last executing test programs: 2m28.906092837s ago: executing program 2 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000002000)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x5, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa090400"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x1) 2m27.070060913s ago: executing program 2 (id=264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x8c) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$OCFS2_IOC_GROUP_ADD64(r1, 0x40186f03, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) close(0xffffffffffffffff) setns(0xc9, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c, 0x0}}], 0x4d, 0x24000000) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000080)='./bus\x00') 2m26.985160067s ago: executing program 2 (id=265): socket$netlink(0x10, 0x3, 0xf) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x404, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x10, 0x803, 0x0) pipe2(&(0x7f00000000c0), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/handlers\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2m26.844553554s ago: executing program 2 (id=266): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x620b}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(r3, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 2m25.849753921s ago: executing program 2 (id=267): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1b2) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x82100, 0x114) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r0, 0x0, 0x0) 2m25.682080258s ago: executing program 2 (id=268): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m25.401835971s ago: executing program 32 (id=213): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) shmdt(0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x121c00) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000b40)=0xe) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x1}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000640)={{0x9, 0x4, 0x1, 0x3, 'syz0\x00', 0x4}, 0x0, [0x7fff, 0x5, 0x1, 0x8, 0x6, 0x720, 0x4, 0x7, 0x8, 0x6, 0x4, 0x6, 0x7e, 0x3ff, 0x1, 0x7, 0xa9, 0x1000, 0x19564bd4, 0x3, 0x800, 0x80, 0x3, 0x8, 0x3e, 0x2, 0x4, 0x1, 0x0, 0x9, 0x1, 0xffffffffffffff09, 0x5, 0x3, 0x8, 0x4, 0x3, 0x7, 0x7, 0x2, 0x6b, 0x800, 0x7, 0x6, 0xf676, 0x2, 0x9, 0x8000000000000000, 0x10001, 0x4, 0xfffffffffffffff6, 0x9, 0x0, 0x2, 0x8000000000000001, 0x0, 0x7fffffffffffffff, 0x1, 0x8, 0x8, 0x8, 0x6, 0x7, 0x3, 0x81, 0x65c, 0x4, 0x2, 0xb3, 0x400, 0x0, 0x9, 0x6f, 0x0, 0x6, 0x81, 0x0, 0x4, 0x7, 0x6, 0x1, 0x80000001, 0x7, 0xfece, 0x201d1db0, 0x8, 0x9, 0x3, 0xffff, 0x100, 0x0, 0x40, 0xb, 0x4, 0x8000000000000000, 0x0, 0x5, 0x800, 0x5, 0x1, 0x2000000000000002, 0x1d, 0xffffffffffff8000, 0x0, 0x1, 0x4, 0x3, 0x75c, 0x4, 0x0, 0x7, 0x3, 0x3, 0x0, 0xa, 0xfffffffffffffff8, 0x5, 0x2, 0xffffffffffff0262, 0x7ddb, 0x1, 0x7ff, 0x6, 0x10000, 0x4, 0x750d, 0x6]}) close_range(r4, 0xffffffffffffffff, 0x0) ioperm(0x3, 0x4, 0x100000a) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=ANY=[], 0x50) 2m24.192942269s ago: executing program 1 (id=273): openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 2m24.063155645s ago: executing program 1 (id=275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x8c) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$OCFS2_IOC_GROUP_ADD64(r1, 0x40186f03, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) close(0xffffffffffffffff) setns(0xc9, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c, 0x0}}], 0x4d, 0x24000000) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000080)='./bus\x00') 2m23.874201683s ago: executing program 1 (id=277): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r3, 0x0, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000019080)={0x40, 0x20, 0x9, 0x20, 0x7}, 0x48) socket(0x2, 0xa, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, 0x0) 2m22.297492268s ago: executing program 1 (id=280): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$BLKDISCARD(r1, 0x1277, 0x0) ptrace$pokeuser(0x6, r0, 0x118, 0x8137da) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x41, 0x0, 0x0) syz_usb_connect(0x2, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) tkill(0x0, 0x13) io_uring_setup(0x3aa5, &(0x7f00000002c0)={0x0, 0x32b6, 0x880, 0x0, 0x35d}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0xd267}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0xfeb1}}, 0x48) waitid(0x1, 0x0, 0x0, 0x8, &(0x7f00000003c0)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2m19.203636233s ago: executing program 1 (id=287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_setup(0x7fff, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 2m16.93166629s ago: executing program 1 (id=290): move_pages(0x0, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x2204000, 0x0, 0x9, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m12.719219348s ago: executing program 33 (id=257): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) gettid() r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x4, 0xa}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) 2m10.598989868s ago: executing program 34 (id=268): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m1.869799738s ago: executing program 35 (id=290): move_pages(0x0, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x2204000, 0x0, 0x9, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m10.739792733s ago: executing program 6 (id=458): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./config\x00', &(0x7f0000000880)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) close(r0) write(0xffffffffffffffff, &(0x7f0000000980)='1\n\x00', 0x2) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000ac0)='1\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/subsystems/testsubsys/namespaces/1/resv_enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000b40)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000bc0)='1\n\x00', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000c80)='loop\n\x00', 0x5) close(r5) symlinkat(&(0x7f0000000cc0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000d00)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) write(r6, &(0x7f0000000d80)='transport=loop,nqn=testsubsys\x00', 0x1e) nanosleep(&(0x7f0000000dc0)={0x0, 0xee6b280}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/diskstats\x00', 0x0, 0x0) read(r7, &(0x7f0000000e40)=""/2000, 0x7d0) 1m9.31896728s ago: executing program 6 (id=464): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) 1m9.119252609s ago: executing program 7 (id=465): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000540)={0x5f1, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r2 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0x5, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfe9f}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x3004080) write$binfmt_elf32(r3, &(0x7f00000013c0)=ANY=[@ANYBLOB="7f454c464a030101050000000000000002000300040000003e03000038000000d600000097700000fe03200001000780080007000000000003000000020000000200000000040000e90a"], 0x58) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x8001030, r3, 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x204884, &(0x7f0000000080)={[{@verity_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m6.291446222s ago: executing program 7 (id=472): ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) socket(0xa, 0x3, 0x87) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setfsgid(0xee00) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000047c0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) prctl$PR_GET_THP_DISABLE(0x2a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/SourceSink.r0\x00', 0x1ff) syz_emit_vhci(0x0, 0x7) 1m6.055207323s ago: executing program 6 (id=474): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./config\x00', &(0x7f0000000880)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) close(r0) write(0xffffffffffffffff, &(0x7f0000000980)='1\n\x00', 0x2) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000ac0)='1\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/subsystems/testsubsys/namespaces/1/resv_enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000b40)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000bc0)='1\n\x00', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000c80)='loop\n\x00', 0x5) close(r5) symlinkat(&(0x7f0000000cc0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000d00)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) write(r6, &(0x7f0000000d80)='transport=loop,nqn=testsubsys\x00', 0x1e) nanosleep(&(0x7f0000000dc0)={0x0, 0xee6b280}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/diskstats\x00', 0x0, 0x0) read(r7, &(0x7f0000000e40)=""/2000, 0x7d0) 1m5.27784109s ago: executing program 6 (id=481): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)=0x3, 0x4) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7e) write(r0, &(0x7f0000000150)='33554432\x00', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1m3.245405646s ago: executing program 6 (id=483): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1b2) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x82100, 0x114) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1m2.974370188s ago: executing program 6 (id=487): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, 0x0, 0x0) 1m1.703557588s ago: executing program 7 (id=493): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)=0x3, 0x4) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7e) write(r0, &(0x7f0000000150)='33554432\x00', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1m0.710957395s ago: executing program 7 (id=495): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x38, 0x1000, 0xeb7f}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2c, 0x0, 0x0) writev(r2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xffd8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) 59.683061893s ago: executing program 7 (id=497): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1b2) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x82100, 0x114) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x2}]) 59.270292843s ago: executing program 7 (id=502): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./config\x00', &(0x7f0000000880)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000980)='1\n\x00', 0x2) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000ac0)='1\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/subsystems/testsubsys/namespaces/1/resv_enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000b40)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000bc0)='1\n\x00', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000c80)='loop\n\x00', 0x5) close(r5) symlinkat(&(0x7f0000000cc0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000d00)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) write(r6, &(0x7f0000000d80)='transport=loop,nqn=testsubsys\x00', 0x1e) nanosleep(&(0x7f0000000dc0)={0x0, 0xee6b280}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/diskstats\x00', 0x0, 0x0) read(r7, &(0x7f0000000e40)=""/2000, 0x7d0) 56.419000037s ago: executing program 5 (id=508): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46030109e4080000000000000003003e00f9fdffffd8010000000000004000000000000000d902000000000000330d000005003800040078"], 0x220) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 56.299602353s ago: executing program 5 (id=509): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x2, @val=@netkit={@void, @value=r1}}, 0x1c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r3, 0x0, 0x0}, 0x10) 56.205450727s ago: executing program 5 (id=510): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0) write$P9_RLOPEN(r0, &(0x7f00000004c0)={0x18, 0xd, 0x2, {{0x1, 0x1, 0x3}, 0x8000000}}, 0x18) 56.109756021s ago: executing program 5 (id=511): syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000440), 0x9, 0x80040) r0 = gettid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffd, @empty, 0x2}, 0x1c) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, 0x0, &(0x7f00000000c0)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x0, 0x4, 0x1, {0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x60e}}}, 0x32) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143902) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) 55.573506866s ago: executing program 5 (id=512): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1b2) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x82100, 0x114) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x2}]) 55.366812326s ago: executing program 5 (id=513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x42}, 0x94) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x5, 0x4, 0x2, 0x8, 0x4, 0x3, 0x3, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x42600}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x1, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 47.054790287s ago: executing program 36 (id=487): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, 0x0, 0x0) 44.01615456s ago: executing program 37 (id=502): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./config\x00', &(0x7f0000000880)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000980)='1\n\x00', 0x2) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000ac0)='1\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/subsystems/testsubsys/namespaces/1/resv_enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000b40)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000bc0)='1\n\x00', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000c80)='loop\n\x00', 0x5) close(r5) symlinkat(&(0x7f0000000cc0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000d00)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) write(r6, &(0x7f0000000d80)='transport=loop,nqn=testsubsys\x00', 0x1e) nanosleep(&(0x7f0000000dc0)={0x0, 0xee6b280}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/diskstats\x00', 0x0, 0x0) read(r7, &(0x7f0000000e40)=""/2000, 0x7d0) 40.263516636s ago: executing program 38 (id=513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x42}, 0x94) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x5, 0x4, 0x2, 0x8, 0x4, 0x3, 0x3, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x42600}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x1, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.830834415s ago: executing program 9 (id=632): mount(0x0, &(0x7f0000001000)='./dev\x00', &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/cells\x00', 0x22a02, 0x0) pread64(r0, &(0x7f0000000180)=""/188, 0xbc, 0xc) r1 = openat(r0, &(0x7f0000002000)='./dev/mapper/control\x00', 0x200002, 0x2) ioctl(r1, 0xc138fd03, &(0x7f0000003000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r1, 0xc138fd09, &(0x7f0000003000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400"], 0x18}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB="08000000dd0000000000", @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$ocfs2_control(0xffffff9c, &(0x7f0000000280), 0x20000, 0x0) recvmmsg(r2, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000040)=""/224, 0xe0}], 0x3}, 0x72}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x40018000}], 0x3, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 7.359418334s ago: executing program 8 (id=644): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x237, 0x0, 0x2, 0x0, 0x2}) socket$inet_icmp(0x2, 0x2, 0x1) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000440)="b47b693fb8be1e856e", 0x9}], 0x1) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}, 0x10000000}], 0x2, 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r8, 