last executing test programs: 7m50.977900899s ago: executing program 1 (id=84): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x1ff, 0x9, 0xe1, 0x0, 0x71, 0x1, 0x3, 0xffffffffffffff42}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7m50.641623926s ago: executing program 1 (id=85): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\a\x00\x00', @ANYRESOCT=r2], 0x44}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m50.153464925s ago: executing program 1 (id=88): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c200000308060001080006040002aaaaaa1c5bfafe5bc532a5aaaaaaaa23ac"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 7m49.962141221s ago: executing program 1 (id=89): r0 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$nbd(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x40) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0xfffffffffffffffe, 0x8, 0x0) getrlimit(0x7, &(0x7f0000000180)) syz_open_dev$sg(0x0, 0x0, 0x0) statx(r0, &(0x7f0000000480)='./file0\x00', 0x6000, 0x7ff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000001400)="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", 0x2000, &(0x7f0000003780)={&(0x7f00000003c0)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x3, 0x80024, 0xfffe, 0x7, 0xa2, 0xff, 0x0, 0x0, 0x2}}, &(0x7f0000000440)={0x18, 0xfffffffffffffffe}, &(0x7f0000000ac0)={0x18, 0x0, 0x3, {0x5e57}}, &(0x7f0000000b00)={0x18, 0xfffffffffffffff5, 0x10, {0xaf}}, &(0x7f0000000c80)={0x18, 0x0, 0x8}, 0x0, &(0x7f0000000f00)={0x60, 0xffffffffffffffda, 0x8001, {{0x5, 0x995e, 0xe7, 0x5, 0xe56, 0x3, 0x9, 0x1000}}}, &(0x7f0000000f80)={0x18, 0x0, 0x33, {0x5}}, &(0x7f0000000fc0)={0x11, 0x0, 0x200000000, {'\x00'}}, 0x0, 0x0, 0x0, &(0x7f00000011c0)={0x10, 0x0, 0x641}, 0x0, &(0x7f0000001200)={0xa0, 0x0, 0x1, {{0x3, 0x0, 0x2, 0x7fff, 0x5, 0x1, {0x3, 0x3, 0xffffffffbb775cbb, 0x8, 0x0, 0xfffffffffffff800, 0x3, 0x40, 0xfffffffa, 0x2000, 0x7, r7, r8, 0xffffff80, 0x4}}, {0x0, 0x8}}}, 0x0, 0x0}) 7m48.902402576s ago: executing program 1 (id=90): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000013a40)={0x0, 0xf0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) 7m48.289978625s ago: executing program 1 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000003050001000600000005000400000000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274000000000c000780050015"], 0x58}, 0x1, 0x0, 0x0, 0xc5dff1b4c279acea}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x1009, 0x0) r1 = memfd_secret(0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x7, 0x2, 0x1, 0x4, 'syz1\x00'}, 0x5, 0x100, 0x1, 0x0, 0x1, 0x3, 'syz1\x00', &(0x7f0000000040)=['/dev/sequencer\x00'], 0xf}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000001000)=""/91) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 7m33.111634097s ago: executing program 32 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000003050001000600000005000400000000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274000000000c000780050015"], 0x58}, 0x1, 0x0, 0x0, 0xc5dff1b4c279acea}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x1009, 0x0) r1 = memfd_secret(0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x7, 0x2, 0x1, 0x4, 'syz1\x00'}, 0x5, 0x100, 0x1, 0x0, 0x1, 0x3, 'syz1\x00', &(0x7f0000000040)=['/dev/sequencer\x00'], 0xf}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000001000)=""/91) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 6m45.342376032s ago: executing program 0 (id=269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) 6m43.856740722s ago: executing program 0 (id=274): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x25dfdbfe, {0x9}, [{0x4}]}, 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYRESOCT], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x1, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000000)={0x0, 0x40, 0x3f, 0x30315559, 0x1, [], [0x20000001, 0x0, 0x1000010, 0x20000], [0x0, 0x40006, 0xfffffffb], [0x0, 0x100000000ffffe]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f00000000c0)=@null) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0x4018aee2, &(0x7f0000000240)) 6m42.831083185s ago: executing program 0 (id=286): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r1, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 6m42.722486163s ago: executing program 0 (id=277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x240020}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) 6m40.382677942s ago: executing program 0 (id=282): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) mkdirat(0xffffffffffffff9c, 0x0, 0x8) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x101) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2814, &(0x7f0000000540)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}, {@metacopy_on}], [{@euid_eq}, {@fowner_lt}, {@dont_hash}, {@uid_gt}, {@permit_directio}, {@dont_measure}, {@appraise}, {@dont_measure}]}) r2 = open(&(0x7f0000000440)='./file0\x00', 0x602140, 0x18) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x40, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x300, 0x2, 0x1, 0x0, 0x6, 0x8}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6d1cb49ada2c127b, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000001840)) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e21, 0xaf4, @private0}, 0x1c) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 6m35.671376221s ago: executing program 0 (id=294): prlimit64(0x0, 0xe, 0x0, 0x0) execve(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) 6m29.124337908s ago: executing program 4 (id=312): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xcc, &(0x7f00000004c0)=ANY=[], 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 6m28.165660735s ago: executing program 4 (id=315): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x110, 0x0, 0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[r0], 0x1) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000020c0)=ANY=[@ANYBLOB="1c0000001c000104000000000000e9ff2d"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x42) open_by_handle_at(r6, &(0x7f0000000380)=ANY=[@ANYRES8=r6], 0x40000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f00000002c0)=@multiplanar_fd={0xc3b4eab, 0x7, 0x4, 0x400, 0x4, {0x0, 0xea60}, {0x5, 0x0, 0x7, 0xb, 0x4, 0x3, "f6de8be8"}, 0xac14, 0x4, {0x0}, 0x2}) mknod$loop(0x0, 0x8fff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f2a, 0x1, 0x10000, 0x4, 0x1000, 0xcc7, 0x8, 0x7, 0xa, 0x6, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0xb, 0xe69, 0x3d, 0x8, 0x4088, 0x0, 0xfffffff8]}) ioctl$COMEDI_DEVINFO(r8, 0x80b06401, &(0x7f0000000040)) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r9, 0x80045438, 0x0) r10 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x3cd, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) 6m25.115986981s ago: executing program 4 (id=320): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000030900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f4000000006201200000c0a01030000000000000000070000070900020073797a31000000000900010073797a3000000000f4110380f01100800800034000000002"], 0x12b4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 6m24.941311835s ago: executing program 4 (id=321): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 6m24.786709247s ago: executing program 4 (id=322): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/6, 0x2}, 0x20) 6m24.014462229s ago: executing program 4 (id=325): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002040), 0x40800, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, 0x0) 6m23.784905048s ago: executing program 33 (id=325): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002040), 0x40800, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, 0x0) 6m20.157864229s ago: executing program 34 (id=294): prlimit64(0x0, 0xe, 0x0, 0x0) execve(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1m39.006404361s ago: executing program 2 (id=1119): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x30, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x1b}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x12}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4004080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 1m36.960274226s ago: executing program 2 (id=1125): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1m36.693762797s ago: executing program 2 (id=1127): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) 1m35.66669237s ago: executing program 2 (id=1129): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x9) 1m35.572462447s ago: executing program 2 (id=1130): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7a56f3e", 0x4}], 0x1}, 0x4000000) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0xffffffffffffff3d, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x94}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) 1m35.452400317s ago: executing program 2 (id=1131): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setrlimit(0xf, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)={{0x0, 0x2710}, {0x77359400}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff82aa]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 1m20.371190181s ago: executing program 35 (id=1131): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setrlimit(0xf, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)={{0x0, 0x2710}, {0x77359400}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff82aa]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 12.599112826s ago: executing program 3 (id=1382): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x10000001, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1008, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x7ff, 0xfffffff7fffffffe, 0x7fffffffffffffff, 0x7fffffff, 0x3, 0x2000000007, 0x4, 0x80000002, 0xfffffffffffffffb], 0x2, 0x1100}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.42243674s ago: executing program 3 (id=1383): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c0010bfef83c3bedabe28dc09b52df4b207c03844dc7f5fc9d00b95918bba90b1c047ace78e7346fe61c52ebc71a45be9d86957f643db586c47ef2d50544a7875e26a7faeaabfd562f4e3fb728f9f84e10c5c3d7848ef0d66adeff354f03c9a6c554aeda312b94d10d9aea6131208e7fa15601f72f5570ee7577b30fc90864ce2edc47707740916b08d45105b8b65f4625663a62d1a30131254a3aef55c090687d8aeea45999b7ed2841a1c9d7b7e412c8eb63547d0ea98f83acadd9e431ca551c0e14ffc50cc44"]) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000000)=0x3) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffc]}, 0x45c) ioctl$UI_DEV_DESTROY(r3, 0x5502) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {0xa, 0x5}]}]}}, 0x0, 0x36, 0x0, 0x0, 0x9}, 0x28) socket$inet6(0xa, 0x3, 0x1) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedreceive(r4, &(0x7f0000000840)=""/44, 0x2c, 0x9, &(0x7f0000001980)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file2\x00', 0x280000, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r5, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r7, 0x40047452, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, 0x0, 0x0) 9.292258763s ago: executing program 7 (id=1394): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x44d01, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x1, 0x7800, 0x3, 0x400, {{0x12, 0x4, 0x2, 0x3, 0x48, 0x68, 0x0, 0x3, 0x23, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x29, 0x3, 0x8, [{@multicast1, 0x8000}, {@empty, 0x5}]}, @ssrr={0x89, 0x13, 0xbf, [@multicast2, @private=0xa010102, @local, @private=0xa010100]}, @end, @timestamp={0x44, 0xc, 0x24, 0x0, 0x3, [0x7fff, 0x8]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=@mpls_delroute={0xf0, 0x19, 0x400, 0x70bd28, 0x25dfdbfc, {0x1c, 0x14, 0x80, 0x0, 0x0, 0x4, 0x0, 0x5, 0x200}, [@RTA_OIF={0x8}, @RTA_DST={0x8, 0x1, {0xb69, 0x0, 0x1}}, @RTA_NEWDST={0x84, 0x13, [{0x8}, {0x9, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0xc1d6, 0x0, 0x1}, {0x64}, {0x9, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x5}, {0x0, 0x0, 0x1}, {0x24}, {0x5, 0x0, 0x1}, {0x9}, {}, {0x8}, {0x5, 0x0, 0x1}, {0xfffff, 0x0, 0x1}, {0xffffb}, {0x9, 0x0, 0x1}, {0x1ff, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6}, {0x65}, {0x0, 0x0, 0x1}, {0x1}, {0x3ff, 0x0, 0x1}, {0x3}, {0x8}, {0x40, 0x0, 0x1}, {0x5}]}, @RTA_MULTIPATH={0xc, 0x9, {0xb, 0x1a, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x7fff, 0x1c, 0x9}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_VIA={0x14, 0x12, {0x23, "f5c0e236586d3256d2df0f35c542"}}, @RTA_MULTIPATH={0xc, 0x9, {0xffff, 0x1a, 0x7f}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4008084}, 0x4004010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$session_to_parent(0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xfff}, @IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x4c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x804) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}, 0xa) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000400)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) 9.066457141s ago: executing program 5 (id=1395): socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) 8.229341818s ago: executing program 7 (id=1396): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mount(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, 0x0, 0x850) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x5, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.07600945s ago: executing program 5 (id=1397): io_uring_setup(0x4a86, &(0x7f0000000240)={0x0, 0x417a, 0x40, 0x8001002, 0x3d5}) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x43, 0x32344d59, 0x0, 0xfffffffd, 0x0, 0x9, 0xfeedcafe, 0x3, 0x8, 0x0, 0x1}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="050027bd700000a668bc25ef288195c062ae8600000006000000080003", @ANYRES32=r9, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff038}, {0x20, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r10 = socket(0x1e, 0x4, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r12, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 7.227770709s ago: executing program 7 (id=1398): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'macvlan0\x00', &(0x7f0000000480)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x3, 0xe, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0xfffffffd]}}) 6.954457031s ago: executing program 7 (id=1399): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c5000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0xa, 0xfffa}, 0xba, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x2004d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x5, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x4, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x8, 0x3e, 0x8e, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0xd31, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x0, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0xc12f, 0x3e7, 0xb, 0x4, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3ff, 0x7ff, 0x12b, 0x4, 0x1, 0x2, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xa, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x2, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.361334939s ago: executing program 6 (id=1403): openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) recvmmsg$unix(r1, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) 5.051501604s ago: executing program 6 (id=1404): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) 4.125216198s ago: executing program 8 (id=1405): openat$binfmt_register(0xffffff9c, &(0x7f0000000200), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) 3.870676169s ago: executing program 6 (id=1406): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000)={0xa, {0x2, 0xd}}, 0xa) 3.777069666s ago: executing program 8 (id=1407): socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) 3.550586045s ago: executing program 3 (id=1408): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0xc0843, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000340), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x11ffffffffff, 0x2, 0x500, 0x0, 0x1800000000000000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x53bf, 0x0, 0x200000004, 0x4000000000000086, 0x804, 0x3, 0x1}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.537005296s ago: executing program 8 (id=1409): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mount(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, 