last executing test programs: 6m54.570283084s ago: executing program 4 (id=119): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000001, 0x0, 0x5, 0x0, "0062092b95000004fdf5eb2bda00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001100)=0x12) 6m53.513076469s ago: executing program 4 (id=123): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x8000) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file1/file0'}, 0x11) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r6, r7, 0x0) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r9}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r8, 0xc01064ab, &(0x7f0000000380)={0x0, 0x0, r9}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r11, @ANYBLOB="0a0006000802110000000000380050800800030001ac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) 6m52.76483473s ago: executing program 4 (id=127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000004a90ff7f070000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x19, 0x2000000, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0x1b, 0x4e24, 0x3, @mcast2, 0xe}}}, 0x38) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000000c0)=0x1) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff1337, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x39}, {0x0, 0x8}, {0x800000, 0x800001}, {}, {0x1ff}, {0x0, 0xffe}, {}, {}, {}, {}, {0x0, 0xe68b}], 0xc, 0x0, 0x0, 0x0, 0x0, 0x500}) write$sndseq(r3, &(0x7f00000003c0)=[{0xfc, 0x0, 0x0, 0x0, @time={0x0, 0x101}, {0x0, 0xb8}, {0x0, 0x9}, @control={0x9, 0x9, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0xfd}, {0x0, 0x3}, @control={0x7, 0x9fa, 0x6}}], 0x38) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc008ae09, &(0x7f00000001c0)=ANY=[@ANYBLOB="e14e8b0dfc868f"]) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r5, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r5, &(0x7f0000000040)={0x1f, @fixed}, 0x8) fanotify_init(0x28, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x8, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x2e}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6m51.665163996s ago: executing program 4 (id=134): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 6m51.494380759s ago: executing program 4 (id=135): mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x0, "fee8a294f8a0e9ffff0d9683dda1af1ea89de2b7fb0a01040000000008000003000200000000003f00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x200000, 0x8, 0x3, 0x0, 0x0, 0x91, '\x00', 0x7e}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 6m50.745080089s ago: executing program 4 (id=138): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x8000) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file1/file0'}, 0x11) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r6, r7, 0x0) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r9}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r8, 0xc01064ab, &(0x7f0000000380)={0x0, 0x0, r9}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r11, @ANYBLOB="0a0006000802110000000000380050800800030001ac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) 6m50.337771355s ago: executing program 32 (id=138): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x8000) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file1/file0'}, 0x11) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r6, r7, 0x0) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r9}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r8, 0xc01064ab, &(0x7f0000000380)={0x0, 0x0, r9}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r11, @ANYBLOB="0a0006000802110000000000380050800800030001ac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) 5m37.608857201s ago: executing program 2 (id=381): rt_tgsigqueueinfo(0x0, 0x0, 0x36, &(0x7f0000000240)={0x21, 0xfffffff7, 0xe}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="e1cdf1c9d746bcaa9854b30731a00f236b0aa22e760f29fc5e15ebe36fbe2e1698", 0x21}], 0x1}}], 0x1, 0x20000050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m36.981522032s ago: executing program 2 (id=387): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e0301000000000064050000000000006916300000000000bf07000000000000260507000fff07206706000020000000470600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x62, 0x5, 0x528, 0x0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) 5m35.729334923s ago: executing program 2 (id=390): socket(0x840000000002, 0x80003, 0x100) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000240)='attr/keycreate\x00') creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 5m28.183522697s ago: executing program 2 (id=403): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m27.796854458s ago: executing program 2 (id=405): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x80000005, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000280)=""/173, 0xad}], 0x2}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5m27.545035061s ago: executing program 2 (id=407): mkdir(&(0x7f0000000040)='./file1\x00', 0x1e) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) unlink(&(0x7f0000000180)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000340)='./file1\x00', 0x0) unlink(&(0x7f0000000000)='./file1\x00') 5m26.181664791s ago: executing program 33 (id=407): mkdir(&(0x7f0000000040)='./file1\x00', 0x1e) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) unlink(&(0x7f0000000180)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000340)='./file1\x00', 0x0) unlink(&(0x7f0000000000)='./file1\x00') 4m30.069481506s ago: executing program 5 (id=527): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8080, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 4m29.615444595s ago: executing program 5 (id=530): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x108a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x40}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x4, 0xfffe, 0x0}) 4m27.876647801s ago: executing program 5 (id=532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x0, 0x0, {0x0, 0x300, 0x0, 0x80000300}}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x28000000) unshare(0x2a020480) fsmount(0xffffffffffffffff, 0x0, 0x4) 4m25.96399035s ago: executing program 5 (id=535): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x80700a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 4m24.984244765s ago: executing program 5 (id=539): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r3) r5 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r4, r5}, &(0x7f0000000440)=""/251, 0xfb, &(0x7f0000000400)={&(0x7f0000000100)={'streebog256-generic\x00'}}) 4m24.31049113s ago: executing program 5 (id=543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100000000000800"], 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000140)) 4m22.90066034s ago: executing program 34 (id=543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100000000000800"], 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000140)) 2m46.497151322s ago: executing program 6 (id=738): socket(0x1e, 0x3, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket(0x15, 0x5, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x3, [0x2], [0x80ffff, 0x0, 0x101], [], [0x9]}) 2m44.486223085s ago: executing program 6 (id=743): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x1) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001910000004000800000028"], 0x28}}, 0x0) 2m40.904319108s ago: executing program 6 (id=747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x466b, &(0x7f0000000680)={0x0, 0xcfc1, 0x2000, 0x0, 0x167}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, &(0x7f0000000340)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x44}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22903) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xf3, 0x1b1c07, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) socket$inet_udp(0x2, 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$MSR(&(0x7f0000000380), 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x1f40) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) 2m39.799818314s ago: executing program 6 (id=749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000001700)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chmod(0x0, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$binfmt_aout(r3, 0x0, 0x120) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="a1", 0x1}], 0x1, 0x8, 0x7, 0x4) 2m38.749457406s ago: executing program 6 (id=752): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_pidfd_open(0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_CAPBSET_DROP(0x1c, 0xffffffffffffffff) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000002080)=0xfffffc01, &(0x7f00000020c0)=0x4) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000000)=""/4096) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000200000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, 0x0, 0x0) 2m38.506399693s ago: executing program 6 (id=755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000000)=0x3500, 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r4, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) sync() sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) 2m23.108982175s ago: executing program 35 (id=755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000000)=0x3500, 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r4, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) sync() sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) 20.938006851s ago: executing program 0 (id=970): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000200)={{}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x732}) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @empty}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 18.539693991s ago: executing program 1 (id=973): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) lsm_set_self_attr(0x69, 0x0, 0x106, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0x80000300, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 16.640311081s ago: executing program 3 (id=976): mknod$loop(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x10, 0xa, 0x8) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x1) fchdir(r3) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f00000000c0)=""/55, 0x37) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x1, {0x1, 0xff, 0x4}, 0xfe}, 0x18) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) 15.332350066s ago: executing program 1 (id=977): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000254, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0x0, 0x101}}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r5}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) 15.324415153s ago: executing program 0 (id=978): r0 = syz_open_procfs(0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f0000000300)=""/42, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x4000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af04, &(0x7f0000000200)) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000002240)) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000380), &(0x7f0000000280)) io_uring_enter(r7, 0x3f70, 0x0, 0x0, 0x0, 0x0) 14.564847079s ago: executing program 7 (id=979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000006d80)={'filter\x00', 0x7, 0x4, 0x408, 0x0, 0x110, 0x0, 0x110, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @remote}}}, {{@arp={@rand_addr, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'macvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@remote, @remote, @multicast1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "a62fc17084a5529259b49fd11336d17a70955372bc8ea881043d3504e2a3"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x20008014) 13.737241523s ago: executing program 1 (id=980): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x34}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000740)={0xfffffffc, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="47000000e843", 0x0, 0x1, 0x10023, 0xffffffffffffffff, 0x0}) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x0, 0x0, 0x2e33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfe}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f0000000200)={{0x80}, 'port1\x00', 0x0, 0x141821}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0xfffffffffffffffc, 0x200202) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 13.496289459s ago: executing program 8 (id=981): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000021c0)=ANY=[], 0x1224}, 0x1, 0x0, 0x0, 0x40}, 0x8080) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000ac0)=""/138, 0x1f}, {&(0x7f00000000c0)=""/231, 0xe7}], 0x2}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) epoll_create(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 13.495191296s ago: executing program 3 (id=982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18070000000000000000400000d25350", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000004a90ff7f070000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x19, 0x2000000, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0x1b, 0x4e24, 0x3, @mcast2, 0xe}}}, 0x38) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000000c0)=0x1) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff1337, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x39}, {0x0, 0x8}, {0x800000, 0x800001}, {}, {0x1ff}, {0x0, 0xffe}, {}, {}, {}, {}, {0x0, 0xe68b}], 0xc, 0x0, 0x0, 0x0, 0x0, 0x500}) write$sndseq(r3, &(0x7f00000003c0)=[{0xfc, 0x0, 0x0, 0x0, @time={0x0, 0x101}, {0x0, 0xb8}, {0x0, 0x9}, @control={0x9, 0x9, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0xfd}, {0x0, 0x3}, @control={0x7, 0x9fa, 0x6}}], 0x38) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc008ae09, &(0x7f00000001c0)=ANY=[@ANYBLOB="e14e8b0dfc868f"]) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r5, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r5, &(0x7f0000000040)={0x1f, @fixed}, 0x8) fanotify_init(0x28, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x8, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x2e}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 12.659231016s ago: executing program 7 (id=983): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="010001000000000000001d00000008000300", @ANYRES32=r1, @ANYBLOB='L\x00/'], 0x68}}, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x5, 0x103b83) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x7, 0x10}, 'syz1\x00', 0x26}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair(0x23, 0x5, 0x0, &(0x7f0000000000)) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca34dd02acecdc67c5e3126628168", r5, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0x40103e05, &(0x7f0000000080)={"df000000000000000000000000000000000000002000a400", r8}) 12.521050467s ago: executing program 0 (id=984): socket$igmp(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty}, 0xffffffffffffff3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(r2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) 10.084931226s ago: executing program 8 (id=985): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$video4linux(0x0, 0x2, 0x86400) memfd_create(&(0x7f0000000440)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) dup3(r6, r7, 0x0) r8 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r8, 0xc01064ab, &(0x7f0000000380)={0x0, 0x0, r9}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32, @ANYBLOB="0a0006000802110000000000380050800800030001ac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) 9.266398771s ago: executing program 7 (id=987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18070000000000000000400000d25350", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000004a90ff7f070000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x19, 0x2000000, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0x1b, 0x4e24, 0x3, @mcast2, 0xe}}}, 0x38) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000000c0)=0x1) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff1337, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x39}, {0x0, 0x8}, {0x800000, 0x800001}, {}, {0x1ff}, {0x0, 0xffe}, {}, {}, {}, {}, {0x0, 0xe68b}], 0xc, 0x0, 0x0, 0x0, 0x0, 0x500}) write$sndseq(r3, &(0x7f00000003c0)=[{0xfc, 0x0, 0x0, 0x0, @time={0x0, 0x101}, {0x0, 0xb8}, {0x0, 0x9}, @control={0x9, 0x9, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0xfd}, {0x0, 0x3}, @control={0x7, 0x9fa, 0x6}}], 0x38) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc008ae09, &(0x7f00000001c0)=ANY=[@ANYBLOB="e14e8b0dfc86"]) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r5, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r5, &(0x7f0000000040)={0x1f, @fixed}, 