0xc01864b0, &(0x7f0000000100)={r9, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffb) sendmsg$can_j1939(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="381a54130b1e0ab100", 0x9}, 0x1, 0x0, 0x0, 0x4004}, 0x8010) setsockopt$inet_buf(r3, 0x0, 0x29, 0x0, 0xff00) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffa, 0x4d}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1fedc5182ff03d23}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005}, 0x8001) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000240)={0x4, 0x0, [{0xc0000001, 0x10, 0x2, 0x9, 0x0, 0x3, 0x1a}, {0xc0000001, 0x9, 0x5, 0x7, 0x9, 0x2, 0x2}, {0xc0000001, 0xf, 0x1, 0x62, 0x7, 0x7}, {0x1, 0xe, 0x6, 0xfffffffb, 0x7ff, 0xfd70, 0x401}]}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400151bba9a42f39da100000000000002000004000000000000007ad4e3d05a5a9b2465712e5fb5cf490008000b00050b000070703f5a1aaf83f9ee3ae00d9048dee92a487a029ad6515bf8eec7cf90ec3cf940b015570523daff6d3deb30f99ce32802d97c68f5111077c18ee916fc42a6c0dda3e1e67364626a2f00b46bf2b4bf815212d59a620785d5307bd112bd3f"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 7.267068528s ago: executing program 3 (id=645): syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000440), 0x9, 0x80040) r0 = gettid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffd, @empty, 0x2}, 0x1c) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, 0x0, &(0x7f00000000c0)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x0, 0x4, 0x1, {0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x60e}}}, 0x32) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143902) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 7.193731452s ago: executing program 0 (id=646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x8c) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$OCFS2_IOC_GROUP_ADD64(r1, 0x40186f03, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) close(0xffffffffffffffff) setns(0xc9, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000000) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000080)='./bus\x00') 7.055921038s ago: executing program 0 (id=647): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x8000, 0x6, 0x300, 0xfc}, 0x10) socket$kcm(0x11, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0xe562b48021685062, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffe) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000000), 0x4) write(0xffffffffffffffff, &(0x7f0000000240)="31ff0100000000002100", 0xa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000004) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000400), &(0x7f0000000440)=0x4) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) 5.434049054s ago: executing program 3 (id=648): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$fb0(0xffffff9c, &(0x7f0000000000), 0xa0000, 0x0) 5.31337345s ago: executing program 8 (id=649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x0, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) 5.288304962s ago: executing program 4 (id=650): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f00000000d0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)={0xf, 0x17, 0x1, {0x6, './cifs'}}, 0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) write(r1, &(0x7f0000000500)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) getpid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xfd, 0x7ffc0001}]}) msync(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc040564a, &(0x7f00000000c0)) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) 5.211586205s ago: executing program 9 (id=651): socket$netlink(0x10, 0x3, 0xf) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x404, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x10, 0x803, 0x0) pipe2(&(0x7f00000000c0), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 5.167680057s ago: executing program 0 (id=652): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000280), 0x80000001, 0x28100) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x79, 0x79, 0x2, [@datasec={0x2, 0x4, 0x0, 0xf, 0x1, [{0x403, 0x1, 0x58b1}, {0x5, 0xfff, 0x4c9}, {0x5, 0x8000, 0x100}, {0x3, 0xff, 0x70}], '['}, @union={0x6, 0x3, 0x0, 0x5, 0x1, 0x2, [{0x4, 0x0, 0x5}, {0xd, 0x5, 0x9}, {0x9, 0x1}]}, @restrict={0xe, 0x0, 0x0, 0xb, 0x4}]}}, 0x0, 0x96, 0x0, 0x0, 0x8}, 0x28) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r3, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r3, &(0x7f0000000080), 0x12) connect$x25(r3, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 5.043949163s ago: executing program 9 (id=653): r0 = io_uring_setup(0x40c9, &(0x7f0000000440)={0x0, 0x8270, 0x1000, 0x1, 0x8000267}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = fsopen(&(0x7f0000000640)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000040)='-/\x00', 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000058}, 0x20008844) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r4, 0x90000000000002, 0x0) sendmsg$nl_xfrm(r4, 0x0, 0x4040015) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x200008c0) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000300000000006019078ac1efc01ac1414aa032d90780087571f44fd000400670003005c04017f000001e0000001ddebd1cb63f3b4593dd9b3052fd750ed9347750c50d53fd013a6c75e1e67ac3cd0548bc38d924a9ed07ae4a2d43c216f003caed2839c944d8db65ae21647c595da3b673a6964639e513dd60960cd6e82e5629d2074ef"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xc, &(0x7f0000006680)) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) close(0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x5, 0x0) eventfd2(0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_getevents(0x0, 0x4000000000000, 0x6, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100)) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 4.008119512s ago: executing program 8 (id=654): ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) socket(0xa, 0x3, 0x87) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setfsgid(0xee00) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000047c0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) prctl$PR_GET_THP_DISABLE(0x2a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/SourceSink.r0\x00', 0x1ff) syz_emit_vhci(0x0, 0x7) 4.007765282s ago: executing program 0 (id=655): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) sendmmsg$inet(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}], 0x1, 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x100}}, 0x18) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 3.869234208s ago: executing program 4 (id=656): ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x6, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71a, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0x1000000000000192, 0x9ba3, 0xffff, 0x82519, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x70bd26, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 3.367179002s ago: executing program 0 (id=657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x8c) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$OCFS2_IOC_GROUP_ADD64(r1, 0x40186f03, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) close(0xffffffffffffffff) setns(0xc9, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000000) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000080)='./bus\x00') 2.843450086s ago: executing program 4 (id=658): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)=0x3, 0x4) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) write(r0, &(0x7f0000000150)='33554432\x00', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 2.826727747s ago: executing program 9 (id=659): syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000440), 0x9, 0x80040) r0 = gettid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffd, @empty, 0x2}, 0x1c) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, 0x0, &(0x7f00000000c0)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x0, 0x4, 0x1, {0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x60e}}}, 0x32) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143902) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 2.799150409s ago: executing program 0 (id=660): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000040)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "955f598869b806"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001040)={{r0, 0x2, 0x8000000, 0x2741, 0x1, 0x2, 0x565c, 0x5, 0xe, 0x81, 0x3, 0x7, 0xffffffffffffff0b, 0x4, 0x3}}) io_uring_setup(0x1b54, &(0x7f0000000100)={0x0, 0x1d49, 0x400, 0x4, 0x3d8}) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, 0x0, 0x0) 2.75539543s ago: executing program 3 (id=661): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x237, 0x0, 0x2, 0x0, 0x2}) socket$inet_icmp(0x2, 0x2, 0x1) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000440)="b47b693fb8be1e856e", 0x9}], 0x1) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}, 0x10000000}], 0x2, 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r8, 0xc01864b0, &(0x7f0000000100)={r9, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffb) sendmsg$can_j1939(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="381a54130b1e0ab100", 0x9}, 0x1, 0x0, 0x0, 0x4004}, 0x8010) setsockopt$inet_buf(r3, 0x0, 0x29, 0x0, 0xff00) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffa, 0x4d}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1fedc5182ff03d23}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005}, 0x8001) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000240)={0x4, 0x0, [{0xc0000001, 0x10, 0x2, 0x9, 0x0, 0x3, 0x1a}, {0xc0000001, 0x9, 0x5, 0x7, 0x9, 0x2, 0x2}, {0xc0000001, 0xf, 0x1, 0x62, 0x7, 0x7}, {0x1, 0xe, 0x6, 0xfffffffb, 0x7ff, 0xfd70, 0x401}]}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400151bba9a42f39da100000000000002000004000000000000007ad4e3d05a5a9b2465712e5fb5cf490008000b00050b000070703f5a1aaf83f9ee3ae00d9048dee92a487a029ad6515bf8eec7cf90ec3cf940b015570523daff6d3deb30f99ce32802d97c68f5111077c18ee916fc42a6c0dda3e1e67364626a2f00b46bf2b4bf815212d59a620785d5307bd112bd3f"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 2.354030349s ago: executing program 4 (id=662): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x29}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20200}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x6f, 0x0, &(0x7f0000000100)="e0b9547ed387aff28b2f9ddbe9ab", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.082106212s ago: executing program 9 (id=663): socket$netlink(0x10, 0x3, 0xf) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x404, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x10, 0x803, 0x0) pipe2(&(0x7f00000000c0), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.081823062s ago: executing program 4 (id=664): syslog(0x1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="0e77dcbcd2118e14ad5c50729c1fdb9907d5f77cff960703ccfd4cc9482749d38f2830921a978b080efd49e5fca5d35d88e02647b202fdc6434947e0c788546b36497b50ed1904c8e662d9ebb4c60a1930a680a86a3262fc8167bd", 0x5b, 0x4000000, &(0x7f0000000340)={0xa, 0x4e20, 0x3, @remote, 0x9}, 0x1c) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x141080, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x20080, 0x0) read(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x300, 0xb6, 0x2, 0x5, 0xffff, 0x5, 0x1000000, 0xfffffff8, 0x4, 0x1b1, 0x7, 0x1001, 0x7, 0x218, 0x0, 0xfffffffd, 0xfffffffe, 0x7, 0x100003, 0x80000003, 0x489, 0x7, 0x0, 0x7, 0x1, 0xf39e, 0x0, 0x8, 0xa, 0xffffffff, 0xfffffff8]}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r1, 0x40109441, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, 0x0, 0x0) 2.081432962s ago: executing program 3 (id=665): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./backing_file\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) dup2(r1, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/syz\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/syz/node/node0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/syz/node/node0/ipv4_port\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='7777\n', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/cluster/syz/heartbeat/hb0/dev\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='7\n', 0x2) 2.018236775s ago: executing program 4 (id=666): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys_mnt\x00', &(0x7f0000000280)='bdev\x00', 0x1042c20, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys_mnt/class/rtc/rtc0/date\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000000020100fd00000200000000000000000400000088000500", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) write(r0, &(0x7f0000000000)="d5e742ec02eebef5d0da1cc4a68d114f119f00647e77dc49c5fbb5b7a83892a836c2f04e5fa6f1fbe204707563d9da454293972540e2d2cdc9a3290f9e2f78974678ff2f0b8ba0974e9a9f2d13442dd18ff7ebab1b3f270a9239569e810a7f30fe10b517929aae6b000c1071c144203516869d893173429a6feae71cdf4569deb7b4b8bd54f494dd36fa0994c33e04541d644e544c2ba4517d882ac206f4459a17b51f3557df68a15eb22fb53bc709f1f38692f86fdab30b8384df8b4d6e8959282bfd2b79b395a6", 0xc8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) writev(r3, &(0x7f0000001c00)=[{&(0x7f0000000140)="ba", 0x1}], 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x11}}], 0x1, 0x24008094) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r4, 0x409, 0x3) close(0x3) 1.982869596s ago: executing program 9 (id=667): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x5, 0x8, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4, 0xffffffffffffffff, 0x2000000}, 0xc) 1.323146498s ago: executing program 3 (id=668): ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x6, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71a, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0x1000000000000192, 0x9ba3, 0xffff, 0x82519, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x70bd26, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 1.081592339s ago: executing program 8 (id=669): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x1) sendto$inet6(r0, &(0x7f0000001680)="b9ef8212ba17f60459", 0x9, 0x800, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000681000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/220, 0xdc, 0x1, 0x0}, &(0x7f00000001c0)=0x40) 487.540277ms ago: executing program 8 (id=670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x8c) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$OCFS2_IOC_GROUP_ADD64(r1, 0x40186f03, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) close(0xffffffffffffffff) setns(0xc9, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000000) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000080)='./bus\x00') 34.524879ms ago: executing program 3 (id=671): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000031401002dbd700002dcdf250900020073607a310000000008004100736977001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x14f7325ddd07b80}, 0x44000) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x40, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0xc094) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="2e00000011008188040f80ec59acbc0413a1f8480b0000", 0x17}], 0x1}, 0x20008000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180"], 0x2c}}, 0x0) 0s ago: executing program 8 (id=672): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x620b}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7056}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x98, &(0x7f0000000480)=""/152}, 0x94) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts. [ 45.599478][ T4170] cgroup: Unknown subsys name 'net' [ 45.752026][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 46.994729][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 48.321409][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 