last executing test programs: 9.826774495s ago: executing program 3 (id=1063): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 9.764783137s ago: executing program 1 (id=1064): r0 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x222203, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002db9700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f000000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8) write(r0, &(0x7f0000000000)="240000001a005f0214f9f40700090100000000000000001f0000000008000400010000", 0x23) 9.226058171s ago: executing program 0 (id=1066): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 9.116057283s ago: executing program 1 (id=1067): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'nicvf0\x00'}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) accept4(r1, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000600)=0x80, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.011169156s ago: executing program 2 (id=1068): socket$inet6(0xa, 0x3, 0x8000000003c) userfaultfd(0x80801) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4000) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES8=r1], 0x20) 8.959368518s ago: executing program 1 (id=1069): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1}) 8.830951451s ago: executing program 2 (id=1070): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x7}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x3, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 8.765222193s ago: executing program 1 (id=1071): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r5 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000009b80)={0x40000012}) read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000000)={0x2004, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c81968a19c5f20e62120d02200100000000", @ANYRES32=0x0, @ANYBLOB="312400000000000014002b8030001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x89b0, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)=@ethtool_eee={0x0, 0x1, 0xb, 0x2, 0x8, 0x2, 0x65, 0x2, [0x3, 0xc]}}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x9, 0xffffffffffffffff}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r8) sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 8.721136524s ago: executing program 2 (id=1072): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000300)) socket$tipc(0x1e, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(0x0, 0x1) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a030700000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021780000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000004c0003804800008008000340000000023c000b80100001800c000100636f756e7465720028000180090001006c6173740000000018000280"], 0xfc}}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)=ANY=[], 0x28}, 0x0) 8.437486241s ago: executing program 0 (id=1073): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) close(r0) 7.564703663s ago: executing program 1 (id=1074): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4000008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0xf) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000042) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48}) 5.410717459s ago: executing program 1 (id=1075): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r0, 0x6, &(0x7f0000000040)=0x101) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) write(r2, 0x0, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0xc64, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc38, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x4, 0x4, 0xffff, 0x7ff, 0x81, 0x7, 0x5, 0x3, 0x26b, 0x6, 0x7, 0x8, 0x3, 0x3, 0x7, 0x9, 0x0, 0x8, 0x9, 0x5, 0x4, 0x3, 0x7, 0x1, 0x2, 0x400, 0xecf6, 0xfffff269, 0x6, 0x79, 0x2, 0x5, 0x3, 0x7, 0xd, 0x5, 0x8ae9, 0x3, 0x19be, 0x2, 0x5d3e, 0x8, 0x93c, 0x7, 0x0, 0x2000000, 0xe4b, 0x1ff, 0xc00000, 0xf241, 0x401, 0x80000000, 0x7f, 0xab6f, 0x4, 0x40, 0x0, 0x9, 0xa, 0x0, 0x0, 0x7, 0x0, 0xfffff108, 0x9, 0x0, 0x2, 0x2, 0x8, 0x6, 0x4, 0x8, 0x5, 0x8327, 0x5, 0x7, 0x4, 0x772, 0x574, 0x0, 0x7, 0xb457, 0x3, 0x8, 0xddb7, 0x1, 0x3, 0x0, 0x8001, 0x1, 0x40, 0xd, 0x0, 0x0, 0x0, 0x5, 0x3, 0x2, 0x4d8, 0x1000, 0x10000, 0x0, 0xb, 0x9, 0x0, 0x7, 0x0, 0x7, 0x10001, 0x10001, 0xfffffffa, 0x6, 0x81, 0xa57f06e6, 0x8, 0x400, 0x6, 0x6, 0x4, 0x7, 0x9855, 0x8, 0x18462748, 0xfffffff7, 0xd8b, 0x9, 0xffffffff, 0x12, 0x7fff, 0xffffff25, 0x4, 0x1465, 0x0, 0xe3, 0x6, 0x40, 0x7fffffff, 0x7, 0x7, 0xf530, 0xfffffffc, 0x9, 0x7f0, 0x9, 0x7, 0xfffffffb, 0xaaf, 0x6, 0x4f2, 0xfffffffd, 0x6, 0x9, 0x80000000, 0x7fffffff, 0x800, 0x6, 0x5, 0x3, 0x0, 0x2b, 0xe5, 0x1ff, 0x3, 0xffff8001, 0x9934, 0x6, 0x3, 0xc931, 0x0, 0x8, 0x8, 0x4306, 0xab, 0x6, 0x7, 0x4c62, 0x7, 0x3ff, 0x45b0c7b1, 0xbe, 0x5, 0x9, 0x7, 0x1000, 0x2, 0x400, 0x3, 0x9, 0x2, 0x6, 0x0, 0x6, 0x5, 0x8, 0xffff, 0xc31, 0x7f, 0x80000000, 0xc4, 0x8, 0x7, 0x5, 0x5, 0x7, 0x9, 0xe, 0x80000000, 0xf, 0x4, 0x101, 0x398, 0x7fffffff, 0x8, 0x800, 0x2, 0x7fff, 0x1ff, 0xcf9b, 0x6, 0x6, 0xfffffffe, 0x7, 0x1, 0x5, 0x800, 0x8001, 0xc3b4, 0x0, 0x8, 0x1, 0xfffffffc, 0x0, 0x2, 0x6, 0x124c, 0xc0000000, 0x8e, 0x800, 0xffffffff, 0x6, 0x3, 0x4, 0x1, 0x1, 0x9, 0xff, 0x1, 0xd30e, 0x1, 0x5, 0x9, 0x0, 0x0, 0x7, 0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfe, 0x2, 0x579, 0x2, 0x9, 0xc}, {0x7, 0x1, 0x3, 0xfffa, 0x8, 0x4}, 0x101, 0x3, 0x280}}, @TCA_TBF_PTAB={0x404, 0x3, [0x10000, 0xbd, 0x519f576c, 0x4, 0x1020000, 0x4, 0x100, 0x8, 0x9, 0x8000, 0x7, 0x1, 0x5, 0x1000, 0xb17, 0x27, 0x6, 0xc6, 0xb, 0x7, 0x21e0, 0x4, 0x79c2, 0x7f, 0x7ff, 0x8001, 0xffffff65, 0x2, 0x2, 0xaa83, 0xe, 0x100, 0x68, 0x2cde, 0x0, 0x0, 0x1, 0x1, 0xc0a, 0xffffffff, 0x9, 0xffffff80, 0x0, 0x200, 0x1, 0x3, 0x5, 0x5, 0x2, 0xc365, 0x7fffffff, 0x5, 0x3, 0x8, 0x8, 0x2, 0xffffffff, 0x9, 0x8, 0xfffffffe, 0x10000, 0x7, 0x4, 0x7, 0x9, 0xfa4, 0x80, 0xd46, 0x5, 0x96, 0x44, 0xffffffff, 0xa00, 0x200, 0x4, 0x8, 0x9, 0x8001, 0x1, 0xb, 0x65, 0x719, 0x6, 0x0, 0xffff, 0x8, 0x9bb, 0x7, 0xff3d, 0x7, 0x9, 0x1, 0x9, 0x4000, 0x5, 0x8ae, 0x10, 0x3, 0x7, 0x9, 0x8, 0x5, 0x5, 0x6, 0xead0, 0xfffffffc, 0x7ff, 0x1, 0x8, 0x40, 0xaa, 0x11fb, 0x108, 0x8001, 0x2, 0x8, 0x7ff, 0xd71, 0x3, 0x3, 0x7, 0xfffffffa, 0x5, 0x2, 0xfffffffe, 0x8d91, 0xe, 0x7b1, 0xfffffef9, 0x5, 0xdd7, 0xf8, 0x4, 0x361, 0x0, 0x9, 0x1c92c628, 0x5, 0x8, 0x6, 0x9, 0x8, 0x8, 0x3, 0x9, 0x9ec, 0x9, 0x4, 0x6, 0x8, 0x21c, 0x2, 0x9, 0x9, 0x8, 0x6, 0x2, 0x3f5a, 0x1000, 0x0, 0xd, 0x0, 0x3, 0x1, 0x2, 0x0, 0x9, 0x101, 0x1, 0xfffff449, 0xfffffff7, 0x606a4dca, 0x3, 0xf, 0x6, 0xd, 0x3, 0xff, 0x3, 0xe3, 0x7, 0x4000000, 0x1000, 0x2, 0x5, 0xfff, 0x0, 0x0, 0x4029, 0x7, 0x9, 0x2, 0x1000, 0x1, 0x8c, 0x100, 0x6, 0xfffffff8, 0x1, 0x88d, 0x1, 0x400, 0x24, 0x20000, 0x1, 0xfffffff7, 0xffffff39, 0x3c, 0x35, 0x0, 0xffe00000, 0x7fff, 0x6, 0x4, 0x2, 0x1, 0x5, 0x6, 0x9, 0xa510, 0x8f7, 0x2ea, 0x1, 0x42, 0x9, 0x9, 0x4, 0xf, 0x95, 0xff, 0x7fff, 0xfff, 0x10, 0x0, 0xffffffff, 0x4, 0x6, 0xfffffffc, 0x8, 0x1, 0x9, 0x8, 0x19fe7817, 0xaa6, 0x4, 0x4, 0x2, 0x3ff, 0x10000, 0x9, 0x1, 0xc7e, 0x177, 0x401, 0x1, 0x9]}, @TCA_TBF_RTAB={0x404, 0x2, [0x44c9, 0x2, 0x9, 0x3, 0x80010001, 0x10000, 0xffff9f7d, 0x9, 0xfffff4aa, 0x2, 0x0, 0x0, 0x79, 0x9c53, 0xa679, 0x47f, 0x2, 0x1, 0x5, 0x5, 0x6, 0x4, 0x5, 0xf, 0xfffffff9, 0x2, 0xc000000, 0xc, 0x0, 0x7fff, 0x9, 0x1, 0x3, 0x4, 0xe8, 0x400, 0x80, 0x1, 0x5, 0x0, 0x7, 0x5, 0xe, 0x1ff, 0x0, 0xfe, 0x10, 0xf, 0xff, 0x81, 0x0, 0x5, 0xbc82, 0x8001, 0x6, 0xa96, 0xff, 0x800, 0x7, 0x89a2, 0x0, 0x9, 0x1, 0xe9a, 0x3, 0x4, 0x1ff, 0x2, 0x8, 0x0, 0x16, 0x5, 0x8, 0x7ff, 0x2, 0x10001, 0x3, 0x7, 0x10000, 0x6, 0x1, 0x0, 0x9, 0xfffffffc, 0x13a, 0x401, 0x400, 0x10001, 0xe, 0x1ff, 0x8, 0x100, 0x2, 0x8, 0xffff, 0x80, 0x8000, 0x64d3, 0x200, 0xff, 0x7, 0x878, 0x8, 0xffffffe1, 0xa21, 0x7fff, 0xf3e, 0x1, 0x3, 0x6, 0x145200, 0x6, 0x2, 0x8000, 0x1000005, 0x4f214a24, 0x81, 0x1, 0x7, 0xe, 0xdd25, 0x3, 0x508, 0x4, 0x6, 0x6, 0x0, 0x80000000, 0xffffffff, 0x6, 0x305, 0x3, 0xb9, 0xcf9, 0x3, 0x5, 0xfffffffb, 0x7ff, 0x3, 0x3, 0x3, 0xffffffff, 0x3, 0x8, 0x0, 0x0, 0x5, 0x6, 0x9, 0x7fffffff, 0xcdf7, 0x8, 0x7, 0x0, 0xac68, 0x8, 0x9, 0x2, 0x99db, 0x7, 0x8, 0xf7db, 0x8, 0x3ff, 0x2, 0x8001, 0x7, 0x7fffffff, 0xfffffff9, 0x6, 0xb, 0x2, 0x1, 0x4, 0x7ff, 0x9, 0x3, 0x3, 0x101, 0x7fffffff, 0x10001, 0xb, 0xe, 0x0, 0x3, 0x3ff, 0x3, 0x2, 0x5, 0x0, 0xfffffe01, 0x8, 0x0, 0x4, 0x4, 0x4, 0x81, 0x5d, 0x80, 0x100, 0x9, 0xbfcb, 0x3, 0x2, 0x3, 0x400, 0x7, 0xfff, 0xb44, 0x75d7, 0x9a, 0x3, 0xc, 0x6, 0xb38, 0x5, 0xa, 0x9e, 0x3ff, 0x2, 0xd72, 0x2000000, 0x8001, 0x3, 0x7, 0x2, 0x4, 0x1ff, 0x2, 0x1, 0x80, 0x1000, 0xc, 0x3, 0x2456, 0x9, 0x5, 0x2, 0x5, 0x7, 0x7, 0x9, 0x9, 0x1ff, 0xc0, 0x9, 0x759, 0x2, 0xfffff57b, 0x5, 0x4, 0x1, 0x9, 0x7, 0x80000001, 0x7]}]}}]}, 0xc64}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0x0, 0xffe0}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8044}, 0x4040051) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000de5000/0x3000)=nil, 0x3000, 0x17) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}]}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write(r5, &(0x7f0000000240), 0x0) 5.337068551s ago: executing program 2 (id=1076): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a", 0xd5}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815", 0xa}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884", 0x45}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.246870983s ago: executing program 3 (id=1077): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'nicvf0\x00'}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) accept4(r1, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000600)=0x80, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.246544374s ago: executing program 0 (id=1078): r0 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x222203, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002db9700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f000000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8) write(r0, &(0x7f0000000000)="240000001a005f0214f9f40700090100000000000000001f0000000008000400010000", 0x23) 4.370494006s ago: executing program 3 (id=1079): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1}) 3.333705873s ago: executing program 2 (id=1080): socket$inet6(0xa, 0x3, 0x8000000003c) userfaultfd(0x80801) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4000) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES8=r1], 0x20) 3.158172948s ago: executing program 3 (id=1081): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x810000a0) inotify_init1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) prlimit64(r3, 0xe, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(&(0x7f0000000340)=""/243, 0xf3) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r6, 0x9c3fa077fa966179, 0x1f, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 1.124678291s ago: executing program 2 (id=1082): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_NAME(0xf, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.121277231s ago: executing program 0 (id=1083): bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="14000000040000000400000006"], 0x50) 998.432134ms ago: executing program 3 (id=1084): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)="cb", 0x1}, {&(0x7f0000000180)="cde97aa34e41d7ad995bca838f9ee84d1ea39eb085fd7f0e553fbfd3c6c39f630b3ad48c3c2b65fe99f86483741a148a4bb77a1c429bc70ba62cbc4cd5adcef5e0a40d0cbaa983114e79b948b8738593a1493c62ad4225ceef70a66343f29f79ed6be5c78fe1f466f0ecfbf3acde064b59ba072327077cf5c38e9965c6d14042a4b62a643747d6dbbdba64c83d3d29d694fe5f845d8e1606599e6f2170e920d6d91a3f1df75f6dda2ac40b9da8edc0247b02a3969e0101f72f1cc2c77cb13ebff17c5a4e856ff46a655ccc2f2947a67fb8d49d", 