0x8) fanotify_init(0x28, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x8, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x2e}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9.148369112s ago: executing program 3 (id=988): socket$inet6(0xa, 0x80002, 0x88) r0 = io_uring_setup(0x4f01, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x32f}) socket$inet6(0xa, 0x6, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x24fb, &(0x7f0000000300)={0x0, 0x3, 0x10100, 0x3, 0x397, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r1, 0x2d3f, 0x1, 0x0, 0x0, 0x0) 8.640125415s ago: executing program 0 (id=989): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) tkill(r3, 0x13) r6 = socket$kcm(0x2, 0x3, 0x2) close(r6) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$cont(0x20, r7, 0x0, 0x13) 8.149448073s ago: executing program 1 (id=990): openat$tun(0xffffffffffffff9c, 0x0, 0x60240, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) r4 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280), &(0x7f0000000200)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000180)={0x30}, 0x30) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = getpgid(r1) kcmp(r1, r7, 0x0, r4, r0) 7.133321644s ago: executing program 0 (id=991): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0xc0044dff, &(0x7f0000001480)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_names\x00') lseek(r6, 0x9, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) bpf$MAP_CREATE(0x0, 0x0, 0x48) 6.94788073s ago: executing program 7 (id=992): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311a22b58a46ed495465703756e040dd9002584b5f9ae54dd851daed0c915d40f3a3fb324415ea188556f05a94c5a063dcf7be1743c393ed5fd0563366b67048a89f49375cd26cdbbe7f4b9f7d02fb8c26996da27d63c84e31f1b8a8b942e2b7b25354a25c9b79d6dfbd7f7d9ee7c0767dc1e21f382382ac9a01aa1fb75a182d9d410079b15e59a58c12e44ea45aaf6021bf0179b6a99c4b47de940e8c244a8", 0xdb}, {&(0x7f0000000180)="224a1f4b1161baddab286f59366916998e7ac05aef", 0x15}], 0x2, &(0x7f0000001800)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000006880)=""/121, 0x79}, {&(0x7f0000000340)=""/132, 0x84}], 0x2}, 0x401}], 0x1, 0x63, 0x0) 6.108110372s ago: executing program 1 (id=993): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ustat(0x1, &(0x7f0000000300)) r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x800, 0x0, 0x0, 0x40f00, 0x10, '\x00', r2, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.981351181s ago: executing program 8 (id=994): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8c7) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) 4.892710208s ago: executing program 3 (id=995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtfilter={0x9c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x4, 0x0, 0x6}, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42b00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x7}]}}}]}, 0x44}}, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r11, 0x541b, 0xffffffffffffffff) 4.144104403s ago: executing program 7 (id=996): syz_open_dev$media(&(0x7f0000000000), 0x9, 0x101000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100230100003402000007000000080001"], 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000180)={0xc71a, 0x7b66, 0x40, 0x1, 0x9, 0xfffffff2}) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x10}, 0x800) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000818}, 0x8001) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x94, 0xa, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfffffff8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x28}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x94}}, 0x48080) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r8, 0x0, 0x0}, 0x20) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.062885921s ago: executing program 3 (id=997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6(0xa, 0x3, 0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa10000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) read(r6, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r7 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r7, 0x0, 0x6) 3.061046921s ago: executing program 8 (id=998): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a3000000000090003007379"], 0xf0}}, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r4, 0x104, 0x6, &(0x7f0000000000), 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) accept(r6, 0x0, 0x0) 2.944490389s ago: executing program 1 (id=999): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000009c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rename(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/pm_async', 0x101581, 0x100) memfd_create(0x0, 0x6) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x20c800, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) acct(&(0x7f0000000140)='./file0\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2.832930887s ago: executing program 7 (id=1000): socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000340)={0x2, 0x8000}, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\b'], 0xfdef) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() r5 = shmget(0x3, 0x3000, 0x78001622, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) shmctl$SHM_STAT_ANY(r5, 0xf, 0x0) sched_setscheduler(r4, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32], 0x3c}}, 0x0) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000380)=""/226) 1.756547307s ago: executing program 3 (id=1001): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socket(0x840000000002, 0x3, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1.424797811s ago: executing program 8 (id=1002): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000ea00"/24], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x4000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x10040f00) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x2, 0x0, 0x0, 0x6], 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x4000, 0xfffffffe, 0x2}, &(0x7f0000000100), &(0x7f0000000140)) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ff9000/0x4000)=nil) write$rfkill(r0, 0x0, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) mkdir(0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0044d07, &(0x7f0000000000)=0x11e) 0s ago: executing program 8 (id=1003): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000100)=0xfffffffa, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r5, &(0x7f0000000080), &(0x7f0000000080)=""/11, 0x2}, 0x20) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc9, 0x6, 0x0, 0x82c, 0xc756}}}}, 0xe) r6 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="97f12164e1864e5ad260038ba651f108", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) read$dsp(r6, &(0x7f00000002c0)=""/59, 0x3b) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000c000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000200)="f36d0f20e035000020000f22e0663636676466262e660f3881a33e34c74424001f000000c74424026700c0fec7442406000000000f011c240fc7f766baa10066b8002866ef64f30fc7320f20e035040000000f22e0660fc773ee64db12", 0x5d}], 0x1, 0x71, 0x0, 0x0) r7 = open(0x0, 0x60142, 0x141) copy_file_range(0xffffffffffffffff, 0x0, r7, 0x0, 0x3df1, 0x0) kernel console output (not intermixed with test programs): bridge_slave_1: entered promiscuous mode [ 67.694034][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.706858][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.716827][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.724852][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.732219][ T5817] bridge_slave_1: entered allmulticast mode [ 67.739264][ T5817] bridge_slave_1: entered promiscuous mode [ 67.757779][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.775204][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.834859][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.853024][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.860455][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.868748][ T5830] bridge_slave_0: entered allmulticast mode [ 67.875658][ T5830] bridge_slave_0: entered promiscuous mode [ 67.895098][ T5823] team0: Port device team_slave_0 added [ 67.903000][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.914610][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.926264][ T5827] team0: Port device team_slave_0 added [ 67.932354][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.940289][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.947731][ T5830] bridge_slave_1: entered allmulticast mode [ 67.955567][ T5830] bridge_slave_1: entered promiscuous mode [ 67.971976][ T5823] team0: Port device team_slave_1 added [ 67.980282][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.999704][ T5827] team0: Port device team_slave_1 added [ 68.060192][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.073390][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.100648][ T5822] team0: Port device team_slave_0 added [ 68.108176][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.116303][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.143938][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.162816][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.170103][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.197102][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.210661][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.217791][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.244105][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.258546][ T5817] team0: Port device team_slave_0 added [ 68.267395][ T5817] team0: Port device team_slave_1 added [ 68.284244][ T5822] team0: Port device team_slave_1 added [ 68.291060][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.298219][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.324336][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.351767][ T5830] team0: Port device team_slave_0 added [ 68.366205][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.373183][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.399301][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.431562][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.438631][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.465271][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.481586][ T5830] team0: Port device team_slave_1 added [ 68.494721][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.501718][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.529919][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.550282][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.557618][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.583759][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.600390][ T5832] Bluetooth: hci0: command tx timeout [ 68.645184][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.652270][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.678524][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.689215][ T5832] Bluetooth: hci1: command tx timeout [ 68.691233][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.702060][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.728716][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.743641][ T5832] Bluetooth: hci2: command tx timeout [ 68.743835][ T5821] Bluetooth: hci3: command tx timeout [ 68.755627][ T5836] Bluetooth: hci4: command tx timeout [ 68.779643][ T5822] hsr_slave_0: entered promiscuous mode [ 68.786385][ T5822] hsr_slave_1: entered promiscuous mode [ 68.809023][ T5823] hsr_slave_0: entered promiscuous mode [ 68.815798][ T5823] hsr_slave_1: entered promiscuous mode [ 68.821898][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.830035][ T5823] Cannot create hsr debugfs directory [ 68.838889][ T5817] hsr_slave_0: entered promiscuous mode [ 68.845819][ T5817] hsr_slave_1: entered promiscuous mode [ 68.851773][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.859495][ T5817] Cannot create hsr debugfs directory [ 68.892714][ T5827] hsr_slave_0: entered promiscuous mode [ 68.899461][ T5827] hsr_slave_1: entered promiscuous mode [ 68.905907][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.913635][ T5827] Cannot create hsr debugfs directory [ 68.988449][ T5830] hsr_slave_0: entered promiscuous mode [ 68.995872][ T5830] hsr_slave_1: entered promiscuous mode [ 69.001852][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.009516][ T5830] Cannot create hsr debugfs directory [ 69.322109][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.339232][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.349740][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.360600][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.410959][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.425602][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.437760][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.453154][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.516448][ T5817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.542840][ T5817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.567548][ T5817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.580168][ T5817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.627041][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.640155][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.667465][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.690089][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.751252][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.761568][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.771735][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.792198][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.808465][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.847853][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.874988][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.895945][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.903181][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.937904][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.966750][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.973927][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.984338][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.991452][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.000412][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.007567][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.121768][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.176626][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.213766][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.236273][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.275471][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.283529][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.290846][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.318637][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.339206][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.346387][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.365357][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.372509][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.384985][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.393101][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.469281][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.476539][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.490355][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.497719][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.549912][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.579420][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.593054][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.618460][ T5817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.630841][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.664323][ T5836] Bluetooth: hci0: command tx timeout [ 70.743866][ T5836] Bluetooth: hci1: command tx timeout [ 70.753014][ T5827] veth0_vlan: entered promiscuous mode [ 70.820075][ T5822] veth0_vlan: entered promiscuous mode [ 70.826213][ T5836] Bluetooth: hci4: command tx timeout [ 70.827338][ T5821] Bluetooth: hci3: command tx timeout [ 70.831625][ T5836] Bluetooth: hci2: command tx timeout [ 70.846909][ T5827] veth1_vlan: entered promiscuous mode [ 70.878481][ T5822] veth1_vlan: entered promiscuous mode [ 70.911052][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.958081][ T5827] veth0_macvtap: entered promiscuous mode [ 70.977371][ T5822] veth0_macvtap: entered promiscuous mode [ 71.002377][ T5827] veth1_macvtap: entered promiscuous mode [ 71.033196][ T5822] veth1_macvtap: entered promiscuous mode [ 71.068524][ T5830] veth0_vlan: entered promiscuous mode [ 71.082791][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.109328][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.120467][ T5830] veth1_vlan: entered promiscuous mode [ 71.145635][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.160887][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.172228][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.185018][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.205644][ T5822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.219311][ T5822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.228804][ T5822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.238548][ T5822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.253140][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.270110][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.282111][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.299998][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.312004][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.334368][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.348822][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.358458][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.472554][ T5830] veth0_macvtap: entered promiscuous mode [ 71.499771][ T5830] veth1_macvtap: entered promiscuous mode [ 71.553095][ T5817] veth0_vlan: entered promiscuous mode [ 71.579785][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.591914][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.592982][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.612910][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.623308][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.634551][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.645622][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.654908][ T5823] veth0_vlan: entered promiscuous mode [ 71.664710][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.675327][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.686279][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.697144][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.709935][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.712959][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.723266][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.729651][ T5817] veth1_vlan: entered promiscuous mode [ 71.742775][ T1238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.753964][ T1238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.772741][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.782753][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.792615][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.801537][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.827197][ T1238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.837468][ T5823] veth1_vlan: entered promiscuous mode [ 71.845382][ T1238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.880535][ T1238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.885243][ T5817] veth0_macvtap: entered promiscuous mode [ 71.893507][ T1238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.915496][ T5817] veth1_macvtap: entered promiscuous mode [ 72.005150][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.025532][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.035988][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.046803][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.057456][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.068054][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.079324][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.096981][ T5823] veth0_macvtap: entered promiscuous mode [ 72.102592][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.122465][ T5823] veth1_macvtap: entered promiscuous mode [ 72.145817][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.156951][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.167264][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.177971][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.188656][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.199357][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.212870][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.223367][ T5817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.232852][ T5817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.233607][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.242312][ T5817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.250858][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.270917][ T5817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.340002][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.390484][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.403304][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.416310][ T5905] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.419779][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.458092][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.470507][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.481093][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.498294][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.525544][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.544843][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.553805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.570370][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.658720][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.698076][ T5905] kvm: MONITOR instruction emulated as NOP! [ 72.703686][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.726879][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.743687][ T5836] Bluetooth: hci0: command tx timeout [ 72.783438][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.800037][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.811090][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.822589][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.823681][ T5836] Bluetooth: hci1: command tx timeout [ 72.834882][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.879842][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.904390][ T5836] Bluetooth: hci2: command tx timeout [ 72.913703][ T5836] Bluetooth: hci3: command tx timeout [ 72.914221][ T5821] Bluetooth: hci4: command tx timeout [ 72.975963][ T5823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.007167][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.016840][ T5823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.026025][ T5823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.089365][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.106392][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.220208][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.253600][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.367280][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.406586][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.485280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.577728][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.611819][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.709009][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.751201][ T5918] bond0: (slave rose0): Enslaving as an active interface with an up link [ 73.773742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.022896][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 74.056028][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 74.154002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.457026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.468178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.500918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.510496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 74.519583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.653865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.825745][ T5821] Bluetooth: hci0: command tx timeout [ 74.879375][ T5953] mmap: syz.0.11 (5953) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.904821][ T5821] Bluetooth: hci1: command tx timeout [ 74.971484][ T5957] syz.2.13 uses obsolete (PF_INET,SOCK_PACKET) [ 74.983688][ T5821] Bluetooth: hci4: command tx timeout [ 74.984414][ T5836] Bluetooth: hci3: command tx timeout [ 74.989120][ T5821] Bluetooth: hci2: command tx timeout [ 75.284440][ T5871] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.614920][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 76.029333][ T5871] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 76.080749][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.156229][ T5871] usb 2-1: Product: syz [ 76.160461][ T5871] usb 2-1: Manufacturer: syz [ 76.171414][ T5973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17'. [ 76.228137][ T5871] usb 2-1: SerialNumber: syz [ 76.260449][ T5871] usb 2-1: config 0 descriptor?? [ 76.321920][ T5871] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 76.407045][ T5980] syzkaller0: entered allmulticast mode [ 77.590571][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 77.828736][ T5871] gspca_ov534_9: sccb_write failed [ 78.038351][ T5871] gspca_ov534_9: reg_w failed -71 [ 78.255305][ T6014] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 78.268690][ T6014] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 78.309755][ T5871] gspca_ov534_9: Unknown sensor 0000 [ 78.309834][ T5871] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 78.339468][ T5871] usb 2-1: USB disconnect, device number 2 [ 80.605588][ T6028] Zero length message leads to an empty skb [ 80.702766][ T6017] kexec: Could not allocate control_code_buffer [ 81.592361][ T6041] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3256431472 (26051451776 ns) > initial count (24997152112 ns). Using initial count to start timer. [ 82.146522][ T57] cfg80211: failed to load regulatory.db [ 83.131429][ T29] audit: type=1326 audit(1740359175.247:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6055 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fa98d169 code=0x7fc00000 [ 83.587714][ T6077] syzkaller0: entered promiscuous mode [ 83.629188][ T6077] syzkaller0: entered allmulticast mode [ 83.743722][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.893646][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 83.921844][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 83.944100][ T9] usb 5-1: config 0 has no interface number 0 [ 83.964842][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 83.996583][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 84.034922][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.069331][ T9] usb 5-1: Product: syz [ 84.096156][ T9] usb 5-1: Manufacturer: syz [ 84.107065][ T9] usb 5-1: SerialNumber: syz [ 84.123294][ T9] usb 5-1: config 0 descriptor?? [ 84.264483][ T9] smsc75xx v1.0.0 [ 85.049785][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 85.720447][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 86.563235][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 86.575600][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 86.587335][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 86.598982][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 86.617200][ T9] usb 5-1: USB disconnect, device number 2 [ 87.741411][ T6109] pim6reg: entered allmulticast mode [ 88.593429][ T6134] ======================================================= [ 88.593429][ T6134] WARNING: The mand mount option has been deprecated and [ 88.593429][ T6134] and is ignored by this kernel. Remove the mand [ 88.593429][ T6134] option from the mount to silence this warning. [ 88.593429][ T6134] ======================================================= [ 88.858477][ T6139] netlink: 168 bytes leftover after parsing attributes in process `syz.4.59'. [ 88.941257][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.62'. [ 89.407150][ T6154] pim6reg: entered allmulticast mode [ 90.404541][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 90.783692][ T57] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.964271][ T57] usb 3-1: Using ep0 maxpacket: 32 [ 90.993844][ T57] usb 3-1: config 0 has an invalid interface number: 111 but max is 0 [ 91.025776][ T57] usb 3-1: config 0 has no interface number 0 [ 91.038376][ T57] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 91.063790][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.085725][ T57] usb 3-1: Product: syz [ 91.089958][ T57] usb 3-1: Manufacturer: syz [ 91.145006][ T57] usb 3-1: SerialNumber: syz [ 91.170568][ T57] usb 3-1: config 0 descriptor?? [ 91.403170][ T8] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 91.427092][ T57] snd-usb-6fire 3-1:0.111: unknown device firmware state received from device: [ 91.431420][ T8] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 91.452445][ T57] bd a4 6f e9 2e c5 45 7f [ 91.463175][ T57] snd-usb-6fire 3-1:0.111: probe with driver snd-usb-6fire failed with error -5 [ 91.502186][ T8] hid-generic 0000:0003:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 91.660330][ T8] usb 3-1: USB disconnect, device number 2 [ 91.852828][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.79'. [ 92.021976][ T6196] pim6reg: entered allmulticast mode [ 96.529256][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 96.989899][ T29] audit: type=1326 audit(1740359189.117:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6251 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00538d169 code=0x7fc00000 [ 97.433672][ T29] audit: type=1804 audit(1740359189.577:4): pid=6272 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.97" name="/newroot/21/file0" dev="tmpfs" ino=126 res=1 errno=0 [ 97.528311][ T29] audit: type=1804 audit(1740359189.617:5): pid=6272 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.97" name="/newroot/21/file0" dev="tmpfs" ino=126 res=1 errno=0 [ 97.770391][ T5869] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.949589][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 97.993916][ T5869] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 98.461145][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.491269][ T5869] usb 3-1: Product: syz [ 98.534945][ T5869] usb 3-1: Manufacturer: syz [ 98.613509][ T5869] usb 3-1: SerialNumber: syz [ 98.626372][ T5869] usb 3-1: config 0 descriptor?? [ 98.636929][ T5869] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 99.102775][ T29] audit: type=1326 audit(1740359191.237:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.0.112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e6338d169 code=0x0 [ 99.374155][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 99.575753][ T5869] gspca_sonixj: reg_w1 err -110 [ 99.582121][ T5869] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 100.699384][ T875] usb 3-1: USB disconnect, device number 3 [ 101.000810][ T6329] bridge_slave_0: left allmulticast mode [ 101.019680][ T6329] bridge_slave_0: left promiscuous mode [ 101.030189][ T6329] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.059049][ T6329] bridge_slave_1: left allmulticast mode [ 101.065300][ T6329] bridge_slave_1: left promiscuous mode [ 101.072295][ T6329] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.091808][ T6329] bond0: (slave bond_slave_0): Releasing backup interface [ 101.123005][ T6329] bond0: (slave bond_slave_1): Releasing backup interface [ 101.162194][ T6329] team0: Port device team_slave_0 removed [ 101.244319][ T6329] team0: Port device team_slave_1 removed [ 101.250673][ T6329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.276289][ T6329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.302545][ T6329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.350663][ T6329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.434754][ T6335] team0: Mode changed to "activebackup" [ 102.171112][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.123'. [ 102.344754][ T5832] Bluetooth: hci3: command 0x0405 tx timeout [ 103.769057][ T6375] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 105.013254][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.176316][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.277103][ T6395] input: syz0 as /devices/virtual/input/input5 [ 105.341106][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.485223][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.703688][ T5832] Bluetooth: hci3: command 0x0405 tx timeout [ 105.764193][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.775440][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.785793][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.795168][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.562983][ T52] bridge_slave_1: left allmulticast mode [ 106.576317][ T5832] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 106.591251][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.591324][ T52] bridge_slave_1: left promiscuous mode [ 106.626028][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.666259][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.741314][ T52] bridge_slave_0: left allmulticast mode [ 106.756351][ T52] bridge_slave_0: left promiscuous mode [ 106.763374][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.823628][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 106.831596][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 106.855706][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 106.874107][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.919038][ T8] usb 4-1: Product: syz [ 106.923298][ T8] usb 4-1: Manufacturer: syz [ 106.931568][ T8] usb 4-1: SerialNumber: syz [ 107.106632][ T8] usb 4-1: config 0 descriptor?? [ 107.169652][ T8] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 107.259141][ T8] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 107.792726][ T8] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 107.894343][ T5869] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.070343][ T5869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.089042][ T5869] usb 2-1: config 0 has no interfaces? [ 108.107251][ T5869] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 108.116876][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.169053][ T5869] usb 2-1: config 0 descriptor?? [ 108.258217][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.281305][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.297515][ T52] bond0 (unregistering): Released all slaves [ 108.547807][ T25] usb 2-1: USB disconnect, device number 3 [ 108.663625][ T5832] Bluetooth: hci2: command tx timeout [ 108.681242][ T8] em28xx 4-1:0.0: write to i2c device at 0xa0 failed with unknown error (status=1) [ 108.698865][ T8] em28xx 4-1:0.0: failed to read eeprom (err=-5) [ 108.707270][ T8] em28xx 4-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 108.924915][ T8] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 108.946735][ T8] em28xx 4-1:0.0: dvb set to bulk mode. [ 108.983199][ T875] em28xx 4-1:0.0: Binding DVB extension [ 109.022567][ T8] usb 4-1: USB disconnect, device number 2 [ 109.044530][ T8] em28xx 4-1:0.0: Disconnecting em28xx [ 109.168550][ T875] em28xx 4-1:0.0: Registering input extension [ 109.203738][ T8] em28xx 4-1:0.0: Closing input extension [ 109.311105][ T8] em28xx 4-1:0.0: Freeing device [ 109.369589][ T6416] chnl_net:caif_netlink_parms(): no params data found [ 109.993339][ T52] hsr_slave_0: left promiscuous mode [ 110.004231][ T52] hsr_slave_1: left promiscuous mode [ 110.009960][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.039037][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.069138][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.101256][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.183852][ T57] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 110.222065][ T52] veth1_macvtap: left promiscuous mode [ 110.262177][ T52] veth0_macvtap: left promiscuous mode [ 110.269717][ T52] veth1_vlan: left promiscuous mode [ 110.301539][ T52] veth0_vlan: left promiscuous mode [ 110.376926][ T57] usb 1-1: config index 0 descriptor too short (expected 12336, got 27) [ 110.388870][ T57] usb 1-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 110.402719][ T57] usb 1-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 110.413552][ T57] usb 1-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 110.437084][ T57] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 110.447023][ T57] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 110.456669][ T57] usb 1-1: Product: syz [ 110.461535][ T57] usb 1-1: Manufacturer: syz [ 110.466544][ T57] usb 1-1: SerialNumber: syz [ 110.749911][ T5832] Bluetooth: hci2: command tx timeout [ 110.824919][ T57] usb 1-1: USB disconnect, device number 2 [ 111.442581][ T52] team0 (unregistering): Port device team_slave_1 removed [ 111.541896][ T52] team0 (unregistering): Port device team_slave_0 removed [ 111.761892][ T6486] Bluetooth: (null): Invalid header checksum [ 112.438398][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 112.717954][ T6416] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.759237][ T6416] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.773701][ T6416] bridge_slave_0: entered allmulticast mode [ 112.781205][ T6416] bridge_slave_0: entered promiscuous mode [ 112.789133][ T6416] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.799625][ T6416] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.808173][ T6416] bridge_slave_1: entered allmulticast mode [ 112.815775][ T6416] bridge_slave_1: entered promiscuous mode [ 112.823549][ T5832] Bluetooth: hci2: command tx timeout [ 112.886910][ T6511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.173'. [ 112.888107][ T6416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.920149][ T6416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.997324][ T6416] team0: Port device team_slave_0 added [ 113.020520][ T6416] team0: Port device team_slave_1 added [ 113.060094][ T6416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.068362][ T6416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.099032][ T6416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.120528][ T6416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.132332][ T6416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.164009][ T6416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.237499][ T6416] hsr_slave_0: entered promiscuous mode [ 113.250114][ T6416] hsr_slave_1: entered promiscuous mode [ 113.257216][ T6416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.278382][ T6416] Cannot create hsr debugfs directory [ 113.637054][ T6416] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.675669][ T6416] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.890655][ T6416] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.261187][ T6416] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.562988][ T6416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.636909][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.639672][ T6416] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.664546][ T6390] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.671702][ T6390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.836329][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 114.838542][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.848679][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.931518][ T5832] Bluetooth: hci2: command tx timeout [ 115.217405][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.228614][ T8] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 115.237891][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.255436][ T8] usb 2-1: config 0 descriptor?? [ 115.446259][ T6556] netlink: 44 bytes leftover after parsing attributes in process `syz.3.182'. [ 115.992889][ T8] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 116.219318][ T9] usb 2-1: USB disconnect, device number 4 [ 116.321672][ T6416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.900595][ T6416] veth0_vlan: entered promiscuous mode [ 116.966855][ T6416] veth1_vlan: entered promiscuous mode [ 117.616835][ T6416] veth0_macvtap: entered promiscuous mode [ 117.658639][ T6416] veth1_macvtap: entered promiscuous mode [ 118.180405][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.219160][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.239534][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.271758][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.313786][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.380851][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.662822][ T6416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.915326][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.993750][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 119.019238][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.045769][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 119.069687][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.096086][ T6621] netlink: 'syz.3.195': attribute type 1 has an invalid length. [ 119.113175][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.118212][ T6621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.195'. [ 119.140763][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.169598][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.191704][ T6416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.233164][ T6416] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.274819][ T6416] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.305550][ T6416] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.323663][ T6416] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.686649][ T6641] xt_TPROXY: Can be used only with -p tcp or -p udp [ 120.021450][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.044983][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.140651][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.162737][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.160872][ T6666] sctp: [Deprecated]: syz.5.140 (pid 6666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.160872][ T6666] Use struct sctp_sack_info instead [ 121.302302][ T6670] evm: overlay not supported [ 121.346130][ T6674] kvm: pic: non byte read [ 121.350801][ T6674] kvm: pic: non byte read [ 121.398016][ T6674] kvm: pic: non byte read [ 121.402630][ T6674] kvm: pic: non byte read [ 121.457632][ T6674] kvm: pic: single mode not supported [ 121.457743][ T6674] kvm: pic: non byte read [ 121.524244][ T6674] kvm: pic: non byte read [ 121.700600][ T6686] kvm: pic: level sensitive irq not supported [ 121.700698][ T6686] kvm: pic: non byte read [ 122.773679][ T875] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.963577][ T875] usb 1-1: Using ep0 maxpacket: 32 [ 122.990473][ T875] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 123.030019][ T875] usb 1-1: config 0 has no interface number 0 [ 123.069778][ T875] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 21760, setting to 1024 [ 123.124697][ T875] usb 1-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 123.161181][ T875] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 123.181306][ T875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.222485][ T875] usb 1-1: Product: syz [ 123.240621][ T875] usb 1-1: Manufacturer: syz [ 123.262805][ T875] usb 1-1: SerialNumber: syz [ 123.365958][ T875] usb 1-1: config 0 descriptor?? [ 123.507209][ T6704] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 123.615532][ T875] smsc95xx v2.0.0 [ 123.766138][ T6704] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 123.987381][ T875] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 124.022748][ T875] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 124.232957][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.219'. [ 124.264676][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 124.373645][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.583311][ T25] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 124.673678][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.084915][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.133622][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 125.185472][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 125.213496][ T25] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 125.242285][ T25] usb 4-1: Manufacturer: syz [ 125.261570][ T25] usb 4-1: config 0 descriptor?? [ 125.876958][ T875] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 125.896059][ T875] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 125.980942][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.225'. [ 126.129955][ T25] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 126.278424][ T25] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 126.444686][ T25] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 126.465261][ T875] usb 1-1: USB disconnect, device number 3 [ 126.508751][ T25] usb 4-1: USB disconnect, device number 3 [ 127.278307][ T6762] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.760415][ T6762] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.695227][ T6762] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.935120][ T6762] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.765526][ T6762] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.273778][ T6762] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.286456][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 130.367725][ T6762] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.428619][ T6762] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.272667][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 132.312214][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 132.903652][ T5836] Bluetooth: hci2: command 0x0405 tx timeout [ 133.159807][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.166809][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.923771][ T6879] netlink: 'syz.0.255': attribute type 7 has an invalid length. [ 133.963761][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.255'. [ 134.071858][ T6884] netlink: 'syz.3.257': attribute type 2 has an invalid length. [ 134.075398][ T6879] bridge1: port 1(macvlan2) entered blocking state [ 134.088859][ T6884] netlink: 16 bytes leftover after parsing attributes in process `syz.3.257'. [ 134.098874][ T6879] bridge1: port 1(macvlan2) entered disabled state [ 134.153628][ T57] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 134.176929][ T6879] macvlan2: entered allmulticast mode [ 134.467910][ T57] usb 6-1: Using ep0 maxpacket: 16 [ 134.566399][ T57] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.739472][ T57] usb 6-1: config 0 has no interfaces? [ 134.832468][ T57] usb 6-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 134.871361][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.906117][ T57] usb 6-1: config 0 descriptor?? [ 135.120959][ T57] usb 6-1: can't set config #0, error -71 [ 136.137288][ T57] usb 6-1: USB disconnect, device number 2 [ 136.948154][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.264'. [ 137.013724][ T57] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.417065][ T57] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.459124][ T57] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.470005][ T57] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 137.493716][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 137.502290][ T57] usb 2-1: SerialNumber: syz [ 138.582701][ T57] usb 2-1: 0:2 : does not exist [ 138.663624][ T875] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 138.853591][ T875] usb 3-1: Using ep0 maxpacket: 8 [ 138.889735][ T875] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 138.916486][ T875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.942466][ T875] usb 3-1: Product: syz [ 138.952608][ T875] usb 3-1: Manufacturer: syz [ 138.973533][ T875] usb 3-1: SerialNumber: syz [ 138.982715][ T875] usb 3-1: config 0 descriptor?? [ 138.997680][ T875] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 139.018843][ T57] usb 2-1: USB disconnect, device number 5 [ 139.343643][ T5870] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 139.503555][ T5870] usb 6-1: Using ep0 maxpacket: 8 [ 139.513192][ T5870] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 139.522637][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.530794][ T5870] usb 6-1: Product: syz [ 139.535853][ T5870] usb 6-1: Manufacturer: syz [ 139.540489][ T5870] usb 6-1: SerialNumber: syz [ 139.548759][ T5870] usb 6-1: config 0 descriptor?? [ 139.759850][ T5870] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 140.181363][ T5870] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 140.195494][ T5870] usb 6-1: USB disconnect, device number 3 [ 141.214104][ T875] gspca_sonixj: reg_w1 err -71 [ 141.253607][ T875] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 141.268196][ T875] usb 3-1: USB disconnect, device number 4 [ 141.316832][ T6964] bridge: RTM_NEWNEIGH with invalid ether address [ 141.572726][ T6970] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.283557][ T6986] netlink: 104 bytes leftover after parsing attributes in process `syz.0.283'. [ 145.388955][ T5869] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 145.457596][ T7008] misc userio: Invalid payload size [ 145.471383][ T7008] misc userio: No port type given on /dev/userio [ 145.491695][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.290'. [ 145.517195][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.290'. [ 145.555541][ T5869] usb 1-1: config 54 has an invalid interface number: 154 but max is 0 [ 145.579417][ T5869] usb 1-1: config 54 has no interface number 0 [ 145.650876][ T5869] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 145.713023][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.663536][ T5869] usb 1-1: Product: syz [ 146.667758][ T5869] usb 1-1: Manufacturer: syz [ 146.672361][ T5869] usb 1-1: SerialNumber: syz [ 147.623364][ T5869] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 147.627532][ T35] usb 1-1: Failed to submit usb control message: -71 [ 147.646846][ T5869] usb 1-1: USB disconnect, device number 4 [ 147.663834][ T35] usb 1-1: unable to send the bmi data to the device: -71 [ 147.676939][ T35] usb 1-1: unable to get target info from device [ 147.716772][ T35] usb 1-1: could not get target info (-71) [ 147.764812][ T35] usb 1-1: could not probe fw (-71) [ 147.923709][ T57] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 148.174254][ T57] usb 6-1: Using ep0 maxpacket: 32 [ 148.271024][ T57] usb 6-1: config 0 has an invalid interface number: 61 but max is 1 [ 148.280886][ T57] usb 6-1: config 0 has no interface number 1 [ 148.295961][ T57] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 148.310884][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.322689][ T57] usb 6-1: Product: syz [ 148.330174][ T57] usb 6-1: Manufacturer: syz [ 148.337134][ T57] usb 6-1: SerialNumber: syz [ 148.346103][ T57] usb 6-1: config 0 descriptor?? [ 148.479617][ T57] viperboard 6-1:0.61: version 0.00 found at bus 006 address 004 [ 148.575141][ T57] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 148.603615][ T57] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 148.709114][ T57] viperboard 6-1:0.0: version 0.00 found at bus 006 address 004 [ 149.813570][ T57] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 149.822321][ T57] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 150.495753][ T57] usb 6-1: USB disconnect, device number 4 [ 151.069768][ T7100] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 153.680749][ T7148] /dev/nullb0: Can't open blockdev [ 159.077464][ T7217] netlink: 11 bytes leftover after parsing attributes in process `syz.0.330'. [ 159.692446][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'. [ 159.722915][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'. [ 159.743258][ T7225] netlink: 32 bytes leftover after parsing attributes in process `syz.0.332'. [ 160.101420][ T7225] nbd0: detected capacity change from 0 to 256 [ 161.163352][ T5832] block nbd0: Receive control failed (result -104) [ 161.566275][ T7245] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 161.663631][ T57] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 161.897913][ T57] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.936063][ T57] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.071162][ T57] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 162.199647][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 162.309054][ T57] usb 2-1: SerialNumber: syz [ 162.332345][ T7264] hub 6-0:1.0: USB hub found [ 162.338906][ T7264] hub 6-0:1.0: 1 port detected [ 162.530881][ T7260] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 162.598702][ T7268] kvm: apic: phys broadcast and lowest prio [ 162.644684][ T57] usb 2-1: 0:2 : does not exist [ 163.043709][ T57] usb 2-1: USB disconnect, device number 6 [ 163.247011][ T7279] process 'syz.0.344' launched './file0' with NULL argv: empty string added [ 163.305726][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.287391][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 166.840553][ T25] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 167.524944][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.683220][ T25] usb 3-1: config 0 descriptor?? [ 167.811099][ T25] usb 3-1: can't set config #0, error -71 [ 167.877315][ T25] usb 3-1: USB disconnect, device number 5 [ 168.030562][ T7322] vlan2: entered promiscuous mode [ 168.057618][ T7322] bridge0: entered promiscuous mode [ 168.354029][ T7322] bridge0: port 3(vlan2) entered blocking state [ 168.553565][ T7322] bridge0: port 3(vlan2) entered disabled state [ 168.560054][ T7322] vlan2: entered allmulticast mode [ 168.593638][ T7322] bridge0: entered allmulticast mode [ 168.657324][ T7322] vlan2: left allmulticast mode [ 168.662446][ T7322] bridge0: left allmulticast mode [ 168.673581][ T5873] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 168.838759][ T7322] bridge0: left promiscuous mode [ 168.910671][ T5873] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.976227][ T5873] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.061091][ T5873] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 169.123476][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 169.178637][ T5873] usb 1-1: SerialNumber: syz [ 169.521212][ T5873] usb 1-1: 0:2 : does not exist [ 169.568950][ T5873] usb 1-1: unit 5: unexpected type 0x0d [ 170.461667][ T5873] usb 1-1: USB disconnect, device number 5 [ 170.523244][ T7351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 170.824697][ T5836] Bluetooth: hci2: command 0x0405 tx timeout [ 172.024821][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.789031][ T7402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.371'. [ 175.328954][ T7402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.366155][ T7411] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 175.631472][ T7413] syz.5.373: attempt to access beyond end of device [ 175.631472][ T7413] loop5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 175.646132][ T7413] vxfs: unable to read disk superblock at 1 [ 175.661973][ T7413] syz.5.373: attempt to access beyond end of device [ 175.661973][ T7413] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 175.676325][ T7413] vxfs: unable to read disk superblock at 8 [ 175.683557][ T7413] vxfs: can't find superblock. [ 178.654529][ T29] audit: type=1326 audit(1740359270.807:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fa98d169 code=0x7fc00000 [ 178.686748][ T29] audit: type=1326 audit(1740359270.827:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25fa98d169 code=0x7fc00000 [ 178.716415][ T29] audit: type=1326 audit(1740359270.827:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fa98d169 code=0x7fc00000 [ 179.637676][ T29] audit: type=1326 audit(1740359270.827:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fa98d169 code=0x7fc00000 [ 181.713798][ T5832] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 183.773560][ T29] audit: type=1326 audit(1740359270.827:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fa98d169 code=0x7fc00000 [ 183.814812][ T29] audit: type=1326 audit(1740359270.827:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fa98d169 code=0x7fc00000 [ 183.930709][ T29] audit: type=1326 audit(1740359270.827:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fa98d169 code=0x7fc00000 [ 183.953336][ T29] audit: type=1326 audit(1740359270.827:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fa98d169 code=0x7fc00000 [ 183.976256][ T29] audit: type=1326 audit(1740359270.827:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fa98d169 code=0x7fc00000 [ 183.999448][ T29] audit: type=1326 audit(1740359270.827:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fa98d169 code=0x7fc00000 [ 184.114017][ T29] audit: type=1326 audit(1740359270.827:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fa98d169 code=0x7fc00000 [ 184.190375][ T29] audit: type=1326 audit(1740359270.827:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fa98d169 code=0x7fc00000 [ 184.353705][ T29] audit: type=1326 audit(1740359270.827:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fa98d169 code=0x7fc00000 [ 184.353745][ T29] audit: type=1326 audit(1740359270.827:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fa98d169 code=0x7fc00000 [ 184.377756][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.832844][ T7478] fuse: Bad value for 'fd' [ 184.873027][ T57] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 185.255222][ T57] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.267352][ T57] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.289033][ T57] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 185.298874][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 185.311854][ T57] usb 3-1: SerialNumber: syz [ 186.575763][ T57] usb 3-1: 0:2 : does not exist [ 186.854994][ T57] usb 3-1: USB disconnect, device number 6 [ 187.275662][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.147805][ T6390] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.269201][ T6390] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.507647][ T6390] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.592967][ T6390] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.753007][ T42] block nbd0: Possible stuck request ffff888025820000: control (read@0,4096B). Runtime 30 seconds [ 191.373789][ T6390] bridge_slave_1: left allmulticast mode [ 191.379499][ T6390] bridge_slave_1: left promiscuous mode [ 191.392165][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.504771][ T5133] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 191.534799][ T5133] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 191.548060][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 191.548355][ T5835] Bluetooth: hci3: command 0x0405 tx timeout [ 191.555594][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 191.568261][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 191.579084][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 191.587240][ T5825] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 191.595019][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.622882][ T6390] bridge_slave_0: left allmulticast mode [ 191.660008][ T6390] bridge_slave_0: left promiscuous mode [ 191.687129][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.422748][ T7554] kvm: pic: non byte write [ 193.628143][ T5832] Bluetooth: hci1: command tx timeout [ 194.510630][ T6390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.540620][ T6390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.590743][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.600126][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.610967][ T6390] bond0 (unregistering): Released all slaves [ 194.679767][ T7572] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 195.713488][ T5832] Bluetooth: hci1: command tx timeout [ 196.268121][ T6390] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 196.416298][ T6390] bond1 (unregistering): Released all slaves [ 197.784697][ T5832] Bluetooth: hci1: command tx timeout [ 198.693133][ T7605] ip6t_srh: unknown srh invflags 7863 [ 200.179132][ T5832] Bluetooth: hci1: command tx timeout [ 201.199726][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'. [ 202.557738][ T6390] hsr_slave_0: left promiscuous mode [ 202.578572][ T6390] hsr_slave_1: left promiscuous mode [ 202.595024][ T6390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.633657][ T6390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.877051][ T6390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.825182][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 203.825217][ T29] audit: type=1326 audit(1740359295.957:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7643 comm="syz.1.439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04bfb8d169 code=0x0 [ 203.864822][ T6390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.948546][ T6390] veth1_macvtap: left promiscuous mode [ 203.982213][ T6390] veth0_macvtap: left promiscuous mode [ 204.043670][ T6390] veth1_vlan: left promiscuous mode [ 204.086424][ T6390] veth0_vlan: left promiscuous mode [ 205.308724][ T6390] pim6reg (unregistering): left allmulticast mode [ 207.890724][ T6390] team0 (unregistering): Port device team_slave_1 removed [ 208.005008][ T6390] team0 (unregistering): Port device team_slave_0 removed [ 208.105481][ T7689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.451'. [ 208.526278][ T7654] tipc: Enabling of bearer rejected, failed to enable media [ 209.183283][ T7686] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.192993][ T7686] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.201977][ T7686] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.211008][ T7686] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.365906][ T7689] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 209.790633][ T7708] No such timeout policy "syz1" [ 210.507460][ T7536] chnl_net:caif_netlink_parms(): no params data found [ 210.731418][ T7718] netlink: 'syz.0.457': attribute type 10 has an invalid length. [ 211.269316][ T7718] syz_tun: entered promiscuous mode [ 211.296668][ T7718] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 211.613864][ T7536] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.626916][ T7536] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.647840][ T7536] bridge_slave_0: entered allmulticast mode [ 211.693839][ T7536] bridge_slave_0: entered promiscuous mode [ 211.753532][ T7536] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.789846][ T7536] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.844559][ T7536] bridge_slave_1: entered allmulticast mode [ 211.942954][ T7536] bridge_slave_1: entered promiscuous mode [ 213.145362][ T7747] usb usb1: usbfs: process 7747 (syz.3.463) did not claim interface 0 before use [ 213.160370][ T7536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.181161][ T7536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.859070][ T7536] team0: Port device team_slave_0 added [ 214.035894][ T7536] team0: Port device team_slave_1 added [ 216.892114][ T7760] libceph: resolve '. [ 216.892114][ T7760] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 216.892114][ T7760] ' (ret=-3): failed [ 216.934570][ T7536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.949849][ T7536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.977116][ T7536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.980772][ T5832] Bluetooth: hci4: unexpected event 0x03 length: 17 > 11 [ 217.012454][ T7536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.027163][ T7536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.053923][ T7536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.434505][ T7778] netfs: Couldn't get user pages (rc=-14) [ 217.649269][ T7536] hsr_slave_0: entered promiscuous mode [ 217.676014][ T7536] hsr_slave_1: entered promiscuous mode [ 218.983803][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 220.230882][ T7536] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 221.192915][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 221.231223][ T7536] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 221.245443][ T42] block nbd0: Possible stuck request ffff888025820000: control (read@0,4096B). Runtime 60 seconds [ 221.331082][ T7536] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 221.389723][ T7536] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 223.080334][ T7837] netlink: 68 bytes leftover after parsing attributes in process `syz.3.483'. [ 223.493976][ T7536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.567318][ T7536] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.594160][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.601349][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.234676][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.241951][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.022459][ T7536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.888676][ T7536] veth0_vlan: entered promiscuous mode [ 228.167334][ T7536] veth1_vlan: entered promiscuous mode [ 228.482209][ T7536] veth0_macvtap: entered promiscuous mode [ 228.565524][ T7536] veth1_macvtap: entered promiscuous mode [ 