48.338173][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 48.351233][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 48.426224][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 48.451853][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.459172][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.467281][ T4186] device bridge_slave_0 entered promiscuous mode [ 48.485921][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 48.507957][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.515027][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.523110][ T4186] device bridge_slave_1 entered promiscuous mode [ 48.551166][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.558412][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.566090][ T4194] device bridge_slave_0 entered promiscuous mode [ 48.587427][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.604016][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.618666][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.625722][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.633943][ T4194] device bridge_slave_1 entered promiscuous mode [ 48.662235][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.669490][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.677427][ T4185] device bridge_slave_0 entered promiscuous mode [ 48.706723][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.713957][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.722260][ T4185] device bridge_slave_1 entered promiscuous mode [ 48.730644][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.742390][ T4186] team0: Port device team_slave_0 added [ 48.769042][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.779228][ T4186] team0: Port device team_slave_1 added [ 48.800546][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.807741][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.815318][ T4190] device bridge_slave_0 entered promiscuous mode [ 48.828353][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.835422][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.843306][ T4190] device bridge_slave_1 entered promiscuous mode [ 48.860953][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.868471][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.876068][ T4193] device bridge_slave_0 entered promiscuous mode [ 48.885648][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.907635][ T4194] team0: Port device team_slave_0 added [ 48.914681][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.924107][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.931280][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.939736][ T4193] device bridge_slave_1 entered promiscuous mode [ 48.959499][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.966459][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.992420][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.005138][ T4194] team0: Port device team_slave_1 added [ 49.029420][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.038955][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.045895][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.071967][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.095020][ T4185] team0: Port device team_slave_0 added [ 49.103278][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.113707][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.127285][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.134232][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.160257][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.172974][ T4185] team0: Port device team_slave_1 added [ 49.179159][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.186187][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.212214][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.224420][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.273889][ T4193] team0: Port device team_slave_0 added [ 49.281682][ T4193] team0: Port device team_slave_1 added [ 49.312172][ T4190] team0: Port device team_slave_0 added [ 49.318706][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.325656][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.352032][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.373416][ T4186] device hsr_slave_0 entered promiscuous mode [ 49.380425][ T4186] device hsr_slave_1 entered promiscuous mode [ 49.395261][ T4190] team0: Port device team_slave_1 added [ 49.401609][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.408665][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.440171][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.457577][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.464564][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.490575][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.505396][ T4194] device hsr_slave_0 entered promiscuous mode [ 49.512492][ T4194] device hsr_slave_1 entered promiscuous mode [ 49.519473][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.527296][ T4194] Cannot create hsr debugfs directory [ 49.557443][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.564413][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.590464][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.605653][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.612868][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.638773][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.656721][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.663798][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.690046][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.719899][ T4185] device hsr_slave_0 entered promiscuous mode [ 49.726905][ T4185] device hsr_slave_1 entered promiscuous mode [ 49.733373][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.741501][ T4185] Cannot create hsr debugfs directory [ 49.805771][ T4193] device hsr_slave_0 entered promiscuous mode [ 49.813592][ T4193] device hsr_slave_1 entered promiscuous mode [ 49.820575][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.828669][ T4193] Cannot create hsr debugfs directory [ 49.922969][ T4190] device hsr_slave_0 entered promiscuous mode [ 49.930065][ T4190] device hsr_slave_1 entered promiscuous mode [ 49.936566][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.944826][ T4190] Cannot create hsr debugfs directory [ 50.068688][ T4174] Bluetooth: hci4: command 0x0409 tx timeout [ 50.075265][ T4174] Bluetooth: hci3: command 0x0409 tx timeout [ 50.081445][ T4174] Bluetooth: hci0: command 0x0409 tx timeout [ 50.087562][ T4174] Bluetooth: hci2: command 0x0409 tx timeout [ 50.093622][ T4174] Bluetooth: hci1: command 0x0409 tx timeout [ 50.125746][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.146211][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.155473][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.166416][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.202937][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 50.213714][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 50.223331][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 50.233727][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 50.299224][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.332907][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.342564][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.353575][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.393518][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.405782][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.421008][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.433284][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.461209][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.477626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.487828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.499163][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.520131][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.555077][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.564648][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.574126][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.581395][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.590125][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.600504][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.609077][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.616130][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.624501][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.633392][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.643801][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.662121][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.671519][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.686006][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.697826][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.713404][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.722079][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.730779][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.747885][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.758218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.770524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.786304][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.800605][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.811557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.820532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.830179][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.837279][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.845802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.854712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.863827][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.870910][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.883551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.891966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.900777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.911868][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.920590][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.933797][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.947731][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.957715][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.966019][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.974609][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.986648][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.011989][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.022255][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.032442][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.042754][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.051666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.060789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.093643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.108314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.116866][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.123936][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.141970][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.154508][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.170961][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.190454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.199917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.208796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.219110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.228088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.236198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.245167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.253565][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.260641][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.269101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.282203][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.290708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.301857][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.322936][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.357409][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.373609][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.383095][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.399102][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.407984][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.416259][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.424946][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.433566][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.441980][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.449518][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.464088][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.472798][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.481886][ T1252] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.488977][ T1252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.498731][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.508169][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.516491][ T1252] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.523861][ T1252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.536554][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.551630][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.563273][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.574402][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.583202][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.596322][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.606011][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.623393][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.650652][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.667848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.678460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.686326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.697483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.706207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.714830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.723980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.733692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.752662][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.764306][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.789807][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.797631][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.806060][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.828437][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.848264][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.856744][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.863885][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.872619][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.881484][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.890241][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.899189][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.909274][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.916338][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.923944][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.931531][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.939137][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.948544][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.958145][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.966738][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.978954][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.006422][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.016126][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.026165][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.045763][ T4186] device veth0_vlan entered promiscuous mode [ 52.080642][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.104374][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.113384][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.122911][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.131720][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.140300][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.147411][ T4229] Bluetooth: hci1: command 0x041b tx timeout [ 52.149019][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.154454][ T4229] Bluetooth: hci2: command 0x041b tx timeout [ 52.167603][ T4229] Bluetooth: hci0: command 0x041b tx timeout [ 52.172569][ T4186] device veth1_vlan entered promiscuous mode [ 52.173696][ T4229] Bluetooth: hci3: command 0x041b tx timeout [ 52.186561][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 52.191125][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.215844][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.233157][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.245698][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.260574][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.272939][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.283807][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.293101][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.302620][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.311072][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.319993][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.354403][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.363225][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.372229][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.396252][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.411015][ T4185] device veth0_vlan entered promiscuous mode [ 52.433274][ T4186] device veth0_macvtap entered promiscuous mode [ 52.462324][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.470335][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.479855][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.488714][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.497475][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.505884][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.514622][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.524821][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.533915][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.542111][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.551400][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.570582][ T4186] device veth1_macvtap entered promiscuous mode [ 52.586371][ T4185] device veth1_vlan entered promiscuous mode [ 52.597144][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.605746][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.636804][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.669481][ T4194] device veth0_vlan entered promiscuous mode [ 52.677704][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.691194][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.700447][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.709834][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.721227][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.732306][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.741865][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.750938][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.761154][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.775626][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.785470][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.793500][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.802194][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.812095][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.820721][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.832863][ T4193] device veth0_vlan entered promiscuous mode [ 52.844888][ T4194] device veth1_vlan entered promiscuous mode [ 52.853293][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.862989][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.871354][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.888241][ T4185] device veth0_macvtap entered promiscuous mode [ 52.905130][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.914273][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.924402][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.932376][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.954778][ T4185] device veth1_macvtap entered promiscuous mode [ 52.965880][ T4193] device veth1_vlan entered promiscuous mode [ 52.981367][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.990198][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.998642][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.006049][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.014787][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.023910][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.061626][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.071129][ T4194] device veth0_macvtap entered promiscuous mode [ 53.082583][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.094337][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.108807][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.129902][ T4194] device veth1_macvtap entered promiscuous mode [ 53.137050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.145423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.154503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.162825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.171410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.182643][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.193680][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.204736][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.235936][ T4193] device veth0_macvtap entered promiscuous mode [ 53.245363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.254220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.263873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.272470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.281519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.292892][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.301891][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.310778][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.320195][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.335280][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.347176][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.357728][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.369086][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.380290][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.391675][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.396109][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.411467][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.412179][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.421548][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.421562][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.422767][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.464393][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.473426][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.482288][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.491047][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.507832][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.516390][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.526582][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.534628][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.545089][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.558021][ T4193] device veth1_macvtap entered promiscuous mode [ 53.594497][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.606322][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.662395][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.671779][ T4190] device veth0_vlan entered promiscuous mode [ 53.680461][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.697385][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.708835][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.718065][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.726298][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.734213][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.773943][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.794601][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.804499][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.820367][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.830487][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.841201][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.852683][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.862354][ T4190] device veth1_vlan entered promiscuous mode [ 53.879963][ T4262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.888888][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.905963][ T4262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.915477][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.956893][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 53.966875][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 53.976873][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 53.986879][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 53.996876][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 54.006871][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 54.016875][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 54.026872][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 54.036872][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 54.046871][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 55.209685][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 55.217248][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.256720][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 55.264302][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 55.299086][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.315258][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 55.321959][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.337498][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 55.343583][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.375409][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.387701][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.402695][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.415577][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.459448][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.467992][ T4262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.475826][ T4262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.492652][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.501884][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.511181][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.521395][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.535290][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.544501][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.555763][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.567931][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.613884][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.615272][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.625941][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.649057][ T4190] device veth0_macvtap entered promiscuous mode [ 55.668336][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.690009][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.700689][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.713424][ T4190] device veth1_macvtap entered promiscuous mode [ 55.726307][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.778388][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.806588][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.822057][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.829962][ T25] audit: type=1800 audit(1790139253.638:2): pid=4272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5" name=8006 dev="sda1" ino=2044 res=0 errno=0 [ 55.831281][ T4272] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 0 (only 8 groups) [ 55.879993][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.949729][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.058586][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.111622][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.156054][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.189565][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.267115][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.335043][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.464818][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.663328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.710110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.767013][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.782155][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.792414][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.805046][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.815268][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.825865][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.835912][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.848240][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.860494][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.889747][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.908931][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.921009][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.945582][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.964351][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.974500][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.974516][ T4281] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 57.006352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.016219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.051602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.066807][ T4281] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 57.095383][ T1229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.113286][ T1229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.133462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.235995][ T4228] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.257696][ T4268] Bluetooth: hci4: command 0x0419 tx timeout [ 57.265258][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.292747][ T4286] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 57.292747][ T4286] [ 57.306782][ T4286] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 57.320247][ T4286] CIFS: Attempting to mount \\127.0.0.1\share [ 57.348428][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 57.363789][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.408280][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 57.534360][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 57.634533][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.646365][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 57.698783][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.739784][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.859396][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.440431][ T4228] usb 5-1: Using ep0 maxpacket: 8 [ 58.564320][ T4286] CIFS: VFS: cifs_mount failed w/return code = -112 [ 58.687048][ T4228] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 58.747478][ T4228] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 58.913311][ T4304] program syz.2.11 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.588401][ T4305] serio: Serial port ttyS3 [ 59.926848][ C0] sched: RT throttling activated [ 60.267078][ T4228] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 60.286488][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.358944][ T4228] usb 5-1: config 0 descriptor?? [ 60.387462][ T4228] usb 5-1: can't set config #0, error -71 [ 60.415247][ T4228] usb 5-1: USB disconnect, device number 2 [ 60.574364][ T4330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'. [ 61.630915][ T4338] zram0: detected capacity change from 0 to 65536 [ 64.772375][ T25] audit: type=1326 audit(1790139262.588:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz.3.