0x0, 0x850) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x5, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.334961242s ago: executing program 6 (id=1410): r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, 0x0, 0x1) 3.284120686s ago: executing program 5 (id=1411): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x30, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x1b}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x12}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4004080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 2.474617891s ago: executing program 8 (id=1412): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x1412, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1000}]}, 0x20}, 0x1, 0x0, 0x0, 0x8015}, 0x20000000) 2.474334891s ago: executing program 6 (id=1413): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='attr/keycreate\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 2.391919158s ago: executing program 5 (id=1414): openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) recvmmsg$unix(r1, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) 2.3637521s ago: executing program 3 (id=1415): userfaultfd(0x80801) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000100)={0x5, 0x1000, 0x7fffffffffffffff, 0x2, 0x5, 0x8000000000000001, 0x2, 0x3}, 0x0, &(0x7f0000000280)={0xa, 0x5a13, 0xfff, 0x2, 0x8, 0x7, 0x3ff, 0x1}, &(0x7f0000000300), 0x0) 2.032400777s ago: executing program 7 (id=1416): mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=0000000000000000000']) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0x44}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.031402707s ago: executing program 5 (id=1417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) 2.029135047s ago: executing program 8 (id=1418): openat$binfmt_register(0xffffff9c, &(0x7f0000000200), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) 1.49050961s ago: executing program 3 (id=1419): socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) 610.757902ms ago: executing program 5 (id=1420): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xfffffffe) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x10000}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) capset(&(0x7f0000000040)={0x20080522, r0}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socketpair(0x2a, 0x2, 0x1, &(0x7f0000000000)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) 601.720442ms ago: executing program 8 (id=1421): io_uring_setup(0x4a86, &(0x7f0000000240)={0x0, 0x417a, 0x40, 0x8001002, 0x3d5}) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x43, 0x32344d59, 0x0, 0xfffffffd, 0x0, 0x9, 0xfeedcafe, 0x3, 0x8, 0x0, 0x1}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="050027bd700000a668bc25ef288195c062ae8600000006000000080003", @ANYRES32=r9, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff038}, {0x20, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r10 = socket(0x1e, 0x4, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r12, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 506.60855ms ago: executing program 6 (id=1422): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mount(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, 0x0, 0x850) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x5, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 494.596271ms ago: executing program 3 (id=1423): socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$vim2m(0x0, 0xff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000240)={0x7fffffff, 0x49433553, 0x3, @discrete={0x7, 0x4}}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x1, r2, 0x0, 0x4000000000004) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80222, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000240)="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", 0x104, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="c14f7bdb3d904c4230838a2e0c6b812f55924c6b69091e3fe8ad31cb22", 0x1d, 0x44, &(0x7f0000000080)={0xa, 0x4e20, 0x7, @loopback}, 0x1c) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) stat(0x0, 0x0) r5 = msgget$private(0x0, 0x101) msgrcv(r5, 0x0, 0x0, 0x1, 0x5800) write$rfkill(r3, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) 0s ago: executing program 7 (id=1424): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x30, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x1b}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x12}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4004080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) kernel console output (not intermixed with test programs): 0772][ T3047] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.048087][ T3047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.081329][ T4183] device veth0_vlan entered promiscuous mode [ 74.093616][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.102060][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.110194][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.124628][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.133961][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.142457][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.152095][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.160149][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.179049][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.193728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.205075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.219475][ T4183] device veth1_vlan entered promiscuous mode [ 74.265642][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.278892][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.291457][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.299477][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.307698][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.317889][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.327252][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.337669][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.347135][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.355899][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.365313][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.375722][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.384811][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.394625][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.427921][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.440497][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.454325][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.463536][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.473367][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.514434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.525099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.535854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.545161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.558089][ T4184] device veth0_vlan entered promiscuous mode [ 74.578551][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.593400][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.605942][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.620829][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.630497][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.639345][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.649821][ T4183] device veth0_macvtap entered promiscuous mode [ 74.666668][ T4193] device veth0_vlan entered promiscuous mode [ 74.687772][ T4184] device veth1_vlan entered promiscuous mode [ 74.723514][ T4183] device veth1_macvtap entered promiscuous mode [ 74.737142][ T4193] device veth1_vlan entered promiscuous mode [ 74.783228][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.790819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.822980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.833007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.841338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.850449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.860035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.869119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.879843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.907680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.917579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.939651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.947792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.958332][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.970228][ T4184] device veth0_macvtap entered promiscuous mode [ 74.986593][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.996270][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.005425][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.015108][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.025419][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.035248][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.048989][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.058502][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.067539][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.076585][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.089941][ T4193] device veth0_macvtap entered promiscuous mode [ 75.125467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.134486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.143869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.161891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.170896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.188276][ T4184] device veth1_macvtap entered promiscuous mode [ 75.197765][ T4193] device veth1_macvtap entered promiscuous mode [ 75.244758][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.257260][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.285579][ T4190] device veth0_vlan entered promiscuous mode [ 75.294417][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.303657][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.311543][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.320307][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.330426][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.338670][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.370189][ T4185] device veth0_vlan entered promiscuous mode [ 75.383728][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.395277][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.407272][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.419434][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.430116][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.440678][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.454823][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.466907][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.482734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.492677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.501574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.510885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.527504][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.538437][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.549976][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.561258][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.570575][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.580306][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.589592][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.602345][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.614104][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.624208][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.635136][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.647322][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.656815][ T4185] device veth1_vlan entered promiscuous mode [ 75.664578][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 75.667592][ T4190] device veth1_vlan entered promiscuous mode [ 75.677574][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 75.693920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.703192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.712961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.721931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.731583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.740782][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 75.746065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.747332][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 75.767461][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 75.775302][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.785371][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.794953][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.804264][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.873222][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.898714][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.916396][ T4190] device veth0_macvtap entered promiscuous mode [ 75.938007][ T4185] device veth0_macvtap entered promiscuous mode [ 75.954985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.963798][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.974162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.982518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.991426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.000969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.010236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.024557][ T4190] device veth1_macvtap entered promiscuous mode [ 76.047238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.060948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.070709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.082548][ T4185] device veth1_macvtap entered promiscuous mode [ 76.096283][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.141779][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.152496][ T3047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.160913][ T3047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.184759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.195555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.204522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.215938][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.227939][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.237908][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.248545][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.258885][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.269437][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.281385][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.292704][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.303685][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.315072][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.326616][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.336789][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.347659][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.359271][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.377861][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.387634][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.402738][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.406688][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.414515][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.431293][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.441533][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.454278][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.464275][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.474846][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.487402][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.496143][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.506228][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.516953][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.526270][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.536911][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.546775][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.557415][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.574522][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.584526][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.595125][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.604087][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.632081][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.642925][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.655449][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.667235][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.677383][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.687953][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.698753][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.709992][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.722285][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.734378][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.743445][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.754375][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.770282][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.792768][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.810422][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.819120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.835505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.844634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.869423][ T3047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.881096][ T3047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.940907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.102999][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.111047][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.130001][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 77.207024][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.229104][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.251085][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.412194][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.431083][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.905884][ T1324] Bluetooth: hci0: command 0x0419 tx timeout [ 78.300287][ T1324] Bluetooth: hci1: command 0x0419 tx timeout [ 78.307727][ T1324] Bluetooth: hci2: command 0x0419 tx timeout [ 78.314800][ T1324] Bluetooth: hci4: command 0x0419 tx timeout [ 78.321085][ T1324] Bluetooth: hci3: command 0x0419 tx timeout [ 78.389547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.400659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.471968][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.521948][ T4235] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.536557][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.585975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.705424][ T4312] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.891948][ T4235] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 78.910681][ T4235] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 78.928190][ T4312] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 78.948243][ T4235] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.974844][ T4235] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.980115][ T4317] fuse: Bad value for 'fd' [ 78.985465][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.991525][ T4312] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.021940][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 79.031180][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 79.040340][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 79.049560][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 79.058664][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 79.075643][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 79.091699][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 79.102659][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 79.111802][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 79.206816][ T4235] usb 2-1: config 0 descriptor?? [ 79.962587][ T4302] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 79.990847][ T4235] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 80.670550][ T4257] usb 2-1: USB disconnect, device number 2 [ 82.550226][ T4359] fuse: Bad value for 'fd' [ 82.581773][ T4235] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.971864][ T4235] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 82.990733][ T4235] usb 4-1: config 1 has no interface number 0 [ 83.007055][ T4235] usb 4-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 83.079948][ T4235] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.292043][ T4235] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 83.307393][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.316438][ T4235] usb 4-1: Product: syz [ 83.320829][ T4235] usb 4-1: Manufacturer: syz [ 83.524781][ T4235] usb 4-1: SerialNumber: syz [ 83.562058][ T4355] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 83.584935][ T4235] usb 4-1: Expected 3 endpoints, found: 2 [ 83.631955][ T4300] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 84.740644][ T4300] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 84.749054][ T4300] usb 2-1: config 0 has no interface number 0 [ 84.755792][ T4300] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 84.787000][ T4300] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.815492][ T1107] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.823295][ T4300] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 84.832953][ T4300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.876360][ T4300] usb 2-1: config 0 descriptor?? [ 85.241885][ T1107] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 85.253723][ T1107] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 85.275602][ T1107] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.303402][ T1107] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.345669][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.383918][ T1107] usb 1-1: config 0 descriptor?? [ 85.402101][ T4371] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 85.424431][ T1107] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 85.441941][ T1324] usb 4-1: USB disconnect, device number 2 [ 85.562571][ T4300] uclogic 0003:28BD:0094.0001: failed retrieving string descriptor #100: -71 [ 85.619135][ T4300] uclogic 0003:28BD:0094.0001: failed retrieving pen parameters: -71 [ 85.647630][ T4300] uclogic 0003:28BD:0094.0001: pen probing failed: -71 [ 85.658862][ T4300] uclogic 0003:28BD:0094.0001: failed probing parameters: -71 [ 85.669340][ T4300] uclogic: probe of 0003:28BD:0094.0001 failed with error -71 [ 85.697959][ T4300] usb 2-1: USB disconnect, device number 3 [ 86.297863][ T4381] IPv6: NLM_F_CREATE should be specified when creating new route [ 86.539128][ T4337] ODEBUG: Out of memory. ODEBUG disabled [ 86.645832][ T4399] fuse: Bad value for 'fd' [ 86.871065][ T21] cfg80211: failed to load regulatory.db [ 87.705849][ T21] usb 1-1: USB disconnect, device number 2 [ 90.561790][ T2304] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.981923][ T2304] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.998519][ T2304] usb 4-1: config 0 has no interface number 0 [ 90.998916][ T4337] Set syz1 is full, maxelem 65536 reached [ 91.025871][ T2304] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 91.065103][ T2304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.125501][ T2304] usb 4-1: config 0 descriptor?? [ 91.215538][ T4438] fuse: Bad value for 'fd' [ 91.255014][ T4433] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 91.318879][ T2304] cp210x 4-1:0.1: cp210x converter detected [ 91.328829][ T4433] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 91.651822][ T2304] cp210x 4-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 92.996006][ T2304] usb 4-1: cp210x converter now attached to ttyUSB0 [ 93.647442][ T2304] usb 4-1: USB disconnect, device number 3 [ 93.679504][ T4442] IPv6: NLM_F_CREATE should be specified when creating new route [ 93.936432][ T2304] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 93.956218][ T2304] cp210x 4-1:0.1: device disconnected [ 98.933364][ T4504] fuse: Invalid rootmode [ 99.498338][ T4507] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.336404][ T4519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.263373][ T4514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.297029][ T4538] binder: 4537:4538 ioctl 890b 0 returned -22 [ 102.767959][ T4550] fuse: Invalid rootmode [ 103.431382][ T4554] IPv6: NLM_F_CREATE should be specified when creating new route [ 105.211472][ T4575] binder: 4574:4575 ioctl 890b 0 returned -22 [ 105.671026][ T4589] fuse: Bad value for 'rootmode' [ 107.531041][ T4604] tipc: Started in network mode [ 107.568513][ T4604] tipc: Node identity 4, cluster identity 4711 [ 107.586029][ T4604] tipc: Node number set to 4 [ 109.793881][ T4625] fuse: Bad value for 'rootmode' [ 111.822691][ T2304] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.221886][ T2304] usb 1-1: Using ep0 maxpacket: 8 [ 112.356446][ T2304] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 112.390223][ T2304] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 112.455377][ T2304] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.512344][ T2304] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.579951][ T2304] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.634957][ T2304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.095602][ T2304] usb 1-1: GET_CAPABILITIES returned 0 [ 113.103813][ T2304] usbtmc 1-1:16.0: can't read capabilities [ 113.371808][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 113.382482][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 113.391985][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 113.401327][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 113.410777][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 113.420128][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 113.429404][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 113.438892][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 113.448403][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 113.457862][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 113.467311][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 113.476678][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 113.486143][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 113.495592][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 113.505289][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 113.514865][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 113.531844][ T4640] usbtmc 1-1:16.0: Unable to send data, error -71 [ 113.665978][ T4382] usb 1-1: USB disconnect, device number 3 [ 116.769542][ T4672] fuse: Bad value for 'rootmode' [ 118.521488][ T4693] fuse: root generation should be zero [ 121.934436][ T4729] Zero length message leads to an empty skb [ 122.010191][ T4731] ======================================================= [ 122.010191][ T4731] WARNING: The mand mount option has been deprecated and [ 122.010191][ T4731] and is ignored by this kernel. Remove the mand [ 122.010191][ T4731] option from the mount to silence this warning. [ 122.010191][ T4731] ======================================================= [ 125.138551][ T4796] fuse: Unknown parameter 'use00000000000000000000' [ 125.616686][ T4800] tipc: Started in network mode [ 125.624067][ T4800] tipc: Node identity 4, cluster identity 4711 [ 125.630582][ T4800] tipc: Node number set to 4 [ 125.822061][ T4268] Bluetooth: hci5: command 0x0409 tx timeout [ 126.041402][ T4753] chnl_net:caif_netlink_parms(): no params data found [ 127.214667][ T4753] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.243212][ T4753] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.892079][ T4242] Bluetooth: hci5: command 0x041b tx timeout [ 128.014395][ T4753] device bridge_slave_0 entered promiscuous mode [ 128.063547][ T4753] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.091945][ T4753] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.117997][ T4753] device bridge_slave_1 entered promiscuous mode [ 128.446681][ T4753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.459326][ T4753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.517824][ T4753] team0: Port device team_slave_0 added [ 128.530290][ T4753] team0: Port device team_slave_1 added [ 128.644951][ T4753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.681055][ T4753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.861575][ T4753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.902633][ T4753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.939292][ T4753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.182668][ T4753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.273933][ T5044] fuse: Unknown parameter 'use00000000000000000000' [ 129.397684][ T4753] device hsr_slave_0 entered promiscuous mode [ 129.424820][ T4753] device hsr_slave_1 entered promiscuous mode [ 129.458003][ T4753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.516387][ T4753] Cannot create hsr debugfs directory [ 130.236202][ T4235] Bluetooth: hci5: command 0x040f tx timeout [ 130.816469][ T4753] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 131.001943][ T4753] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 131.037089][ T4753] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 131.055276][ T4753] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 131.075964][ T5151] fuse: Unknown parameter 'fd0x0000000000000009' [ 131.128026][ T5151] process 'syz.0.154' launched './file0/../file0/file0' with NULL argv: empty string added [ 131.221934][ T2304] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 131.340031][ T5164] input: syz0 as /devices/virtual/input/input5 [ 131.455217][ T4753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.741830][ T2304] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.125910][ T2304] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 132.160927][ T2304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.195841][ T2304] usb 3-1: config 0 descriptor?? [ 132.256255][ T2304] pwc: Askey VC010 type 2 USB webcam detected. [ 132.284197][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.313292][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.414640][ T4753] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.450459][ T4242] Bluetooth: hci5: command 0x0419 tx timeout [ 132.691810][ T2304] pwc: recv_control_msg error -32 req 02 val 2b00 [ 132.740618][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.795955][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.935179][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.941944][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.981794][ T2304] pwc: recv_control_msg error -71 req 02 val 2c00 [ 133.080276][ T2304] pwc: recv_control_msg error -71 req 04 val 1000 [ 133.101199][ T5194] fuse: Unknown parameter 'user_i00000000000000000000' [ 133.109808][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.117116][ T4274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.162977][ T2304] pwc: recv_control_msg error -71 req 04 val 1300 [ 133.211894][ T2304] pwc: recv_control_msg error -71 req 04 val 1400 [ 133.223147][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.251976][ T2304] pwc: recv_control_msg error -71 req 02 val 2000 [ 133.314909][ T2304] pwc: recv_control_msg error -71 req 02 val 2100 [ 133.370271][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.378987][ T2304] pwc: recv_control_msg error -71 req 04 val 1500 [ 133.402598][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.441938][ T2304] pwc: recv_control_msg error -71 req 02 val 2500 [ 133.469440][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.476879][ T4322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.493213][ T2304] pwc: recv_control_msg error -71 req 02 val 2400 [ 133.542513][ T2304] pwc: recv_control_msg error -71 req 02 val 2600 [ 133.604686][ T2304] pwc: recv_control_msg error -71 req 02 val 2900 [ 133.612082][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.623216][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.632133][ T2304] pwc: recv_control_msg error -71 req 02 val 2800 [ 