0xd3}, {&(0x7f00000002c0)="b4ec13784185bd56dda145cb9722c8d57b22ad0e4d2b4121a3bd34c9b3013dd2fdc4f259c6dc5ac744174a80075815d7d060d16a78a28f755daf5b09ec747e89f5d3f435bc0b7ddca5032b2e6f4f901c1bdfba6d6867e326fefdc562d28723592289269ec5c821b593d9fed1934b535a3c4c747ae1b5f179adb1236bcdc07409b89520e0598fce386210fe25a4729a02844bed6ac4f31faa81825c5bd35047e651ea1a5d5593c372d5660bf5c638207bc5c5656dd25692ccde277e0b5ef5a9dce7cbe0e4a5c37111f91f74f2be018e58ecebc59ccf62adf8497c27f2", 0xdc}, {0x0}, {&(0x7f0000000540)="6cece2d43a70858c20155683876928af2b3f15d0d86180fe485630ad6d504c7a9b9d0e1b014cb651f1ea63e92eb78681b49cd5296f1911d98aac3e8ab6bf0d8cbd30e80f7cace4eae27fe1caadd7fd211e851209d4e7866bf222b9a80461c1bfcb8c17189e2cee35459a2c5e37f7a59b68b0546c44b327db5b6cff13544c7237e80dba33c47db58d2e2aaca8d18fcbd2dfd04b00198fe24cc760000992b5f0d690fe5b41132ff88af1901f537e621ed04d87a5f6427e819d356bd62c7932dfd11c7513297ba59c1da2fbede0713f785ff78d620de7c0e2c82dc134f9ca821ebc56a5f9c8ad26446c3100e080072e7cff3f96337317", 0xf5}, {&(0x7f0000000680)="66543135ef5558606880dbed559e84b3286337994d0a6ec4bf20ed1fa6373578e5e7f1b14acc81722f32972ba8a8c25268c1f9c022cb00a88487128da5f71fab87adf6e1c5d4bab1af24eb65458bf8cb46f31421b0b4bdd3ee90b80c699e350a89a847027f41b1", 0x67}], 0x6}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000980)="b5", 0x1}], 0x1}}], 0x3, 0x14042082) sendmsg$inet_sctp(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000001e00)='>', 0x1}], 0x1, &(0x7f0000003000)=ANY=[@ANYBLOB="18"], 0x18, 0x81}, 0x400e050) 926.889566ms ago: executing program 0 (id=1085): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000300)) socket$tipc(0x1e, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(0x0, 0x1) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a030700000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021780000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000004c0003804800008008000340000000023c000b80100001800c000100636f756e7465720028000180090001006c6173740000000018000280"], 0xfc}}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)=ANY=[], 0x28}, 0x0) 27.834439ms ago: executing program 3 (id=1086): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x1261, 0x0) 0s ago: executing program 0 (id=1087): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 79.797318][ T5763] cgroup: Unknown subsys name 'net' [ 79.935634][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.598580][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.169782][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.187907][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.196052][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.204534][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.212431][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.219900][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.312648][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.321894][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.330093][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.338563][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.346349][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.387537][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.396764][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.404654][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.412176][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.425119][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.433471][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.441575][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.494465][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.503963][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.512651][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.520988][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.544184][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.551938][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.736443][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 83.845767][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.853718][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.861880][ T5774] bridge_slave_0: entered allmulticast mode [ 83.869624][ T5774] bridge_slave_0: entered promiscuous mode [ 83.896276][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.903597][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.910937][ T5774] bridge_slave_1: entered allmulticast mode [ 83.918431][ T5774] bridge_slave_1: entered promiscuous mode [ 83.990095][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.028539][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.075324][ T5774] team0: Port device team_slave_0 added [ 84.089818][ T5774] team0: Port device team_slave_1 added [ 84.108380][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 84.168042][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.175050][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.202117][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.257768][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.264790][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.292865][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.325467][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 84.433900][ T5774] hsr_slave_0: entered promiscuous mode [ 84.443317][ T5774] hsr_slave_1: entered promiscuous mode [ 84.450692][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.458579][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.465742][ T5778] bridge_slave_0: entered allmulticast mode [ 84.473253][ T5778] bridge_slave_0: entered promiscuous mode [ 84.486073][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.493313][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.500887][ T5778] bridge_slave_1: entered allmulticast mode [ 84.508554][ T5778] bridge_slave_1: entered promiscuous mode [ 84.522386][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 84.613315][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.665754][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.689449][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.696708][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.704150][ T5777] bridge_slave_0: entered allmulticast mode [ 84.711845][ T5777] bridge_slave_0: entered promiscuous mode [ 84.750016][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.757479][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.765047][ T5777] bridge_slave_1: entered allmulticast mode [ 84.772465][ T5777] bridge_slave_1: entered promiscuous mode [ 84.835310][ T5778] team0: Port device team_slave_0 added [ 84.872945][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.885672][ T5778] team0: Port device team_slave_1 added [ 84.901596][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.909062][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.916292][ T5784] bridge_slave_0: entered allmulticast mode [ 84.924080][ T5784] bridge_slave_0: entered promiscuous mode [ 84.944392][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.965644][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.974580][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.981968][ T5784] bridge_slave_1: entered allmulticast mode [ 84.989729][ T5784] bridge_slave_1: entered promiscuous mode [ 85.022270][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.030379][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.057153][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.102931][ T5777] team0: Port device team_slave_0 added [ 85.110890][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.120056][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.149779][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.179316][ T5777] team0: Port device team_slave_1 added [ 85.213636][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.225936][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.269813][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.276823][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.303094][ T5776] Bluetooth: hci0: command tx timeout [ 85.309803][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.323126][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.330493][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.356599][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.398929][ T5784] team0: Port device team_slave_0 added [ 85.431268][ T5784] team0: Port device team_slave_1 added [ 85.475616][ T5778] hsr_slave_0: entered promiscuous mode [ 85.483826][ T5778] hsr_slave_1: entered promiscuous mode [ 85.490350][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.498709][ T5778] Cannot create hsr debugfs directory [ 85.527733][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.535741][ T5776] Bluetooth: hci2: command tx timeout [ 85.541871][ T5780] Bluetooth: hci1: command tx timeout [ 85.549587][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.591278][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.598453][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.607846][ T5780] Bluetooth: hci3: command tx timeout [ 85.625332][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.641754][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.663795][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.683662][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.690837][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.717594][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.733625][ T5777] hsr_slave_0: entered promiscuous mode [ 85.741067][ T5777] hsr_slave_1: entered promiscuous mode [ 85.747864][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.755452][ T5777] Cannot create hsr debugfs directory [ 85.846020][ T5784] hsr_slave_0: entered promiscuous mode [ 85.859051][ T5784] hsr_slave_1: entered promiscuous mode [ 85.865264][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.873484][ T5784] Cannot create hsr debugfs directory [ 86.216402][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.231817][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.255433][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.266118][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.341451][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.356277][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.383338][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.393066][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.404939][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.508244][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.519452][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.531227][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.545910][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.565594][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.604712][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.612251][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.651751][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.658993][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.709992][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.792104][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.820080][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.827310][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.871115][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.878445][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.910324][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.945835][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.016168][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.023527][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.041003][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.048245][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.124843][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.248227][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.293533][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.300783][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.360838][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.368077][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.378704][ T5780] Bluetooth: hci0: command tx timeout [ 87.491224][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.611344][ T5780] Bluetooth: hci1: command tx timeout [ 87.616827][ T5780] Bluetooth: hci2: command tx timeout [ 87.698424][ T5780] Bluetooth: hci3: command tx timeout [ 87.710749][ T5774] veth0_vlan: entered promiscuous mode [ 87.756224][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.802240][ T5774] veth1_vlan: entered promiscuous mode [ 87.957366][ T5774] veth0_macvtap: entered promiscuous mode [ 87.999690][ T5774] veth1_macvtap: entered promiscuous mode [ 88.043913][ T5778] veth0_vlan: entered promiscuous mode [ 88.114210][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.138455][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.175295][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.184067][ T5778] veth1_vlan: entered promiscuous mode [ 88.225236][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.241488][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.253786][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.262893][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.271958][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.370843][ T5778] veth0_macvtap: entered promiscuous mode [ 88.384637][ T5777] veth0_vlan: entered promiscuous mode [ 88.409827][ T5778] veth1_macvtap: entered promiscuous mode [ 88.432834][ T5777] veth1_vlan: entered promiscuous mode [ 88.515595][ T5784] veth0_vlan: entered promiscuous mode [ 88.533947][ T5784] veth1_vlan: entered promiscuous mode [ 88.550401][ T5777] veth0_macvtap: entered promiscuous mode [ 88.578714][ T5777] veth1_macvtap: entered promiscuous mode [ 88.589091][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.603985][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.617034][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.628565][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.641045][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.684302][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.699233][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.709659][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.720598][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.732935][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.749969][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.761296][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.773812][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.786377][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.796025][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.804976][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.814302][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.851071][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.860024][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.892007][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.909178][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.919509][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.930306][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.942235][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.954045][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.964319][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.982247][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.992593][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.018566][ T5784] veth0_macvtap: entered promiscuous mode [ 89.074661][ T5784] veth1_macvtap: entered promiscuous mode [ 89.233214][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.248996][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.261121][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.271296][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.283091][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.302602][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.313379][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.328872][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.344619][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.378320][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.389045][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.399981][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.425636][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.436142][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.447505][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.458663][ T5780] Bluetooth: hci0: command tx timeout [ 89.478279][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.529454][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.539419][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.548739][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.557754][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.596025][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.618468][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.659340][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.687559][ T5780] Bluetooth: hci2: command tx timeout [ 89.693096][ T5776] Bluetooth: hci1: command tx timeout [ 89.703766][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.777845][ T5776] Bluetooth: hci3: command tx timeout [ 89.875535][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.908605][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.919213][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.936670][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.082581][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.103319][ T5846] sch_fq: defrate 16396 ignored. [ 90.112850][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.851441][ T5860] Zero length message leads to an empty skb [ 91.083970][ T5870] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.206483][ T5869] bridge_slave_0: left allmulticast mode [ 91.236173][ T5869] bridge_slave_0: left promiscuous mode [ 91.259264][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.292803][ T5869] bridge_slave_1: left allmulticast mode [ 91.310800][ T5869] bridge_slave_1: left promiscuous mode [ 91.327637][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.362084][ T5869] bond0: (slave bond_slave_0): Releasing backup interface [ 91.374589][ T5878] netlink: 60 bytes leftover after parsing attributes in process `syz.3.20'. [ 91.424662][ T5869] bond0: (slave bond_slave_1): Releasing backup interface [ 91.527838][ T5869] team0: Port device team_slave_0 removed [ 91.535797][ T5776] Bluetooth: hci0: command tx timeout [ 91.633638][ T5869] team0: Port device team_slave_1 removed [ 91.653323][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.688646][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.710535][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.733857][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.771957][ T5776] Bluetooth: hci2: command tx timeout [ 91.771971][ T5780] Bluetooth: hci1: command tx timeout [ 91.847786][ T5780] Bluetooth: hci3: command tx timeout [ 91.941624][ T5886] syz.0.24[5886]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.027902][ T5884] netlink: 'syz.3.23': attribute type 10 has an invalid length. [ 92.090629][ T5884] team0: Port device dummy0 added [ 92.092771][ T174] cfg80211: failed to load regulatory.db [ 94.164269][ T5905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.32'. [ 94.360309][ T5907] warning: `syz.2.34' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.397374][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33'. [ 94.406602][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 94.459441][ T5821] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.677481][ T5821] usb 2-1: Using ep0 maxpacket: 8 [ 94.696371][ T5821] usb 2-1: config 0 interface 0 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 94.728340][ T5821] usb 2-1: config 0 interface 0 has no altsetting 0 [ 94.751412][ T5821] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 94.777052][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.797585][ T5821] usb 2-1: config 0 descriptor?? [ 94.919905][ T28] audit: type=1326 audit(1785821784.034:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.2.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf419e019 code=0x7ffc0000 [ 94.977119][ T28] audit: type=1326 audit(1785821784.034:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.2.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf419e019 code=0x7ffc0000 [ 95.017157][ T28] audit: type=1326 audit(1785821784.064:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.2.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf419e019 code=0x7ffc0000 [ 95.074773][ T28] audit: type=1326 audit(1785821784.064:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.2.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7faaf419e019 code=0x7ffc0000 [ 95.146727][ T28] audit: type=1326 audit(1785821784.064:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.2.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf419e019 code=0x7ffc0000 [ 95.217500][ T28] audit: type=1326 audit(1785821784.064:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.2.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf419e019 code=0x7ffc0000 [ 95.260090][ T5821] zydacron 0003:13EC:0006.0001: unknown main item tag 0x0 [ 95.283633][ T28] audit: type=1326 audit(1785821784.064:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.2.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf419e019 code=0x7ffc0000 [ 95.291538][ T5821] zydacron 0003:13EC:0006.0001: unknown main item tag 0x0 [ 95.331627][ T5821] zydacron 0003:13EC:0006.0001: unknown main item tag 0x0 [ 95.344856][ T5821] zydacron 0003:13EC:0006.0001: unknown main item tag 0x0 [ 95.354696][ T5821] zydacron 0003:13EC:0006.0001: unknown main item tag 0x0 [ 95.362534][ T5821] zydacron 0003:13EC:0006.0001: unknown main item tag 0x0 [ 95.374215][ T5821] zydacron 0003:13EC:0006.0001: unknown main item tag 0x6 [ 95.381929][ T28] audit: type=1326 audit(1785821784.064:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.2.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faaf419e019 code=0x7ffc0000 [ 95.384541][ T5821] zydacron 0003:13EC:0006.0001: unknown main item tag 0x0 [ 95.414730][ T28] audit: type=1326 audit(1785821784.064:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.2.