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1922765159 code=0x7ffc0000 [ 66.403218][ T25] audit: type=1326 audit(1790139262.618:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz.3.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1922765159 code=0x7ffc0000 [ 66.559635][ T4268] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.605360][ T25] audit: type=1326 audit(1790139262.618:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz.3.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1922765159 code=0x7ffc0000 [ 66.629494][ T25] audit: type=1326 audit(1790139262.618:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz.3.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f192272598e code=0x7ffc0000 [ 66.786954][ T25] audit: type=1326 audit(1790139262.618:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz.3.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1922766457 code=0x7ffc0000 [ 66.885066][ T4268] usb 4-1: device descriptor read/64, error -71 [ 66.892317][ T25] audit: type=1326 audit(1790139262.618:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz.3.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1922765159 code=0x7ffc0000 [ 66.916769][ T25] audit: type=1326 audit(1790139262.618:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz.3.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1922766457 code=0x7ffc0000 [ 67.423925][ T4202] Bluetooth: Wrong link type (-22) [ 67.607143][ T4268] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 67.937639][ T25] audit: type=1326 audit(1790139262.618:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz.3.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f192272598e code=0x7ffc0000 [ 67.962704][ T25] audit: type=1326 audit(1790139262.618:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz.3.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1922765159 code=0x7ffc0000 [ 67.986774][ T25] audit: type=1326 audit(1790139262.628:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz.3.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1922765159 code=0x7ffc0000 [ 68.044535][ T4373] device netdevsim0 entered promiscuous mode [ 68.178366][ T4373] device netdevsim0 left promiscuous mode [ 68.302190][ T4381] zram: Cannot change disksize for initialized device [ 69.257111][ T4394] tmpfs: Unknown parameter 'usrquota' [ 69.769830][ T4390] device-mapper: table: 248:0: mirror: Unrecognised feature requested [ 69.888999][ T4390] device-mapper: ioctl: error adding target to table [ 70.161755][ T4401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'. [ 70.172427][ T4401] device bridge_slave_1 left promiscuous mode [ 70.179662][ T4401] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.204801][ T4402] nvmet: adding nsid 1 to subsystem testsubsys [ 70.216500][ T25] kauditd_printk_skb: 14 callbacks suppressed [ 70.216513][ T25] audit: type=1800 audit(1790139268.028:27): pid=4402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.37" name="device_path" dev="configfs" ino=32481 res=0 errno=0 [ 70.251639][ T4402] nvmet: failed to open block device (null): (-22) [ 70.254312][ T4401] device bridge_slave_0 left promiscuous mode [ 70.266551][ T25] audit: type=1800 audit(1790139268.068:28): pid=4402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.37" name="buffered_io" dev="configfs" ino=32482 res=0 errno=0 [ 70.298021][ T4295] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.305467][ T25] audit: type=1800 audit(1790139268.068:29): pid=4402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.37" name="enable" dev="configfs" ino=32483 res=0 errno=0 [ 70.310784][ T4401] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.333837][ T25] audit: type=1800 audit(1790139268.078:30): pid=4402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.37" name="addr_trtype" dev="configfs" ino=32489 res=0 errno=0 [ 70.370070][ T13] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:084fc82d-4549-4c37-bcbf-1afef24f8570 for subsystem testsubsys not allowed [ 70.414509][ T4402] nvme nvme0: Connect for subsystem testsubsys is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:084fc82d-4549-4c37-bcbf-1afef24f8570 [ 70.727115][ T4295] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.384067][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.415684][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.799001][ T4295] usb 1-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 73.935630][ T4295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.959193][ T4295] usb 1-1: config 0 descriptor?? [ 73.977566][ T4295] usb 1-1: can't set config #0, error -71 [ 73.986306][ T4295] usb 1-1: USB disconnect, device number 2 [ 75.248129][ T25] audit: type=1800 audit(1790139273.068:31): pid=4442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.48" name="device_path" dev="configfs" ino=32581 res=0 errno=0 [ 75.289550][ T4442] nvmet: failed to open block device (null): (-22) [ 75.348338][ T4442] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 75.367120][ T25] audit: type=1800 audit(1790139273.088:32): pid=4442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.48" name="buffered_io" dev="configfs" ino=32582 res=0 errno=0 [ 75.406900][ T25] audit: type=1800 audit(1790139273.098:33): pid=4442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.48" name="enable" dev="configfs" ino=32585 res=0 errno=0 [ 75.452756][ T4452] FAULT_INJECTION: forcing a failure. [ 75.452756][ T4452] name failslab, interval 1, probability 0, space 0, times 1 [ 75.466577][ T25] audit: type=1800 audit(1790139273.168:34): pid=4442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.48" name="addr_trtype" dev="configfs" ino=33584 res=0 errno=0 [ 75.469329][ T21] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:084fc82d-4549-4c37-bcbf-1afef24f8570 for subsystem testsubsys not allowed [ 75.489079][ T4452] CPU: 0 PID: 4452 Comm: syz.1.52 Not tainted syzkaller #0 [ 75.507844][ T4452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.517925][ T4452] Call Trace: [ 75.521216][ T4452] [ 75.524152][ T4452] dump_stack_lvl+0x188/0x250 [ 75.528858][ T4452] ? show_regs_print_info+0x20/0x20 [ 75.534070][ T4452] ? load_image+0x410/0x410 [ 75.538592][ T4452] ? __might_sleep+0xf0/0xf0 [ 75.543210][ T4452] ? __lock_acquire+0x7b50/0x7b50 [ 75.548254][ T4452] should_fail+0x383/0x4b0 [ 75.552686][ T4452] should_failslab+0x5/0x20 [ 75.557207][ T4452] slab_pre_alloc_hook+0x51/0xc0 [ 75.562164][ T4452] kmem_cache_alloc_trace+0x47/0x290 [ 75.567273][ T4442] nvme nvme0: Connect for subsystem testsubsys is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:084fc82d-4549-4c37-bcbf-1afef24f8570 [ 75.567453][ T4452] ? __list_lru_init+0x535/0xac0 [ 75.586683][ T4452] __list_lru_init+0x535/0xac0 [ 75.591473][ T4452] alloc_super+0x787/0x970 [ 75.595912][ T4452] sget+0x1ce/0x450 [ 75.599740][ T4452] ? free_anon_bdev+0x20/0x20 [ 75.604428][ T4452] ? devpts_kill_sb+0x60/0x60 [ 75.609114][ T4452] mount_nodev+0x2c/0xe0 [ 75.613370][ T4452] legacy_get_tree+0xe6/0x180 [ 75.618056][ T4452] ? devpts_pty_kill+0x280/0x280 [ 75.623008][ T4452] vfs_get_tree+0x88/0x270 [ 75.627438][ T4452] do_new_mount+0x247/0xa40 [ 75.632049][ T4452] __se_sys_mount+0x2e3/0x3d0 [ 75.636052][ T4447] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 75.636739][ T4452] ? __x64_sys_mount+0xc0/0xc0 [ 75.667501][ T4452] ? lockdep_hardirqs_on+0x94/0x140 [ 75.672754][ T4452] ? __x64_sys_mount+0x1c/0xc0 [ 75.677522][ T4452] do_syscall_64+0x4c/0xa0 [ 75.681943][ T4452] ? clear_bhb_loop+0x30/0x80 [ 75.686632][ T4452] ? clear_bhb_loop+0x30/0x80 [ 75.691316][ T4452] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.697227][ T4452] RIP: 0033:0x7ff3b68a4159 [ 75.701644][ T4452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.721254][ T4452] RSP: 002b:00007ff3b4afc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.729676][ T4452] RAX: ffffffffffffffda RBX: 00007ff3b6b2bfa0 RCX: 00007ff3b68a4159 [ 75.737652][ T4452] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 0000000000000000 [ 75.745619][ T4452] RBP: 00007ff3b693b06b R08: 0000000000000000 R09: 0000000000000000 [ 75.753583][ T4452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.761548][ T4452] R13: 00007ff3b6b2c038 R14: 00007ff3b6b2bfa0 R15: 00007ffdd42e4158 [ 75.769531][ T4452] [ 75.796085][ T4447] CIFS mount error: No usable UNC path provided in device string! [ 75.796085][ T4447] [ 75.990980][ T4447] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 76.297900][ T4467] tmpfs: Unknown parameter 'quota' [ 76.379106][ T26] cfg80211: failed to load regulatory.db [ 82.445869][ T4527] tmpfs: Unknown parameter 'nr_inìûUÀ' [ 84.950662][ T4552] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.248718][ T25] audit: type=1800 audit(1790139288.068:35): pid=4603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.100" name="device_path" dev="configfs" ino=34841 res=0 errno=0 [ 90.270287][ T4603] nvmet: failed to open block device (null): (-22) [ 90.374423][ T4603] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 91.092234][ T25] audit: type=1800 audit(1790139288.068:36): pid=4603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.100" name="buffered_io" dev="configfs" ino=34842 res=0 errno=0 [ 91.164526][ T25] audit: type=1800 audit(1790139288.068:37): pid=4603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.100" name="enable" dev="configfs" ino=34843 res=0 errno=0 [ 91.275789][ T25] audit: type=1800 audit(1790139288.188:38): pid=4603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.100" name="addr_trtype" dev="configfs" ino=33956 res=0 errno=0 [ 91.300173][ T4268] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:084fc82d-4549-4c37-bcbf-1afef24f8570 for subsystem testsubsys not allowed [ 91.301984][ T4617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.104'. [ 91.340941][ T4619] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.376131][ T4603] nvme nvme0: Connect for subsystem testsubsys is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:084fc82d-4549-4c37-bcbf-1afef24f8570 [ 93.568486][ T4633] process 'syz.0.107' launched './file0' with NULL argv: empty string added [ 93.588183][ T4633] FAULT_INJECTION: forcing a failure. [ 93.588183][ T4633] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 93.696922][ T4633] CPU: 1 PID: 4633 Comm: syz.0.107 Not tainted syzkaller #0 [ 93.704244][ T4633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.714313][ T4633] Call Trace: [ 93.717603][ T4633] [ 93.720545][ T4633] dump_stack_lvl+0x188/0x250 [ 93.725235][ T4633] ? show_regs_print_info+0x20/0x20 [ 93.730430][ T4633] ? load_image+0x410/0x410 [ 93.734920][ T4633] ? __lock_acquire+0x7b50/0x7b50 [ 93.739936][ T4633] should_fail+0x383/0x4b0 [ 93.744346][ T4633] prepare_alloc_pages+0x1e3/0x5b0 [ 93.749443][ T4633] __alloc_pages+0x11b/0x480 [ 93.754021][ T4633] ? zone_statistics+0x170/0x170 [ 93.758993][ T4633] ? alloc_pages+0x452/0x560 [ 93.763594][ T4633] __pmd_alloc+0xa6/0x750 [ 93.767930][ T4633] ? __lock_acquire+0x7b50/0x7b50 [ 93.772968][ T4633] ? do_raw_spin_lock+0x128/0x2f0 [ 93.777998][ T4633] ? __pud_alloc+0x140/0x140 [ 93.782582][ T4633] ? __rwlock_init+0x140/0x140 [ 93.787335][ T4633] ? count_memcg_event_mm+0x324/0x370 [ 93.792698][ T4633] ? do_raw_spin_unlock+0x11d/0x230 [ 93.797907][ T4633] ? _raw_spin_unlock+0x24/0x40 [ 93.802746][ T4633] ? __pud_alloc+0x122/0x140 [ 93.807346][ T4633] handle_mm_fault+0xbd3/0x4440 [ 93.812206][ T4633] ? get_page+0xe0/0xe0 [ 93.816364][ T4633] ? follow_page_mask+0x272/0x12b0 [ 93.821466][ T4633] ? check_vma_flags+0x359/0x470 [ 93.826415][ T4633] __get_user_pages+0x952/0x11e0 [ 93.831366][ T4633] ? populate_vma_page_range+0x290/0x290 [ 93.836983][ T4633] ? preempt_schedule+0xbc/0xd0 [ 93.841832][ T4633] ? __might_sleep+0xf0/0xf0 [ 93.846405][ T4633] ? read_lock_is_recursive+0x10/0x10 [ 93.851760][ T4633] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 93.857120][ T4633] __get_user_pages_remote+0x1c2/0x730 [ 93.862575][ T4633] ? irq_work_queue+0xb8/0x140 [ 93.867326][ T4633] ? get_user_pages_remote+0x55/0xa0 [ 93.872594][ T4633] get_arg_page+0x11b/0x350 [ 93.877078][ T4633] ? copy_string_kernel+0x280/0x280 [ 93.882254][ T4633] ? load_image+0x410/0x410 [ 93.886742][ T4633] copy_string_kernel+0x14d/0x280 [ 93.891755][ T4633] do_execveat_common+0x360/0x6b0 [ 93.896762][ T4633] __x64_sys_execve+0x8e/0xa0 [ 93.901422][ T4633] do_syscall_64+0x4c/0xa0 [ 93.905819][ T4633] ? clear_bhb_loop+0x30/0x80 [ 93.910479][ T4633] ? clear_bhb_loop+0x30/0x80 [ 93.915141][ T4633] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.921013][ T4633] RIP: 0033:0x7f222a617159 [ 93.925408][ T4633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.945018][ T4633] RSP: 002b:00007f222886f028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 93.953441][ T4633] RAX: ffffffffffffffda RBX: 00007f222a89efa0 RCX: 00007f222a617159 [ 93.961400][ T4633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 93.969355][ T4633] RBP: 00007f222a6ae06b R08: 0000000000000000 R09: 0000000000000000 [ 93.977308][ T4633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.985280][ T4633] R13: 00007f222a89f038 R14: 00007f222a89efa0 R15: 00007ffc9705e4a8 [ 93.993324][ T4633] [ 97.396551][ T4664] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.743613][ T4728] sctp: [Deprecated]: syz.4.123 (pid 4728) Use of int in max_burst socket option deprecated. [ 99.743613][ T4728] Use struct sctp_assoc_value instead [ 100.034387][ T4734] bond0: option slaves: interface -b does not exist! [ 101.289835][ T25] audit: type=1800 audit(1790139299.108:39): pid=4755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.116" name="device_path" dev="configfs" ino=34200 res=0 errno=0 [ 101.313188][ T4755] nvmet: failed to open block device (null): (-22) [ 101.321695][ T4755] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 101.335139][ T25] audit: type=1800 audit(1790139299.128:40): pid=4755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.116" name="buffered_io" dev="configfs" ino=34201 res=0 errno=0 [ 101.414234][ T25] audit: type=1800 audit(1790139299.128:41): pid=4755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.116" name="enable" dev="configfs" ino=34202 res=0 errno=0 [ 101.455076][ T25] audit: type=1800 audit(1790139299.138:42): pid=4755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.116" name="addr_trtype" dev="configfs" ino=34203 res=0 errno=0 [ 101.555474][ T4230] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:084fc82d-4549-4c37-bcbf-1afef24f8570 for subsystem testsubsys not allowed [ 101.570779][ T4755] nvme nvme0: Connect for subsystem testsubsys is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:084fc82d-4549-4c37-bcbf-1afef24f8570 [ 103.435067][ T4770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.131'. [ 103.447967][ T4774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.133'. [ 103.461827][ T4268] kernel write not supported for file /sequencer2 (pid: 4268 comm: kworker/1:7) [ 104.368548][ T4782] netlink: 'syz.2.135': attribute type 1 has an invalid length. [ 104.454922][ T4782] netlink: 'syz.2.135': attribute type 2 has an invalid length. [ 105.903441][ T25] audit: type=1800 audit(1790139303.718:43): pid=4800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.142" name="device_path" dev="configfs" ino=35009 res=0 errno=0 [ 105.946450][ T4800] nvmet: failed to open block device (null): (-22) [ 106.003420][ T25] audit: type=1800 audit(1790139303.758:44): pid=4800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.142" name="buffered_io" dev="configfs" ino=35010 res=0 errno=0 [ 106.043388][ T4800] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 106.076750][ T25] audit: type=1800 audit(1790139303.758:45): pid=4800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.142" name="enable" dev="configfs" ino=35011 res=0 errno=0 [ 106.122300][ T25] audit: type=1800 audit(1790139303.858:46): pid=4800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.142" name="addr_trtype" dev="configfs" ino=35016 res=0 errno=0 [ 106.553767][ T4261] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:084fc82d-4549-4c37-bcbf-1afef24f8570 for subsystem testsubsys not allowed [ 106.671543][ T4805] nvme nvme0: Connect for subsystem testsubsys is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:084fc82d-4549-4c37-bcbf-1afef24f8570 [ 109.154686][ T4817] FAULT_INJECTION: forcing a failure. [ 109.154686][ T4817] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 109.169283][ T4817] CPU: 1 PID: 4817 Comm: syz.0.146 Not tainted syzkaller #0 [ 109.176588][ T4817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.186649][ T4817] Call Trace: [ 109.189938][ T4817] [ 109.192880][ T4817] dump_stack_lvl+0x188/0x250 [ 109.197574][ T4817] ? show_regs_print_info+0x20/0x20 [ 109.202794][ T4817] ? load_image+0x410/0x410 [ 109.207319][ T4817] should_fail+0x383/0x4b0 [ 109.211768][ T4817] prepare_alloc_pages+0x1e3/0x5b0 [ 109.216892][ T4817] __alloc_pages+0x11b/0x480 [ 109.221482][ T4817] ? zone_statistics+0x170/0x170 [ 109.226416][ T4817] ? rcu_lock_acquire+0x30/0x30 [ 109.231266][ T4817] ? alloc_pages+0x452/0x560 [ 109.236013][ T4817] __get_free_pages+0x8/0x30 [ 109.240612][ T4817] __tlb_remove_page_size+0x1f2/0x3f0 [ 109.245980][ T4817] unmap_page_range+0xfcf/0x2410 [ 109.250917][ T4817] unmap_vmas+0x131/0x250 [ 109.255229][ T4817] ? unmap_page_range+0x2410/0x2410 [ 109.260423][ T4817] ? __mutex_lock_common+0x435/0x2400 [ 109.265801][ T4817] ? exit_mm_release+0x16/0x30 [ 109.270550][ T4817] exit_mmap+0x3b9/0x640 [ 109.274779][ T4817] ? vm_brk+0x20/0x20 [ 109.278760][ T4817] ? uprobe_clear_state+0x2f6/0x460 [ 109.283957][ T4817] __mmput+0x115/0x390 [ 109.288019][ T4817] exit_mm+0x632/0x7b0 [ 109.292085][ T4817] ? perf_pmu_migrate_context+0xb70/0xb70 [ 109.297796][ T4817] ? do_exit+0x2110/0x2110 [ 109.302194][ T4817] ? __ia32_sys_timer_delete+0x40/0x40 [ 109.307632][ T4817] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 109.313160][ T4817] ? tty_audit_exit+0x149/0x1f0 [ 109.317991][ T4817] do_exit+0x5b8/0x2110 [ 109.322132][ T4817] ? put_task_struct+0x80/0x80 [ 109.326876][ T4817] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 109.332877][ T4817] ? _raw_spin_lock_irq+0xb7/0xf0 [ 109.337884][ T4817] do_group_exit+0x12c/0x2f0 [ 109.342482][ T4817] ? lockdep_hardirqs_on+0x94/0x140 [ 109.347764][ T4817] get_signal+0x7eb/0x12e0 [ 109.352171][ T4817] arch_do_signal_or_restart+0xe6/0x12a0 [ 109.357793][ T4817] ? futex_exit_release+0x1c0/0x1c0 [ 109.362973][ T4817] ? get_sigframe_size+0x10/0x10 [ 109.367891][ T4817] ? __context_tracking_exit+0x4c/0x80 [ 109.373338][ T4817] ? exit_to_user_mode_loop+0x3b/0x130 [ 109.378773][ T4817] exit_to_user_mode_loop+0x9e/0x130 [ 109.384044][ T4817] exit_to_user_mode_prepare+0xee/0x180 [ 109.389569][ T4817] syscall_exit_to_user_mode+0x16/0x40 [ 109.395012][ T4817] do_syscall_64+0x58/0xa0 [ 109.399412][ T4817] ? clear_bhb_loop+0x30/0x80 [ 109.404160][ T4817] ? clear_bhb_loop+0x30/0x80 [ 109.408821][ T4817] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.414731][ T4817] RIP: 0033:0x7f222a617159 [ 109.419136][ T4817] Code: Unable to access opcode bytes at RIP 0x7f222a61712f. [ 109.426506][ T4817] RSP: 002b:00007f222886f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 109.434920][ T4817] RAX: 0000000000000001 RBX: 00007f222a89efa8 RCX: 00007f222a617159 [ 109.442901][ T4817] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f222a89efac [ 109.450882][ T4817] RBP: 00007f222a89efa0 R08: 000716439604e0bd R09: 0000000000000000 [ 109.458862][ T4817] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 109.466824][ T4817] R13: 00007f222a89f038 R14: 00007ffc9705e3c0 R15: 00007ffc9705e4a8 [ 109.474796][ T4817] [ 111.668876][ T4825] nvme_fabrics: missing parameter 'transport=%s' [ 111.675237][ T4825] nvme_fabrics: missing parameter 'nqn=%s' [ 111.694464][ T4197] Bluetooth: hci3: hcon ffff88801a1c2000 sent 1 < count 47384 [ 111.702963][ T4197] Bluetooth: hci3: hcon ffff88801a1c6000 sent 1 < count 255 [ 111.710343][ T4197] Bluetooth: hci3: hcon ffff88801a1c6000 sent 0 < count 32243 [ 111.718814][ T4197] Bluetooth: hci3: hcon ffff88801a1c6000 sent 0 < count 65535 [ 111.726295][ T4197] Bluetooth: hci3: hcon ffff88801a1c2000 sent 0 < count 8 [ 111.733559][ T4197] Bluetooth: hci3: hcon ffff88801a1c2000 sent 0 < count 9 [ 111.848269][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.150'. [ 111.993028][ T4846] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 112.031930][ T25] audit: type=1800 audit(1790139309.848:47): pid=4848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.155" name="device_path" dev="configfs" ino=35088 res=0 errno=0 [ 112.059278][ T4848] nvmet: failed to open block device (null): (-22) [ 112.073180][ T4848] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 112.083796][ T25] audit: type=1800 audit(1790139309.878:48): pid=4848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.155" name="buffered_io" dev="configfs" ino=35089 res=0 errno=0 [ 112.120303][ T25] audit: type=1800 audit(1790139309.878:49): pid=4848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.155" name="enable" dev="configfs" ino=35090 res=0 errno=0 [ 112.454633][ T25] audit: type=1800 audit(1790139309.888:50): pid=4848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.155" name="addr_trtype" dev="configfs" ino=35091 res=0 errno=0 [ 112.898501][ T4295] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:084fc82d-4549-4c37-bcbf-1afef24f8570 for subsystem testsubsys not allowed [ 113.034269][ T4848] nvme nvme0: Connect for subsystem testsubsys is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:084fc82d-4549-4c37-bcbf-1afef24f8570 [ 118.450069][ T4883] block device autoloading is deprecated and will be removed. [ 118.546412][ T4881] md: md0 stopped. [ 118.686448][ T4884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.717411][ T4883] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 119.370509][ T4898] input: syz0 as /devices/virtual/input/input6 [ 119.384677][ T4901] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 119.509053][ T4197] Bluetooth: hci4: hcon ffff888019df0000 sent 1 < count 47384 [ 119.517304][ T4197] Bluetooth: hci4: hcon ffff888079302000 sent 1 < count 32243 [ 119.524847][ T4197] Bluetooth: hci4: hcon ffff888079302000 sent 0 < count 65535 [ 119.533228][ T4197] Bluetooth: hci4: hcon ffff888019df0000 sent 0 < count 8 [ 119.547934][ T4197] Bluetooth: hci4: hcon ffff888019df0000 sent 0 < count 9 [ 119.582375][ T4904] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 119.589605][ T4904] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 119.629714][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.234469][ T4904] vhci_hcd vhci_hcd.0: Device attached [ 121.272044][ T4905] vhci_hcd: connection closed [ 121.274028][ T4267] vhci_hcd: stop threads [ 121.294979][ T4267] vhci_hcd: release socket [ 121.300293][ T4267] vhci_hcd: disconnect device [ 122.305730][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 122.437178][ T21] usb 2-1: device descriptor read/all, error -71 [ 123.757060][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.197903][ T26] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 125.250124][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.772869][ T26] usb 1-1: can't set config #1, error -71 [ 125.864898][ T26] usb 1-1: USB disconnect, device number 3 [ 130.285278][ T4975] FAULT_INJECTION: forcing a failure. [ 130.285278][ T4975] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 130.303201][ T4971] bond0: (slave bond_slave_0): Releasing backup interface [ 130.342410][ T4975] CPU: 0 PID: 4975 Comm: syz.4.189 Not tainted syzkaller #0 [ 130.349737][ T4975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.359802][ T4975] Call Trace: [ 130.363093][ T4975] [ 130.366034][ T4975] dump_stack_lvl+0x188/0x250 [ 130.370732][ T4975] ? show_regs_print_info+0x20/0x20 [ 130.375951][ T4975] ? load_image+0x410/0x410 [ 130.380476][ T4975] ? __lock_acquire+0x7b50/0x7b50 [ 130.385523][ T4975] ? __lock_acquire+0x7b50/0x7b50 [ 130.390568][ T4975] should_fail+0x383/0x4b0 [ 130.395011][ T4975] prepare_alloc_pages+0x1e3/0x5b0 [ 130.400145][ T4975] __alloc_pages+0x11b/0x480 [ 130.404749][ T4975] ? unwind_get_return_address+0x49/0x80 [ 130.410407][ T4975] ? zone_statistics+0x170/0x170 [ 130.415378][ T4975] ? alloc_pages+0x452/0x560 [ 130.419987][ T4975] stack_depot_save+0x356/0x460 [ 130.424852][ T4975] ? __sys_setreuid+0x101/0x980 [ 130.429729][ T4975] __kasan_kmalloc+0xc6/0xe0 [ 130.434337][ T4975] ? __kasan_kmalloc+0xaf/0xe0 [ 130.439117][ T4975] ? security_prepare_creds+0x47/0x130 [ 130.444599][ T4975] ? prepare_creds+0x450/0x610 [ 130.449379][ T4975] ? __sys_setreuid+0x101/0x980 [ 130.454237][ T4975] ? do_syscall_64+0x4c/0xa0 [ 130.458845][ T4975] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.464971][ T4975] security_prepare_creds+0x47/0x130 [ 130.470278][ T4975] prepare_creds+0x450/0x610 [ 130.474895][ T4975] __sys_setreuid+0x101/0x980 [ 130.479632][ T4975] ? syscall_enter_from_user_mode+0x21/0x70 [ 130.485544][ T4975] ? lockdep_hardirqs_on+0x94/0x140 [ 130.490799][ T4975] do_syscall_64+0x4c/0xa0 [ 130.495228][ T4975] ? clear_bhb_loop+0x30/0x80 [ 130.499920][ T4975] ? clear_bhb_loop+0x30/0x80 [ 130.504622][ T4975] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.510531][ T4975] RIP: 0033:0x7ff778af5159 [ 130.514963][ T4975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.534575][ T4975] RSP: 002b:00007ff776d4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 130.543008][ T4975] RAX: ffffffffffffffda RBX: 00007ff778d7cfa0 RCX: 00007ff778af5159 [ 130.550996][ T4975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 130.558977][ T4975] RBP: 00007ff778b8c06b R08: 0000000000000000 R09: 0000000000000000 [ 130.566954][ T4975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.574930][ T4975] R13: 00007ff778d7d038 R14: 00007ff778d7cfa0 R15: 00007ffd8cf764b8 [ 130.582915][ T4975] [ 132.060243][ T5000] netlink: 32 bytes leftover after parsing attributes in process `syz.4.202'. [ 132.472305][ T5016] netlink: 72 bytes leftover after parsing attributes in process `syz.0.210'. [ 132.701168][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.714724][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.417065][ T4261] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 134.251677][ T4261] usb 3-1: Using ep0 maxpacket: 16 [ 134.627287][ T4236] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 135.047856][ T4236] usb 4-1: not running at top speed; connect to a high speed hub [ 135.167916][ T4236] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 135.228346][ T4236] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 135.276289][ T4236] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 135.319625][ T4261] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 135.329696][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.338255][ T4236] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 135.338458][ T4261] usb 3-1: Product: syz [ 135.353314][ T4261] usb 3-1: Manufacturer: syz [ 135.357980][ T4261] usb 3-1: SerialNumber: syz [ 135.397112][ T4236] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 135.425003][ T4236] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 135.623355][ T4294] Bluetooth: hci5: Frame reassembly failed (-84) [ 135.624721][ T4261] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 135.647047][ T4236] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 135.656113][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.686370][ T4236] usb 4-1: Product: syz [ 135.692428][ T4236] usb 4-1: Manufacturer: syz [ 135.700412][ T4236] usb 4-1: SerialNumber: syz [ 135.717294][ T4261] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 135.731241][ T4261] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 135.742158][ T4261] usb 3-1: media controller created [ 135.747692][ T5039] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 135.755198][ T5039] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 135.759108][ T4261] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.779505][ T5039] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 135.788381][ T5039] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 135.797891][ T5039] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 135.828348][ T4261] zl10353_read_register: readreg error (reg=127, ret==-71) [ 135.836762][ T4236] usbtest 4-1:1.0: Interface 0 is not authorized for usage [ 135.844217][ T4236] sisusb 4-1:1.0: Interface 0 is not authorized for usage [ 136.032668][ T4261] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 136.033297][ T4236] usb 4-1: USB disconnect, device number 4 [ 136.043448][ T4261] usb 3-1: USB disconnect, device number 2 [ 136.827873][ T5067] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 136.849866][ T25] audit: type=1800 audit(1790139334.668:51): pid=5067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.225" name="zoned" dev="configfs" ino=35936 res=0 errno=0 [ 136.896071][ T25] audit: type=1800 audit(1790139334.688:52): pid=5067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.225" name="zone_nr_conv" dev="configfs" ino=35937 res=0 errno=0 [ 136.973350][ T25] audit: type=1326 audit(1790139334.698:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.0.225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222a617159 code=0x7ffc0000 [ 137.325964][ T25] audit: type=1326 audit(1790139334.698:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.0.225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222a617159 code=0x7ffc0000 [ 137.667645][ T4197] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 137.675767][ T4236] Bluetooth: hci5: command 0xfc11 tx timeout [ 137.717053][ T25] audit: type=1326 audit(1790139334.698:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.0.225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f222a617159 code=0x7ffc0000 [ 137.976852][ T25] audit: type=1326 audit(1790139334.698:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.0.225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222a617159 code=0x7ffc0000 [ 138.899633][ T25] audit: type=1326 audit(1790139334.698:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.0.225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222a617159 code=0x7ffc0000 [ 138.925357][ T25] audit: type=1326 audit(1790139334.698:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.0.225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f222a617159 