133.642400][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.670061][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.684294][ T2304] pwc: recv_control_msg error -71 req 04 val 1100 [ 133.697164][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.727445][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.732331][ T2304] pwc: recv_control_msg error -71 req 04 val 1200 [ 133.763560][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.809823][ T2304] pwc: Registered as video103. [ 133.835508][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.861167][ T2304] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 133.915181][ T4753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.001243][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.094838][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.110220][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.119012][ T2304] usb 3-1: USB disconnect, device number 2 [ 134.132124][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.296375][ T5224] fuse: Unknown parameter 'fd0x0000000000000009' [ 135.687140][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.696161][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.717415][ T4753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.085571][ T5263] fuse: Unknown parameter 'user_i00000000000000000000' [ 137.293152][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.352249][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.511855][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.551948][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.697958][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.719312][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.733015][ T4753] device veth0_vlan entered promiscuous mode [ 137.748112][ T4753] device veth1_vlan entered promiscuous mode [ 138.336775][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 138.916326][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.004631][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.066751][ T4753] device veth0_macvtap entered promiscuous mode [ 139.079454][ T4753] device veth1_macvtap entered promiscuous mode [ 139.106600][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.117512][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.127923][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.139790][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.150959][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.161995][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.173640][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.185143][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.197341][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.208357][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.293241][ T4753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.328898][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.353073][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.391225][ T5325] fuse: Unknown parameter 'user_i00000000000000000000' [ 139.437443][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.502542][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.664744][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.727493][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.758176][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.802023][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.863171][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.892654][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.914699][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.937012][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.957656][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.978773][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.004133][ T4753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.071366][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.116934][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.948894][ T4753] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.985855][ T4753] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.293838][ T4753] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.344995][ T4753] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.842784][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.889235][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.925889][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.952604][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.975230][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.983968][ T4295] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 142.023258][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.362211][ T4295] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.952016][ T4295] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 142.961235][ T4295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.050194][ T4295] usb 5-1: config 0 descriptor?? [ 143.114142][ T4295] pwc: Askey VC010 type 2 USB webcam detected. [ 143.435314][ T5400] fuse: Unknown parameter 'user_id00000000000000000000' [ 143.591751][ T4295] pwc: recv_control_msg error -32 req 02 val 2b00 [ 143.631770][ T4295] pwc: recv_control_msg error -32 req 02 val 2700 [ 143.789110][ T4295] pwc: recv_control_msg error -32 req 02 val 2c00 [ 143.861813][ T4295] pwc: recv_control_msg error -32 req 04 val 1000 [ 144.011817][ T4295] pwc: recv_control_msg error -32 req 04 val 1300 [ 144.733494][ T4295] pwc: recv_control_msg error -32 req 04 val 1400 [ 144.781865][ T4295] pwc: recv_control_msg error -32 req 02 val 2000 [ 145.103056][ T4382] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.406239][ T4382] usb 3-1: Using ep0 maxpacket: 32 [ 145.542545][ T4382] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 145.621587][ T4382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.761755][ T4295] pwc: recv_control_msg error -71 req 04 val 1500 [ 145.787573][ T4295] pwc: recv_control_msg error -71 req 02 val 2500 [ 145.813108][ T4382] usb 3-1: config 0 descriptor?? [ 145.831880][ T4295] pwc: recv_control_msg error -71 req 02 val 2400 [ 146.053153][ T4295] pwc: recv_control_msg error -71 req 02 val 2600 [ 146.102087][ T4382] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 146.388887][ T4382] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 146.435738][ T4382] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 146.452954][ T4382] usb 3-1: media controller created [ 146.471527][ T4382] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.492768][ T4295] pwc: recv_control_msg error -71 req 02 val 2900 [ 146.541753][ T4295] pwc: recv_control_msg error -71 req 02 val 2800 [ 146.583022][ T4295] pwc: recv_control_msg error -71 req 04 val 1100 [ 146.611761][ T4295] pwc: recv_control_msg error -71 req 04 val 1200 [ 146.634815][ T4295] pwc: Registered as video103. [ 146.682049][ T4295] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 147.223323][ T4295] usb 5-1: USB disconnect, device number 2 [ 147.821958][ T4382] stb0899_attach: Driver disabled by Kconfig [ 147.822119][ T4382] az6027: no front-end attached [ 147.822119][ T4382] [ 147.847882][ T4382] az6027: usb out operation failed. (-71) [ 147.848359][ T4382] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 147.873575][ T4382] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 147.906472][ T4382] dvb-usb: schedule remote query interval to 400 msecs. [ 147.906601][ T4382] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 147.960598][ T5472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 147.960667][ T5472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.209'. [ 147.972497][ T4382] usb 3-1: USB disconnect, device number 3 [ 148.345204][ T5472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 148.396594][ T5472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.209'. [ 148.680246][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'. [ 148.963827][ T4382] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 149.652131][ T5515] cgroup: Unknown subsys name 'context' [ 149.796071][ T5520] syz.0.214 uses obsolete (PF_INET,SOCK_PACKET) [ 152.217322][ T5552] fuse: Unknown parameter 'user_id00000000000000000000' [ 152.257451][ T5555] MPTCP: kernel_bind error, err=-98 [ 154.361653][ T5576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 154.376130][ T5576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.225'. [ 154.569940][ T5576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 154.579426][ T5576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.225'. [ 155.391857][ T4295] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 155.932065][ T4295] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 155.941486][ T4295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.388488][ T4295] usb 6-1: Product: syz [ 156.471738][ T4295] usb 6-1: Manufacturer: syz [ 156.502298][ T4295] usb 6-1: SerialNumber: syz [ 156.672879][ T4295] usb 6-1: config 0 descriptor?? [ 156.952070][ T4295] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 156.964810][ T5608] fuse: Bad value for 'fd' [ 159.131853][ T4295] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 159.169394][ T4295] usb 6-1: USB disconnect, device number 2 [ 160.375686][ T5675] fuse: Bad value for 'fd' [ 161.513111][ T5687] netlink: 'syz.0.251': attribute type 10 has an invalid length. [ 162.757444][ T5687] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 164.017253][ T5711] netlink: 'syz.0.256': attribute type 10 has an invalid length. [ 164.025169][ T5711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.035655][ T5711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.179239][ T5711] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 165.551710][ T1110] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 167.101821][ T1110] usb 1-1: Using ep0 maxpacket: 32 [ 167.986232][ T1110] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 168.019499][ T1110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.030730][ T1110] usb 1-1: config 0 descriptor?? [ 168.251943][ T1110] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 168.309269][ T1110] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 169.547465][ T1110] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 171.934548][ T5794] netlink: 'syz.4.270': attribute type 10 has an invalid length. [ 172.050942][ T5794] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 173.731713][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 174.681703][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 174.801948][ T7] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 174.883009][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.956911][ T4608] Set syz1 is full, maxelem 65536 reached [ 174.972907][ T7] usb 5-1: config 0 descriptor?? [ 175.231839][ T7] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 175.273633][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 175.333062][ T7] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 175.368531][ T7] usb 5-1: media controller created [ 175.469358][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.636217][ T4274] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.729748][ T4274] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.839363][ T4274] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.950083][ T4274] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.541763][ T7] stb0899_attach: Driver disabled by Kconfig [ 176.547977][ T7] az6027: no front-end attached [ 176.547977][ T7] [ 176.631756][ T7] az6027: usb out operation failed. (-71) [ 176.678798][ T7] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 176.761843][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 176.858142][ T7] dvb-usb: schedule remote query interval to 400 msecs. [ 176.880989][ T7] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 176.949359][ T7] usb 5-1: USB disconnect, device number 3 [ 177.081821][ T7] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 178.841857][ T1324] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 179.330686][ T1324] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 179.349091][ T1324] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.367905][ T1324] usb 5-1: config 0 has no interface number 0 [ 179.374770][ T1324] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 179.392113][ T1324] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.410081][ T1324] usb 5-1: config 0 interface 52 has no altsetting 0 [ 179.593627][ T1324] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 179.608520][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 179.618203][ T1324] usb 5-1: SerialNumber: syz [ 179.970854][ T1324] usb 5-1: config 0 descriptor?? [ 180.011714][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 180.251676][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 180.259542][ T5981] device batadv_slave_0 entered promiscuous mode [ 180.364800][ T1324] input: USB Synaptics Device 06cb:0003 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input10 [ 180.372274][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.474892][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.505304][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 180.530870][ T7] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 180.541961][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.568672][ T7] usb 3-1: config 0 descriptor?? [ 181.040195][ T4256] usb 5-1: USB disconnect, device number 4 [ 181.160670][ T5980] device batadv_slave_0 left promiscuous mode [ 181.199555][ T6012] netlink: 'syz.3.295': attribute type 10 has an invalid length. [ 181.263891][ T7] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 181.274263][ T6012] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 181.281822][ T7] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 181.290934][ T7] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 181.330259][ T7] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 181.349629][ T7] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 181.489787][ T7] hid-generic 0003:0955:7214.0002: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 181.646411][ T7] usb 3-1: USB disconnect, device number 4 [ 181.686832][ T4274] device hsr_slave_0 left promiscuous mode [ 181.726542][ T4274] device hsr_slave_1 left promiscuous mode [ 181.825767][ T6029] fido_id[6029]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 181.906070][ T6045] netlink: 4580 bytes leftover after parsing attributes in process `syz.3.298'. [ 181.969104][ T4274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.984184][ T4274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.016655][ T4274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.034600][ T4274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.060402][ T4274] device bridge_slave_1 left promiscuous mode [ 182.092135][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.243618][ T4274] device bridge_slave_0 left promiscuous mode [ 182.252902][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.422904][ T4274] device veth1_macvtap left promiscuous mode [ 182.471133][ T4274] device veth0_macvtap left promiscuous mode [ 182.498838][ T4274] device veth1_vlan left promiscuous mode [ 182.540310][ T4274] device veth0_vlan left promiscuous mode [ 184.782785][ T4274] team0 (unregistering): Port device team_slave_1 removed [ 184.838001][ T4274] team0 (unregistering): Port device team_slave_0 removed [ 184.867876][ T4274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.908563][ T4274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.118798][ T4274] bond0 (unregistering): Released all slaves [ 185.812212][ T6101] netlink: 64 bytes leftover after parsing attributes in process `syz.4.306'. [ 188.007326][ T6148] device batadv_slave_0 entered promiscuous mode [ 190.260562][ T6147] device batadv_slave_0 left promiscuous mode [ 191.088211][ T6194] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.320'. [ 194.392095][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.398535][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.584567][ T6234] chnl_net:caif_netlink_parms(): no params data found [ 194.913019][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.961889][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.970246][ T6234] device bridge_slave_0 entered promiscuous mode [ 195.031296][ T6418] device batadv_slave_0 entered promiscuous mode [ 195.082824][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.108643][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.138307][ T6234] device bridge_slave_1 entered promiscuous mode [ 195.274722][ T6234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.338303][ T6234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.411885][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 195.545539][ T6234] team0: Port device team_slave_0 added [ 195.586643][ T6234] team0: Port device team_slave_1 added [ 195.742966][ T6234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.772183][ T6234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.916630][ T6234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.018284][ T6234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.071626][ T6234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.320364][ T6234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.451716][ T4382] Bluetooth: hci0: command 0x0406 tx timeout [ 196.462015][ T4382] Bluetooth: hci4: command 0x0406 tx timeout [ 196.591135][ T6417] device batadv_slave_0 left promiscuous mode [ 196.787683][ T6234] device hsr_slave_0 entered promiscuous mode [ 196.838990][ T6234] device hsr_slave_1 entered promiscuous mode [ 196.899315][ T6234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.944572][ T6234] Cannot create hsr debugfs directory [ 197.185526][ T6538] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 197.232755][ T6538] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 197.491705][ T4382] Bluetooth: hci1: command 0x041b tx timeout [ 197.648224][ T6680] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 197.967702][ T6515] chnl_net:caif_netlink_parms(): no params data found [ 198.014520][ T6234] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 198.245312][ T6234] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 198.612300][ T4268] Bluetooth: hci2: command 0x0409 tx timeout [ 199.405176][ T6234] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 199.438909][ T6234] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 199.743511][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 200.195993][ T6515] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.211940][ T6515] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.250800][ T6515] device bridge_slave_0 entered promiscuous mode [ 200.339459][ T6515] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.359308][ T6515] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.409145][ T6515] device bridge_slave_1 entered promiscuous mode [ 200.594071][ T6515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.671838][ T6234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.691834][ T4268] Bluetooth: hci2: command 0x041b tx timeout [ 200.704841][ T6515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.753390][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.782695][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.862495][ T6234] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.945124][ T6515] team0: Port device team_slave_0 added [ 201.007186][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.042684][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.083655][ T4391] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.091298][ T4391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.172526][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.216966][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.302187][ T4391] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.309994][ T4391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.360118][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.406556][ T6515] team0: Port device team_slave_1 added [ 201.447203][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.622712][ T6515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.644782][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.794132][ T6515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.811887][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 201.862857][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.889252][ T6515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.920927][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.198129][ T6515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.306165][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.347752][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.495695][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.648406][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.673841][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.704253][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.732640][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.772646][ T4382] Bluetooth: hci2: command 0x040f tx timeout [ 202.816639][ T6515] device hsr_slave_0 entered promiscuous mode [ 202.876632][ T6515] device hsr_slave_1 entered promiscuous mode [ 202.921850][ T6515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.952365][ T6515] Cannot create hsr debugfs directory [ 202.964976][ T6234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.017155][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.034725][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.057991][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.205111][ T7030] tipc: Started in network mode [ 204.249917][ T7030] tipc: Node identity 4, cluster identity 4711 [ 204.300031][ T7030] tipc: Node number set to 4 [ 204.355459][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.370879][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.414341][ T6234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.442943][ T6515] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 204.492942][ T6515] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 204.545346][ T6515] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 204.590330][ T6515] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 204.851719][ T4382] Bluetooth: hci2: command 0x0419 tx timeout [ 204.964946][ T6515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.021137][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.059966][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.104564][ T6515] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.156029][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.185588][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.248296][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.255496][ T4274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.312944][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.383369][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.408984][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.450575][ T4385] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.457760][ T4385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.512596][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 205.550019][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 205.580255][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.615075][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.674045][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.712928][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.735620][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.769642][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.809026][ T6234] device veth0_vlan entered promiscuous mode [ 205.839834][ T6515] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.863854][ T6515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.886628][ T7091] sd 0:0:1:0: PR command failed: 2 [ 205.906879][ T7091] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 205.923192][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.930795][ T7091] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 205.942062][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 205.992492][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.030053][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.087959][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.097002][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.105850][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.117738][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.126861][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.136004][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.257321][ T6234] device veth1_vlan entered promiscuous mode [ 206.573218][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 206.657442][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 206.863785][ T6234] device veth0_macvtap entered promiscuous mode [ 207.054635][ T6234] device veth1_macvtap entered promiscuous mode [ 207.183795][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.193225][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.288248][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.331674][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.360095][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.370842][ T7119] ksmbd: Unknown IPC event: 8, ignore. [ 207.401951][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.431639][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.451638][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.471850][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.511701][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.562005][ T6234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.704272][ T6515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.751974][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.802282][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.853584][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.000989][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.011023][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.784106][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.801775][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.826438][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.857121][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.884126][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.901951][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.936046][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.964965][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.995394][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.040792][ T6234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.093082][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.111861][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.150608][ T6234] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.177731][ T6234] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.206116][ T6234] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.237459][ T6234] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.508830][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.534061][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.590486][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.617697][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.658042][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.672148][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.692204][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.722430][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 209.833319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.862627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.881935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.923218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.965932][ T6515] device veth0_vlan entered promiscuous mode [ 210.020473][ T6515] device veth1_vlan entered promiscuous mode [ 210.252124][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 210.283325][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 211.001120][ T6515] device veth0_macvtap entered promiscuous mode [ 211.052350][ T6515] device veth1_macvtap entered promiscuous mode [ 211.085733][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.099817][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.111949][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 211.137717][ T7193] sd 0:0:1:0: PR command failed: 2 [ 211.144869][ T7193] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 211.162676][ T7193] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 211.592454][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.458523][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.565169][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.583740][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.627435][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.688920][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.752347][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.766018][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.806861][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.852491][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.863530][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.993576][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.052555][ T4183] syz-executor (4183) used greatest stack depth: 21088 bytes left [ 213.061088][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.080647][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.196600][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.231694][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.291735][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.336122][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.346988][ T7233] netlink: 64 bytes leftover after parsing attributes in process `syz.2.370'. [ 213.356503][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.367579][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.377891][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.389067][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.399739][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.410832][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.429845][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.495895][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.523373][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.588685][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.622891][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.646100][ T6515] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.671004][ T6515] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.905812][ T6515] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.795707][ T6515] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.904810][ T7257] tipc: Started in network mode [ 214.910002][ T7257] tipc: Node identity 4, cluster identity 4711 [ 215.005877][ T7257] tipc: Node number set to 4 [ 215.699320][ T7272] overlayfs: missing 'lowerdir' [ 215.756922][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.763765][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'. [ 215.800322][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.843682][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.857732][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.875376][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 215.892467][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 216.315680][ T7308] netlink: 4580 bytes leftover after parsing attributes in process `syz.7.332'. [ 219.801751][ T2304] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 220.052123][ T2304] usb 6-1: Using ep0 maxpacket: 32 [ 220.171894][ T2304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.227461][ T2304] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 220.293217][ T2304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.348122][ T2304] usb 6-1: config 0 descriptor?? [ 220.853617][ T2304] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0 [ 220.876505][ T2304] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0 [ 220.908067][ T2304] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0 [ 220.930009][ T2304] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0 [ 220.997780][ T2304] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0 [ 221.097499][ T2304] koneplus 0003:1E7D:2D51.