228.649990][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.761486][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.673477][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.766686][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.113472][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.151275][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.353686][ T5832] Bluetooth: hci1: command 0x0405 tx timeout [ 230.376154][ T7912] netlink: 40 bytes leftover after parsing attributes in process `syz.0.494'. [ 230.575193][ T7536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.412710][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.887991][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.953032][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.989302][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.012663][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.164454][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.204633][ T7536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.471178][ T7926] sp0: Synchronizing with TNC [ 232.476118][ T7536] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.476151][ T7536] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.476173][ T7536] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.476196][ T7536] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.524842][ T5836] Bluetooth: hci2: command 0x0405 tx timeout [ 232.626904][ T7935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.499'. [ 234.629116][ T7921] [U] ` [ 235.896665][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.967478][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.223182][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.285690][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.483058][ T7989] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 237.552508][ T7983] uprobe: syz.1.510:7983 failed to unregister, leaking uprobe [ 237.944037][ T7994] --map-set only usable from mangle table [ 238.752814][ T7990] wlan0 speed is unknown, defaulting to 1000 [ 238.812893][ T7990] wlan0 speed is unknown, defaulting to 1000 [ 239.262475][ T7990] wlan0 speed is unknown, defaulting to 1000 [ 239.290254][ T7990] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 239.794505][ T7990] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 241.050277][ T7990] wlan0 speed is unknown, defaulting to 1000 [ 241.069439][ T7990] wlan0 speed is unknown, defaulting to 1000 [ 241.117476][ T7990] wlan0 speed is unknown, defaulting to 1000 [ 241.152019][ T7990] wlan0 speed is unknown, defaulting to 1000 [ 241.168964][ T7990] wlan0 speed is unknown, defaulting to 1000 [ 245.104833][ T8064] 9pnet: bogus RWRITE count (512 > 41) [ 245.463510][ T5869] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 245.614675][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 245.661296][ T5869] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 245.690311][ T5869] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 245.721340][ T5869] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 245.768472][ T5869] usb 2-1: config 1 has no interface number 0 [ 245.970563][ T5869] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.981634][ T5869] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 246.012695][ T5869] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 246.033146][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.172744][ T5869] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 247.767568][ T5869] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 248.050449][ T8100] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 249.484071][ T5873] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 249.648897][ T875] usb 2-1: USB disconnect, device number 7 [ 249.685340][ T875] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 249.920785][ T5873] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 250.384223][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 250.410692][ T8124] warning: `syz.3.538' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 250.659948][ T5873] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.758515][ T5873] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 250.823883][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.840702][ T5873] usb 7-1: config 0 descriptor?? [ 250.873680][ T5873] pwc: Askey VC010 type 2 USB webcam detected. [ 251.605625][ T42] block nbd0: Possible stuck request ffff888025820000: control (read@0,4096B). Runtime 90 seconds [ 251.624562][ T5873] pwc: recv_control_msg error -32 req 02 val 2b00 [ 251.723588][ T5873] pwc: recv_control_msg error -32 req 02 val 2700 [ 251.883201][ T5873] pwc: recv_control_msg error -32 req 02 val 2c00 [ 251.891078][ T5873] pwc: recv_control_msg error -32 req 04 val 1000 [ 251.961175][ T8137] xt_SECMARK: unable to map security context 'unconfined' [ 252.526965][ T5873] pwc: recv_control_msg error -32 req 04 val 1300 [ 252.550767][ T5873] pwc: recv_control_msg error -32 req 04 val 1400 [ 252.561385][ T5873] pwc: recv_control_msg error -32 req 02 val 2000 [ 252.578650][ T52] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.590407][ T5873] pwc: recv_control_msg error -32 req 02 val 2100 [ 252.607207][ T5873] pwc: recv_control_msg error -32 req 04 val 1500 [ 252.650735][ T5873] pwc: recv_control_msg error -32 req 02 val 2500 [ 252.664083][ T5873] pwc: recv_control_msg error -32 req 02 val 2400 [ 252.932293][ T8146] hfs: can't find a HFS filesystem on dev nullb0 [ 253.047724][ T5873] pwc: recv_control_msg error -71 req 02 val 2900 [ 253.093327][ T52] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.183540][ T5873] pwc: recv_control_msg error -71 req 02 val 2800 [ 253.516296][ T5873] pwc: recv_control_msg error -71 req 04 val 1100 [ 253.563964][ T5873] pwc: recv_control_msg error -71 req 04 val 1200 [ 253.695070][ T5873] pwc: Registered as video103. [ 253.735254][ T5873] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input7 [ 253.763240][ T5873] usb 7-1: USB disconnect, device number 2 [ 253.943209][ T52] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.555290][ T52] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.399374][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.429539][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.438656][ T52] bridge_slave_1: left allmulticast mode [ 255.444097][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.458880][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.471175][ T52] bridge_slave_1: left promiscuous mode [ 255.477376][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 255.487668][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.555165][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.669594][ T52] bridge_slave_0: left allmulticast mode [ 255.694387][ T52] bridge_slave_0: left promiscuous mode [ 255.711142][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.857909][ T8178] block nbd1: shutting down sockets [ 256.027207][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.033676][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.777486][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.789381][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.800094][ T52] bond0 (unregistering): Released all slaves [ 256.893659][ T5873] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 256.941439][ T8174] wlan0 speed is unknown, defaulting to 1000 [ 257.159879][ T5873] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 257.176049][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.203900][ T5873] usb 1-1: Product: syz [ 257.213508][ T5873] usb 1-1: Manufacturer: syz [ 257.233645][ T5873] usb 1-1: SerialNumber: syz [ 257.311656][ T5873] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 257.505206][ T5869] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 257.563830][ T5832] Bluetooth: hci2: command tx timeout [ 258.478745][ T875] wlan0 speed is unknown, defaulting to 1000 [ 258.518464][ T875] infiniband syz2: ib_query_port failed (-19) [ 259.167082][ T52] hsr_slave_0: left promiscuous mode [ 259.226611][ T5869] usb 1-1: Service connection timeout for: 256 [ 259.234433][ T5869] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 259.266203][ T52] hsr_slave_1: left promiscuous mode [ 259.272580][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.289558][ T5869] ath9k_htc: Failed to initialize the device [ 259.304935][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.320112][ T5869] usb 1-1: ath9k_htc: USB layer deinitialized [ 259.347564][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.368226][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.390602][ T8225] sctp: [Deprecated]: syz.1.561 (pid 8225) Use of int in maxseg socket option. [ 259.390602][ T8225] Use struct sctp_assoc_value instead [ 259.468631][ T52] veth1_macvtap: left promiscuous mode [ 259.493510][ T52] veth0_macvtap: left promiscuous mode [ 259.499352][ T52] veth1_vlan: left promiscuous mode [ 259.509812][ T52] veth0_vlan: left promiscuous mode [ 259.655410][ T5832] Bluetooth: hci2: command tx timeout [ 260.571750][ T5819] usb 1-1: USB disconnect, device number 6 [ 261.783817][ T5832] Bluetooth: hci2: command tx timeout [ 263.863461][ T5832] Bluetooth: hci2: command tx timeout [ 266.748486][ T8274] kvm: kvm [8273]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x3900000857 [ 266.791625][ T8274] kvm_intel: kvm [8273]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x3d00000865 [ 268.351688][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.6.577'. [ 270.183500][ T5836] Bluetooth: hci2: command 0x0405 tx timeout [ 270.523217][ T52] team0 (unregistering): Port device team_slave_1 removed [ 271.085271][ T52] team0 (unregistering): Port device team_slave_0 removed [ 273.342802][ T8327] netlink: 44 bytes leftover after parsing attributes in process `syz.3.587'. [ 273.876516][ T8341] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 274.018854][ T8174] chnl_net:caif_netlink_parms(): no params data found [ 276.755305][ T8174] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.261785][ T8174] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.401341][ T5836] Bluetooth: hci2: command 0x0405 tx timeout [ 277.466422][ T8174] bridge_slave_0: entered allmulticast mode [ 277.478974][ T8174] bridge_slave_0: entered promiscuous mode [ 277.491573][ T8174] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.501878][ T8174] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.509413][ T8174] bridge_slave_1: entered allmulticast mode [ 277.516536][ T8174] bridge_slave_1: entered promiscuous mode [ 278.397497][ T8174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.744884][ T8174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.146932][ T8384] loop7: detected capacity change from 0 to 16384 [ 279.413054][ T8174] team0: Port device team_slave_0 added [ 279.428383][ T8384] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.548616][ T8174] team0: Port device team_slave_1 added [ 279.581636][ T29] audit: type=1326 audit(1740359371.727:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8383 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bfb8d169 code=0x7ffc0000 [ 279.581641][ T8384] Buffer I/O error on dev loop7, logical block 0, async page read [ 279.605446][ T29] audit: type=1326 audit(1740359371.757:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8383 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bfb8d169 code=0x7ffc0000 [ 280.518322][ T29] audit: type=1326 audit(1740359371.807:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8383 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f04bfb8d169 code=0x7ffc0000 [ 280.521718][ T8392] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 280.605016][ T8390] netlink: 44 bytes leftover after parsing attributes in process `syz.0.599'. [ 280.839149][ T8384] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 280.865269][ T8395] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 280.888086][ T8384] Buffer I/O error on dev loop7, logical block 1, async page read [ 281.017342][ T8384] Dev loop7: unable to read RDB block 8 [ 281.049660][ T8395] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 281.770787][ T42] block nbd0: Possible stuck request ffff888025820000: control (read@0,4096B). Runtime 120 seconds [ 281.783796][ T8384] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 281.823537][ T8384] Buffer I/O error on dev loop7, logical block 3, async page read [ 281.835451][ T8384] loop7: unable to read partition table [ 281.841370][ T8384] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 282.042420][ T8174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.049572][ T8174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.100802][ T8174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.135393][ T8174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.155033][ T8174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.197828][ T8174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.124572][ T8174] hsr_slave_0: entered promiscuous mode [ 283.152593][ T8174] hsr_slave_1: entered promiscuous mode [ 283.194383][ T8174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.203821][ T8174] Cannot create hsr debugfs directory [ 285.366067][ T8450] capability: warning: `syz.0.611' uses deprecated v2 capabilities in a way that may be insecure [ 285.480898][ T8452] program syz.0.611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.322696][ T8174] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 286.467609][ T8458] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 286.476930][ T8174] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 287.227493][ T8458] kvm: pic: non byte read [ 287.280330][ T8174] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 287.324751][ T8174] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 288.231761][ T8174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.035825][ T8174] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.141944][ T8313] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.149159][ T8313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.285459][ T8174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 289.938077][ T8501] netlink: 60 bytes leftover after parsing attributes in process `syz.3.621'. [ 289.947346][ T8501] unsupported nlmsg_type 40 [ 290.291906][ T8174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.010227][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.017430][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.066119][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 291.099696][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 291.177477][ T8500] ceph: No mds server is up or the cluster is laggy [ 291.529430][ T5832] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 292.385091][ T8524] netlink: 'syz.0.627': attribute type 1 has an invalid length. [ 292.521875][ T8174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.546216][ T5832] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 295.556676][ T5832] Bluetooth: hci0: Injecting HCI hardware error event [ 295.567922][ T5836] Bluetooth: hci0: hardware error 0x00 [ 295.889486][ T8565] fuse: Unknown parameter '00000000000000000000' [ 296.133460][ T8571] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.718551][ T5836] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 298.986403][ T8174] veth0_vlan: entered promiscuous mode [ 299.090124][ T8174] veth1_vlan: entered promiscuous mode [ 299.656466][ T8174] veth0_macvtap: entered promiscuous mode [ 299.704281][ T5836] Bluetooth: hci2: command 0x0405 tx timeout [ 299.845460][ T8174] veth1_macvtap: entered promiscuous mode [ 300.177611][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.189958][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.369445][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.390030][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.642'. [ 300.446955][ T5819] IPVS: starting estimator thread 0... [ 300.458611][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.469967][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.775949][ T8602] IPVS: using max 24 ests per chain, 57600 per kthread [ 300.873548][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.909470][ T8174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.003901][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.055126][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.073453][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.087225][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.097717][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.109716][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.121735][ T8174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.702908][ T8174] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.731063][ T5819] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 301.743700][ T8174] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.752453][ T8174] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.790099][ T8618] fuse: Bad value for 'fd' [ 301.885297][ T8174] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.971691][ T5819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.037616][ T5819] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 302.091201][ T5819] usb 4-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 302.173658][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.737994][ T5819] usb 4-1: config 0 descriptor?? [ 303.136739][ T6118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.166114][ T6118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.717762][ T875] usb 4-1: USB disconnect, device number 4 [ 304.802451][ T8313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.850869][ T8313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.387115][ T8672] xt_CT: No such helper "netbios-ns" [ 310.106804][ T8685] JFS: discard option not supported on device [ 310.129842][ T8685] syz.1.658: attempt to access beyond end of device [ 310.129842][ T8685] loop1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 310.269418][ T8685] syz.1.658: attempt to access beyond end of device [ 310.269418][ T8685] loop1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 311.094573][ T8685] Mount JFS Failure: -5 [ 311.121043][ T8685] jfs_mount failed w/return code = -5 [ 312.773954][ T8708] netlink: 12 bytes leftover after parsing attributes in process `syz.6.660'. [ 313.281012][ T6223] block nbd0: Possible stuck request ffff888025820000: control (read@0,4096B). Runtime 150 seconds [ 315.383573][ T5821] Bluetooth: hci1: command 0x0405 tx timeout [ 315.840931][ T8740] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 316.023444][ T5832] Bluetooth: hci2: command 0x0405 tx timeout [ 316.521533][ T8755] program syz.1.669 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.946241][ T8761] netlink: 'syz.7.674': attribute type 10 has an invalid length. [ 317.168850][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.178297][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.480675][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.978791][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.195503][ T8761] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.202670][ T8761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.210198][ T8761] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.218472][ T8761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.546138][ T8761] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 321.127579][ T8761] syz.7.674 (8761) used greatest stack depth: 17712 bytes left [ 321.296052][ T8846] xt_ecn: cannot match TCP bits for non-tcp packets [ 323.065059][ T8865] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.103544][ T875] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 324.276215][ T875] usb 4-1: Using ep0 maxpacket: 8 [ 324.290390][ T875] usb 4-1: config 1 interface 0 has no altsetting 0 [ 324.316365][ T875] usb 4-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 324.333618][ T875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.341953][ T875] usb 4-1: Product: syz [ 324.358543][ T875] usb 4-1: Manufacturer: syz [ 324.385261][ T875] usb 4-1: SerialNumber: syz [ 325.396678][ T8867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.420913][ T8867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.502571][ T8890] libceph: resolve '. [ 326.502571][ T8890] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 326.502571][ T8890] ' (ret=-3): failed [ 327.526321][ T875] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input8 [ 327.558362][ T5180] bcm5974 4-1:1.0: could not read from device [ 327.731519][ T875] usb 4-1: USB disconnect, device number 5 [ 336.414630][ T8956] netlink: 44 bytes leftover after parsing attributes in process `syz.6.704'. [ 336.621274][ T8964] block device autoloading is deprecated and will be removed. [ 337.348724][ T8974] netlink: 'syz.3.708': attribute type 322 has an invalid length. [ 340.994656][ T9016] netlink: 44 bytes leftover after parsing attributes in process `syz.1.719'. [ 341.683924][ T8] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 343.095334][ T8] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 343.106469][ T8] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 343.115509][ T8] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 343.124747][ T8] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 343.153930][ T9039] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 343.165867][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 343.284269][ T9039] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 343.591830][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 343.603616][ T8] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 343.733425][ T8] usb 8-1: string descriptor 0 read error: -22 [ 343.739733][ T8] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 343.750161][ T6223] block nbd0: Possible stuck request ffff888025820000: control (read@0,4096B). Runtime 180 seconds [ 343.786253][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.834621][ T8] usb 8-1: config 0 descriptor?? [ 344.130276][ T8] hub 8-1:0.0: bad descriptor, ignoring hub [ 344.148172][ T8] hub 8-1:0.0: probe with driver hub failed with error -5 [ 344.159161][ T8] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input9 [ 344.240323][ T9048] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 344.441830][ T9048] kvm: pic: level sensitive irq not supported [ 344.442798][ T9048] kvm: pic: non byte read [ 345.297740][ T875] usb 8-1: USB disconnect, device number 2 [ 345.790750][ T29] audit: type=1326 audit(1740359437.937:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9069 comm="syz.7.730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2de78d169 code=0x0 [ 349.090552][ T5832] Bluetooth: hci2: command 0x0405 tx timeout [ 350.749458][ T9121] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 350.760613][ T9121] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 356.007173][ T9164] input: syz0 as /devices/virtual/input/input10 [ 356.691409][ T29] audit: type=1326 audit(1740359448.837:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9167 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6338d169 code=0x7ffc0000 [ 356.717952][ T9168] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 356.730376][ T9168] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 356.793975][ T29] audit: type=1326 audit(1740359448.857:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9167 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6338d169 code=0x7ffc0000 [ 356.983016][ T29] audit: type=1326 audit(1740359448.867:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9167 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e6338d169 code=0x7ffc0000 [ 358.129435][ T29] audit: type=1326 audit(1740359448.867:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9167 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6338d169 code=0x7ffc0000 [ 358.492937][ T29] audit: type=1326 audit(1740359448.867:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9167 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6338d169 code=0x7ffc0000 [ 358.602326][ T29] audit: type=1326 audit(1740359448.867:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9167 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f0e6338d169 code=0x7ffc0000 [ 359.056090][ T29] audit: type=1326 audit(1740359448.867:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9167 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6338d169 code=0x7ffc0000 [ 359.087115][ T29] audit: type=1326 audit(1740359448.867:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9167 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6338d169 code=0x7ffc0000 [ 359.443757][ T29] audit: type=1326 audit(1740359448.867:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9167 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0e6338d169 code=0x7ffc0000 [ 359.530272][ T29] audit: type=1326 audit(1740359448.867:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9167 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6338d169 code=0x7ffc0000 [ 359.998671][ T5819] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 360.834016][ T5819] usb 2-1: Using ep0 maxpacket: 8 [ 360.877246][ T5819] usb 2-1: config 0 has no interfaces? [ 360.922340][ T5819] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 360.957031][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.991527][ T5819] usb 2-1: config 0 descriptor?? [ 361.606888][ T9218] input: syz0 as /devices/virtual/input/input12 [ 361.896171][ T9224] dns_resolver: Unsupported content type (24) [ 362.285269][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 362.318054][ T9195] macvtap1: entered promiscuous mode [ 362.343626][ T9195] bond0: entered promiscuous mode [ 362.361006][ T9195] macvtap1: entered allmulticast mode [ 362.399291][ T9195] bond0: entered allmulticast mode [ 362.577157][ T9195] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 363.398408][ T9226] macvtap1: left promiscuous mode [ 363.403880][ T9226] bond0: left promiscuous mode [ 363.408762][ T9226] macvtap1: left allmulticast mode [ 363.414163][ T9226] bond0: left allmulticast mode [ 363.864083][ T875] usb 2-1: USB disconnect, device number 8 [ 371.526527][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 371.590048][ T9303] 8021q: adding VLAN 0 to HW filter on device team1 [ 373.084126][ T5832] Bluetooth: hci2: command 0x0405 tx timeout [ 373.607942][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 373.619818][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 373.629217][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 373.674430][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 373.683231][ T5836] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 373.690873][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 373.802759][ T6223] block nbd0: Possible stuck request ffff888025820000: control (read@0,4096B). Runtime 210 seconds [ 375.571997][ T9341] program syz.3.782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.765078][ T5836] Bluetooth: hci5: command tx timeout [ 375.873453][ T9341] program syz.3.782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.888318][ T9341] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 376.798094][ T9325] chnl_net:caif_netlink_parms(): no params data found [ 377.834366][ T5836] Bluetooth: hci5: command tx timeout [ 378.370477][ T5826] udevd[5826]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 378.428657][ T9325] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.565693][ T9325] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.573754][ T9325] bridge_slave_0: entered allmulticast mode [ 378.581266][ T9325] bridge_slave_0: entered promiscuous mode [ 378.589913][ T9325] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.613092][ T9325] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.620938][ T9325] bridge_slave_1: entered allmulticast mode [ 378.647366][ T9325] bridge_slave_1: entered promiscuous mode [ 379.113238][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.119924][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.676543][ T9325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.955549][ T5836] Bluetooth: hci5: command tx timeout [ 380.037977][ T9325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.273775][ T9386] tmpfs: Bad value for 'mpol' [ 381.983695][ T5819] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 382.008499][ T9325] team0: Port device team_slave_0 added [ 382.055421][ T9325] team0: Port device team_slave_1 added [ 382.105160][ T5836] Bluetooth: hci5: command tx timeout [ 382.426518][ T5819] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 382.624535][ T5819] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 382.633820][ T9325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.674594][ T9325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.700549][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.723159][ T5819] usb 4-1: config 0 has an invalid descriptor of length 100, skipping remainder of the config [ 382.778290][ T9325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.819142][ T9325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.832500][ T9325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.860125][ T5819] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 382.860229][ T5819] usb 4-1: config 0 has no interface number 0 [ 382.860397][ T5819] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 383.133232][ T9325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.843196][ T5819] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 383.912391][ T5819] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 384.118812][ T5819] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.519831][ T5819] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice=33.b9 [ 384.586221][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.675479][ T5819] usb 4-1: config 0 descriptor?? [ 385.629596][ T5819] usb 4-1: can't set config #0, error -71 [ 385.689743][ T5819] usb 4-1: USB disconnect, device number 6 [ 387.132402][ T9325] hsr_slave_0: entered promiscuous mode [ 387.208918][ T9325] hsr_slave_1: entered promiscuous mode [ 387.223090][ T9325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.243520][ T9325] Cannot create hsr debugfs directory [ 389.580927][ T9444] bond0: entered promiscuous mode [ 389.586128][ T9444] bond_slave_0: entered promiscuous mode [ 389.591950][ T9444] bond_slave_1: entered promiscuous mode [ 389.599892][ T9444] batadv0: entered promiscuous mode [ 389.608363][ T9444] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 392.149050][ T9454] syz_tun: entered allmulticast mode [ 392.745582][ T9325] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 392.760576][ T9325] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 393.235041][ T9325] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 393.472998][ T9468] ipt_rpfilter: unknown options [ 393.510343][ T9325] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 394.059698][ T9325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.106401][ T9325] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.209898][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.217157][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.638986][ T6390] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.646390][ T6390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.192397][ T9325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.491916][ T9535] delete_channel: no stack [ 401.498694][ T9535] delete_channel: no stack [ 402.093633][ T5832] Bluetooth: hci2: command 0x0405 tx timeout [ 402.513564][ T5836] Bluetooth: hci3: command 0x0405 tx timeout [ 403.863845][ T6223] block nbd0: Possible stuck request ffff888025820000: control (read@0,4096B). Runtime 240 seconds [ 406.470982][ T9325] veth0_vlan: entered promiscuous mode [ 406.528002][ T9325] veth1_vlan: entered promiscuous mode [ 407.602616][ T9577] netlink: 60 bytes leftover after parsing attributes in process `syz.7.823'. [ 407.632374][ T9325] veth0_macvtap: entered promiscuous mode [ 407.695404][ T9325] veth1_macvtap: entered promiscuous mode [ 407.784701][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.823520][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.956814][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.073776][ T9587] Device name cannot be null; rc = [-22] [ 408.144348][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.688985][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.712716][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.737169][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.887120][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.136321][ T9325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.370209][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.543373][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.553254][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.572488][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.593468][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.644193][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.768169][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.825501][ T5832] Bluetooth: hci5: command 0x0405 tx