read@2048,1024B). Runtime 180 seconds [ 611.099573][ T10] block nbd3: Possible stuck request ffff888021b70600: control (read@3072,1024B). Runtime 180 seconds [ 611.227139][ T9290] netlink: 40 bytes leftover after parsing attributes in process `syz.3.917'. [ 613.003941][ T9308] netlink: 20 bytes leftover after parsing attributes in process `syz.4.921'. [ 613.013700][ T9308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.921'. [ 613.455903][ T9308] bridge0: entered promiscuous mode [ 613.487474][ T9308] ip6gretap0: entered promiscuous mode [ 613.531235][ T9308] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 613.563693][ T9308] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 613.805134][ T9312] 9pnet_fd: Insufficient options for proto=fd [ 618.227688][ T9337] [ 618.230055][ T9337] ====================================================== [ 618.237271][ T9337] WARNING: possible circular locking dependency detected [ 618.244310][ T9337] syzkaller #0 Not tainted [ 618.249519][ T9337] ------------------------------------------------------ [ 618.256552][ T9337] syz.6.927/9337 is trying to acquire lock: [ 618.262801][ T9337] ffffffff8ca648e8 (bdev_lock){+.+.}-{3:3}, at: bd_prepare_to_claim+0x1ba/0x480 [ 618.272093][ T9337] [ 618.272093][ T9337] but task is already holding lock: [ 618.279741][ T9337] ffff88801fcfce40 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_common_ioctl+0x1b92/0x2460 [ 618.290409][ T9337] [ 618.290409][ T9337] which lock already depends on the new lock. [ 618.290409][ T9337] [ 618.301146][ T9337] [ 618.301146][ T9337] the existing dependency chain (in reverse order) is: [ 618.310596][ T9337] [ 618.310596][ T9337] -> #4 (mapping.invalidate_lock){++++}-{3:3}: [ 618.320682][ T9337] down_write+0x97/0x1f0 [ 618.325463][ T9337] set_blocksize+0x249/0x4b0 [ 618.330692][ T9337] sb_min_blocksize+0xbe/0x190 [ 618.336436][ T9337] ext4_fill_super+0x6df/0x66c0 [ 618.341999][ T9337] get_tree_bdev+0x3e4/0x510 [ 618.347286][ T9337] vfs_get_tree+0x8c/0x280 [ 618.352320][ T9337] do_new_mount+0x24b/0xa40 [ 618.357345][ T9337] init_mount+0xd2/0x120 [ 618.362191][ T9337] do_mount_root+0x97/0x230 [ 618.367220][ T9337] mount_root_generic+0x195/0x3c0 [ 618.372771][ T9337] prepare_namespace+0xc2/0x100 [ 618.378383][ T9337] kernel_init_freeable+0x413/0x570 [ 618.384199][ T9337] kernel_init+0x1d/0x1c0 [ 618.389236][ T9337] ret_from_fork+0x48/0x80 [ 618.394365][ T9337] ret_from_fork_asm+0x11/0x20 [ 618.399754][ T9337] [ 618.399754][ T9337] -> #3 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 618.408940][ T9337] down_write+0x97/0x1f0 [ 618.413912][ T9337] set_blocksize+0x201/0x4b0 [ 618.419034][ T9337] sb_set_blocksize+0x4a/0x100 [ 618.424680][ T9337] udf_load_vrs+0xe3/0xf00 [ 618.429621][ T9337] udf_fill_super+0x67d/0x1720 [ 618.435452][ T9337] mount_bdev+0x22b/0x2d0 [ 618.440794][ T9337] legacy_get_tree+0xea/0x180 [ 618.446081][ T9337] vfs_get_tree+0x8c/0x280 [ 618.451197][ T9337] do_new_mount+0x24b/0xa40 [ 618.456231][ T9337] __se_sys_mount+0x2da/0x3c0 [ 618.461712][ T9337] do_syscall_64+0x55/0xb0 [ 618.467123][ T9337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.474106][ T9337] [ 618.474106][ T9337] -> #2 (&type->s_umount_key#92){++++}-{3:3}: [ 618.482723][ T9337] down_read+0x46/0x2e0 [ 618.487673][ T9337] super_lock+0x167/0x360 [ 618.492634][ T9337] fs_bdev_sync+0xa4/0x170 [ 618.497765][ T9337] blkdev_common_ioctl+0x881/0x2460 [ 618.503718][ T9337] blkdev_ioctl+0x4eb/0x6f0 [ 618.509021][ T9337] __se_sys_ioctl+0xfd/0x170 [ 618.514681][ T9337] do_syscall_64+0x55/0xb0 [ 618.519719][ T9337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.526228][ T9337] [ 618.526228][ T9337] -> #1 