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 221.255006][ T2304] koneplus 0003:1E7D:2D51.0003: couldn't init struct koneplus_device [ 221.308184][ T2304] koneplus 0003:1E7D:2D51.0003: couldn't install mouse [ 221.473276][ T7441] netlink: 128 bytes leftover after parsing attributes in process `syz.6.396'. [ 221.482895][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.6.396'. [ 221.974675][ T2304] koneplus: probe of 0003:1E7D:2D51.0003 failed with error -71 [ 222.052888][ T2304] usb 6-1: USB disconnect, device number 3 [ 222.217185][ T7451] fido_id[7451]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 223.947954][ T7482] netlink: 16 bytes leftover after parsing attributes in process `syz.6.402'. [ 223.986176][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.402'. [ 224.152451][ T7482] netlink: 100 bytes leftover after parsing attributes in process `syz.6.402'. [ 228.163155][ T7569] input: syz1 as /devices/virtual/input/input12 [ 229.051658][ T4300] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 229.372020][ T4300] usb 4-1: Using ep0 maxpacket: 16 [ 229.732496][ T4300] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 229.873541][ T4300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.053074][ T4300] usb 4-1: Product: syz [ 230.124987][ T4300] usb 4-1: Manufacturer: syz [ 230.221049][ T4300] usb 4-1: SerialNumber: syz [ 230.271256][ T1110] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 230.300284][ T4300] usb 4-1: config 0 descriptor?? [ 230.304179][ T1110] dvb_usb_az6027: probe of 1-1:0.0 failed with error -110 [ 230.391831][ T1110] usb 1-1: USB disconnect, device number 4 [ 230.802899][ T4300] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 230.828217][ T4300] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 230.902118][ T4300] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 231.047390][ T7592] dtv5100: wlen = 0, aborting. [ 231.073081][ T4300] usb 4-1: media controller created [ 231.853768][ T4300] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.038997][ T4300] zl10353_read_register: readreg error (reg=127, ret==0) [ 232.113591][ T4300] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 232.286558][ T4300] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 232.383500][ T4300] usb 4-1: USB disconnect, device number 4 [ 232.468860][ T4300] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 235.251937][ T4300] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 235.672216][ T4300] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.756904][ T4300] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 235.909291][ T4300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.694340][ T4300] usb 3-1: config 0 descriptor?? [ 238.882975][ T4300] usb 3-1: can't set config #0, error -71 [ 238.925085][ T4300] usb 3-1: USB disconnect, device number 5 [ 240.098851][ T7808] input: syz1 as /devices/virtual/input/input13 [ 244.438564][ T7886] input: syz1 as /devices/virtual/input/input14 [ 244.716995][ T7903] tipc: Started in network mode [ 246.394174][ T7903] tipc: Node identity 4, cluster identity 4711 [ 246.400916][ T7903] tipc: Node number set to 4 [ 247.416174][ T4249] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 247.942288][ T4249] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 248.015411][ T4249] usb 4-1: config 1 has no interface number 0 [ 248.155898][ T4249] usb 4-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 248.156195][ T4249] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 248.311585][ C1] sched: RT throttling activated [ 248.342113][ T4249] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 249.881702][ T4249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.979643][ T4249] usb 4-1: Product: syz [ 250.011485][ T4249] usb 4-1: Manufacturer: syz [ 250.067204][ T4249] usb 4-1: SerialNumber: syz [ 250.109362][ T4256] Bluetooth: hci3: command 0x0406 tx timeout [ 250.131849][ T4249] usb 4-1: can't set config #1, error -71 [ 250.178546][ T4249] usb 4-1: USB disconnect, device number 5 [ 250.305482][ T4257] Bluetooth: hci5: command 0x0406 tx timeout [ 255.862126][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.869698][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.001815][ T4300] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 257.281731][ T4300] usb 4-1: Using ep0 maxpacket: 8 [ 257.611922][ T4300] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 257.629957][ T4300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.740124][ T4300] usb 4-1: Product: syz [ 257.758674][ T4300] usb 4-1: Manufacturer: syz [ 257.774184][ T4300] usb 4-1: SerialNumber: syz [ 257.803898][ T4300] usb 4-1: config 0 descriptor?? [ 258.072129][ T4300] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 259.491927][ T4300] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 259.517490][ T4300] usb 4-1: USB disconnect, device number 6 [ 259.699579][ T8078] netlink: 'syz.2.499': attribute type 1 has an invalid length. [ 260.121905][ T8078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.338832][ T8090] bond1: (slave geneve2): making interface the new active one [ 260.390587][ T8090] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 260.409212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 260.418428][ T8090] syz.2.499 (8090) used greatest stack depth: 20096 bytes left [ 260.738669][ T4300] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 261.371739][ T4300] usb 8-1: Using ep0 maxpacket: 16 [ 261.498803][ T4300] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.541060][ T4300] usb 8-1: config 0 has no interfaces? [ 261.712003][ T4300] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 261.741708][ T4300] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.750985][ T4300] usb 8-1: Product: syz [ 261.781842][ T4300] usb 8-1: Manufacturer: syz [ 261.786530][ T4300] usb 8-1: SerialNumber: syz [ 261.831925][ T4300] usb 8-1: config 0 descriptor?? [ 262.163062][ T4300] usb 8-1: USB disconnect, device number 2 [ 265.505995][ T8229] MPTCP: kernel_bind error, err=-98 [ 269.883105][ T8296] device syzkaller0 entered promiscuous mode [ 273.697717][ T8364] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 273.732417][ T8364] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 274.638571][ T8379] tipc: Started in network mode [ 274.657312][ T8379] tipc: Node identity 4, cluster identity 4711 [ 274.758005][ T8379] tipc: Node number set to 4 [ 278.012825][ T8432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.569'. [ 278.327845][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.571'. [ 278.336826][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.571'. [ 278.347447][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.571'. [ 278.356816][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.571'. [ 279.081627][ T1110] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 279.093519][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.575'. [ 279.672039][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.7.578'. [ 280.426470][ T8462] device syzkaller0 entered promiscuous mode [ 280.452323][ T1110] usb 4-1: Using ep0 maxpacket: 32 [ 281.251642][ T1324] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 281.477632][ T1110] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 281.507411][ T1110] usb 4-1: config 0 has no interface number 0 [ 281.583383][ T1110] usb 4-1: string descriptor 0 read error: -71 [ 281.597603][ T1110] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 281.685881][ T1324] usb 8-1: Using ep0 maxpacket: 16 [ 282.411886][ T1324] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.426066][ T1324] usb 8-1: config 0 has no interfaces? [ 282.427111][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.654519][ T1324] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 282.682907][ T1324] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.720160][ T1324] usb 8-1: Product: syz [ 282.743694][ T1324] usb 8-1: Manufacturer: syz [ 282.763464][ T1324] usb 8-1: SerialNumber: syz [ 282.794718][ T1324] usb 8-1: config 0 descriptor?? [ 282.937085][ T1110] usb 4-1: config 0 descriptor?? [ 282.972241][ T1110] usb 4-1: can't set config #0, error -71 [ 283.001666][ T1110] usb 4-1: USB disconnect, device number 7 [ 285.477385][ T1324] usb 8-1: USB disconnect, device number 3 [ 290.125358][ T8609] comedi comedi0: comedi_config --init_data is deprecated [ 292.859039][ T8671] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 292.982167][ T7841] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 293.518661][ T8680] 9p: Unknown Cache mode readahead [ 294.121828][ T7841] usb 6-1: config index 0 descriptor too short (expected 7768, got 18) [ 294.130119][ T7841] usb 6-1: config 0 has an invalid interface number: 97 but max is 0 [ 294.139281][ T7841] usb 6-1: config 0 has no interface number 0 [ 294.146124][ T7841] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 294.156619][ T7841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.260925][ T7841] usb 6-1: config 0 descriptor?? [ 296.023885][ T7841] ftdi_sio 6-1:0.97: FTDI USB Serial Device converter detected [ 296.472233][ T7841] usb 6-1: Detected FT-X [ 296.511864][ T7841] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 296.593761][ T7841] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 296.672112][ T7841] ftdi_sio 6-1:0.97: GPIO initialisation failed: -71 [ 296.723741][ T7841] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 296.786777][ T7841] usb 6-1: USB disconnect, device number 4 [ 296.995666][ T7841] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 297.028114][ T7841] ftdi_sio 6-1:0.97: device disconnected [ 299.594336][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'. [ 299.603854][ T8755] netlink: 24 bytes leftover after parsing attributes in process `syz.3.633'. [ 299.723644][ T8749] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 300.220033][ T8749] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 309.025209][ T8909] MPTCP: kernel_bind error, err=-98 [ 309.504114][ T8908] netlink: 'syz.6.664': attribute type 2 has an invalid length. [ 315.134467][ T8996] MPTCP: kernel_bind error, err=-98 [ 317.255411][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.272073][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.660726][ T9054] MPTCP: kernel_bind error, err=-98 [ 319.376188][ T4256] Bluetooth: hci1: command 0x0406 tx timeout [ 323.432025][ T4256] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 324.121886][ T4256] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 324.161661][ T4256] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.200658][ T4256] usb 7-1: Product: syz [ 324.205248][ T4256] usb 7-1: Manufacturer: syz [ 324.209875][ T4256] usb 7-1: SerialNumber: syz [ 324.319330][ T4256] usb 7-1: config 0 descriptor?? [ 324.375380][ T4256] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 324.795351][ T4382] usb 7-1: USB disconnect, device number 2 [ 324.880745][ T9122] MPTCP: kernel_bind error, err=-98 [ 330.948459][ T9199] kAFS: No cell specified [ 336.361932][ T9260] MPTCP: kernel_bind error, err=-98 [ 343.146252][ T9314] program syz.5.745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.630684][ T9323] MPTCP: kernel_bind error, err=-98 [ 351.318442][ T9390] MPTCP: kernel_bind error, err=-98 [ 357.913490][ T9457] MPTCP: kernel_bind error, err=-98 [ 358.545778][ T9470] sd 0:0:1:0: device reset [ 365.678320][ T9536] MPTCP: kernel_bind error, err=-98 [ 373.374642][ T9592] MPTCP: kernel_bind error, err=-98 [ 377.747526][ T9665] MPTCP: kernel_bind error, err=-98 [ 379.041148][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.055401][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.952274][ T1324] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 380.561717][ T1324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.581693][ T1324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.607940][ T1324] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 380.651584][ T1324] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 380.660692][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.701064][ T1324] usb 3-1: config 0 descriptor?? [ 381.005930][ T9725] MPTCP: kernel_bind error, err=-98 [ 381.363772][ T1324] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 381.644206][ T1324] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 382.940279][ T7473] usb 3-1: USB disconnect, device number 6 [ 386.936921][ T9805] MPTCP: kernel_bind error, err=-98 [ 390.704537][ T9848] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 390.765734][ T9848] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 399.083148][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.6.886'. [ 401.651314][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.7.898'. [ 403.249125][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.907'. [ 403.655370][T10031] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.665133][T10031] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.674179][T10031] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.683288][T10031] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.161633][ T4382] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 405.301682][ T1110] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 405.451642][ T4382] usb 6-1: Using ep0 maxpacket: 32 [ 405.581830][ T4382] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 405.610509][ T4382] usb 6-1: config 0 has no interface number 0 [ 405.617399][ T4382] usb 6-1: config 0 interface 184 has no altsetting 0 [ 405.679830][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.700821][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.719171][ T1110] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 405.728949][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.780917][ T1110] usb 3-1: config 0 descriptor?? [ 405.823046][ T4382] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 405.836749][ T4382] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.000879][ T4382] usb 6-1: Product: syz [ 406.009885][ T4382] usb 6-1: Manufacturer: syz [ 406.019056][ T4382] usb 6-1: SerialNumber: syz [ 406.050510][ T4382] usb 6-1: config 0 descriptor?? [ 406.185263][ T4382] smsc75xx v1.0.0 [ 406.716318][ T1110] elo 0003:04E7:0030.0005: item fetching failed at offset 5/7 [ 406.742894][ T1110] elo 0003:04E7:0030.0005: parse failed [ 406.751930][ T1110] elo: probe of 0003:04E7:0030.0005 failed with error -22 [ 406.924733][T10048] udc-core: couldn't find an available UDC or it's busy [ 406.962174][T10048] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 407.002608][ T1110] usb 3-1: USB disconnect, device number 7 [ 407.334430][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.919'. [ 408.479706][ T4382] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 408.491479][ T4382] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 408.521691][ T4382] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 408.541660][ T4382] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 408.560306][ T4382] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 408.599453][ T4382] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 408.627988][ T4382] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 408.648514][ T4382] usb 6-1: USB disconnect, device number 5 [ 410.593543][T10146] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 410.611828][T10146] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 410.855607][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'. [ 412.052214][ T8548] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 412.391768][ T1110] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 413.656596][ T8548] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 413.681606][ T8548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.711110][ T8548] usb 3-1: Product: syz [ 413.811875][ T1110] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 413.885926][ T8548] usb 3-1: Manufacturer: syz [ 413.890862][ T8548] usb 3-1: SerialNumber: syz [ 413.911952][ T1110] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.932041][ T1110] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 413.953296][ T8548] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 413.960053][ T1110] usb 4-1: config 0 interface 0 has no altsetting 0 [ 414.082276][ T1110] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.102919][ T1110] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 414.131676][ T1110] usb 4-1: config 0 interface 0 has no altsetting 0 [ 414.281763][ T1110] usb 4-1: unable to read config index 2 descriptor/all [ 414.291148][ T1110] usb 4-1: can't read configurations, error -71 [ 414.477306][T10205] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 414.640377][ T4300] usb 3-1: USB disconnect, device number 8 [ 414.652224][T10205] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 414.661798][ T8548] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 414.692170][ T4300] usb 3-1: ath9k_htc: USB layer deinitialized [ 418.381956][T10278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.958'. [ 424.028826][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'. [ 426.107284][ T1324] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 426.993107][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 427.011907][ T1324] usb 6-1: Using ep0 maxpacket: 16 [ 427.132133][ T1324] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.151187][ T1324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 427.179125][ T1324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 427.282721][ T1324] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 427.293095][ T1324] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.481738][ T1324] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 427.509530][ T1324] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 429.015829][ T1324] usb 6-1: Manufacturer: syz [ 429.049821][ T1324] usb 6-1: config 0 descriptor?? [ 429.083424][ T1324] usb 6-1: can't set config #0, error -71 [ 429.127106][ T1324] usb 6-1: USB disconnect, device number 6 [ 436.253879][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.6.996'. [ 439.021756][ T4242] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 439.982148][ T4242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.040415][ T4242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.081454][ T4242] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 440.121612][ T4242] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 440.134858][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.141736][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.192569][ T4242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.242573][ T4242] usb 4-1: config 0 descriptor?? [ 441.349773][ T4242] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 441.381930][ T4242] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 442.827764][ T4242] usb 4-1: USB disconnect, device number 10 [ 444.223041][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1015'. [ 446.194818][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1019'. [ 446.851637][ T9071] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 447.381810][ T9071] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 447.398818][ T9071] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.409721][ T9071] usb 7-1: Product: syz [ 447.422434][ T9071] usb 7-1: Manufacturer: syz [ 447.427187][ T9071] usb 7-1: SerialNumber: syz [ 448.623106][ T4242] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 448.686742][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1029'. [ 448.696130][T10615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1029'. [ 449.382065][ T9071] cdc_ncm 7-1:1.0: failed to get mac address [ 449.402078][ T9071] cdc_ncm 7-1:1.0: bind() failure [ 450.262501][ T9071] cdc_ncm: probe of 7-1:1.1 failed with error -71 [ 450.271818][ T4242] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.292181][ T4242] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.311622][ T9071] cdc_mbim: probe of 7-1:1.1 failed with error -71 [ 450.327985][ T4242] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 450.341819][ T9071] usbtest: probe of 7-1:1.1 failed with error -71 [ 450.358170][ T9071] usb 7-1: USB disconnect, device number 3 [ 450.364533][ T4242] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 450.377445][ T4242] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.406480][ T4242] usb 8-1: config 0 descriptor?? [ 450.726009][T10663] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1033'. [ 451.421698][ T4242] usbhid 8-1:0.0: can't add hid device: -71 [ 451.427884][ T4242] usbhid: probe of 8-1:0.0 failed with error -71 [ 452.185748][ T4242] usb 8-1: USB disconnect, device number 4 [ 457.022518][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1051'. [ 458.572026][T10717] delete_channel: no stack [ 459.015137][T10791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'. [ 459.841664][ T8548] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 460.134045][ T8548] usb 6-1: Using ep0 maxpacket: 8 [ 460.425663][ T8548] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 460.436968][ T8548] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 460.447549][ T8548] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 460.457966][ T8548] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.471954][ T8548] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 460.481047][ T8548] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.281793][ T8548] usb 6-1: GET_CAPABILITIES returned 0 [ 461.287393][ T8548] usbtmc 6-1:16.0: can't read capabilities [ 461.506076][ T8548] usb 6-1: USB disconnect, device number 7 [ 461.552452][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 461.611762][ T4300] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 462.421692][ T4300] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 462.544623][ T4300] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.562398][ T4300] usb 8-1: Product: syz [ 462.567571][ T4300] usb 8-1: Manufacturer: syz [ 462.781261][ T4300] usb 8-1: SerialNumber: syz [ 464.931733][ T4300] cdc_ncm 8-1:1.0: bind() failure [ 464.965916][ T4300] cdc_ncm: probe of 8-1:1.1 failed with error -71 [ 465.982731][ T4300] cdc_mbim: probe of 8-1:1.1 failed with error -71 [ 466.074343][ T4300] usbtest: probe of 8-1:1.1 failed with error -71 [ 466.137679][ T4300] usb 8-1: USB disconnect, device number 5 [ 468.422435][T10941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1094'. [ 468.432047][T10941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1094'. [ 471.498929][T10952] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 471.521882][T10952] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 472.878012][T11008] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 472.897143][T11008] ubi31: attaching mtd0 [ 472.915880][T11008] ubi31: scanning is finished [ 472.920675][T11008] ubi31: empty MTD device detected [ 473.430552][T11008] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 484.611580][T11193] overlayfs: missing 'lowerdir' [ 500.151677][T11455] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1190'. [ 501.576258][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.582849][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.291842][ T4295] Bluetooth: hci0: command 0x0409 tx timeout [ 502.914864][T11449] chnl_net:caif_netlink_parms(): no params data found [ 504.616345][T11449] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.702017][ T7473] Bluetooth: hci0: command 0x041b tx timeout [ 504.815890][T11449] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.824490][T11449] device bridge_slave_0 entered promiscuous mode [ 504.833235][T11449] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.840406][T11449] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.869263][T11449] device bridge_slave_1 entered promiscuous mode [ 505.876273][T11449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.989047][T11449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.889602][ T7473] Bluetooth: hci0: command 0x040f tx timeout [ 506.979098][ T4295] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 506.998493][T11449] team0: Port device team_slave_0 added [ 507.064516][T11449] team0: Port device team_slave_1 added [ 507.185600][T11449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.201515][T11449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.227995][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.235362][T11769] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 507.392492][ T4295] usb 4-1: config 9 has an invalid interface number: 51 but max is 0 [ 507.453103][ T4295] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 507.562230][ T4295] usb 4-1: config 9 has no interface number 0 [ 507.651030][ T4295] usb 4-1: config 9 interface 51 altsetting 2 endpoint 0xC has invalid wMaxPacketSize 0 [ 507.707501][ T4295] usb 4-1: config 9 interface 51 has no altsetting 0 [ 507.947069][ T4295] usb 4-1: New USB device found, idVendor=0499, idProduct=1001, bcdDevice=c4.19 [ 507.967448][ T4295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.000032][T11449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.014436][T11449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.021915][T11449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.030147][ T4295] usb 4-1: Product: syz [ 508.048564][T11449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.081529][ T4295] usb 4-1: Manufacturer: syz [ 508.091949][ T4295] usb 4-1: SerialNumber: syz [ 508.254937][T11449] device hsr_slave_0 entered promiscuous mode [ 508.262254][T11449] device hsr_slave_1 entered promiscuous mode [ 508.269112][T11449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.284250][T11449] Cannot create hsr debugfs directory [ 508.945836][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 509.726123][ T4295] snd-usb-audio: probe of 4-1:9.51 failed with error -2 [ 509.813443][ T4295] usb 4-1: USB disconnect, device number 11 [ 509.857255][ T9742] udevd[9742]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:9.51/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.047792][T11449] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 510.080563][T11449] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 510.119837][T11449] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 510.141634][T11143] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 510.153182][T11449] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 510.460843][T11449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.511842][T11143] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.529905][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 510.530591][T11143] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.539473][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 510.567797][T11143] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 510.570497][T11449] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.592052][T11143] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.599471][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 510.619909][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 510.637928][T11143] usb 8-1: config 0 descriptor?? [ 510.638597][ T4391] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.650273][ T4391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.719012][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 510.732178][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 510.752335][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 510.764493][ T4391] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.771642][ T4391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.779667][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 510.830563][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 510.861321][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 510.884674][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 510.903066][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 510.916273][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 510.925739][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 510.935217][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 510.946067][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 510.964306][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 510.993246][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 511.018881][T11449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 511.123422][T11143] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 511.151863][T11143] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 511.192742][T11143] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0D8C:0022.0007/input/input16 [ 511.226443][T11143] cm6533_jd 0003:0D8C:0022.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 511.309791][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 511.330083][ T4242] usb 8-1: USB disconnect, device number 6 [ 511.332110][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 511.357728][T11449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.370513][T11940] fido_id[11940]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 511.535543][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 511.545106][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 511.564900][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 511.577363][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 511.586211][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 511.595712][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 511.606875][T11449] device veth0_vlan entered promiscuous mode [ 511.632330][T11449] device veth1_vlan entered promiscuous mode [ 511.651934][ T21] Bluetooth: hci0: command 0x0405 tx timeout [ 511.662673][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 511.670868][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 511.679657][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 511.688675][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 511.701493][T11449] device veth0_macvtap entered promiscuous mode [ 511.716348][T11449] device veth1_macvtap entered promiscuous mode [ 511.734246][T11449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.746699][T11449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.757541][T11449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.768234][T11449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.778279][T11449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.789023][T11449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.799148][T11449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.810018][T11449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.824104][T11449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.835093][T11449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.845243][T11449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.859755][T11449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.894680][T11449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.916540][T11449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.941152][T11449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.962869][T11449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.990192][T11449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.004434][T11449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.081582][T11449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.101579][T11449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.120545][T11449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.246375][T11449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.268976][T11449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.694876][T11449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.710357][T11449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.811819][T11449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.831347][T11449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.964734][T11449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.173167][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 513.193647][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 513.259773][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 513.324888][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 513.375652][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 513.384682][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 513.501860][T11449] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.521793][T11449] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.530744][T11449] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.539548][T11449] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.779856][ T4383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.810096][ T4383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.833040][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 513.889045][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.919629][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.950791][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 516.847036][T12083] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 516.883680][T12083] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 526.586660][T12230] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 526.594928][T12230] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 527.239606][T12226] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 527.351629][T12226] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 533.931714][ T13] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 534.551950][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 534.751615][ T13] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 534.821759][ T13] usb 4-1: config 0 has no interface number 0 [ 535.896649][ T13] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 535.929943][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.013453][ T13] usb 4-1: Product: syz [ 536.017788][ T13] usb 4-1: Manufacturer: syz [ 536.060268][ T13] usb 4-1: SerialNumber: syz [ 536.093137][ T13] usb 4-1: config 0 descriptor?? [ 536.155699][ T13] redrat3 4-1:0.31: Couldn't find all endpoints [ 536.359907][ T13] usb 4-1: USB disconnect, device number 12 [ 540.222066][ T4191] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 540.735862][T12410] sp0: Synchronizing with TNC [ 541.307472][T12465] MPTCP: kernel_bind error, err=-98 [ 543.294111][T12477] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1311'. [ 544.964809][T12529] ksmbd: Unknown IPC event: 8, ignore. [ 545.215391][T12529] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1322'. [ 549.441580][T11143] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 549.586775][T12626] futex_wake_op: syz.8.1342 tries to shift op by -1; fix this program [ 549.732318][T11143] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 549.816235][T11143] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 549.847489][T11143] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 550.092985][T11143] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 550.350461][T11143] usb 6-1: config 0 interface 0 has no altsetting 0 [ 550.541665][T11143] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 550.598269][T11143] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 550.661064][T11143] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 550.691372][T11143] usb 6-1: config 0 interface 0 has no altsetting 0 [ 550.861811][T11143] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 550.871888][T11143] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 550.883918][T11143] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 551.261709][T11143] usb 6-1: config 0 interface 0 has no altsetting 0 [ 551.352391][T11143] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.390562][T11143] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.522131][T11143] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 551.541505][T11143] usb 6-1: config 0 interface 0 has no altsetting 0 [ 551.801086][T11143] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 552.676359][T11143] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 552.688646][T11143] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 552.699571][T11143] usb 6-1: config 0 interface 0 has no altsetting 0 [ 552.916843][T12662] MPTCP: kernel_bind error, err=-98 [ 553.182034][T11143] usb 6-1: unable to read config index 5 descriptor/start: -71 [ 553.217979][T11143] usb 6-1: can't read configurations, error -71 [ 554.193779][T12691] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 554.358873][T12691] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 554.781621][ T7473] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 555.232757][T12677] tipc: Started in network mode [ 555.274752][T12677] tipc: Node identity 4, cluster identity 4711 [ 555.293717][T12677] tipc: Node number set to 4 [ 555.415442][ T7473] usb 7-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 555.440992][ T7473] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.482281][ T7473] usb 7-1: Product: syz [ 556.227121][ T7473] usb 7-1: Manufacturer: syz [ 556.232109][ T7473] usb 7-1: SerialNumber: syz [ 556.251340][ T7473] usb 7-1: config 0 descriptor?? [ 556.325315][ T7473] go7007: probe of 7-1:0.0 failed with error -12 [ 557.686572][ T4268] usb 7-1: USB disconnect, device number 4 [ 558.433209][ T9071] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 559.010497][T12764] MPTCP: kernel_bind error, err=-98 [ 559.172051][ T9071] usb 6-1: config 0 has an invalid interface number: 95 but max is 0 [ 559.694641][ T9071] usb 6-1: config 0 has no interface number 0 [ 559.701035][ T9071] usb 6-1: config 0 interface 95 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 559.722117][ T9071] usb 6-1: config 0 interface 95 altsetting 0 bulk endpoint 0xD has invalid maxpacket 16 [ 559.891916][ T9071] usb 6-1: New USB device found, idVendor=10b5, idProduct=ac70, bcdDevice=27.ee [ 559.926743][ T9071] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.961567][ T9071] usb 6-1: Product: syz [ 559.972413][ T9071] usb 6-1: Manufacturer: syz [ 559.982102][ T9071] usb 6-1: SerialNumber: syz [ 560.012871][ T9071] usb 6-1: config 0 descriptor?? [ 560.031776][T12749] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 560.041710][T12749] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 560.092727][ T9071] cp210x 6-1:0.95: cp210x converter detected [ 560.311694][ T9071] cp210x 6-1:0.95: failed to get vendor val 0x370b size 1: -71 [ 560.322114][ T9071] cp210x 6-1:0.95: querying part number failed [ 560.345163][ T9071] usb 6-1: cp210x converter now attached to ttyUSB0 [ 560.393779][ T9071] usb 6-1: USB disconnect, device number 10 [ 560.426343][ T9071] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 560.469730][ T9071] cp210x 6-1:0.95: device disconnected [ 562.763983][T12848] MPTCP: kernel_bind error, err=-98 [ 563.028392][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.040108][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.686187][ T26] audit: type=1800 audit(1755897510.006:2): pid=12860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1383" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 564.707751][T12860] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 564.754113][T12860] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 564.800924][T12860] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 564.851075][T12881] tmpfs: Unknown parameter 'usrquota' [ 564.919377][T12860] syz.3.1383 (12860) used greatest stack depth: 18400 bytes left [ 566.503273][T12905] hub 9-0:1.0: USB hub found [ 566.515157][T12905] hub 9-0:1.0: 1 port detected [ 569.983783][T12949] futex_wake_op: syz.6.1401 tries to shift op by 36; fix this program [ 572.357223][ T4235] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 572.455232][ T4235] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 572.970796][T12978] fido_id[12978]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 576.141833][T13051] [ 576.144481][T13051] ====================================================== [ 576.151757][T13051] WARNING: possible circular locking dependency detected [ 576.158895][T13051] 5.15.189-syzkaller #0 Not tainted [ 576.164139][T13051] ------------------------------------------------------ [ 576.171550][T13051] syz.3.1423/13051 is trying to acquire lock: [ 576.177731][T13051] ffff8880781ecc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 576.189137][T13051] [ 576.189137][T13051] but task is already holding lock: [ 576.196652][T13051] ffffffff8d4be228 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 576.206322][T13051] [ 576.206322][T13051] which lock already depends on the new lock. [ 576.206322][T13051] [ 576.216920][T13051] [ 576.216920][T13051] the existing dependency chain (in reverse order) is: [ 576.226021][T13051] [ 576.226021][T13051] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 576.234042][T13051] __mutex_lock_common+0x1eb/0x2390 [ 576.239901][T13051] mutex_lock_nested+0x17/0x20 [ 576.245396][T13051] rfkill_register+0x33/0x8a0 [ 576.250732][T13051] hci_register_dev+0x452/0x970 [ 576.256226][T13051] vhci_create_device+0x32c/0x5c0 [ 576.262060][T13051] vhci_write+0x391/0x450 [ 576.267059][T13051] vfs_write+0x712/0xd00 [ 576.271833][T13051] ksys_write+0x14d/0x250 [ 576.276700][T13051] do_syscall_64+0x4c/0xa0 [ 576.281656][T13051] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 576.288113][T13051] [ 576.288113][T13051] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 576.296047][T13051] __mutex_lock_common+0x1eb/0x2390 [ 576.302133][T13051] mutex_lock_nested+0x17/0x20 [ 576.307538][T13051] vhci_send_frame+0x88/0x100 [ 576.312750][T13051] hci_send_frame+0x1a9/0x2e0 [ 576.317971][T13051] hci_tx_work+0x9f9/0x1710 [ 576.323056][T13051] process_one_work+0x863/0x1000 [ 576.328796][T13051] worker_thread+0xaa8/0x12a0 [ 576.334096][T13051] kthread+0x436/0x520 [ 576.338726][T13051] ret_from_fork+0x1f/0x30 [ 576.343719][T13051] [ 576.343719][T13051] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 576.353716][T13051] __flush_work+0xdd/0x1b0 [ 576.358686][T13051] hci_dev_do_close+0x1e7/0x1030 [ 576.364270][T13051] hci_unregister_dev+0x2d7/0x580 [ 576.364304][T13051] vhci_release+0x73/0xc0 [ 576.374951][T13051] __fput+0x234/0x930 [ 576.379616][T13051] task_work_run+0x125/0x1a0 [ 576.384741][T13051] do_exit+0x61e/0x20a0 [ 576.389436][T13051] do_group_exit+0x12e/0x300 [ 576.394557][T13051] get_signal+0x6ca/0x12c0 [ 576.399516][T13051] arch_do_signal_or_restart+0xc1/0x1300 [ 576.405861][T13051] exit_to_user_mode_loop+0x9e/0x130 [ 576.411773][T13051] exit_to_user_mode_prepare+0xb1/0x140 [ 576.417859][T13051] syscall_exit_to_user_mode+0x16/0x40 [ 576.424125][T13051] do_syscall_64+0x58/0xa0 [ 576.429415][T13051] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 576.436099][T13051] [ 576.436099][T13051] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 576.443746][T13051] __mutex_lock_common+0x1eb/0x2390 [ 576.449808][T13051] mutex_lock_nested+0x17/0x20 [ 576.455199][T13051] bg_scan_update+0x44/0x3b0 [ 576.460420][T13051] process_one_work+0x863/0x1000 [ 576.465889][T13051] worker_thread+0xaa8/0x12a0 [ 576.471103][T13051] kthread+0x436/0x520 [ 576.475806][T13051] ret_from_fork+0x1f/0x30 [ 576.481174][T13051] [ 576.481174][T13051] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 576.491005][T13051] __lock_acquire+0x2c33/0x7c60 [ 576.496777][T13051] lock_acquire+0x197/0x3f0 [ 576.501944][T13051] __flush_work+0xdd/0x1b0 [ 576.507005][T13051] __cancel_work_timer+0x3ac/0x520 [ 576.512655][T13051] hci_request_cancel_all+0xcc/0x300 [ 576.518461][T13051] hci_dev_do_close+0x4e/0x1030 [ 576.524105][T13051] hci_rfkill_set_block+0x10a/0x190 [ 576.530027][T13051] rfkill_set_block+0x1c6/0x420 [ 576.535402][T13051] rfkill_fop_write+0x458/0x560 [ 576.540801][T13051] vfs_write+0x300/0xd00 [ 576.545567][T13051] ksys_write+0x14d/0x250 [ 576.550416][T13051] do_syscall_64+0x4c/0xa0 [ 576.555440][T13051] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 576.562255][T13051] [ 576.562255][T13051] other info that might help us debug this: [ 576.562255][T13051] [ 576.572911][T13051] Chain exists of: [ 576.572911][T13051] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 576.572911][T13051] [ 576.588642][T13051] Possible unsafe locking scenario: [ 576.588642][T13051] [ 576.596213][T13051] CPU0 CPU1 [ 576.601589][T13051] ---- ---- [ 576.607444][T13051] lock(rfkill_global_mutex); [ 576.612217][T13051] lock(&data->open_mutex); [ 576.619801][T13051] lock(rfkill_global_mutex); [ 576.627177][T13051] lock((work_completion)(&hdev->bg_scan_update)); [ 576.634119][T13051] [ 576.634119][T13051] *** DEADLOCK *** [ 576.634119][T13051] [ 576.642451][T13051] 1 lock held by syz.3.1423/13051: [ 576.647834][T13051] #0: ffffffff8d4be228 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 576.658210][T13051] [ 576.658210][T13051] stack backtrace: [ 576.664700][T13051] CPU: 1 PID: 13051 Comm: syz.3.1423 Not tainted 5.15.189-syzkaller #0 [ 576.673059][T13051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 576.683353][T13051] Call Trace: [ 576.686649][T13051] [ 576.689580][T13051] dump_stack_lvl+0x168/0x230 [ 576.694376][T13051] ? load_image+0x3b0/0x3b0 [ 576.698889][T13051] ? show_regs_print_info+0x20/0x20 [ 576.704235][T13051] ? print_circular_bug+0x12b/0x1a0 [ 576.709547][T13051] check_noncircular+0x274/0x310 [ 576.714638][T13051] ? add_chain_block+0x940/0x940 [ 576.719982][T13051] ? lockdep_lock+0xdc/0x1e0 [ 576.724963][T13051] ? __lock_acquire+0x12d9/0x7c60 [ 576.730042][T13051] ? mark_lock+0x94/0x320 [ 576.734413][T13051] __lock_acquire+0x2c33/0x7c60 [ 576.739491][T13051] ? mark_lock+0x94/0x320 [ 576.744171][T13051] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 576.750657][T13051] ? verify_lock_unused+0x140/0x140 [ 576.755979][T13051] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 576.761819][T13051] lock_acquire+0x197/0x3f0 [ 576.766327][T13051] ? __flush_work+0xc1/0x1b0 [ 576.770926][T13051] ? __lock_acquire+0x7c60/0x7c60 [ 576.776064][T13051] ? read_lock_is_recursive+0x10/0x10 [ 576.781449][T13051] ? start_flush_work+0x776/0x820 [ 576.786485][T13051] __flush_work+0xdd/0x1b0 [ 576.790914][T13051] ? __flush_work+0xc1/0x1b0 [ 576.795698][T13051] ? flush_work+0x20/0x20 [ 576.800050][T13051] ? try_to_grab_pending+0xf3/0x7e0 [ 576.805273][T13051] ? lockdep_hardirqs_off+0x70/0x100 [ 576.810875][T13051] ? mark_lock+0x94/0x320 [ 576.815446][T13051] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 576.821616][T13051] ? lock_chain_count+0x20/0x20 [ 576.826557][T13051] ? mark_lock+0x94/0x320 [ 576.830891][T13051] ? __cancel_work_timer+0x331/0x520 [ 576.836339][T13051] __cancel_work_timer+0x3ac/0x520 [ 576.841516][T13051] ? cancel_work_sync+0x20/0x20 [ 576.846385][T13051] ? __cancel_work+0x1f4/0x2d0 [ 576.851168][T13051] ? lockdep_hardirqs_on+0x94/0x140 [ 576.856375][T13051] ? __cancel_work+0x26f/0x2d0 [ 576.861230][T13051] ? cancel_work+0x20/0x20 [ 576.865653][T13051] ? lock_chain_count+0x20/0x20 [ 576.871009][T13051] hci_request_cancel_all+0xcc/0x300 [ 576.876610][T13051] hci_dev_do_close+0x4e/0x1030 [ 576.881490][T13051] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 576.887483][T13051] ? _raw_spin_unlock+0x40/0x40 [ 576.892338][T13051] hci_rfkill_set_block+0x10a/0x190 [ 576.897664][T13051] ? rcu_lock_release+0x20/0x20 [ 576.902527][T13051] rfkill_set_block+0x1c6/0x420 [ 576.907377][T13051] rfkill_fop_write+0x458/0x560 [ 576.912258][T13051] ? rfkill_fop_read+0x4b0/0x4b0 [ 576.917364][T13051] ? common_file_perm+0x150/0x1c0 [ 576.922398][T13051] ? fsnotify_perm+0x5d/0x560 [ 576.927069][T13051] ? security_file_permission+0x75/0xa0 [ 576.932612][T13051] ? rfkill_fop_read+0x4b0/0x4b0 [ 576.937641][T13051] vfs_write+0x300/0xd00 [ 576.941892][T13051] ? file_end_write+0x250/0x250 [ 576.946738][T13051] ? __fget_files+0x40f/0x480 [ 576.951436][T13051] ? __fdget_pos+0x1e2/0x370 [ 576.956044][T13051] ? ksys_write+0x71/0x250 [ 576.960668][T13051] ksys_write+0x14d/0x250 [ 576.965005][T13051] ? __ia32_sys_read+0x80/0x80 [ 576.969765][T13051] ? lockdep_hardirqs_on+0x94/0x140 [ 576.975000][T13051] do_syscall_64+0x4c/0xa0 [ 576.979418][T13051] ? clear_bhb_loop+0x30/0x80 [ 576.984179][T13051] ? clear_bhb_loop+0x30/0x80 [ 576.988945][T13051] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 576.994860][T13051] RIP: 0033:0x7f14d3a1dbe9 [ 576.999365][T13051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.019153][T13051] RSP: 002b:00007f14d1c64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 577.027839][T13051] RAX: ffffffffffffffda RBX: 00007f14d3c45090 RCX: 00007f14d3a1dbe9 [ 577.036018][T13051] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000008 [ 577.044187][T13051] RBP: 00007f14d3aa0e19 R08: 0000000000000000 R09: 0000000000000000 [ 577.052171][T13051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.060248][T13051] R13: 00007f14d3c45128 R14: 00007f14d3c45090 R15: 00007fff06c10c68 [ 577.068252][T13051]