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faaf419e019 code=0x7ffc0000 [ 95.454088][ T5821] zydacron 0003:13EC:0006.0001: unknown main item tag 0xe [ 95.477519][ T5821] zydacron 0003:13EC:0006.0001: unknown main item tag 0x0 [ 95.484739][ T5821] zydacron 0003:13EC:0006.0001: item fetching failed at offset 24/40 [ 95.507948][ T5821] zydacron 0003:13EC:0006.0001: parse failed [ 95.514141][ T5821] zydacron: probe of 0003:13EC:0006.0001 failed with error -22 [ 95.576572][ T5821] usb 2-1: USB disconnect, device number 2 [ 95.927446][ T5929] ======================================================= [ 95.927446][ T5929] WARNING: The mand mount option has been deprecated and [ 95.927446][ T5929] and is ignored by this kernel. Remove the mand [ 95.927446][ T5929] option from the mount to silence this warning. [ 95.927446][ T5929] ======================================================= [ 95.985202][ T5929] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 96.011408][ T5929] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 96.082580][ T5929] loop2: detected capacity change from 0 to 64 [ 96.100135][ T5929] hfs: unable to parse mount options [ 98.025451][ T5960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.117387][ T5960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.206267][ T5960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.301463][ T5960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.399766][ T5960] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.416034][ T5960] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.439958][ T5960] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.456367][ T5960] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.854166][ T5966] Invalid ELF header magic: != ELF [ 98.999674][ T5963] loop1: detected capacity change from 0 to 32768 [ 99.070647][ T5963] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 99.221716][ T5963] XFS (loop1): Ending clean mount [ 99.243180][ T5980] loop2: detected capacity change from 0 to 256 [ 99.257225][ T5980] exfat: Deprecated parameter 'utf8' [ 99.264415][ T5980] exfat: Deprecated parameter 'namecase' [ 99.271508][ T5980] exfat: Deprecated parameter 'utf8' [ 99.301167][ T5963] XFS (loop1): Quotacheck needed: Please wait. [ 99.316357][ T5980] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 99.379509][ T5963] XFS (loop1): Quotacheck: Done. [ 99.450798][ T5982] loop2: detected capacity change from 0 to 512 [ 99.507135][ T28] audit: type=1800 audit(1785821788.614:11): pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.53" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 99.662331][ T5982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.725863][ T5982] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.878118][ T5777] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 99.906929][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.434380][ T6006] syz.3.66[6006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.434642][ T6006] syz.3.66[6006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.598324][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 100.638244][ T6010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.648349][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 100.670712][ T6010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.744793][ T6035] loop1: detected capacity change from 0 to 32768 [ 101.797202][ T6035] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 101.882308][ T6035] XFS (loop1): Ending clean mount [ 101.897643][ T6035] XFS (loop1): Quotacheck needed: Please wait. [ 101.953512][ T6035] XFS (loop1): Quotacheck: Done. [ 102.037397][ T5780] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 102.046038][ T5780] Bluetooth: hci1: Injecting HCI hardware error event [ 102.056362][ T5780] Bluetooth: hci1: hardware error 0x00 [ 102.883325][ T5777] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 103.430776][ T6067] loop1: detected capacity change from 0 to 256 [ 103.482974][ T6067] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 103.532773][ T28] audit: type=1800 audit(1785821792.644:12): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.88" name="file1" dev="loop1" ino=1048592 res=0 errno=0 [ 103.582234][ T6067] syz.1.88: attempt to access beyond end of device [ 103.582234][ T6067] loop1: rw=34817, sector=256, nr_sectors = 8 limit=256 [ 103.613395][ T6067] syz.1.88: attempt to access beyond end of device [ 103.613395][ T6067] loop1: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 103.631227][ T6067] syz.1.88: attempt to access beyond end of device [ 103.631227][ T6067] loop1: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 103.652682][ T6067] syz.1.88: attempt to access beyond end of device [ 103.652682][ T6067] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 103.673179][ T28] audit: type=1800 audit(1785821792.784:13): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.88" name="file1" dev="loop1" ino=1048592 res=0 errno=0 [ 104.087841][ T5780] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 104.231269][ T6080] pim6reg: entered allmulticast mode [ 104.546042][ T6088] loop3: detected capacity change from 0 to 512 [ 104.611504][ T6088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.631257][ T6088] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.784081][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.063789][ T6099] loop1: detected capacity change from 0 to 512 [ 105.140165][ T6099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.187463][ T6099] ext4 filesystem being mounted at /20/sys_mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.212109][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'. [ 105.221426][ T6105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.229202][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'. [ 105.238387][ T6105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.683841][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.054080][ T6116] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 107.194176][ T6145] sch_tbf: peakrate 4 is lower than or equals to rate 12 ! [ 107.304210][ T6145] syz.1.118 uses obsolete (PF_INET,SOCK_PACKET) [ 107.327778][ T1194] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 107.546169][ T1194] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 107.581510][ T1194] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 107.627903][ T1194] usb 1-1: config 4 has no interface number 0 [ 107.675040][ T1194] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 107.756316][ T1194] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 107.785409][ T1194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.822389][ T1194] usb 1-1: Product: syz [ 107.857209][ T1194] usb 1-1: Manufacturer: syz [ 107.928232][ T1194] usb 1-1: SerialNumber: syz [ 108.777345][ T1194] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 108.813691][ T1194] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 108.844174][ T1194] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 108.867264][ T1194] usb 1-1: media controller created [ 108.876957][ T1194] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.065424][ T1194] DVB: Unable to find symbol dib7000p_attach() [ 109.081126][ T1194] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 109.242924][ T1194] rc_core: IR keymap rc-dib0700-rc5 not found [ 109.263198][ T1194] Registered IR keymap rc-empty [ 109.277751][ T1194] dvb-usb: could not initialize remote control. [ 109.300004][ T1194] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 109.544275][ T1194] usb 1-1: USB disconnect, device number 2 [ 109.606782][ T1194] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 110.683022][ T6226] random: crng reseeded on system resumption [ 110.847217][ T174] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 111.054937][ T174] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 111.071415][ T174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.090396][ T174] usb 2-1: Product: syz [ 111.094644][ T174] usb 2-1: Manufacturer: syz [ 111.107491][ T174] usb 2-1: SerialNumber: syz [ 111.337186][ T5821] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.508352][ T5821] usb 1-1: device descriptor read/64, error -71 [ 111.572380][ T174] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 111.780165][ T5821] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.967533][ T5821] usb 1-1: device descriptor read/64, error -71 [ 112.280991][ T5821] usb usb1-port1: attempt power cycle [ 112.720328][ T5821] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.778238][ T5821] usb 1-1: device descriptor read/8, error -71 [ 113.087150][ T5821] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.144062][ T5821] usb 1-1: device descriptor read/8, error -71 [ 113.282997][ T5821] usb usb1-port1: unable to enumerate USB device [ 113.463857][ C1] usblp0: nonzero write bulk status received: -71 [ 113.475831][ T5821] usb 2-1: USB disconnect, device number 3 [ 113.516566][ T5821] usblp0: removed [ 114.902977][ T6277] netlink: 48 bytes leftover after parsing attributes in process `syz.1.171'. [ 115.184083][ T6282] loop1: detected capacity change from 0 to 4096 [ 115.207509][ T6282] ext4: Unknown parameter 'obj_type' [ 115.267496][ T5769] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 115.690726][ T6292] sch_tbf: peakrate 4 is lower than or equals to rate 12 ! [ 115.988021][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 116.016867][ T6297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.034912][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 116.065284][ T6297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.513037][ T6270] loop3: detected capacity change from 0 to 40427 [ 116.547780][ T6270] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 116.563918][ T6270] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 116.625690][ T6270] F2FS-fs (loop3): invalid crc value [ 116.727200][ T6270] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.883357][ T6270] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 116.899661][ T6270] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 117.938017][ T6308] loop0: detected capacity change from 0 to 32768 [ 117.955943][ T6308] XFS: ikeep mount option is deprecated. [ 117.971385][ T6308] XFS: ikeep mount option is deprecated. [ 118.031047][ T6308] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.224911][ T6308] XFS (loop0): Ending clean mount [ 118.289111][ T6308] XFS (loop0): Quotacheck needed: Please wait. [ 118.432755][ T6308] XFS (loop0): Quotacheck: Done. [ 118.620045][ T6317] loop2: detected capacity change from 0 to 40427 [ 118.657527][ T5774] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.686049][ T6317] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 118.704166][ T6317] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 118.738376][ T6317] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff [ 118.767155][ T6317] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6 [ 118.789231][ T6317] F2FS-fs (loop2): invalid crc value [ 118.885204][ T6317] F2FS-fs (loop2): Found nat_bits in checkpoint [ 119.127236][ T6317] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 119.134397][ T6317] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 119.626400][ T6327] loop1: detected capacity change from 0 to 32768 [ 119.683707][ T6347] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 119.699867][ T6327] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 119.873353][ T6327] XFS (loop1): Ending clean mount [ 120.363383][ T5777] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 120.793540][ T6374] sch_tbf: peakrate 4 is lower than or equals to rate 12 ! [ 121.537989][ T6389] binder: 6386:6389 ioctl 4018620d 0 returned -22 [ 123.597851][ T6422] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4044617448 (258855516672 ns) > initial count (110676013376 ns). Using initial count to start timer. [ 124.037907][ T5814] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 124.352704][ T5814] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.370408][ T6446] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.385353][ T5814] usb 4-1: config 0 has no interfaces? [ 124.405250][ T5814] usb 4-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 124.424716][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.441433][ T5814] usb 4-1: Product: syz [ 124.445675][ T5814] usb 4-1: Manufacturer: syz [ 124.451993][ T5814] usb 4-1: SerialNumber: syz [ 124.472129][ T5814] usb 4-1: config 0 descriptor?? [ 124.682000][ T6446] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.814484][ T6446] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.896640][ T6446] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.116319][ T6446] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.257455][ T6446] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.303765][ T6446] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.377982][ T6446] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.621573][ T1194] usb 4-1: USB disconnect, device number 2 [ 127.659553][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 127.896003][ T6492] vlan2: entered promiscuous mode [ 127.917266][ T6492] vlan2: entered allmulticast mode [ 127.922463][ T6492] hsr_slave_1: entered allmulticast mode [ 127.980891][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 128.010135][ T6492] hsr_slave_0: left promiscuous mode [ 128.463314][ T6501] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 128.502644][ T6501] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 129.030773][ T6501] loop2: detected capacity change from 0 to 64 [ 129.053840][ T6501] hfs: unable to parse mount options [ 130.174980][ T5821] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 130.402428][ T5821] usb 4-1: Using ep0 maxpacket: 32 [ 130.432791][ T5821] usb 4-1: unable to get BOS descriptor or descriptor too short [ 130.451564][ T5821] usb 4-1: config 4 has an invalid interface number: 224 but max is 0 [ 130.469897][ T5821] usb 4-1: config 4 has no interface number 0 [ 130.484802][ T5821] usb 4-1: config 4 interface 224 has no altsetting 0 [ 130.516286][ T5821] usb 4-1: New USB device found, idVendor=2040, idProduct=b210, bcdDevice=bc.da [ 130.527146][ T5809] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.547614][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.555679][ T5821] usb 4-1: Product: syz [ 130.578810][ T5821] usb 4-1: Manufacturer: syz [ 130.583594][ T5821] usb 4-1: SerialNumber: syz [ 130.729102][ T5809] usb 2-1: Using ep0 maxpacket: 16 [ 130.738520][ T5809] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 130.750536][ T5809] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 130.762091][ T5809] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 57701, setting to 1024 [ 130.784277][ T5809] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.812574][ T5809] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 130.842441][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.871339][ T5809] usb 2-1: Product: syz [ 130.881501][ T5809] usb 2-1: Manufacturer: syz [ 130.891671][ T5809] usb 2-1: SerialNumber: syz [ 130.912657][ T5809] usb 2-1: config 0 descriptor?? [ 131.035525][ T5821] dvb-usb: found a 'Hauppauge ATSC MiniCard (B210)' in warm state. [ 131.059299][ T5821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 131.064156][ T6548] loop0: detected capacity change from 0 to 2048 [ 131.092903][ T5821] dvbdev: DVB: registering new adapter (Hauppauge ATSC MiniCard (B210)) [ 131.110880][ T5821] usb 4-1: media controller created [ 131.163641][ T6548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.190885][ T5809] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 131.211575][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.232112][ T6548] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.373964][ T28] audit: type=1800 audit(1785821820.484:14): pid=6548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.266" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 131.429845][ T6548] fs-verity: sha512 using implementation "sha512-avx2" [ 131.452819][ T973] usb 2-1: USB disconnect, device number 4 [ 131.458791][ C1] synaptics_usb 2-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 131.468794][ T5127] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 131.490525][ T6548] fs-verity (loop0, inode 13): Error -22 reading file data [ 131.506355][ T6548] fs-verity (loop0, inode 13): Error -22 building Merkle tree [ 131.614443][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.681151][ T5821] DVB: Unable to find symbol lgdt3305_attach() [ 131.689949][ T5821] dvb-usb: no frontend was attached by 'Hauppauge ATSC MiniCard (B210)' [ 131.719581][ T5821] dvb-usb: Hauppauge ATSC MiniCard (B210) successfully initialized and connected. [ 131.765490][ T5821] usb 4-1: USB disconnect, device number 3 [ 132.207375][ T6560] sch_tbf: peakrate 4 is lower than or equals to rate 12 ! [ 132.471704][ T5821] dvb-usb: Hauppauge ATSC MiniCard (B210) successfully deinitialized and disconnected. [ 133.052753][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.059809][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.429023][ T6579] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 133.899219][ T6588] netlink: 3188 bytes leftover after parsing attributes in process `syz.1.279'. [ 133.912150][ T6575] loop2: detected capacity change from 0 to 32768 [ 133.941589][ T6575] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.272 (6575) [ 133.999650][ T6575] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 134.012626][ T6575] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 134.024034][ T6575] BTRFS error (device loop2): unrecognized mount option 'fragment=all' [ 134.081622][ T6575] BTRFS error (device loop2): open_ctree failed: -22 [ 134.229794][ T6469] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (6469) [ 134.581711][ T6601] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 135.054720][ T6616] netlink: 'syz.3.293': attribute type 2 has an invalid length. [ 135.957315][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'. [ 136.043008][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.309'. [ 136.058935][ T6650] netlink: 7 bytes leftover after parsing attributes in process `syz.1.309'. [ 136.291188][ T6658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.312'. [ 136.828446][ T6669] netlink: 104 bytes leftover after parsing attributes in process `syz.0.318'. [ 136.975273][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 136.986944][ T6675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.009036][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 137.023849][ T6675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.311653][ T6679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.322'. [ 137.863371][ T6689] sch_tbf: peakrate 4 is lower than or equals to rate 12 ! [ 138.995507][ T6700] netlink: 60 bytes leftover after parsing attributes in process `syz.1.330'. [ 139.012864][ T6700] netlink: 60 bytes leftover after parsing attributes in process `syz.1.330'. [ 139.024989][ T6700] netlink: 60 bytes leftover after parsing attributes in process `syz.1.330'. [ 139.036328][ T6700] netlink: 60 bytes leftover after parsing attributes in process `syz.1.330'. [ 140.279177][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'. [ 140.291998][ T6731] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.521882][ T6731] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.838019][ T6747] sch_tbf: peakrate 4 is lower than or equals to rate 12 ! [ 141.898589][ T6731] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.109808][ T6731] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.300458][ T6768] netlink: 124 bytes leftover after parsing attributes in process `syz.0.358'. [ 142.406922][ T6731] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.466631][ T6731] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.496314][ T6731] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.522412][ T6731] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.728067][ T6783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.366'. [ 142.737680][ T6783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.366'. [ 142.933696][ T6778] syz.1.364 (6778) used greatest stack depth: 19944 bytes left [ 143.461059][ T6808] netlink: 36 bytes leftover after parsing attributes in process `syz.3.376'. [ 143.484507][ T6810] netlink: 44 bytes leftover after parsing attributes in process `syz.1.377'. [ 144.208082][ T6837] netlink: 60 bytes leftover after parsing attributes in process `syz.2.385'. [ 144.236763][ T6833] netlink: 104 bytes leftover after parsing attributes in process `syz.1.386'. [ 144.251883][ T6837] netlink: 60 bytes leftover after parsing attributes in process `syz.2.385'. [ 144.278261][ T6837] netlink: 60 bytes leftover after parsing attributes in process `syz.2.385'. [ 144.349711][ T6838] netlink: 60 bytes leftover after parsing attributes in process `syz.2.385'. [ 147.641553][ T6936] netlink: 'syz.3.424': attribute type 10 has an invalid length. [ 147.686662][ T6936] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.725572][ T6936] bridge_slave_1: left allmulticast mode [ 147.757113][ T6936] bridge_slave_1: left promiscuous mode [ 147.777842][ T6936] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.816115][ T6936] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 149.597844][ T6976] Driver unsupported XDP return value 0 on prog (id 54) dev N/A, expect packet loss! [ 154.122888][ T7120] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.198919][ T7120] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.264779][ T7120] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.345416][ T7120] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.482300][ T7120] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.508052][ T7120] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.553770][ T7120] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.582419][ T7120] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.077119][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 155.267177][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 155.281826][ T7151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.518'. [ 155.295265][ T7151] netlink: 40 bytes leftover after parsing attributes in process `syz.0.518'. [ 155.295727][ T23] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 155.318313][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.326498][ T23] usb 2-1: Product: syz [ 155.334450][ T23] usb 2-1: Manufacturer: syz [ 155.340629][ T23] usb 2-1: SerialNumber: syz [ 155.398599][ T7151] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 155.416424][ T7151] bond1 (unregistering): Released all slaves [ 156.091877][ T5811] IPVS: starting estimator thread 0... [ 156.258766][ T7164] IPVS: using max 16 ests per chain, 38400 per kthread [ 157.963208][ T23] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 157.972544][ T23] usb 2-1: USB disconnect, device number 5 [ 158.428692][ T7217] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.687578][ T7217] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.865297][ T7217] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.058240][ T7217] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.298164][ T7217] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.316516][ T7217] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.376070][ T7217] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.451434][ T7217] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.699488][ T7274] netlink: 80 bytes leftover after parsing attributes in process `syz.0.562'. [ 164.641618][ T7305] syzkaller1: entered promiscuous mode [ 164.718091][ T7305] syzkaller1: entered allmulticast mode [ 166.168154][ T7339] netlink: 68 bytes leftover after parsing attributes in process `syz.1.583'. [ 166.836731][ T7360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.588'. [ 166.856353][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'. [ 167.155763][ T7370] netlink: 68 bytes leftover after parsing attributes in process `syz.0.593'. [ 167.473134][ T7387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.600'. [ 167.490622][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 168.136887][ T7405] process 'syz.2.604' launched './bus' with NULL argv: empty string added [ 168.663030][ T7420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.610'. [ 168.689907][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 168.917740][ T7426] netlink: 48 bytes leftover