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 618.534493][ T9337] __mutex_lock+0x129/0xcc0 [ 618.539604][ T9337] bd_finish_claiming+0x22f/0x3f0 [ 618.545241][ T9337] blkdev_get_by_dev+0x45c/0x600 [ 618.550888][ T9337] bdev_open_by_dev+0x77/0x100 [ 618.556348][ T9337] setup_bdev_super+0x59/0x660 [ 618.561931][ T9337] mount_bdev+0x1dd/0x2d0 [ 618.566883][ T9337] legacy_get_tree+0xea/0x180 [ 618.572168][ T9337] vfs_get_tree+0x8c/0x280 [ 618.577290][ T9337] do_new_mount+0x24b/0xa40 [ 618.582580][ T9337] init_mount+0xd2/0x120 [ 618.587523][ T9337] do_mount_root+0x97/0x230 [ 618.592736][ T9337] mount_root_generic+0x195/0x3c0 [ 618.598561][ T9337] prepare_namespace+0xc2/0x100 [ 618.604017][ T9337] kernel_init_freeable+0x413/0x570 [ 618.610041][ T9337] kernel_init+0x1d/0x1c0 [ 618.615090][ T9337] ret_from_fork+0x48/0x80 [ 618.620132][ T9337] ret_from_fork_asm+0x11/0x20 [ 618.625514][ T9337] [ 618.625514][ T9337] -> #0 (bdev_lock){+.+.}-{3:3}: [ 618.632631][ T9337] __lock_acquire+0x2ddb/0x7c80 [ 618.638000][ T9337] lock_acquire+0x197/0x410 [ 618.643022][ T9337] __mutex_lock+0x129/0xcc0 [ 618.648038][ T9337] bd_prepare_to_claim+0x1ba/0x480 [ 618.653755][ T9337] truncate_bdev_range+0x4e/0x260 [ 618.659293][ T9337] blkdev_common_ioctl+0x1ba8/0x2460 [ 618.665186][ T9337] blkdev_ioctl+0x4eb/0x6f0 [ 618.670212][ T9337] __se_sys_ioctl+0xfd/0x170 [ 618.675410][ T9337] do_syscall_64+0x55/0xb0 [ 618.680562][ T9337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.687413][ T9337] [ 618.687413][ T9337] other info that might help us debug this: [ 618.687413][ T9337] [ 618.698198][ T9337] Chain exists of: [ 618.698198][ T9337] bdev_lock --> &sb->s_type->i_mutex_key#8 --> mapping.invalidate_lock [ 618.698198][ T9337] [ 618.712769][ T9337] Possible unsafe locking scenario: [ 618.712769][ T9337] [ 618.720686][ T9337] CPU0 CPU1 [ 618.726145][ T9337] ---- ---- [ 618.731645][ T9337] lock(mapping.invalidate_lock); [ 618.737329][ T9337] lock(&sb->s_type->i_mutex_key#8); [ 618.745964][ T9337] lock(mapping.invalidate_lock); [ 618.753996][ T9337] lock(bdev_lock); [ 618.757916][ T9337] [ 618.757916][ T9337] *** DEADLOCK *** [ 618.757916][ T9337] [ 618.766621][ T9337] 2 locks held by syz.6.927/9337: [ 618.771850][ T9337] #0: ffff88801fcfccb0 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: blkdev_common_ioctl+0x1b61/0x2460 [ 618.783596][ T9337] #1: ffff88801fcfce40 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_common_ioctl+0x1b92/0x2460 [ 618.795186][ T9337] [ 618.795186][ T9337] stack backtrace: [ 618.801256][ T9337] CPU: 0 PID: 9337 Comm: syz.6.927 Not tainted syzkaller #0 [ 618.808992][ T9337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 618.819941][ T9337] Call Trace: [ 618.823755][ T9337] [ 618.826710][ T9337] dump_stack_lvl+0x16c/0x230 [ 618.831607][ T9337] ? load_image+0x3b0/0x3b0 [ 618.836406][ T9337] ? show_regs_print_info+0x20/0x20 [ 618.842018][ T9337] ? print_circular_bug+0x12b/0x1a0 [ 618.847472][ T9337] check_noncircular+0x2bd/0x3c0 [ 618.852790][ T9337] ? print_deadlock_bug+0x5d0/0x5d0 [ 618.858655][ T9337] ? lockdep_lock+0xe0/0x220 [ 618.863750][ T9337] ? _find_first_zero_bit+0xd3/0x100 [ 618.869387][ T9337] __lock_acquire+0x2ddb/0x7c80 [ 618.874831][ T9337] ? verify_lock_unused+0x140/0x140 [ 618.880379][ T9337] ? check_noncircular+0x175/0x3c0 [ 618.885675][ T9337] ? print_deadlock_bug+0x5d0/0x5d0 [ 618.891399][ T9337] ? lockdep_lock+0xe0/0x220 [ 618.896016][ T9337] ? lockdep_unlock+0x137/0x2d0 [ 618.901257][ T9337] ? lockdep_lock+0x220/0x220 [ 618.906128][ T9337] lock_acquire+0x197/0x410 [ 618.910722][ T9337] ? bd_prepare_to_claim+0x1ba/0x480 [ 618.916751][ T9337] ? __might_sleep+0xe0/0xe0 [ 618.921541][ T9337] ? read_lock_is_recursive+0x20/0x20 [ 618.927179][ T9337] __mutex_lock+0x129/0xcc0 [ 618.931710][ T9337] ? bd_prepare_to_claim+0x1ba/0x480 [ 618.937018][ T9337] ? slab_free_freelist_hook+0x130/0x1b0 [ 618.943009][ T9337] ? __kmem_cache_free+0xba/0x1f0 [ 618.948215][ T9337] ? tomoyo_path_number_perm+0x477/0x590 [ 618.954050][ T9337] ? security_file_ioctl+0x70/0xa0 [ 618.959530][ T9337] ? __se_sys_ioctl+0x48/0x170 [ 618.964290][ T9337] ? bd_prepare_to_claim+0x1ba/0x480 [ 618.969850][ T9337] ? mutex_lock_nested+0x20/0x20 [ 618.974968][ T9337] ? invalidate_bdev+0xc0/0xc0 [ 618.979748][ T9337] bd_prepare_to_claim+0x1ba/0x480 [ 618.985150][ T9337] ? invalidate_bdev+0xc0/0xc0 [ 618.990201][ T9337] ? truncate_bdev_range+0x260/0x260 [ 618.995848][ T9337] ? __might_fault+0xaa/0x120 [ 619.000703][ T9337] ? down_write+0x162/0x1f0 [ 619.005298][ T9337] ? down_read_killable+0x340/0x340 [ 619.010496][ T9337] ? __might_fault+0xaa/0x120 [ 619.015171][ T9337] truncate_bdev_range+0x4e/0x260 [ 619.020376][ T9337] blkdev_common_ioctl+0x1ba8/0x2460 [ 619.025895][ T9337] ? blkdev_bszset+0x1f0/0x1f0 [ 619.030762][ T9337] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 619.036316][ T9337] blkdev_ioctl+0x4eb/0x6f0 [ 619.041096][ T9337] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 619.046661][ T9337] ? bpf_lsm_file_ioctl+0x9/0x10 [ 619.051860][ T9337] ? security_file_ioctl+0x80/0xa0 [ 619.057072][ T9337] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 619.062971][ T9337] __se_sys_ioctl+0xfd/0x170 [ 619.068426][ T9337] do_syscall_64+0x55/0xb0 [ 619.073042][ T9337] ? clear_bhb_loop+0x40/0x90 [ 619.078762][ T9337] ? clear_bhb_loop+0x40/0x90 [ 619.083551][ T9337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 619.089831][ T9337] RIP: 0033:0x7fad9518f749 [ 619.094264][ T9337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.114559][ T9337] RSP: 002b:00007fad95f7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 619.123073][ T9337] RAX: ffffffffffffffda RBX: 00007fad953e5fa0 RCX: 00007fad9518f749 [ 619.131603][ T9337] RDX: 0000200000000240 RSI: 000000000000127f RDI: 0000000000000003 [ 619.139842][ T9337] RBP: 00007fad95213f91 R08: 0000000000000000 R09: 0000000000000000 [ 619.148398][ T9337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.156724][ T9337] R13: 00007fad953e6038 R14: 00007fad953e5fa0 R15: 00007ffc0ed473b8 [ 619.165057][ T9337] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 620.676894][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.750393][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.825441][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.875988][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.965646][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.027398][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.078993][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.143727][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.850343][ T8637] Bluetooth: hci4: command 0x0406 tx timeout [ 622.215360][ T11] hsr_slave_0: left promiscuous mode [ 622.224231][ T11] hsr_slave_1: left promiscuous mode [ 622.231109][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.239076][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.248278][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.256949][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.265283][ T11] bridge_slave_1: left allmulticast mode [ 622.271373][ T11] bridge_slave_1: left promiscuous mode [ 622.277228][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.286839][ T11] bridge_slave_0: left allmulticast mode [ 622.293332][ T11] bridge_slave_0: left promiscuous mode [ 622.299173][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.314913][ T11] hsr_slave_0: left promiscuous mode [ 622.323532][ T11] hsr_slave_1: left promiscuous mode [ 622.330027][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.339850][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.348888][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.357642][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.366148][ T11] bridge_slave_1: left allmulticast mode [ 622.372800][ T11] bridge_slave_1: left promiscuous mode [ 622.378814][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.389192][ T11] bridge_slave_0: left allmulticast mode [ 622.395951][ T11] bridge_slave_0: left promiscuous mode [ 622.404287][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.424141][ T11] veth1_macvtap: left promiscuous mode [ 622.429821][ T11] veth0_macvtap: left promiscuous mode [ 622.436192][ T11] veth1_vlan: left promiscuous mode [ 622.445080][ T11] veth0_vlan: left promiscuous mode [ 622.451850][ T11] veth1_macvtap: left promiscuous mode [ 622.457449][ T11] veth0_macvtap: left promiscuous mode [ 622.463378][ T11] veth1_vlan: left promiscuous mode [ 622.469019][ T11] veth0_vlan: left promiscuous mode [ 622.710200][ T11] team0 (unregistering): Port device team_slave_1 removed [ 622.745421][ T11] team0 (unregistering): Port device team_slave_0 removed [ 622.776648][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.814870][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.885378][ T11] bond0 (unregistering): Released all slaves [ 623.112235][ T11] team0 (unregistering): Port device team_slave_1 removed [ 623.146389][ T11] team0 (unregistering): Port device team_slave_0 removed [ 623.177632][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.214157][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.292614][ T11] bond0 (unregistering): Released all slaves [ 623.992175][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.057436][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.107499][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.157755][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.374181][ T11] ip6gretap0 (unregistering): left promiscuous mode [ 624.815339][ T11] dvmrp0 (unregistering): left allmulticast mode [ 624.894621][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.901626][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.020222][ T11] bridge0: left promiscuous mode [ 625.037003][ T11] hsr_slave_0: left promiscuous mode [ 625.044766][ T11] hsr_slave_1: left promiscuous mode [ 625.055221][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.065159][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.074477][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.084453][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.093854][ T11] bridge_slave_1: left allmulticast mode [ 625.099796][ T11] bridge_slave_1: left promiscuous mode [ 625.107922][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.117261][ T11] bridge_slave_0: left allmulticast mode [ 625.124590][ T11] bridge_slave_0: left promiscuous mode [ 625.131212][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.166683][ T11] veth1_macvtap: left promiscuous mode [ 625.182663][ T11] veth0_macvtap: left promiscuous mode [ 625.189027][ T11] veth1_vlan: left promiscuous mode [ 625.194764][ T11] veth0_vlan: left promiscuous mode [ 625.408454][ T11] team0 (unregistering): Port device team_slave_1 removed [ 625.444954][ T11] team0 (unregistering): Port device team_slave_0 removed [ 625.479819][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.513808][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.738634][ T11] bond0 (unregistering): Released all slaves