code=0x7ffc0000 [ 138.951179][ T25] audit: type=1326 audit(1790139334.708:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.0.225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222a617159 code=0x7ffc0000 [ 138.975446][ T21] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 139.075880][ T25] audit: type=1326 audit(1790139334.708:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.0.225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222a617159 code=0x7ffc0000 [ 139.673436][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.287219][ T21] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 140.342320][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 140.417630][ T21] usb 4-1: Product: syz [ 140.421831][ T21] usb 4-1: Manufacturer: syz [ 140.688683][ T21] usbtest 4-1:1.0: Interface 0 is not authorized for usage [ 140.696186][ T21] ttusb 4-1:1.0: Interface 0 is not authorized for usage [ 140.948382][ T21] usbtest 4-1:1.1: Interface 1 is not authorized for usage [ 141.109114][ T21] ttusb 4-1:1.1: Interface 1 is not authorized for usage [ 141.420770][ T21] usb 4-1: USB disconnect, device number 5 [ 141.487050][ T4230] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 142.505927][ T5129] jffs2: notice: (5129) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 142.647040][ T4230] usb 1-1: not running at top speed; connect to a high speed hub [ 142.737023][ T4230] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 142.754029][ T4230] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 142.765587][ T4230] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 142.782533][ T4230] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 142.793501][ T4230] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 142.809645][ T4230] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 142.977770][ T4230] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 142.991463][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.001238][ T4230] usb 1-1: Product: syz [ 143.005565][ T4230] usb 1-1: Manufacturer: syz [ 143.013750][ T4230] usb 1-1: SerialNumber: syz [ 143.038992][ T5098] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 143.059701][ T5098] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 143.068281][ T5098] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 143.099660][ T5098] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 143.126675][ T5098] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 143.178564][ T4230] usb 1-1: USB2VGA dongle found at address 4 [ 143.297435][ T4230] usb 1-1: Allocated 8 output buffers [ 143.302849][ T4230] usb 1-1: Not attached to USB 2.0 hub, deferring init [ 143.571972][ T4230] usb 1-1: USB disconnect, device number 4 [ 144.976915][ T4261] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.252270][ T4202] Bluetooth: hci1: link tx timeout [ 145.258049][ T4202] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 145.331310][ T4202] Bluetooth: hci1: link tx timeout [ 145.336835][ T4202] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 145.357152][ T4261] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.557227][ T4261] usb 3-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 145.592357][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.631969][ T4261] usb 3-1: Product: syz [ 145.636173][ T4261] usb 3-1: Manufacturer: syz [ 145.657317][ T4261] usb 3-1: SerialNumber: syz [ 145.694057][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 145.707300][ T4202] Bluetooth: hci1: link tx timeout [ 145.712484][ T4202] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 145.715258][ T5177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.728904][ T4261] keyspan 3-1:1.0: Keyspan 1 port adapter converter detected [ 145.736433][ T4261] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 145.809946][ T4261] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 145.821033][ T5177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.839484][ T4261] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 82 [ 145.866182][ T4202] Bluetooth: hci1: link tx timeout [ 145.871895][ T4202] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 145.902597][ T4261] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 145.946038][ T4261] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 145.975036][ T4261] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 83 [ 145.995633][ T4261] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 3 [ 146.031474][ T4261] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 146.089311][ T4261] usb 3-1: USB disconnect, device number 3 [ 146.146345][ T4261] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 146.177751][ T5177] syz.1.260 (5177) used greatest stack depth: 20880 bytes left [ 146.178352][ T4261] keyspan 3-1:1.0: device disconnected [ 146.304593][ T4268] logitech-hidpp-device 0003:046D:C082.0001: Device not connected [ 146.927307][ T4268] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 146.949149][ T4202] Bluetooth: hci1: link tx timeout [ 146.954298][ T4202] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 146.962429][ T4202] Bluetooth: hci1: link tx timeout [ 146.967626][ T4202] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 146.977506][ T5195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.262'. [ 147.337922][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 147.457951][ T4268] usb 1-1: not running at top speed; connect to a high speed hub [ 147.511906][ T4202] Bluetooth: hci1: link tx timeout [ 147.517449][ T4202] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 147.591625][ T4268] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 147.641443][ T4268] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 147.716872][ T4268] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 147.765406][ T4268] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 147.785087][ T4268] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 147.812029][ T4268] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 148.007408][ T4268] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 148.016481][ T4268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.046850][ T4268] usb 1-1: Product: syz [ 148.051102][ T4268] usb 1-1: Manufacturer: syz [ 148.055701][ T4268] usb 1-1: SerialNumber: syz [ 148.097312][ T5199] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 148.105429][ T5199] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 148.128191][ T5199] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 148.135270][ T5199] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 148.204332][ T5199] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 148.229550][ T4268] usb 1-1: USB2VGA dongle found at address 5 [ 148.277608][ T4268] usb 1-1: Allocated 8 output buffers [ 148.283013][ T4268] usb 1-1: Not attached to USB 2.0 hub, deferring init [ 148.438102][ T5199] usb 1-1: Device not attached to USB 2.0 hub [ 148.465120][ T4261] usb 1-1: USB disconnect, device number 5 [ 148.922132][ T4724] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.987538][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 149.088120][ T4724] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.179241][ T4724] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.462279][ T4724] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.569742][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.608564][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.637220][ T5232] device bridge_slave_0 entered promiscuous mode [ 149.702165][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.714980][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.729254][ T5232] device bridge_slave_1 entered promiscuous mode [ 150.021039][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.063763][ T5260] ======================================================= [ 150.063763][ T5260] WARNING: The mand mount option has been deprecated and [ 150.063763][ T5260] and is ignored by this kernel. Remove the mand [ 150.063763][ T5260] option from the mount to silence this warning. [ 150.063763][ T5260] ======================================================= [ 150.696981][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 150.807865][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.915681][ T5266] syz.1.277 uses obsolete (PF_INET,SOCK_PACKET) [ 151.015225][ T5232] team0: Port device team_slave_0 added [ 151.071762][ T5232] team0: Port device team_slave_1 added [ 151.128262][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.150209][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.184269][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.259165][ T4202] Bluetooth: hci1: link tx timeout [ 151.264312][ T4202] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 152.339055][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.366439][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.366865][ T4228] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 152.500125][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.777339][ T4877] Bluetooth: hci5: command 0x041b tx timeout [ 153.233298][ T5232] device hsr_slave_0 entered promiscuous mode [ 153.284885][ T5232] device hsr_slave_1 entered promiscuous mode [ 153.326065][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.385933][ T5232] Cannot create hsr debugfs directory [ 153.587126][ T4228] usb 2-1: not running at top speed; connect to a high speed hub [ 153.683394][ T5343] FAULT_INJECTION: forcing a failure. [ 153.683394][ T5343] name failslab, interval 1, probability 0, space 0, times 0 [ 153.712372][ T4228] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 153.743101][ T5343] CPU: 1 PID: 5343 Comm: syz.0.284 Not tainted syzkaller #0 [ 153.744636][ T4228] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 153.750421][ T5343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.750437][ T5343] Call Trace: [ 153.750445][ T5343] [ 153.750452][ T5343] dump_stack_lvl+0x188/0x250 [ 153.750477][ T5343] ? show_regs_print_info+0x20/0x20 [ 153.784677][ T4228] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 153.787237][ T5343] ? load_image+0x410/0x410 [ 153.787264][ T5343] ? __might_sleep+0xf0/0xf0 [ 153.787283][ T5343] ? __lock_acquire+0x7b50/0x7b50 [ 153.812036][ T5343] should_fail+0x383/0x4b0 [ 153.816230][ T4228] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 153.816470][ T5343] should_failslab+0x5/0x20 [ 153.831639][ T5343] slab_pre_alloc_hook+0x51/0xc0 [ 153.836590][ T5343] kmem_cache_alloc_trace+0x47/0x290 [ 153.839723][ T4228] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 153.841891][ T5343] ? v4l2_fh_open+0x5e/0x430 [ 153.841921][ T5343] v4l2_fh_open+0x5e/0x430 [ 153.861668][ T5343] v4l2_open+0x201/0x340 [ 153.865927][ T5343] chrdev_open+0x585/0x5f0 [ 153.870358][ T5343] ? cd_forget+0x160/0x160 [ 153.874798][ T5343] ? fsnotify_perm+0x3a7/0x560 [ 153.879578][ T5343] ? cd_forget+0x160/0x160 [ 153.884041][ T5343] do_dentry_open+0x7f7/0xf90 [ 153.887072][ T4228] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 153.888725][ T5343] ? vfs_open+0x2b/0x80 [ 153.888751][ T5343] path_openat+0x2718/0x2fb0 [ 153.907101][ T5343] ? __kasan_slab_alloc+0xa9/0xc0 [ 153.912143][ T5343] ? do_filp_open+0x400/0x400 [ 153.916849][ T5343] do_filp_open+0x1df/0x400 [ 153.921379][ T5343] ? vfs_tmpfile+0x300/0x300 [ 153.926000][ T5343] ? _raw_spin_unlock+0x24/0x40 [ 153.930860][ T5343] ? alloc_fd+0x59e/0x650 [ 153.935209][ T5343] do_sys_openat2+0x14b/0x500 [ 153.939900][ T5343] ? __lock_acquire+0x7b50/0x7b50 [ 153.944941][ T5343] ? do_sys_open+0xe0/0xe0 [ 153.949372][ T5343] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 153.955377][ T5343] ? lock_chain_count+0x20/0x20 [ 153.960251][ T5343] __x64_sys_openat+0x135/0x160 [ 153.965117][ T5343] do_syscall_64+0x4c/0xa0 [ 153.969543][ T5343] ? clear_bhb_loop+0x30/0x80 [ 153.974230][ T5343] ? clear_bhb_loop+0x30/0x80 [ 153.978933][ T5343] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.984837][ T5343] RIP: 0033:0x7f222a5d798e [ 153.989259][ T5343] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 154.008959][ T5343] RSP: 002b:00007f222886eb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 154.017386][ T5343] RAX: ffffffffffffffda RBX: 00007f222886f6c0 RCX: 00007f222a5d798e [ 154.025373][ T5343] RDX: 0000000000000002 RSI: 00007f222886ec00 RDI: ffffffffffffff9c [ 154.033365][ T5343] RBP: 00007f222886ec00 R08: 0000000000000000 R09: 0000000000000000 [ 154.041349][ T5343] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 154.049333][ T5343] R13: 00007f222a89f038 R14: 00007f222a89efa0 R15: 00007ffc9705e4a8 [ 154.057337][ T5343] [ 154.178396][ T4228] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 154.198239][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.240562][ T4228] usb 2-1: Product: syz [ 154.253283][ T4228] usb 2-1: Manufacturer: syz [ 154.287050][ T4228] usb 2-1: SerialNumber: syz [ 154.322830][ T5232] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 154.347392][ T4228] usb 2-1: can't set config #1, error -71 [ 154.363640][ T5232] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 154.396342][ T4228] usb 2-1: USB disconnect, device number 4 [ 154.637873][ T5232] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 154.857017][ T4268] Bluetooth: hci5: command 0x040f tx timeout [ 155.345665][ T4724] device hsr_slave_0 left promiscuous mode [ 155.355485][ T4724] device hsr_slave_1 left promiscuous mode [ 155.387644][ T4724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.395141][ T4724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.471134][ T4724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.486891][ T4724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.498041][ T4724] device bridge_slave_1 left promiscuous mode [ 155.505623][ T4724] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.547216][ T4724] device bridge_slave_0 left promiscuous mode [ 155.553634][ T4724] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.613972][ T4724] device veth1_macvtap left promiscuous mode [ 155.628345][ T4724] device veth0_macvtap left promiscuous mode [ 155.639498][ T4724] device veth1_vlan left promiscuous mode [ 155.655753][ T4724] device veth0_vlan left promiscuous mode [ 156.377111][ T4724] team0 (unregistering): Port device team_slave_1 removed [ 156.439791][ T4724] team0 (unregistering): Port device team_slave_0 removed [ 156.482200][ T4724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.556839][ T4724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.790784][ T4724] bond0 (unregistering): Released all slaves [ 156.937145][ T4232] Bluetooth: hci5: command 0x0419 tx timeout [ 156.945781][ T5232] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 157.289262][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.596362][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.669051][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.863328][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.910061][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.934049][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.037651][ T5311] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.044742][ T5311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.053041][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.062218][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.074215][ T5311] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.081341][ T5311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.108769][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.127572][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.136662][ T5396] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 