after parsing attributes in process `syz.3.613'. [ 169.985748][ T7450] netlink: 48 bytes leftover after parsing attributes in process `syz.1.623'. [ 170.323732][ T7452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.622'. [ 170.427769][ T7465] Bluetooth: MGMT ver 1.22 [ 170.707717][ T7478] netlink: 48 bytes leftover after parsing attributes in process `syz.1.633'. [ 171.348729][ T7494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.639'. [ 171.358024][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.639'. [ 171.619869][ T7500] netlink: 48 bytes leftover after parsing attributes in process `syz.3.644'. [ 171.948928][ T7514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.649'. [ 171.967290][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'. [ 172.136681][ T7523] netlink: 48 bytes leftover after parsing attributes in process `syz.3.653'. [ 172.725796][ T7535] sch_tbf: peakrate 4 is lower than or equals to rate 12 ! [ 174.088145][ T7569] __nla_validate_parse: 6 callbacks suppressed [ 174.088165][ T7569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.668'. [ 174.107237][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'. [ 174.187969][ T28] audit: type=1326 audit(1785821863.304:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.0.669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64d19e019 code=0x7ffc0000 [ 174.277212][ T28] audit: type=1326 audit(1785821863.324:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.0.669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64d19e019 code=0x7ffc0000 [ 174.356309][ T28] audit: type=1326 audit(1785821863.334:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.0.669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd64d19e019 code=0x7ffc0000 [ 174.417224][ T28] audit: type=1326 audit(1785821863.334:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.0.669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64d19e019 code=0x7ffc0000 [ 174.471661][ T28] audit: type=1326 audit(1785821863.334:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.0.669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64d19e019 code=0x7ffc0000 [ 174.547224][ T28] audit: type=1326 audit(1785821863.334:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.0.669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fd64d19e019 code=0x7ffc0000 [ 174.601729][ T28] audit: type=1326 audit(1785821863.334:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.0.669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64d19e019 code=0x7ffc0000 [ 174.632254][ T28] audit: type=1326 audit(1785821863.334:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.0.669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64d19e019 code=0x7ffc0000 [ 174.763040][ T7583] netlink: 124 bytes leftover after parsing attributes in process `syz.3.674'. [ 174.854843][ T7585] syzkaller1: entered promiscuous mode [ 174.861127][ T7585] syzkaller1: entered allmulticast mode [ 175.046905][ T7591] netlink: 16 bytes leftover after parsing attributes in process `syz.3.678'. [ 175.056113][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 175.266162][ T7598] IPv6: NLM_F_CREATE should be specified when creating new route [ 175.425476][ T7601] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 175.442028][ T7603] netlink: 124 bytes leftover after parsing attributes in process `syz.1.684'. [ 175.633990][ T7612] IPv6: NLM_F_CREATE should be specified when creating new route [ 175.793153][ T7618] netlink: 16 bytes leftover after parsing attributes in process `syz.3.690'. [ 175.827321][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 175.896565][ T7621] IPv6: NLM_F_CREATE should be specified when creating new route [ 176.129255][ T7628] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 176.163038][ T7630] netlink: 124 bytes leftover after parsing attributes in process `syz.2.696'. [ 176.937464][ T7643] sch_tbf: peakrate 4 is lower than or equals to rate 12 ! [ 177.595566][ T7652] netlink: 48 bytes leftover after parsing attributes in process `syz.1.704'. [ 177.869613][ T7659] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 178.811712][ T7681] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 179.735599][ T7701] sch_tbf: peakrate 4 is lower than or equals to rate 12 ! [ 180.593791][ T7714] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 180.789290][ T7719] __nla_validate_parse: 3 callbacks suppressed [ 180.789308][ T7719] netlink: 116 bytes leftover after parsing attributes in process `syz.0.730'. [ 180.879934][ T7721] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.964515][ T7721] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.984217][ T7724] Console: switching to colour VGA+ 80x25 [ 181.058148][ T7706] capability: warning: `syz.3.724' uses deprecated v2 capabilities in a way that may be insecure [ 181.075757][ T7721] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.148448][ T7721] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.172397][ T7729] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.320456][ T7721] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.374509][ T7721] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.391270][ T7733] netlink: 48 bytes leftover after parsing attributes in process `syz.3.737'. [ 181.420342][ T7721] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.443251][ T7733] netlink: 48 bytes leftover after parsing attributes in process `syz.3.737'. [ 181.481415][ T7721] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.564595][ T7737] netlink: 36 bytes leftover after parsing attributes in process `syz.3.739'. [ 181.696181][ T7740] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 181.764573][ T7743] netlink: 116 bytes leftover after parsing attributes in process `syz.3.742'. [ 183.174447][ T7765] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 183.199681][ T7767] netlink: 116 bytes leftover after parsing attributes in process `syz.3.753'. [ 185.767043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 186.702622][ T7801] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 190.049774][ T7829] sch_tbf: peakrate 4 is lower than or equals to rate 12 ! [ 194.707778][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.726791][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.877072][ T973] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 198.587377][ T973] usb 2-1: Using ep0 maxpacket: 8 [ 198.598233][ T973] usb 2-1: config 0 has no interfaces? [ 198.614153][ T973] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 198.625076][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.659830][ T973] usb 2-1: config 0 descriptor?? [ 198.784841][ T7890] syz.0.791: attempt to access beyond end of device [ 198.784841][ T7890] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 198.799076][ T7890] FAT-fs (nbd0): unable to read boot sector [ 198.992005][ T7890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.791'. [ 199.565018][ T7893] netlink: 124 bytes leftover after parsing attributes in process `syz.2.793'. [ 200.067506][ T7903] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.236073][ T7903] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.348138][ T7903] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.489678][ T27] usb 2-1: USB disconnect, device number 6 [ 200.503737][ T7903] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.517150][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 200.700606][ T7903] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.717632][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 200.735018][ T7903] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.735557][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 200.772817][ T9] usb 1-1: config 9 has an invalid interface number: 57 but max is 0 [ 200.778498][ T7903] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.791979][ T9] usb 1-1: config 9 has no interface number 0 [ 200.807110][ T9] usb 1-1: config 9 interface 57 has no altsetting 0 [ 200.825325][ T9] usb 1-1: string descriptor 0 read error: -22 [ 200.832516][ T7903] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.845116][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 200.872707][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.787137][ T9] video4linux radio48: keene_cmd_main failed (-71) [ 201.796668][ T9] radio-keene 1-1:9.57: V4L2 device registered as radio48 [ 201.825384][ T9] usb 1-1: USB disconnect, device number 7 [ 202.065278][ T7933] kvm: kvm [7932]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x950100007922 [ 203.041100][ T7944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.813'. [ 203.095656][ T7944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.109894][ T7944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.813'. [ 203.139969][ T7944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.176537][ T7946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.815'. [ 203.207276][ T7946] netlink: 40 bytes leftover after parsing attributes in process `syz.2.815'. [ 203.350040][ T7946] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 203.407077][ T7946] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 203.456003][ T7946] bond1 (unregistering): Released all slaves [ 204.384065][ T7976] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 205.915602][ T7965] kvm: kvm [7964]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 205.935387][ T7965] kvm: kvm [7964]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 205.959888][ T7965] kvm: kvm [7964]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 205.981944][ T7965] kvm: kvm [7964]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 206.003312][ T7965] kvm: kvm [7964]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 206.026728][ T7965] kvm: kvm [7964]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 206.398036][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 206.421843][ T7988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.442989][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 206.467367][ T7988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.677329][ T7996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.833'. [ 207.966120][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 207.972854][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 207.983380][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 209.717191][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 209.843756][ T8021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.926614][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 209.958296][ T8021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.989911][ T8046] netlink: 68 bytes leftover after parsing attributes in process `syz.1.852'. [ 213.044547][ T8055] netlink: 40 bytes leftover after parsing attributes in process `syz.3.856'. [ 216.519239][ T8082] syz.2.865: attempt to access beyond end of device [ 216.519239][ T8082] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 216.532338][ T8082] FAT-fs (nbd2): unable to read boot sector [ 217.335286][ T8086] netlink: 40 bytes leftover after parsing attributes in process `syz.1.867'. [ 217.619172][ T8087] UDC core: g1: couldn't find an available UDC or it's busy [ 218.088766][ T8106] netlink: 40 bytes leftover after parsing attributes in process `syz.1.877'. [ 218.099142][ T8104] netlink: 'syz.3.876': attribute type 12 has an invalid length. [ 218.231277][ T8108] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.350489][ T8108] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.414987][ T8108] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.487352][ T8108] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.521971][ T8116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.882'. [ 218.678889][ T8108] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.754980][ T8108] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.793323][ T8108] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.011956][ T8108] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.802891][ T8128] netlink: 68 bytes leftover after parsing attributes in process `syz.2.886'. [ 223.462917][ T8131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.887'. [ 226.317225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 226.649275][ T8144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.893'. [ 226.694275][ T5776] block nbd0: Receive control failed (result -107) [ 227.839192][ T8159] netlink: 60 bytes leftover after parsing attributes in process `syz.2.898'. [ 227.859382][ T8159] netlink: 60 bytes leftover after parsing attributes in process `syz.2.898'. [ 229.077518][ T8165] netlink: 124 bytes leftover after parsing attributes in process `syz.2.899'. [ 229.580279][ T8176] sch_tbf: peakrate 4 is lower than or equals to rate 12 ! [ 230.822084][ T8178] autofs4:pid:8178:autofs_fill_super: called with bogus options [ 231.258422][ T8187] netlink: 60 bytes leftover after parsing attributes in process `syz.3.908'. [ 231.300021][ T8187] bridge_slave_0: left allmulticast mode [ 231.331711][ T8187] bridge_slave_0: left promiscuous mode [ 231.353405][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.386042][ T8187] netlink: 60 bytes leftover after parsing attributes in process `syz.3.908'. [ 232.268830][ T8246] netlink: 124 bytes leftover after parsing attributes in process `syz.2.911'. [ 232.628195][ T8251] netlink: 'syz.0.912': attribute type 12 has an invalid length. [ 233.130772][ T8262] sch_tbf: peakrate 4 is lower than or equals to rate 12 ! [ 234.764563][ T8269] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.796946][ C1] sched: RT throttling activated [ 234.831583][ T8267] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 234.841045][ T8267] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 234.850754][ T8267] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 234.862793][ T28] audit: type=1800 audit(1785821923.944:23): pid=8267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.917" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 235.016595][ T8269] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.106709][ T8269] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.192394][ T8269] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.222687][ T8280] netlink: 124 bytes leftover after parsing attributes in process `syz.0.922'. [ 235.401215][ T8269] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.428910][ T8269] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.465684][ T8269] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.496055][ T8269] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.775915][ T8288] netlink: 'syz.0.926': attribute type 2 has an invalid length. [ 235.784141][ T8288] netlink: 132 bytes leftover after parsing attributes in process `syz.0.926'. [ 235.862832][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.927'. [ 235.983089][ T8293] netlink: 60 bytes leftover after parsing attributes in process `syz.2.928'. [ 235.992848][ T8293] netlink: 60 bytes leftover after parsing attributes in process `syz.2.928'. [ 236.401138][ T8299] sch_tbf: peakrate 4 is lower than or equals to rate 12 ! [ 236.453285][ T8301] netlink: 124 bytes leftover after parsing attributes in process `syz.2.931'. [ 236.996208][ T8307] syzkaller1: entered promiscuous mode [ 237.005964][ T8307] syzkaller1: entered allmulticast mode [ 237.123966][ T8309] netlink: 116 bytes leftover after parsing attributes in process `syz.1.934'. [ 237.561694][ T8325] netlink: 124 bytes leftover after parsing attributes in process `syz.2.941'. [ 239.452420][ T8345] sch_tbf: peakrate 4 is lower than or equals to rate 12 ! [ 241.037296][ T8352] netlink: 124 bytes leftover after parsing attributes in process `syz.1.950'. [ 241.073029][ T8351] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.221518][ T8351] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.284604][ T8351] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.344767][ T8351] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.421974][ T8351] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.440612][ T8351] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.457806][ T8351] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.476130][ T8351] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.320714][ T8375] netlink: 124 bytes leftover after parsing attributes in process `syz.1.959'. [ 242.563999][ T8383] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.625482][ T8383] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.683927][ T8383] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.744898][ T8383] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.797227][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 242.849811][ T8383] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.870523][ T8383] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.886761][ T8383] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.914225][ T8383] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.997064][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 243.004420][ T27] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 243.014337][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.025104][ T27] usb 2-1: config 0 has no interface number 0 [ 243.031784][ T27] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 243.050817][ T27] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 243.060654][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.073266][ T27] usb 2-1: Product: syz [ 243.078990][ T27] usb 2-1: Manufacturer: syz [ 243.083944][ T27] usb 2-1: SerialNumber: syz [ 243.093203][ T27] usb 2-1: config 0 descriptor?? [ 243.103736][ T27] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 243.115403][ T27] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 243.310495][ T27] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 243.327452][ T5811] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 243.507086][ T5811] usb 3-1: Using ep0 maxpacket: 8 [ 243.519009][ T5811] usb 3-1: config 0 has no interfaces? [ 243.526319][ T27] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 243.535780][ T5811] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 243.550061][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.574766][ T5811] usb 3-1: config 0 descriptor?? [ 243.695749][ T8396] netlink: 124 bytes leftover after parsing attributes in process `syz.0.968'. [ 243.778864][ T27] usb 2-1: USB disconnect, device number 7 [ 243.792628][ T27] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 244.481223][ T8412] autofs4:pid:8412:autofs_fill_super: called with bogus options [ 245.428061][ T8414] netlink: 48 bytes leftover after parsing attributes in process `syz.0.976'. [ 245.438058][ T8414] bridge_slave_0: left allmulticast mode [ 245.443918][ T8414] bridge_slave_0: left promiscuous mode [ 245.450060][ T8414] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.494464][ T28] audit: type=1326 audit(1785821934.604:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.1.977" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b0d59e019 code=0x0 [ 246.051749][ T8424] sch_tbf: peakrate 4 is lower than or equals to rate 12 ! [ 246.252433][ T1194] usb 3-1: USB disconnect, device number 2 [ 246.872155][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.983'. [ 247.130720][ T8442] autofs4:pid:8442:autofs_fill_super: called with bogus options [ 251.218190][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 251.618820][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 251.775711][ T27] usb 2-1: config 0 has no interfaces? [ 251.872939][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 251.984504][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.356632][ T27] usb 2-1: config 0 descriptor?? [ 253.008277][ T27] usb 2-1: USB disconnect, device number 8 [ 254.427423][ T8500] syz.2.990 (8500) used greatest stack depth: 17896 bytes left [ 255.282241][ T8513] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 255.950396][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.969280][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.407098][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 256.607286][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 256.616472][ T9] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 256.631384][ T9] usb 1-1: config 0 has no interface number 0 [ 256.639213][ T9] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 256.656276][ T9] usb 1-1: config 0 interface 85 has no altsetting 0 [ 256.678257][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 256.694645][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.705507][ T9] usb 1-1: Product: syz [ 256.714207][ T9] usb 1-1: Manufacturer: syz [ 256.720959][ T9] usb 1-1: SerialNumber: syz [ 256.753220][ T9] usb 1-1: config 0 descriptor?? [ 257.318597][ T8529] syz.1.1000: attempt to access beyond end of device [ 257.318597][ T8529] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 257.331904][ T8529] FAT-fs (nbd1): unable to read boot sector [ 257.432873][ T9] appletouch 1-1:0.85: Geyser mode initialized. [ 257.518749][ T8530] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1000'. [ 258.396613][ T9] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input7 [ 258.502017][ T9] usb 1-1: USB disconnect, device number 8 [ 258.508037][ C0] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 258.620093][ T8536] autofs4:pid:8536:autofs_fill_super: called with bogus options [ 258.767231][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 259.263942][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 259.418296][ T23] usb 4-1: config 0 has no interfaces? [ 259.423832][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 259.433479][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.588213][ T23] usb 4-1: config 0 descriptor?? [ 260.007952][ T23] usb 4-1: USB disconnect, device number 4 [ 260.899433][ T9] appletouch 1-1:0.85: input: appletouch disconnected [ 265.490141][ T8604] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1012'. [ 266.412465][ T8611] autofs4:pid:8611:autofs_fill_super: called with bogus options [ 271.213611][ T8686] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1025'. [ 277.341563][ T8721] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1037'. [ 277.665037][ T8728] autofs4:pid:8728:autofs_fill_super: called with bogus options [ 280.835106][ T8787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1047'. [ 280.883457][ T8788] netlink: 'syz.3.1048': attribute type 5 has an invalid length. [ 280.894230][ T5776] block nbd1: Receive control failed (result -107) [ 280.927567][ T8788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1048'. [ 280.938952][ T8788] netlink: 'syz.3.1048': attribute type 5 has an invalid length. [ 280.994782][ T8788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1048'. [ 281.035796][ T8790] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 281.074657][ T8793] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1050'. [ 281.236687][ T8797] netlink: 'syz.0.1052': attribute type 1 has an invalid length. [ 281.269140][ T8797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.352627][ T8797] bond1: (slave geneve2): making interface the new active one [ 281.365707][ T8797] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 282.464918][ T8828] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1064'. [ 282.717059][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 282.919959][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.931550][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.941608][ T27] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 282.951878][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.964915][ T27] usb 4-1: config 0 descriptor?? [ 283.087675][ T8832] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.138073][ T8832] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.219994][ T8832] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.316263][ T8832] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.456738][ T8832] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.521709][ T8832] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.546404][ T8832] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.575824][ T8832] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.730615][ T27] usb 4-1: language id specifier not provided by device, defaulting to English [ 284.688030][ T8850] syz.2.1072: attempt to access beyond end of device [ 284.688030][ T8850] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 284.702729][ T8850] FAT-fs (nbd2): unable to read boot sector [ 284.781029][ T8851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1072'. [ 284.912431][ T27] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #100: -71 [ 285.027350][ T27] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 285.035607][ T27] uclogic 0003:256C:006D.0002: failed probing pen v1 parameters: -71 [ 285.064435][ T27] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 285.610588][ T8857] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 286.797208][ T27] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 286.828647][ T27] usb 4-1: USB disconnect, device number 5 [ 287.085504][ T8869] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1078'. [ 291.421366][ T8889] syz.0.1085: attempt to access beyond end of device [ 291.421366][ T8889] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 291.434499][ T8889] FAT-fs (nbd0): unable to read boot sector [ 291.453456][ T8889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1085'. [ 291.524144][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 291.819436][ T27] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 291.886035][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.949902][ T27] usb 3-1: Product: syz [ 291.989440][ T27] usb 3-1: Manufacturer: syz [ 292.023573][ T27] usb 3-1: SerialNumber: syz [ 292.615622][ T27] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 292.933116][ T8902] sch_tbf: peakrate 4 is lower than or equals to rate 12 ! [ 293.427500][ T27] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -71 [ 293.448706][ T27] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 293.459984][ T27] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 293.484200][ T8896] [ 293.486611][ T8896] ====================================================== [ 293.493662][ T8896] WARNING: possible circular locking dependency detected [ 293.500724][ T8896] syzkaller #0 Not tainted [ 293.505165][ T8896] ------------------------------------------------------ [ 293.512206][ T8896] syz.3.1086/8896 is trying to acquire lock: [ 293.518212][ T8896] ffff88814de460e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_lock+0x189/0x390 [ 293.527686][ T8896] [ 293.527686][ T8896] but task is already holding lock: [ 293.535080][ T8896] ffff888148d43008 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: blkdev_common_ioctl+0x838/0x2580 [ 293.545332][ T8896] [ 293.545332][ T8896] which lock already depends on the new lock. [ 293.545332][ T8896] [ 293.555804][ T8896] [ 293.555804][ T8896] the existing dependency chain (in reverse order) is: [ 293.564940][ T8896] [ 293.564940][ T8896] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 293.573152][ T8896] __mutex_lock+0x135/0xc80 [ 293.578256][ T8896] bd_finish_claiming+0x229/0x3f0 [ 293.583835][ T8896] blkdev_get_by_dev+0x469/0x610 [ 293.589361][ T8896] bdev_open_by_dev+0x77/0x100 [ 293.594682][ T8896] setup_bdev_super+0x59/0x660 [ 293.600021][ T8896] mount_bdev+0x1ce/0x2c0 [ 293.604907][ T8896] legacy_get_tree+0xea/0x180 [ 293.610142][ T8896] vfs_get_tree+0x8c/0x280 [ 293.615115][ T8896] do_new_mount+0x24a/0xa40 [ 293.620170][ T8896] init_mount+0xde/0x130 [ 293.624971][ T8896] do_mount_root+0x97/0x230 [ 293.630042][ T8896] mount_root_generic+0x1a6/0x3e0 [ 293.635631][ T8896] prepare_namespace+0xc2/0x100 [ 293.641047][ T8896] kernel_init_freeable+0x41a/0x560 [ 293.646807][ T8896] kernel_init+0x1d/0x1c0 [ 293.651695][ T8896] ret_from_fork+0x48/0x80 [ 293.656694][ T8896] ret_from_fork_asm+0x11/0x20 [ 293.662019][ T8896] [ 293.662019][ T8896] -> #3 (bdev_lock){+.+.}-{3:3}: [ 293.669201][ T8896] __mutex_lock+0x135/0xc80 [ 293.674285][ T8896] bd_prepare_to_claim+0x1d9/0x4a0 [ 293.679946][ T8896] truncate_bdev_range+0x4e/0x260 [ 293.685525][ T8896] blkdev_common_ioctl+0x1c7a/0x2580 [ 293.691400][ T8896] blkdev_ioctl+0x512/0x730 [ 293.696462][ T8896] __se_sys_ioctl+0xfd/0x170 [ 293.701615][ T8896] do_syscall_64+0x55/0xb0 [ 293.706632][ T8896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.713086][ T8896] [ 293.713086][ T8896] -> #2 (mapping.invalidate_lock){++++}-{3:3}: [ 293.721469][ T8896] down_write+0x97/0x200 [ 293.726283][ T8896] set_blocksize+0x247/0x4b0 [ 293.731512][ T8896] sb_min_blocksize+0xbe/0x190 [ 293.736833][ T8896] ext4_fill_super+0x6e7/0x6870 [ 293.742244][ T8896] get_tree_bdev+0x3e5/0x520 [ 293.747396][ T8896] vfs_get_tree+0x8c/0x280 [ 293.752370][ T8896] do_new_mount+0x24a/0xa40 [ 293.757468][ T8896] init_mount+0xde/0x130 [ 293.762264][ T8896] do_mount_root+0x97/0x230 [ 293.767328][ T8896] mount_root_generic+0x1a6/0x3e0 [ 293.772911][ T8896] prepare_namespace+0xc2/0x100 [ 293.778326][ T8896] kernel_init_freeable+0x41a/0x560 [ 293.784090][ T8896] kernel_init+0x1d/0x1c0 [ 293.788982][ T8896] ret_from_fork+0x48/0x80 [ 293.793956][ T8896] ret_from_fork_asm+0x11/0x20 [ 293.799277][ T8896] [ 293.799277][ T8896] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 293.808018][ T8896] down_write+0x97/0x200 [ 293.812829][ T8896] set_blocksize+0x1ff/0x4b0 [ 293.817969][ T8896] sb_min_blocksize+0xbe/0x190 [ 293.823293][ T8896] ext4_fill_super+0x6e7/0x6870 [ 293.828789][ T8896] get_tree_bdev+0x3e5/0x520 [ 293.833936][ T8896] vfs_get_tree+0x8c/0x280 [ 293.838907][ T8896] do_new_mount+0x24a/0xa40 [ 293.843962][ T8896] init_mount+0xde/0x130 [ 293.848765][ T8896] do_mount_root+0x97/0x230 [ 293.853841][ T8896] mount_root_generic+0x1a6/0x3e0 [ 293.859435][ T8896] prepare_namespace+0xc2/0x100 [ 293.864857][ T8896] kernel_init_freeable+0x41a/0x560 [ 293.870633][ T8896] kernel_init+0x1d/0x1c0 [ 293.875532][ T8896] ret_from_fork+0x48/0x80 [ 293.880515][ T8896] ret_from_fork_asm+0x11/0x20 [ 293.885844][ T8896] [ 293.885844][ T8896] -> #0 (&type->s_umount_key#32){++++}-{3:3}: [ 293.894153][ T8896] __lock_acquire+0x37ef/0x7d80 [ 293.899573][ T8896] lock_acquire+0x19e/0x420 [ 293.904637][ T8896] down_read+0x46/0x2e0 [ 293.909363][ T8896] super_lock+0x189/0x390 [ 293.914243][ T8896] fs_bdev_sync+0xa4/0x170 [ 293.919217][ T8896] blkdev_common_ioctl+0x8a9/0x2580 [ 293.924972][ T8896] blkdev_ioctl+0x512/0x730 [ 293.930046][ T8896] __se_sys_ioctl+0xfd/0x170 [ 293.935204][ T8896] do_syscall_64+0x55/0xb0 [ 293.940183][ T8896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.946642][ T8896] [ 293.946642][ T8896] other info that might help us debug this: [ 293.946642][ T8896] [ 293.956902][ T8896] Chain exists of: [ 293.956902][ T8896] &type->s_umount_key#32 --> bdev_lock --> &bdev->bd_holder_lock [ 293.956902][ T8896] [ 293.970606][ T8896] Possible unsafe locking scenario: [ 293.970606][ T8896] [ 293.978089][ T8896] CPU0 CPU1 [ 293.983487][ T8896] ---- ---- [ 293.988883][ T8896] lock(&bdev->bd_holder_lock); [ 293.993861][ T8896] lock(bdev_lock); [ 294.000307][ T8896] lock(&bdev->bd_holder_lock); [ 294.007805][ T8896] rlock(&type->s_umount_key#32); [ 294.012976][ T8896] [ 294.012976][ T8896] *** DEADLOCK *** [ 294.012976][ T8896] [ 294.021150][ T8896] 1 lock held by syz.3.1086/8896: [ 294.026195][ T8896] #0: ffff888148d43008 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: blkdev_common_ioctl+0x838/0x2580 [ 294.036881][ T8896] [ 294.036881][ T8896] stack backtrace: [ 294.042904][ T8896] CPU: 1 PID: 8896 Comm: syz.3.1086 Not tainted syzkaller #0 [ 294.050319][ T8896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 294.060424][ T8896] Call Trace: [ 294.063731][ T8896] [ 294.066683][ T8896] dump_stack_lvl+0x18c/0x250 [ 294.071391][ T8896] ? load_image+0x420/0x420 [ 294.075923][ T8896] ? show_regs_print_info+0x20/0x20 [ 294.081144][ T8896] ? print_circular_bug+0x12b/0x1a0 [ 294.086375][ T8896] check_noncircular+0x2fc/0x400 [ 294.091345][ T8896] ? print_deadlock_bug+0x5d0/0x5d0 [ 294.096575][ T8896] ? lockdep_lock+0xf5/0x230 [ 294.101192][ T8896] ? _find_first_zero_bit+0xd6/0x100 [ 294.106517][ T8896] __lock_acquire+0x37ef/0x7d80 [ 294.111426][ T8896] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.117522][ T8896] ? arch_stack_walk+0x160/0x190 [ 294.122504][ T8896] ? verify_lock_unused+0x140/0x140 [ 294.127737][ T8896] ? verify_lock_unused+0x140/0x140 [ 294.132985][ T8896] ? stack_trace_save+0xaa/0x100 [ 294.137952][ T8896] ? stack_trace_snprint+0xf0/0xf0 [ 294.143094][ T8896] ? __stack_depot_save+0x1f/0x660 [ 294.148232][ T8896] ? do_syscall_64+0x55/0xb0 [ 294.152839][ T8896] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.158932][ T8896] lock_acquire+0x19e/0x420 [ 294.163462][ T8896] ? super_lock+0x189/0x390 [ 294.167986][ T8896] ? __might_sleep+0xe0/0xe0 [ 294.172603][ T8896] ? read_lock_is_recursive+0x20/0x20 [ 294.177999][ T8896] ? __mutex_trylock_common+0x160/0x270 [ 294.183566][ T8896] ? trace_raw_output_contention_end+0xd0/0xd0 [ 294.189744][ T8896] down_read+0x46/0x2e0 [ 294.193949][ T8896] ? super_lock+0x189/0x390 [ 294.198478][ T8896] super_lock+0x189/0x390 [ 294.202838][ T8896] ? end_current_label_crit_section+0x170/0x170 [ 294.209109][ T8896] ? user_get_super+0x180/0x180 [ 294.213980][ T8896] ? mutex_lock_nested+0x20/0x20 [ 294.218951][ T8896] fs_bdev_sync+0xa4/0x170 [ 294.223389][ T8896] ? fs_bdev_mark_dead+0x1f0/0x1f0 [ 294.228517][ T8896] blkdev_common_ioctl+0x8a9/0x2580 [ 294.233749][ T8896] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 294.239409][ T8896] ? blkdev_bszset+0x1f0/0x1f0 [ 294.244224][ T8896] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 294.249755][ T8896] blkdev_ioctl+0x512/0x730 [ 294.254288][ T8896] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 294.259772][ T8896] ? bpf_lsm_file_ioctl+0x9/0x10 [ 294.264728][ T8896] ? security_file_ioctl+0x80/0xa0 [ 294.269865][ T8896] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 294.275345][ T8896] __se_sys_ioctl+0xfd/0x170 [ 294.279965][ T8896] do_syscall_64+0x55/0xb0 [ 294.284401][ T8896] ? clear_bhb_loop+0x40/0x90 [ 294.289101][ T8896] ? clear_bhb_loop+0x40/0x90 [ 294.293798][ T8896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.299724][ T8896] RIP: 0033:0x7f7378b9e019 [ 294.304167][ T8896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.323825][ T8896] RSP: 002b:00007f7379a37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.332267][ T8896] RAX: ffffffffffffffda RBX: 00007f7378e25fa0 RCX: 00007f7378b9e019 [ 294.340265][ T8896] RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000005 [ 294.348259][ T8896] RBP: 00007f7378c3500c R08: 0000000000000000 R09: 0000000000000000 [ 294.356252][ T8896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.364247][ T8896] R13: 00007f7378e26038 R14: 00007f7378e25fa0 R15: 00007ffc6c812778 [ 294.372244][ T8896] [ 294.390889][ T27] lan78xx: probe of 3-1:1.0 failed with error -71 [ 294.408710][ T27] usb 3-1: USB disconnect, device number 3