timeout [ 409.999486][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.644360][ T9609] syz.7.831 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 410.869296][ T9325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.956459][ T9325] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.976249][ T9325] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.998059][ T9325] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.853477][ T9325] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.123632][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.160238][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.304554][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.338740][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.385909][ T9634] batadv0: entered promiscuous mode [ 413.391726][ T9634] vlan2: entered promiscuous mode [ 413.814960][ T9634] batadv0: left promiscuous mode [ 416.193622][ T5832] Bluetooth: hci5: command 0x0405 tx timeout [ 418.838544][ T5836] Bluetooth: hci5: link tx timeout [ 418.845360][ T5836] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 418.857722][ T5832] Bluetooth: hci5: link tx timeout [ 418.862884][ T5832] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 419.346068][ T9684] openvswitch: netlink: nsh attribute has 3 unknown bytes. [ 419.939786][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.844'. [ 419.941369][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'. [ 420.092937][ T9688] ubi31: attaching mtd0 [ 420.528650][ T9688] ubi31: scanning is finished [ 420.613443][ T9688] ubi31: empty MTD device detected [ 420.917616][ T5832] Bluetooth: hci5: command 0x0405 tx timeout [ 421.711078][ T9688] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 421.734099][ T9688] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 421.741481][ T9688] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 421.749115][ T5869] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 421.759693][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.848'. [ 421.853477][ T9688] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 421.894250][ T9688] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 421.901186][ T9688] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 422.027691][ T9716] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 422.183512][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 422.190393][ T9688] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2507751980 [ 422.247711][ T9688] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 422.464442][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 422.483566][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 422.489249][ T9705] ubi31: background thread "ubi_bgt31d" started, PID 9705 [ 422.494995][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 423.414607][ T5869] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 423.533587][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.669184][ T9728] netlink: 'syz.1.853': attribute type 29 has an invalid length. [ 423.816264][ T9728] netlink: 'syz.1.853': attribute type 29 has an invalid length. [ 423.885481][ T9728] netlink: 508 bytes leftover after parsing attributes in process `syz.1.853'. [ 423.895654][ T9728] unsupported nla_type 58 [ 423.905176][ T5869] usb 2-1: config 0 descriptor?? [ 423.965821][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.853'. [ 424.129377][ T5869] usb 2-1: can't set config #0, error -71 [ 424.163433][ T5869] usb 2-1: USB disconnect, device number 9 [ 426.360235][ T9747] misc userio: Invalid payload size [ 431.561853][ T9780] nfs: Unknown parameter ':' [ 432.788563][ T9789] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 434.085306][ T6223] block nbd0: Possible stuck request ffff888025820000: control (read@0,4096B). Runtime 270 seconds [ 439.125489][ T9852] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 439.134388][ T9852] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 439.142932][ T9852] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 440.374349][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.399993][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.642466][ T9874] syz_tun: entered allmulticast mode [ 443.504429][ T9874] syz_tun: left allmulticast mode [ 443.611787][ T9890] netlink: 60 bytes leftover after parsing attributes in process `syz.1.882'. [ 443.714524][ T5836] Bluetooth: hci4: Malformed Event: 0x13 [ 449.385595][ T5832] Bluetooth: hci5: command 0x0405 tx timeout [ 450.272024][ T9945] loop6: detected capacity change from 0 to 64 [ 450.449118][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 452.005671][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 452.014860][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 452.129263][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 452.138507][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 452.153139][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 452.162322][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 452.222792][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 452.232040][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 453.881068][ T9965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.796954][ T9977] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 455.534632][ T9970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.902'. [ 455.758944][ T9980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 456.020915][ T9985] input: syz0 as /devices/virtual/input/input14 [ 456.183261][ T9990] Bluetooth: MGMT ver 1.23 [ 458.470263][T10000] orangefs_mount: mount request failed with -4 [ 459.967923][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.8.909'. [ 462.421098][T10038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 462.480602][T10032] ALSA: seq fatal error: cannot create timer (-19) [ 465.143511][ T6223] block nbd0: Possible stuck request ffff888025820000: control (read@0,4096B). Runtime 300 seconds [ 466.050494][T10080] x_tables: unsorted underflow at hook 3 [ 466.904887][T10092] syz_tun: entered allmulticast mode [ 467.644866][T10080] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 473.125294][T10141] tmpfs: Unknown parameter '' [ 473.146952][T10141] xt_CONNSECMARK: invalid mode: 0 [ 473.573431][ T875] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 473.931508][ T875] usb 9-1: Using ep0 maxpacket: 8 [ 474.049372][ T875] usb 9-1: config 0 has no interfaces? [ 474.224707][ T875] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 474.293425][ T875] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.367743][ T875] usb 9-1: config 0 descriptor?? [ 474.454270][T10152] vivid-000: disconnect [ 475.769564][ T5872] usb 9-1: USB disconnect, device number 2 [ 475.998261][T10135] vivid-000: reconnect [ 477.202308][T10166] Bluetooth: MGMT ver 1.23 [ 480.556255][T10184] input: syz0 as /devices/virtual/input/input17 [ 480.562644][T10184] input: failed to attach handler leds to device input17, error: -6 [ 481.819289][T10186] wlan0 speed is unknown, defaulting to 1000 [ 481.821200][T10186] wlan0 speed is unknown, defaulting to 1000 [ 481.838918][T10186] wlan0 speed is unknown, defaulting to 1000 [ 483.668448][T10186] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 483.923121][T10186] wlan0 speed is unknown, defaulting to 1000 [ 484.759736][T10186] wlan0 speed is unknown, defaulting to 1000 [ 484.984380][T10186] wlan0 speed is unknown, defaulting to 1000 [ 485.069554][T10186] wlan0 speed is unknown, defaulting to 1000 [ 485.446383][T10186] wlan0 speed is unknown, defaulting to 1000 [ 486.204389][T10186] wlan0 speed is unknown, defaulting to 1000 [ 487.233705][T10223] netlink: 'syz.1.955': attribute type 4 has an invalid length. [ 488.208106][ T5832] Bluetooth: hci5: command 0x0405 tx timeout [ 488.460859][T10235] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 493.703103][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 493.703149][ T29] audit: type=1326 audit(1740359585.847:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10258 comm="syz.1.966" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04bfb8d169 code=0x0 [ 495.549303][ T6223] block nbd0: Possible stuck request ffff888025820000: control (read@0,4096B). Runtime 330 seconds [ 496.320166][ T5832] Bluetooth: hci5: command 0x0405 tx timeout [ 497.165609][T10293] netlink: 44 bytes leftover after parsing attributes in process `syz.8.971'. [ 498.050813][T10301] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 499.150580][T10300] pimreg: entered allmulticast mode [ 499.274975][T10300] pimreg: left allmulticast mode [ 501.633441][ T5871] IPVS: starting estimator thread 0... [ 501.803825][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.810168][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.816759][T10322] IPVS: using max 38 ests per chain, 91200 per kthread [ 502.868437][T10331] capability: warning: `syz.1.980' uses 32-bit capabilities (legacy support in use) [ 505.103787][T10337] pim6reg: entered allmulticast mode [ 507.463456][ T5832] Bluetooth: hci5: command 0x0405 tx timeout [ 511.412933][T10400] netlink: 16 bytes leftover after parsing attributes in process `syz.7.996'. [ 512.874492][T10412] serio: Serial port ptm0 [ 515.434082][ T30] INFO: task syz.6.755:9192 blocked for more than 144 seconds. [ 515.516220][ T30] Not tainted 6.14.0-rc4-syzkaller #0 [ 515.540767][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.673871][ T30] task:syz.6.755 state:D stack:25824 pid:9192 tgid:9181 ppid:7536 task_flags:0x400040 flags:0x00004006 [ 515.686683][ T30] Call Trace: [ 515.690054][ T30] [ 515.693017][ T30] __schedule+0x18bc/0x4c40 [ 515.733469][ T30] ? __pfx___schedule+0x10/0x10 [ 515.748713][ T30] ? __pfx_lock_release+0x10/0x10 [ 515.764717][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 516.401866][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 516.408223][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 516.492370][T10419] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1000'. [ 516.504575][ T30] ? schedule+0x90/0x320 [ 516.993480][ T30] schedule+0x14b/0x320 [ 517.001126][ T30] schedule_preempt_disabled+0x13/0x30 [ 517.024470][ T30] __mutex_lock+0x817/0x1010 [ 517.029331][ T30] ? __mutex_lock+0x602/0x1010 [ 517.049843][T10416] syz.1.999 (10416): drop_caches: 2 [ 517.062509][ T30] ? sync_bdevs+0x1ae/0x340 [ 517.067682][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 517.072936][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 517.078883][ T30] ? __pfx_lock_release+0x10/0x10 [ 517.084972][ T30] ? _atomic_dec_and_lock+0x9a/0x130 [ 517.101522][ T30] ? iput+0x3be/0xa50 [ 517.110927][T10416] Process accounting resumed [ 517.112863][ T30] sync_bdevs+0x1ae/0x340 [ 517.134427][ T30] ksys_sync+0xe2/0x1c0 [ 517.141549][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 517.156703][ T30] ? do_syscall_64+0xb6/0x230 [ 517.175179][ T30] __do_sys_sync+0xe/0x20 [ 517.183214][ T30] do_syscall_64+0xf3/0x230 [ 517.194894][ T30] ? clear_bhb_loop+0x35/0x90 [ 517.200234][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.208330][ T30] RIP: 0033:0x7fe03618d169 [ 517.214891][ T30] RSP: 002b:00007fe036f77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 517.226522][ T30] RAX: ffffffffffffffda RBX: 00007fe0363a6240 RCX: 00007fe03618d169 [ 517.235728][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 517.243936][ T30] RBP: 00007fe0363a6240 R08: 0000000000000000 R09: 0000000000000000 [ 517.251953][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.260757][ T30] R13: 0000000000000001 R14: 00007fe0363a6240 R15: 00007ffeb2f83818 [ 517.269298][ T30] [ 517.272389][ T30] [ 517.272389][ T30] Showing all locks held in the system: [ 517.282913][ T30] 1 lock held by khungtaskd/30: [ 517.288699][ T30] #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 517.313882][ T30] 2 locks held by getty/5578: [ 517.329098][ T30] #0: ffff88803193c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 517.340379][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 517.356462][ T30] 1 lock held by udevd/5818: [ 517.361099][ T30] #0: ffff8880256e34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 517.370483][ T30] 3 locks held by kworker/u8:15/8814: [ 517.376166][ T30] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 517.387947][ T30] #1: ffffc90003f2fc60 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 517.401609][ T30] #2: ffffffff8eb3e300 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 517.411648][ T30] 1 lock held by syz.6.755/9192: [ 517.416796][ T30] #0: ffff8880256e34c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 517.426511][ T30] 1 lock held by syz.0.991/10382: [ 517.431541][ T30] #0: ffff8880256e34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 517.440973][ T30] 2 locks held by syz.7.1000/10417: [ 517.446300][ T30] #0: ffff88807b43e808 (&sb->s_type->i_mutex_key#9){+.+.}-{4:4}, at: sock_close+0x90/0x240 [ 517.458155][ T30] #1: ffffffff8eb3e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 517.469221][ T30] [ 517.471578][ T30] ============================================= [ 517.471578][ T30] [ 517.480293][ T30] NMI backtrace for cpu 0 [ 517.480314][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller #0 [ 517.480332][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 517.480342][ T30] Call Trace: [ 517.480348][ T30] [ 517.480363][ T30] dump_stack_lvl+0x241/0x360 [ 517.480387][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.480403][ T30] ? __pfx__printk+0x10/0x10 [ 517.480436][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 517.480459][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 517.480473][ T30] ? _printk+0xd5/0x120 [ 517.480494][ T30] ? __pfx__printk+0x10/0x10 [ 517.480514][ T30] ? __wake_up_klogd+0xcc/0x110 [ 517.480534][ T30] ? __pfx__printk+0x10/0x10 [ 517.480555][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 517.480576][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 517.480596][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 517.480616][ T30] watchdog+0x1058/0x10a0 [ 517.480638][ T30] ? watchdog+0x1ea/0x10a0 [ 517.480662][ T30] ? __pfx_watchdog+0x10/0x10 [ 517.480683][ T30] kthread+0x7a9/0x920 [ 517.480703][ T30] ? __pfx_kthread+0x10/0x10 [ 517.480725][ T30] ? __pfx_watchdog+0x10/0x10 [ 517.480745][ T30] ? __pfx_kthread+0x10/0x10 [ 517.480763][ T30] ? __pfx_kthread+0x10/0x10 [ 517.480785][ T30] ? __pfx_kthread+0x10/0x10 [ 517.480804][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 517.480821][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 517.480839][ T30] ? __pfx_kthread+0x10/0x10 [ 517.480860][ T30] ret_from_fork+0x4b/0x80 [ 517.480878][ T30] ? __pfx_kthread+0x10/0x10 [ 517.480899][ T30] ret_from_fork_asm+0x1a/0x30 [ 517.480929][ T30] [ 517.480935][ T30] Sending NMI from CPU 0 to CPUs 1: [ 517.651186][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 517.683990][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 517.690907][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller #0 [ 517.699668][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 517.709742][ T30] Call Trace: [ 517.713028][ T30] [ 517.715953][ T30] dump_stack_lvl+0x241/0x360 [ 517.720627][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.725836][ T30] ? __pfx__printk+0x10/0x10 [ 517.730421][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 517.736396][ T30] ? vscnprintf+0x5d/0x90 [ 517.740723][ T30] panic+0x349/0x880 [ 517.744640][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 517.750804][ T30] ? __pfx_panic+0x10/0x10 [ 517.755216][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 517.760600][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 517.766760][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 517.772927][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 517.779092][ T30] watchdog+0x1097/0x10a0 [ 517.783421][ T30] ? watchdog+0x1ea/0x10a0 [ 517.787844][ T30] ? __pfx_watchdog+0x10/0x10 [ 517.792527][ T30] kthread+0x7a9/0x920 [ 517.796612][ T30] ? __pfx_kthread+0x10/0x10 [ 517.801236][ T30] ? __pfx_watchdog+0x10/0x10 [ 517.805942][ T30] ? __pfx_kthread+0x10/0x10 [ 517.810534][ T30] ? __pfx_kthread+0x10/0x10 [ 517.815119][ T30] ? __pfx_kthread+0x10/0x10 [ 517.819703][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 517.824893][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 517.830083][ T30] ? __pfx_kthread+0x10/0x10 [ 517.834667][ T30] ret_from_fork+0x4b/0x80 [ 517.839079][ T30] ? __pfx_kthread+0x10/0x10 [ 517.843665][ T30] ret_from_fork_asm+0x1a/0x30 [ 517.848438][ T30] [ 517.851737][ T30] Kernel Offset: disabled [ 517.856054][ T30] Rebooting in 86400 seconds..