158.158643][ T25] kauditd_printk_skb: 13 callbacks suppressed [ 158.158655][ T25] audit: type=1800 audit(1790139355.978:74): pid=5396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.292" name="zoned" dev="configfs" ino=36314 res=0 errno=0 [ 158.186200][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.213815][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.244895][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.309755][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.376376][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.385584][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.399079][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.408142][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.416471][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.435105][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.457967][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.509667][ T5414] CIFS: Attempting to mount \\127.0.0.1\share [ 159.563054][ T5414] CIFS: VFS: No username specified [ 159.584135][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.613604][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.652842][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.096884][ T21] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 160.188257][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.217193][ T4202] Bluetooth: hci1: link tx timeout [ 160.222335][ T4202] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 160.231782][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.286960][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.342403][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.369767][ T5232] device veth0_vlan entered promiscuous mode [ 160.414598][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.427133][ T21] usb 1-1: not running at top speed; connect to a high speed hub [ 160.443651][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.462790][ T5232] device veth1_vlan entered promiscuous mode [ 160.527148][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 160.558557][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 160.567766][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 160.577426][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 160.607080][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 160.610403][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.652926][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 160.664671][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.696232][ T5232] device veth0_macvtap entered promiscuous mode [ 160.704627][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 160.724008][ T5232] device veth1_macvtap entered promiscuous mode [ 160.743417][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 160.823894][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.892327][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.926993][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.937252][ T21] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 160.972073][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.977114][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.996925][ T21] usb 1-1: Product: syz [ 161.012026][ T21] usb 1-1: Manufacturer: syz [ 161.016652][ T21] usb 1-1: SerialNumber: syz [ 161.016826][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.076818][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.086685][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.097470][ T5424] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 161.105332][ T5424] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 161.152050][ T5424] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 161.156825][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.175292][ T5424] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 161.206138][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.220611][ T5424] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 161.252545][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.267439][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.298421][ T21] usb 1-1: USB2VGA dongle found at address 6 [ 161.328414][ T21] usb 1-1: Allocated 8 output buffers [ 161.333634][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.344143][ T21] usb 1-1: Not attached to USB 2.0 hub, deferring init [ 161.395044][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.477125][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.521101][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.521826][ T5424] usb 1-1: Device not attached to USB 2.0 hub [ 161.566045][ T4295] usb 1-1: USB disconnect, device number 6 [ 161.567038][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.631848][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.666844][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.712083][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.762573][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.792050][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.824895][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.902123][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.915647][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.950378][ T5232] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.965001][ T5232] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.996889][ T5232] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.005616][ T5232] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.211362][ T5464] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 162.377293][ T4414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.385177][ T4414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.454748][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.558117][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.565967][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.594116][ T5451] chnl_net:caif_netlink_parms(): no params data found [ 162.719858][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 163.053333][ T5451] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.099393][ T5451] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.128783][ T4232] Bluetooth: hci4: command 0x0409 tx timeout [ 164.798186][ T5451] device bridge_slave_0 entered promiscuous mode [ 164.903006][ T5451] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.920285][ T5451] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.938253][ T5451] device bridge_slave_1 entered promiscuous mode [ 165.130365][ T5451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.248734][ T5451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.397279][ T5451] team0: Port device team_slave_0 added [ 165.420042][ T5451] team0: Port device team_slave_1 added [ 165.500848][ T5451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.526558][ T5451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.662377][ T5451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.761107][ T5451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.774981][ T5451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.857182][ T5451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.885882][ T4724] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.022549][ T5451] device hsr_slave_0 entered promiscuous mode [ 166.033140][ T5451] device hsr_slave_1 entered promiscuous mode [ 166.214062][ T5451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.225473][ T5451] Cannot create hsr debugfs directory [ 166.251233][ T4724] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.196419][ T4724] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.326989][ T5520] Invalid argument reading file caps for ./file0 [ 167.343697][ T4295] Bluetooth: hci4: command 0x041b tx timeout [ 167.414090][ T4724] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.424608][ T4268] Bluetooth: hci0: command 0x0409 tx timeout [ 167.707127][ T4268] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 167.801130][ T5494] chnl_net:caif_netlink_parms(): no params data found [ 167.858069][ T4724] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.947134][ T4268] usb 6-1: Using ep0 maxpacket: 32 [ 167.989610][ T4724] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.087666][ T4724] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.121878][ T5494] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.130197][ T5494] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.147094][ T4268] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.161494][ T5544] 9pnet_virtio: no channels available for device syz [ 168.168740][ T4268] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.184962][ T5494] device bridge_slave_0 entered promiscuous mode [ 168.220621][ T4724] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.255779][ T5494] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.266997][ T5494] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.293115][ T5494] device bridge_slave_1 entered promiscuous mode [ 168.347156][ T4268] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 168.356231][ T4268] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.380788][ T4268] usb 6-1: Product: syz [ 168.385071][ T4268] usb 6-1: Manufacturer: syz [ 168.390644][ T5494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.404622][ T4268] usb 6-1: SerialNumber: syz [ 168.439482][ T5494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.518162][ T5494] team0: Port device team_slave_0 added [ 168.546415][ T5494] team0: Port device team_slave_1 added [ 168.617760][ T5494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.624714][ T5494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.743324][ T5494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.783773][ T5494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.805776][ T5494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.879200][ T5494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.091323][ T5494] device hsr_slave_0 entered promiscuous mode [ 169.106130][ T5494] device hsr_slave_1 entered promiscuous mode [ 169.190947][ T5494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.235902][ T5494] Cannot create hsr debugfs directory [ 169.361329][ T5451] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 169.411267][ T5451] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 169.418367][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 169.469886][ T5451] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 169.497029][ T26] Bluetooth: hci0: command 0x041b tx timeout [ 169.521225][ T5451] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 169.648749][ T4268] usb 6-1: MIDIStreaming interface descriptor not found [ 169.793481][ T5494] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 169.821854][ T4268] usb 6-1: USB disconnect, device number 2 [ 169.946322][ T5494] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 169.989673][ T5494] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 170.047345][ T5494] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 170.099473][ T5451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.154835][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.173667][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.210468][ T5451] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.240716][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.259983][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.282527][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.289652][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.404882][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.430193][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.439433][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.462867][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.470184][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.500871][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.516520][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.552657][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.567231][ T4268] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 170.583783][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.620174][ T4295] Bluetooth: hci2: command 0x0406 tx timeout [ 170.641320][ T5494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.658044][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.714579][ T5494] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.741624][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.752256][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.767548][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.797270][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.817358][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.827623][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.851454][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.859102][ T4268] usb 6-1: Using ep0 maxpacket: 32 [ 170.877836][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.888237][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.938014][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.955299][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.970798][ T4732] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.977909][ T4732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.986601][ T4268] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 171.002085][ T4268] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 171.012249][ T4268] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.030386][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.042849][ T4268] usb 6-1: config 0 has no interface number 0 [ 171.054083][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.065292][ T4268] usb 6-1: config 0 interface 196 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 171.084847][ T4732] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.091992][ T4732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.093529][ T4268] usb 6-1: config 0 interface 196 has no altsetting 0 [ 171.111207][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.132210][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.183630][ T5583] netlink: 16 bytes leftover after parsing attributes in process `syz.0.313'. [ 171.195410][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.247029][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.267889][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.276434][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.297338][ T4268] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 171.306469][ T4268] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.321007][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.343904][ T5494] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.362669][ T4268] usb 6-1: Product: syz [ 171.371671][ T4268] usb 6-1: Manufacturer: syz [ 171.376335][ T4268] usb 6-1: SerialNumber: syz [ 171.381810][ T5494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.397418][ T4268] usb 6-1: config 0 descriptor?? [ 171.422075][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.430607][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.452046][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.467737][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.484424][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.507659][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 171.543444][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.578539][ T4877] Bluetooth: hci0: command 0x040f tx timeout [ 171.613456][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.627115][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready