last executing test programs: 6m44.310478691s ago: executing program 2 (id=52): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21", 0x25}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) 6m43.105701389s ago: executing program 2 (id=54): r0 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0xe1, 0x80) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x479}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r3, 0x1) flock(r2, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f0000000100)) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16=r4], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r6}, 0xc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd(0x8c66) unshare(0x22020400) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r9, 0x1}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r9, 0x5}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001505000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf530000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 6m39.797224967s ago: executing program 2 (id=59): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r6, &(0x7f0000000240)=""/244, 0xf4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 6m37.549530379s ago: executing program 2 (id=60): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r6, &(0x7f0000000240)=""/244, 0xf4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 6m33.726774599s ago: executing program 2 (id=65): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r6, &(0x7f0000000240)=""/244, 0xf4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 6m30.320491588s ago: executing program 2 (id=66): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf250100000014000200776732000000000000000000000000002400030000000000000000000000000000000000000000000000000000000000000000000006088030000080080003000700000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff48000080200004000a004e220000000120010000000000000000000000000001fa14000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222c01008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c1400040002004e22ac1414aa"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001) r3 = socket$nl_generic(0x10, 0x3, 0x10) writev(r3, &(0x7f0000000200), 0x20) 6m19.658821548s ago: executing program 3 (id=78): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'wp384\x00'}}) 6m14.224472525s ago: executing program 32 (id=66): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf250100000014000200776732000000000000000000000000002400030000000000000000000000000000000000000000000000000000000000000000000006088030000080080003000700000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff48000080200004000a004e220000000120010000000000000000000000000001fa14000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222c01008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c1400040002004e22ac1414aa"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001) r3 = socket$nl_generic(0x10, 0x3, 0x10) writev(r3, &(0x7f0000000200), 0x20) 6m11.819707772s ago: executing program 3 (id=83): r0 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0xe1, 0x80) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x479}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r3, 0x1) flock(r2, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f0000000100)) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16=r4], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r6}, 0xc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd(0x8c66) unshare(0x22020400) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r9, 0x1}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 6m8.747284643s ago: executing program 3 (id=86): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002a00)={{{@in=@private, @in6=@remote}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000002b00)=0xe8) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r3, r3) statx(0xffffffffffffffff, 0x0, 0x2000, 0x7ff, &(0x7f0000000300)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002e40), 0x100) getgroups(0x2, &(0x7f0000002ec0)=[0xee00, 0x0]) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "baebfa2bf3a203f8a0fb0fc85ba3b091414c89300cf225f81f9738ff949133e29c4ad36ffde02e745149f93677b7d70a1c767928ae8e61a93453c3d8127bf998", 0x40}, 0x48, 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x4000) setresuid(0x0, 0x0, 0x0) keyctl$chown(0x4, r4, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = getgid() keyctl$chown(0x4, 0x0, 0x0, r5) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000030c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@multicast1}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f00000031c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) syz_fuse_handle_req(r0, &(0x7f0000000700)="2cda378e1aa98b832f782ed049d1b2c9742bd9b925eccccf3a823b8b2ce29ce1f5b39356f091b897a71ec350f4c9c083000d15ce86c9e17ebdca0d08d49f3e1b99abf6ad2b8eb72c17f739c21a0a37bcc068b5ff4e6aab3bb8cc42cb7213aaf606e1e85c855707fbd109d4edf8c68b4eeb06646f8e63e070aa952d55c41e475043f2ff7b638f787343adc22cc888ec530da33ac26b0b35e22f9f0931fd8da29302b23b5cb6fcc7ac4fe57dde1617aaa69aed1478690deeda75bf908e17b6ac024b4704bf2769ff5304f3802399a6b7a731e87d3a44042d496540b9df6b1d7cb7bce9123d0f8d46e0db5bc07acc28ce74905e98b5ecd73c26c8f4ddb741f95ab942cabfd43ef8fb7373a1f0b86fd66b1cf128d4d4b7fe2b6b679dae8836ba5520ef9ef1ec97600a75f1bb18292e71dc4c546295e28afdb29b3cc5e18dba6e190682d652bb51e00cd9c97760c6f47f6c40233555e9aad83d20f6192906e36f6837338021c321bf11ef8976bd56d24213e13afa7cecd70472c5e020fdb9b31c3d53c175af21132e331e82f540ab67d0a2cff4764a4a81838170179c4fba32e2d5feabedaf37c040854cab3593d82bc0d9134b1e2f1b7a7e9a56609682fda3368968b4e3d34d73d1a4853dc5bf2d1f03b01f7667101b8d03d1c5a326ba8b002093e83c863404f407718295f1307a8b951a249ec9bdb3188d0143ddb30a783a0615e86ce17d81dab6244ee566a779c876936b34068943d3f9fbeeeffc5bdf39abd22ef0d671a0f78fccba72d23bbe551d3a037a1df63ccc794421019f0340d57e68ded5cd2bd1461fb49c8618a22c7980075ae95d8ac44cea55a2a30d2d0a7b285b991b5bc36f92365c6c9924ea72d79638dd620d3947b0ed8e4c71c501ea396e240895ce506d7e8f9c19e4a470f18273a03d60d64336ebf4adf0e88ffe144ba6ec3c7bea2476d938af9968505e69c4699e956660ecfea26b7b3d18ee0105ecd6b6e0f4337ab57381796c5f34837ac32e84756f195262b053424e1b6a1b834c6753f41176e374aa0676147265528314ed73a08c7748a00f29e9a1229f222e072e281dd7da2673afdf3951295b92208fe5adafd6805ae68ec890990d76f5bf2f7578deb339c5b0add34c00e1701ff586f15304176e11b5a525d831fa2cb2a6dbd2d5f6ed8c5b06ca135a1f7cc219d068a4f2f83d6e8218a883467c9163d0e425d43a4a25a932c9bc475dc94394c59de1e6444dc1f0307a6ebea1c30a47ac202c2cb7287b54f9d0a8bb63800789ee305b16bb786a2ab0db6b302ad8dec6322a609b792213b3919516f7ce76674956f293b7e71071d0d4cf4f1659a5b2925642d92da1d21588240ebeb45b05b3d645d347ffb8f1da712052b9e5475a8c5ded3797018145ea1e3a6590e371c4445b158254ee36476b5cc164f72c778eb1c1208465e9eb1f8e3cae08e0947595d6b5774eeee141743c07f5a0f24a359ae7ab583556194e6192aacdcdb8324ecd5fcda314c2e094ef46c35453b47e98f0269cfc201519d9908b4c7205bc16a76d232ba73e3cf6f773c0ab407393cc5637d3873b54d77d8c5fd9baef5cceccd22ce338dc985ab83f6f50aeed05c2b8364dc69f74ff49b4153523329127093a7814964505023e673031467291c64aeddc651f0bcac3aec3f5914596fbf7fa1fccb1f180f2abab67f663809e77de7f6c9a72849553d11aef51026b353f6705ab83f2ca9c052ed9110a03df4fd0d4fc4d01cccab5c07e426b074dbf2bde9ee256fe2bfefc4f6faa373ee21c2e54255a3dd35a5442706029412bb1328fd29a9da6c5dfde102be4ee037f52807b3a51745cd18e83d7ba6325a5c136a8b7bc68226bb695ce6b261c64db8ebd7be50c7e20fa816a377b50ef7c16d4a6652937ff592a930a56791f100e89ba6607d3ec812fa6b8c90c4559ae6c6413cf4ee61ef053cd1d809265a8ca39842c63e033a07e255f66e0a2d8f70c0ed397f2a8165e9ad80fb817bee594faf09cb82da335e8364ce26c734148ece1d5135d1ebea1785bd9a40d592839dc3367a1bc3200c8aea47b419c5d15c1641880e5b11b0db2683426dd35dd06493335b85f3c12f39bb0ae25a76f8e3a77bc325a903a8558d920798f5fcd0856b8e51c94fee3717870064ace0d2edcf23026af0b245a5295aec46b1d29b43ba3aa34031710519d82065f21b1f74c7871355204128fd595dba489f905cf628564c8ab0163dd969ca7c809764d69c643f2bca2bd1de52179dbb54b9d6192bfc5c64cfea5deb35d3f03268e2e2bd0b944cc76fd84fafaa948a2b6dccd15a53b8f7e84944890add94fd64387103b8867052beb9bffe487e6bf0dad0059b0742cc6ad46edbaeda3c3ddb6fd69121871ffdfb3ba06aa14ca2c4379153aa44df34f8f9fe88728d7cc871dc9fe150c2830dbe0e0638db3b1f40095ecf0257d714d6e8096f259bfd0bf5401c9fab82bec5c2afb7d7b497ce9cd945f4584c3bae89ebc05d34079fa998bc180f8ea9f6a666cc5ed14217c94e0898f28087367016a9bbf1f5de4dcd1160188daf10c8c44d7b79c38d1f77c4ff26912bdd2c16d65cd34e9161476632b161c93b5e4ab798546069c2c3b2546ee6c6a2b56c88566eccc4b95c53f412c4df45cc83da830daa6db35ed130736ad27e60a6590cfd6c12cd5f1b09755f85bec88794c29c3dc075029e733be6638e8b9ee51e3810792aba97cf21e36715208ffda724461a41a2c215331de6441fe3669d0c2492807edfcc33dac7b5558d3ca1434cf30341765966a4a06bc5cd5f997f38dea9cd504e7ef68da46b06e46892ec737de57e0c98d6e4adcd82d10588eff689368b2fd182894913aa573e9e112763918a2fa37942dbb0f9c5512fd4ec0214f0ef6a980227045780e73c6ed26f055e3359cbb90f1b618e24306f9d4e0c2fc5cb7c81c958d5941b2210c95a282042c34af2e7b06598370930c3dc2248dd1a8bebb50a2ec8e042408e5130ff3e52041daec4fdca3c6cfd035f9fa2887f666f137724fae5deb6c9bf8cf907190be3c39c53738a7e7972ef87223216922cda7fd6d7c5d0e28cd4dd50d208b6c988612394b9784ee8b491008f813433510f3140f26e5fbec2016efb88db412f6a4b13fa3151d2e024d4f961c2894f7f148cb5657c50edd17d2eaf332ab0f86953be16a4127a1663a72188bf82bf1414bdc5ae188124e1d9d648ecae61ebe099eda574549ec0b564668fa823bad023a8427a3e7bc8a0345e6744ccfd20903ece4b1e5d5e8f91c9614727f377d6ea8ea53a751b4a306d73632a8801634892fb1868fc63a81cd1c0ccae58f46852d0e4c08121ecb811502448ec08b1c3d5831c843966407cc42497dd09ad62d6f8b75aa01241461b522647c78e4172dd03ad0b81a866cd3380738fa2a9f6a77b073af6bc842883b8c2c2e4af579a90593c5a70d387e9931d313890f13f3d447d21c14bdb8a8becd00a6b6c2dab611b0fdd544a80874521f610482ad399451f19693c3a126fdda5e678a1f82bfd12311c2f11a458e46402643df3e5b07dbaff2445c934344fb73ca232f7885e84205c434751d0f78bd2e63e06285937f427fbaec394f9c6de0d88daf19ae557f4d56f74679597e8fddfa6efcf1593479fdd9e33a1d0fc049baaa7cc976e3b86b185a6ea057b459599930807cdbe42f17fb35ee6110615dc2df1ec5a21436cf09e20d23d8bfd38235e92494049ab7fc7b23ee472cdaae43c592568657db38f3fdf30b1ca67efe3b9828146944ebbe1f0c6a9b2f101441c98dfa48692fefd0548fb7f9ab2ad280450e4b47b46f3b5ba9504efd1998a0036a32c64f41ef8f642bfba1f8f850b72f23b09dc800a7edf69265a185e1e5f6cf6d30feda4456d353310a2400ede966243432e53a14239ec3c66956001b83e61383675cee3e94bf3d4d83d52985ff64e800dbca0ead16bbb4671032520ebd47b852206bd13e89c55e71b495323748a04c46411f207ca3cc48b0a2cee37220da704bc75b3452330bcf710664f10c8f49a3a4fb2a24eca46add1e2b84a352999199ff35b47bb892cbf98294a6c61b0c1f190037192567b2ae6b7c37046448d1dbfa57aad9d1e11f08df9d70c8f3c0502fc693f5ab673f7f73714d657c2a888a4f6852e3e9dcb8701c21f0c88d80cfb840c5c8595435c9374cfb9a3a1ffe7ed9381f88572d16c9ca717fe96adb6b3b72c968460096ce1b83390d35c6d2cf6784c5623148c5fe7d220c6a6f777cce561bb5afe9f49cd1124b8fce7ed0759cb16099d1ed77ba20c64051e8b940125b94e12af44b01008dc1511dce5040581cfba11321a0a899980f54cc7d8f1d21e250e302f0c1c7738a33430b7297060587c8cb0b4173441b7d8707c24e0782c6e0a6633a1ffe91088277317166d64db6563569228ce7a06ff5481c1defc6603149d8c8b7a111bd64175b1b185e78c41360b2555cbc87e010a7d4816003eac98efcaac12b598935a447cdd3793c599b4aac2ddd60f00f4da02830b6632cdd65bfebcbdf3ea8c2ec13695993554b39ecfd7be1e01a9d87a77719d8de6d1b057c4843d63eacbb55727cc11b63826efb0d58229715200d2ed8571c25f6bc2c0a28d1ee76e58201fa595c2f4369e02b77d913acde6a5c7f3ce43c0501021be45d35ca21c684e0dee038bf6f8f019bfb39083e2cf335e494261250427c51b649caf239506cb3d137d23e70993ffc4b5fe330a202c847b37020c0a2b7e107973d7dbc06f3712eef3f74587e30a125cb89b85d82e1638d77be875b804616376fbfeaac763c5599512268b2af1d0b03d184fff8b33f071f8109c27c8ea3a020798a130ef74ba952a2a2fea6018d4aa1c911a5b9ad001c85327621e469f77bd9a2eb43be8c573b768004eb3a728ccc9b948157620912855d783ede7667ccfc248cd7dfdfb2198801fa1bd4a1cddfcc864ae95309e09114b13804652e445ee1244320dfc4001873c7dcb303d940979b9868099187535978c54ed5e4e436159f608ad1f4045ae2651e2f25d8901a063d4efdb51e7d3448fafea369360d4f883a018185651573799ebd9e2b95bde06cc6b65eeb0f9cc2a0d53216027f973deebc4b67bad760fff91e7df69d64bd91b40370d5150df258b8530a00dcb72e784470f30e84cacbb917c38e81c2bf87e842973405c00042c872dd69bbf1ca014abe72d78160a121db0423090f42d13507c2e6ac9211901895bf16b49415e7192488950df0d1936c99536457a531082967e128ec3f7938f914c1c05d0368a55b30bba9e98a5ae288abe1db3cff8afb428ec2e71583059cf340646fe4bd81fbe549a1602c8935b3e2068b533f0bc23a0a7612325a609dbc2a702df6d3b7ec01a301714efec4456f51731e39b76e11c1f84e8fa8f4acc4bdf17f3bc280bbb7cc50aaf2e5aa6a033267c00a86a7baf8dcb3cf6bebbc707c92be380b8ebecbcc03edd9056382e26913e18b39865733115bdcc681579c77de94ea0cdd637bfd3382a0c293b71f55334bd7141e3c34e9e115769e08460cee488c08f7ad4ca823a7d410ca65934d7dd0b239933426afa08d303b9b8abbbd3764914424a34bd679300273ece8c97ee910cd970b06ee06f4086d6549c5ae6097a82e164efde0db152c8c886f7d1897ac2a26af356a5b12806b1a54793bbf7a6d8a5296c8b2005c46c1068ae52fe3619f9613933ee9b61187bb28fc7293432a3e2fee60e2231085b52ca7a401f1ebd545a35b4882aba477d8a3267330cd0ce2801ca77863f87cb2f54c8729c54bb335cc8ca36f0a083dbc9b90589a2f77782f94be0c13f8d4bcbfac1f272011b08f2fdd4f4192d7abd36a72cea64384759ecb8c74f0663b03fed42d18f692f166e1e26e6be3eecc72fc92a0d5c49ca700e2b5d574b07f200f1de09d1fef64fed809c891545d0081966aead3b964b57d901bf1398d6d75da68673cb220256d2a57d622780ec5903d43214174deed9428f0599e93f70325505f11efe3ac37e6aabab8bce46274e82d118b629ed5b374ca06b11e57ac6dee2213d317044a6d6512eb1340da0fac2d9aecbc109f17f60e4cccdc767230afa953549e4a276ed54c8507a133fbd19b88b4477ab5b6be550e8529de2b4e7e9c6f0a4208a7df7eff572ed9b7963c63a553593e357b3cf08e16ecad60373a687fe3d47aedfb3e9775a13b90a4026447a0129e4b14c781e6299d32430befcc9979b1c0cd7f8a567371a8b5d2736311fcc5648574ba6de5ee1144219a5b8da62b5d632a8ff2b84a6d256e8e8caa4cb807db718aa7b6d7d979d2bed0ea957a452413950c105436b7d7a63ebae013fd5a4c6ff8ae60c09a4e0efcecee82f44e010cf8d16ea0be1e75f67fb028df0fafd2dfcf17448c93fad0f822d5eef1c6a704716a6b957ab9af0a73e57ed95e542fef0ae6012348c274a5348609efcea84aa56b53d0d0e5c33641a18be3f6154ac6863fc8bbaf425b935395d41f11336839dc2ae7e985952390e14246c48b9ec18a55752dd2da65558913fad37892ee5324218ef96e065a9b7c3c437b7445cf0e00cd4dfcbdcc8b8b74b76694e8357fbae23253a88335afd0caf4288a2a8f1d18509328e2fb5c6544582e7de6a176c1b5f480b874295c0126b0b96d18d690d5cf271a4a9b686b674c8d49a20755e507bc3e0bc51ad346466663f7009ae46f5f1a73c986b7ea41df7ac7045d1a2bb359aca0714bb3aafcad35edb344a0ee52cf6562bae4fbc5436a335ff4399226b00a94e423825ef026626d3119bf5d21aef8b958fb6272ec0200658d686f28620ef44f8ebd5c80c06a8a857495caa1b061c6f021596afc9113f22737142e36b3d450b4debd8965181ac1313e3f8a7b7fdacaef4d9b501215fb11f8c16595b611cb3dbd1937c3634fe5ae7d59d3805fe664a62e2e34cdbc945ac36a3a933351c741214581317cf650126bd5b3e38cb319f0d7b2b5b3cddc5dcab0648788493610546d4967ce3098ec3e650c24d72dd4157b2d58f157250ccd67927d63a048840483f10c0a90992d70e258628a24bf4443e5890a2186abd7b81f5a0ee849209ecc287a4fe60c433777b8c169d13a7605cffe27bcbd9c37af391eb61a1bdcc489c188ad5d0c8e1747265535237dcd19a821b35b574decfef4e997dd3946abec7e2d0c4472fe7c0ef87efc57361c640eade34321f2aadb2c552e212a25d38391b68f335614f12e523c6a32d2109c2d93de5e93e3ff87be8da1a9a5aebc023761606a70a171f4be06bca790b4c002354b13906f206cac241dc48798a822228d5a894fb40cf1d49a879e8d791ef9acdb1f1748dd8ce7ccc0fa37a6936dfe2948b8acc54c58108fe09bb762f3ed4046c9cf0ec2ae16f89fdcfc02725294ee201eaaa56703cf52798051941228030ebaa61cbdc9d492f2da588c57fafb6ecd19f1b8a87ac39f6c3c752e2f0d68f0240211d34b2dea41cbe20fee3f94dcfc1a974e20177b91b31b3c7610600c3b4566d489f49a199758d477562a80b38ea1c36d20d56f8e297099621206d23a2ffe40314645d0ee8d26b73c8533f9395d771e3a797f3a613cf0c264f58fd651dc5718d818237f095f98b8cfd6291880d5653204d6c0ba8f6928c8220a1d7dc70b12dfd5c294830f632af96d5631f2bea7f54129715eae2285bfae2909a4dd2f111d1db7ec2e0beb15a42e4a3e9619b27fa1550eda12d3eb99926ba55626125268c4ab3eb3c337878f3ca5acdff2b1b273ebafa6dc80e0d9ff6b302f62404ce820cfedc2a07e90090e32fe86473de5eed5923da2edf8e4feeb1a1323564fdd6965d121b1a6a4d198517555200a518cf9becc77ac4b48e3a09b33a89a12a7db7efae921f1c5233693a8e9a5736282dec89eb8a8071d0ef91e0aa3626411839a620bf12be72c641854183391200eeabff1943ee78a51e512f869dc0cc380bcabb1fbc74858b17f4e3888f8ad5e9ba5c8f508f673f49ca1e508b7bca447e61d506db5f8e3ff1e7ee16deac075b421fe0615a545588ac241c28f53d629767b4eb0ef15de11a6381f41f24477698a565ed2ff5937f1a049a3be3e412a965c9d7a014b85903e83a1b97066cf98192933f7cfb80024c7e2a0142ea828003164b29b9a416734ede5f1f01150fa6c18544c27c8e49043f17b1c2acd4416ff06990ee6ca5f0ccf3f19c10540c18bd3e6d41d8ef570d664fa696953691ef1620536bbc2b37fe7fe13417c590a92b693d3859615192d12e8093f9b6b8a3962fb6325c4f69506cbad724f23dad7cdb0fc7dbaf1687e95d0d80b1c9fd4dedbf48470064f3ef827e2b840f85d9d12fd3934be1bb2bf5188ae155f9779c9fbe0eca435236ffbb2043b6fcbfde937ba7c608c34fb7167d0de0f796603d48d0c0bdd842388bbf3383614e6769fcf922f4fb50a12aeaa74880e6733198b2572807ee206dc5f192cb0ae56720f0ac3c9ac1dd7faf96c85b5fad6b1b79514435c48d98e98bb2346b0bfdbcadffa8977232391d2226d8796a5594237a95e5f43a0129610a89621f92a56da02adfbddaa2715e3e9444a442f27984a0062dd192b94f1d954f6783cfa30e15e3582a2ae2da1dbf85b960ee4286d75276a97a5efc15d330afde7c235c6e2fd3afcffabaabd2b74986b6081aa62a9e56a99084f604708d9c3e7c320d409ced1e466f189b2c1716d30514aa47b57db37b6f45a658c40413dad30e2cfd1c38d3e4b72cf0724baaf5ca4c9911897a64ec451bce477e80be256c520c3f0467e0cc9dccf3a609268ede2253f6fa432727be5cc74fb70c884e28b992cc2ce936b562684d5af8bca0a73ab09778f647704e122b9a5ca66acaba9d263da7c41e08ad523b0ce94b7b39325c9339a044cdc214dc66420236abccb3ab27668fc98e9d646956f20484f967e8592560e7933ec80cc2ab011f44d45816866570e7fa1e7bf30721dda3ee57fd39bfbc0726e1fab33c9e8e182fc6542c25c4903f98cfbc17fc3afdc5c587c97dfd2ad2d76153b0f5d8ec78d7ded7bc7d58b708b9872f98f902d08f23ad821116688c96496cd973e63ff3fa848615bf3052a8f5e925680603d0b5a1fb5079be1e64bd3f440046865e6dcba50347c0fa29045e9bf9f2db7dc8e3b558ffe2f339bc2e3af06c29d7de2aefda19ab5da57ff6747c9d6a9af75f3706ba3c785b5f4ce6596dfc5cdebde8152bcded49935470493055498aeacb3d473b6e65d2870c750e4662532ef0f77b3475ab4322935988c41a030a7b7bd8c08d05a83db4b97c23a4ffa8a68817aaa425e5e54fca239d37408ff03745dead84c19307b812321fe110e2d863e5107eb279dba0724d56f5329db1c7589582e92665cf2a4b3c17c86dc66e5ed1c2567149166d905e686bab7bf37f269bdd60d373439b468c93a78cb25efeb6f59d0e2b629b62977095417f24da657621e5a0f0a916e445d742beb0f8994e122eaf5a13ba9cdb232c5b65af75d3e1955d1db03392f48e316b750df27cdce04dd551f20d81a8673a6ef984e907ba39ba697cae27287b180e1088c3f8c1871d5781b204e2bcdcfa8219721eb41350fa24410a79dbda10e900851a3a15a01b4efa91e29c64459223707a3419f58d2323a2b45f5e055f6bf1137836d8ac7017923c56f165cefff84b627f8d7bb5f461cda94b62a4f0d169884e32aac2e03dee8b4087a03c162dd2e3be9204b89cda9bae19161ba92e876fdc06ad6b88c23e64ea54f0f8ea50ab4b32357c5d62b395117195c5518be51ead7fb48252ed6503544c949773709f9b70063657abd88bd4c8d56427dd871ca765a294652483a97c5e9a118d48c7abb3e5b5725e070902ed1e5dde41c76f062bb6c7d8f8f1d33f2d630ec47cce7171297bd0f7194a4cba7fc583e9076c719af68478f65e0c8b95ff7046d003d656220d587f0282a69e732924300330a72a1ae69d92ac7d79fbdcd2780e39785141002a37ec9e13ccdb243ea469dae494be1a3d29477c706d3753a1bb5e241eee373c303f361abec5ec58a2f4843f96e1f8b4f5f6a277eacadcb8ac4ddfb9f62a208d060d377597d5ff33396e43c4cb727b696d6941499129112dab110e013817031462fd0b1f3940b511864867e4c06cd1aaedb0e37fea35c9965884ca181ddd0c301af492cf8eb5f024b5934483da662105613e87ce4889bbc9acc7a13949385c4986730614d1bc29b6372e15e2b71021fe01831000ae75df76d94b7d2fa0a838a82c89571631649d5f229c999aa1ed91e4c4c4b26d9ac0c70f097e8c79761587e436692bf98baf8ba07064e668b5a4d6ff38f1ae56554157870c77366eb28acad4a7c1c0cef7e32961a0c41d5b472884e3f4b879481311bf47f12ef24f2ce6923fb2a463a665f5463f0ddb75c790bd055fa7583d56a372beadefb04c05e1abd4b591e078cbfa098ef009a67210b47ff5faadff1dbc9fc1eb9f5e7868e5b767e6b0fb80e9bb7dab1eae50cec3c250962c62806400835601ed35292874cee6263bd1a3292352fd65fbbdf8263e057ab2dded99a342c56a51a63e1330e3dc34168c4ed844fd29c3012686654ad0c754e266d3a96289b3706a8e582b117316eb9160dd3943b88c6e112974884ad142812c8d57559c4de9792ec9a0a37f21211e228d3d54dafb0a09735cabc7eed2a4570d322f49e8fd911e1f48f80f0a7663b18d408ad4fe63fc5d6e4444a56a4588261190e69b7f9ac9b0db1246d4af889a29b899be5fd5bf92926fcc2f1d8507f9ab9e8198c42baab1a2e19b45af54ab799de6df12b8166acffd31f5e7d21fb38cbd1bc6bb43248cf635f5d6516807dfea72057020328a9d21896af61a43c8435d7a657213ea430d5a18a4feb069bef2d2a097c26c91b67ecf49326a8029ad581ba0eeeb21c845a10e2dda1e980bd7d0342fab4fe3fac118da9b6984df9c6705af4eaf7fe9b8198e8e42e42ec1a7634c18ee5806c9d0b471b2f4257c04a083063383cd4c5e9e1cb3a2c227a782095252ef1f9d5c984be86bdc9f69537f43f802fb873f27ee7bdc994383b53cf96379282beca346c8a2400ddf5d37c5701624fd3d73e37b521de50f12723cd52d802289e6206ec9bd7fe285cc2e4e2a44d36e4a3a77cbad6e7312435a53596ed5ad9a0e8e1f3372c7f1e02526612e920baa95bd512e64e61804567cb00154c9025f087e661777f06e7d03e384d96f57872585632712f6e974d8bbd2a04338b2f749361770341c9524c84de9634f6ee40c9bdf76938fa5e779b4df0d123207e04a4075b349c775948d124111ab07acca283e8de894b41595fdd3088db8ac7708e358054cbd0735607b7a91d50c2951828f906b25acaf0aba872dd137c7c4e15a953d2541fc69bf9eef87b16fb108bde5afa83757dda1ed8af64b9ebdc62e45a776b027d43702138e002369065c44aa4b923434307d0e4376f02b2bf37e39db9ff091993be8cee4c0a495d6716d239ba16d7861651b12bdb61f59bdcc0eeaf7feddc4049f585cf508f2396e2c4ccdaff536b4704e558b4162cca0ff713345aa26a11620f97eee7effcb167852ca1e55997e6ca490a487a86e8bee07cda45ffba63c36ae1f9cefbcb5394a984e65100f6", 0x2000, 0x0) 6m7.448269704s ago: executing program 3 (id=87): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x15) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f904, 0x3}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="000002000a0002000000000000000000"], 0x28}}, 0x0) 6m5.423347501s ago: executing program 3 (id=88): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r6, &(0x7f0000000240)=""/244, 0xf4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 5m57.902848567s ago: executing program 3 (id=92): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r6, &(0x7f0000000240)=""/244, 0xf4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 5m42.214052954s ago: executing program 33 (id=92): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r6, &(0x7f0000000240)=""/244, 0xf4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4m31.681632534s ago: executing program 4 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000009) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0xd490a000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'wp384\x00'}}) 4m27.883209743s ago: executing program 4 (id=157): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21", 0x25}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) 4m24.121974201s ago: executing program 4 (id=159): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21", 0x25}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) 4m22.764895583s ago: executing program 4 (id=163): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21", 0x25}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) 4m20.463355017s ago: executing program 4 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000009) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0xd490a000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'wp384\x00'}}) 4m15.17172759s ago: executing program 4 (id=170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpgid(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a36019b8af9"], 0x1c}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a18}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x401}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5}}]}]}}}, @IFLA_LINK={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) 3m57.324240598s ago: executing program 34 (id=170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpgid(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a36019b8af9"], 0x1c}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a18}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x401}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5}}]}]}}}, @IFLA_LINK={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) 2m41.293068537s ago: executing program 6 (id=287): ioperm(0x3, 0x9, 0x80) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(0xffffffffffffffff) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 2m37.345207639s ago: executing program 6 (id=292): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x271a, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec1006"], 0x10b8}, 0x7f00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r10, 0xd, 0x1) 2m33.133736888s ago: executing program 6 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 2m31.276965191s ago: executing program 6 (id=297): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) socket$kcm(0x10, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, &(0x7f0000000280)='0', 0x1, 0x40000, &(0x7f0000000340)={0x11, 0x6, 0x0, 0x1, 0x2, 0x6, @local}, 0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x40286608, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, 0x0) 2m23.499275073s ago: executing program 6 (id=303): socket$kcm(0x10, 0x400000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) lseek(0xffffffffffffffff, 0xb, 0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x4, 0x7, 0x3, 0xdb31, 0x7fffffff, r0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) 2m16.78453622s ago: executing program 6 (id=310): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000009) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0xd490a000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'wp384\x00'}}) 2m1.602929385s ago: executing program 35 (id=310): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000009) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0xd490a000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'wp384\x00'}}) 2m0.241832987s ago: executing program 5 (id=330): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vbi(0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1m57.031177462s ago: executing program 5 (id=333): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x271a, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec1006"], 0x10b8}, 0x7f00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r10, 0xd, 0x1) 1m48.801484615s ago: executing program 5 (id=340): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) dup(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)={0x2, 0x0, [{0x8070000, 0x1006, &(0x7f0000001880)=""/4102}, {0xdddd1000, 0xbc, &(0x7f00000014c0)=""/188}]}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) 1m44.915771946s ago: executing program 5 (id=344): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) 1m44.601598703s ago: executing program 5 (id=345): socket$kcm(0x10, 0x400000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) lseek(0xffffffffffffffff, 0xb, 0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x4, 0x7, 0x3, 0xdb31, 0x7fffffff, r0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x7d) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 1m42.711075377s ago: executing program 5 (id=346): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test\x00', 0x14) write(0xffffffffffffffff, &(0x7f0000000380)='100000', 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents64(r2, &(0x7f0000000040)=""/27, 0x1b) getdents(r2, &(0x7f00000005c0)=""/180, 0xb4) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f00000003c0)={0xb0, &(0x7f00000002c0)=""/176}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x4000000) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x100000000) unshare(0x42000000) 1m27.102225982s ago: executing program 36 (id=346): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test\x00', 0x14) write(0xffffffffffffffff, &(0x7f0000000380)='100000', 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents64(r2, &(0x7f0000000040)=""/27, 0x1b) getdents(r2, &(0x7f00000005c0)=""/180, 0xb4) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f00000003c0)={0xb0, &(0x7f00000002c0)=""/176}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x4000000) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x100000000) unshare(0x42000000) 11.840310133s ago: executing program 1 (id=477): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, 0x1e, 0x301, 0x20000002, 0x0, {0x1}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="a4bfda84"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) 11.706545846s ago: executing program 1 (id=478): openat$ppp(0xffffffffffffff9c, 0x0, 0x8602, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r0 = openat$ttyprintk(0xffffff9c, &(0x7f0000000080), 0x2a02, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00005b1000/0x2000)=nil, &(0x7f00004e3000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00007d6000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f4}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x6, 0x83, 0x7, 0x7, 0x8, "0066efa15c461b84b88ecb8f77f4521b8542fb", 0x8, 0xffffffff}) r1 = mq_open(&(0x7f0000000000)='\xfe\xbd\xea\x9c\x8f\xb6*', 0x40, 0x1c1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f000011c000/0x3000)=nil, 0x3000, 0x9, 0x40010, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="5ef3105447c4"}) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000300)=0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) r5 = fsopen(&(0x7f0000000380)='reiserfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)='uid', 0x0, 0x0) openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r4, &(0x7f0000004500)={0x2020}, 0x2020) lseek(r4, 0xfffffffffffffff5, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r6) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r4, &(0x7f0000000000)="96e9f6521dcd8eaf03ef659f66a8e1be090e13aaffb03504d5e55598e827c9c9a0479cd9319b29178f9343fbe865fe0ec62159dcba31816aacf65a756ab7d8947fc6ae3b4c82e90499d357e8b2be1c24d829ecdecb55f0f033ce7927", &(0x7f0000000140)=""/131}, 0x1c) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7fa0ff00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) lseek(r1, 0x7, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000010ef17b560000000000001090224000100001040021800008c0126580e09ce6300fc01222800090581030800038102"], 0x0) 10.328129019s ago: executing program 1 (id=483): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x18, 0x54, 0x811, 0x170bd26, 0x0, {0x7, r1}}, 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0x2400c0c4) 10.178423722s ago: executing program 7 (id=484): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x6, 0x0, 0x10, 0x7fff7ff9}, {0x9, 0x4, 0xa, 0x2}]}) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, 0x0) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8) dup2(r1, r2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r6 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r6, &(0x7f0000000100)=""/253, 0xfd, 0x1) syz_usb_connect(0x0, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405"], 0x0) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) personality(0xeaffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x20}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x3, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWTABLE={0x40, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0xc2482, 0x100) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) 10.127095493s ago: executing program 1 (id=486): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x40, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000dc0)=ANY=[@ANYBLOB="001601000000dc"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 6.818017431s ago: executing program 7 (id=490): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) 6.499887078s ago: executing program 7 (id=492): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x10b000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9c4, 0x0, 0x0, 0x0, 0x4}, @exit, @cb_func={0x18, 0x1, 0x4, 0x0, 0x8}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xa}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000100)='syzkaller\x00', 0x25fa, 0x4d, &(0x7f0000000140)=""/77, 0x41100, 0x1f, '\x00', r2, 0x0, r4, 0x8, &(0x7f0000000300)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xa, 0xb104, 0x3}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000380)=[{0x3, 0x4, 0xa, 0x8}, {0x5, 0x1, 0x8, 0xc}, {0x3, 0x1, 0x7, 0x9}, {0x2, 0x4, 0xc, 0x6}, {0x4, 0x3, 0x6, 0x8}], 0x10, 0x6}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r5, {0x5, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054) 6.070301118s ago: executing program 1 (id=495): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x109301, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 5.482771392s ago: executing program 0 (id=497): r0 = semget$private(0x0, 0x6, 0x1b5) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7ff}, 0x9, 0x6}) 5.030759533s ago: executing program 7 (id=498): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f00000010c0)="be", 0x1) 4.386348758s ago: executing program 0 (id=500): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40045b0a, &(0x7f0000000000)={0x2, 0xfffffffe, 0x7, 0xff, 0x1}) 4.108705234s ago: executing program 8 (id=501): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) tkill(0x0, 0xb) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) 3.489991429s ago: executing program 1 (id=502): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1e8f7, 0x14}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e22}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80a0}, 0x4000) memfd_secret(0x0) r1 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000070904000001020d0000052406000105240000000d240f0100000000000000000006241a00000809058103000200fe000904010001020d00000904010102020d00000905820200020942f90905030210"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x7, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x2, 0x8, 0x7, 0xcf, 0xff}, 0x18, &(0x7f00000001c0)={0x5, 0xf, 0x18, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x7, 0xf, 0x1, [0x0]}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xfcff}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000440)={0x24, &(0x7f00000002c0)={0x20, 0x5, 0x4e, {0x4e, 0x23, "aafb9850df283668d251c6775e2f9c24f9d16fe831cf2c29586b18a370f58db561789a1d63aeaee4bd319bd9524b4651a882dae40014188ae73ba38d5bb6062305800bc24adc4e5c8cd59583"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, &(0x7f0000000380)={0x0, 0x22, 0x16, {[@local=@item_012={0x1, 0x2, 0x0, 'f'}, @local=@item_4={0x3, 0x2, 0x8, "d3802a5e"}, @main=@item_4={0x3, 0x0, 0xb, "0aede54c"}, @main=@item_4={0x3, 0x0, 0x9, "e193d688"}, @main=@item_4={0x3, 0x0, 0x8, "0be06073"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x256}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000480)={0x40, 0x15, 0x23, "d9450fd2f5a318dcaed98b5a33c63376438c696e4139e2c5465220898daf5b222183e8"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x97}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x11}, &(0x7f0000000600)={0x20, 0x1, 0xfb, "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"}, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf60cc76522bf19d00", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7b820f7fffffff2ff070a00", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000003000/0x2000)=nil, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0xb30, 0x539, 0xf, 0x7, 0xf, 0x40, 0x2, 0xfff, 0x7fff, 0x4, 0x5, 0x8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090495d794b2eaf5000905"], 0x0) pipe2(&(0x7f0000000000), 0x800) syz_usb_connect(0x5, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb350102030109022b0001080540040904ce01026fda0d000705f71f22810b09050c02", @ANYRES8], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x4084) 3.206490765s ago: executing program 8 (id=503): write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x46f0}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.062985519s ago: executing program 7 (id=504): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000740)=""/4110, 0x100e}], 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffe, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000000)="46a1a0995a02", 0x0, 0x0, 0x14, 0x0, 0x0}) 2.921228672s ago: executing program 7 (id=505): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6f, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x9, 0x0, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "90"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xd2c, 0x4, 0xd, 0x8}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0xd, 0xfe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xf, 0x6, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0xf3, 0x68}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.678654518s ago: executing program 8 (id=506): unshare(0x6020400) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, 0x0) 2.522017252s ago: executing program 8 (id=507): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d00010100803209040000020300000009211101000122230009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a1"], 0x0}, 0x0) 2.355196935s ago: executing program 0 (id=508): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x804, 0x4a483) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0x8, 0xffffffff9673e359]}}) 1.910582396s ago: executing program 0 (id=509): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x10e) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 1.671136251s ago: executing program 0 (id=510): timer_create(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000040)) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0\x00', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000300)={0x200000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x200000, &(0x7f0000001000/0x1000)=nil, 0x0, r3}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000400)={0x0, 0x200000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.329062239s ago: executing program 0 (id=511): socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x0, 0x4, 0x100000, 0x9, {0x0, 0xea60}, {0x0, 0x2, 0x60, 0xc0, 0x0, 0xf0, "0400"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)=@mmap={0x1, 0x2, 0x4, 0x814318, 0x81, {}, {0x5, 0x8, 0x8, 0x5, 0x5, 0x8, "24d93fb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) unshare(0x8040480) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2048}, {0xffffffffffffffff, 0x1}], 0xfdfe, 0xfffffff7) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 406.726161ms ago: executing program 8 (id=512): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040050) 0s ago: executing program 8 (id=513): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2007, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f00000001c0)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0}, 0x1400c8d4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.74' (ED25519) to the list of known hosts. syzkaller login: [ 77.447585][ T5761] cgroup: Unknown subsys name 'net' [ 77.559148][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.252442][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.058482][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.067053][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.076011][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.083790][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.092443][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.099788][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.108720][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.109670][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.120788][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.133273][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.142776][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.150419][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.158065][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.161652][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.169159][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.180392][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.187983][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.208911][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.212750][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.219005][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.226544][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.233117][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.244055][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.251884][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.746411][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 81.855703][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 81.873342][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 81.904426][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 81.994895][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.003052][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.010921][ T5772] bridge_slave_0: entered allmulticast mode [ 82.018184][ T5772] bridge_slave_0: entered promiscuous mode [ 82.056371][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.066538][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.073930][ T5772] bridge_slave_1: entered allmulticast mode [ 82.081619][ T5772] bridge_slave_1: entered promiscuous mode [ 82.176687][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.189448][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.237627][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.245011][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.252915][ T5774] bridge_slave_0: entered allmulticast mode [ 82.259953][ T5774] bridge_slave_0: entered promiscuous mode [ 82.277982][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.287491][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.295741][ T5773] bridge_slave_0: entered allmulticast mode [ 82.303863][ T5773] bridge_slave_0: entered promiscuous mode [ 82.325275][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.332683][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.339916][ T5774] bridge_slave_1: entered allmulticast mode [ 82.347575][ T5774] bridge_slave_1: entered promiscuous mode [ 82.367792][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.375057][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.385217][ T5773] bridge_slave_1: entered allmulticast mode [ 82.392549][ T5773] bridge_slave_1: entered promiscuous mode [ 82.403266][ T5772] team0: Port device team_slave_0 added [ 82.412492][ T5772] team0: Port device team_slave_1 added [ 82.437540][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.445168][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.452704][ T5775] bridge_slave_0: entered allmulticast mode [ 82.459972][ T5775] bridge_slave_0: entered promiscuous mode [ 82.508238][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.515734][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.523330][ T5775] bridge_slave_1: entered allmulticast mode [ 82.531128][ T5775] bridge_slave_1: entered promiscuous mode [ 82.549338][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.563609][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.571621][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.597634][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.612693][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.625251][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.657706][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.669998][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.677250][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.703471][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.738124][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.779658][ T5774] team0: Port device team_slave_0 added [ 82.788537][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.838193][ T5772] hsr_slave_0: entered promiscuous mode [ 82.845176][ T5772] hsr_slave_1: entered promiscuous mode [ 82.854247][ T5774] team0: Port device team_slave_1 added [ 82.885048][ T5773] team0: Port device team_slave_0 added [ 82.915146][ T5775] team0: Port device team_slave_0 added [ 82.929218][ T5775] team0: Port device team_slave_1 added [ 82.937522][ T5773] team0: Port device team_slave_1 added [ 82.988334][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.995701][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.021736][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.035799][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.042937][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.068899][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.123327][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.130624][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.156971][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.171145][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.178147][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.205088][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.218578][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.227653][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.254024][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.301027][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.308133][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.334520][ T5085] Bluetooth: hci3: command tx timeout [ 83.340671][ T5789] Bluetooth: hci2: command tx timeout [ 83.340695][ T51] Bluetooth: hci0: command tx timeout [ 83.340906][ T51] Bluetooth: hci1: command tx timeout [ 83.346784][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.423949][ T5774] hsr_slave_0: entered promiscuous mode [ 83.431522][ T5774] hsr_slave_1: entered promiscuous mode [ 83.437775][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.445734][ T5774] Cannot create hsr debugfs directory [ 83.484239][ T5773] hsr_slave_0: entered promiscuous mode [ 83.491314][ T5773] hsr_slave_1: entered promiscuous mode [ 83.497781][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.506404][ T5773] Cannot create hsr debugfs directory [ 83.579450][ T5775] hsr_slave_0: entered promiscuous mode [ 83.586132][ T5775] hsr_slave_1: entered promiscuous mode [ 83.593225][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.601258][ T5775] Cannot create hsr debugfs directory [ 83.827198][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.877233][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.925027][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.937063][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.075901][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.097493][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.108527][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.132109][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.220696][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.235971][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.246991][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.258321][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.359050][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.369753][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.386312][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.399432][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.445551][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.494858][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.513735][ T746] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.521180][ T746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.549997][ T746] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.557253][ T746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.647503][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.692624][ T5772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.705876][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.750289][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.760154][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.779070][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.806455][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.813816][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.863371][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.885602][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.892873][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.917866][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.932410][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.939580][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.988167][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.995457][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.028947][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.036215][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.092173][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.099388][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.239144][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.378833][ T5772] veth0_vlan: entered promiscuous mode [ 85.400741][ T51] Bluetooth: hci1: command tx timeout [ 85.406232][ T51] Bluetooth: hci3: command tx timeout [ 85.412742][ T5782] Bluetooth: hci2: command tx timeout [ 85.412768][ T5085] Bluetooth: hci0: command tx timeout [ 85.465197][ T5772] veth1_vlan: entered promiscuous mode [ 85.545377][ T5772] veth0_macvtap: entered promiscuous mode [ 85.575693][ T5772] veth1_macvtap: entered promiscuous mode [ 85.627465][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.676382][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.709704][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.741147][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.749965][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.769390][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.845722][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.875183][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.938527][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.004708][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.019841][ T5775] veth0_vlan: entered promiscuous mode [ 86.035206][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.074268][ T5773] veth0_vlan: entered promiscuous mode [ 86.130842][ T5775] veth1_vlan: entered promiscuous mode [ 86.138518][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.157420][ T5774] veth0_vlan: entered promiscuous mode [ 86.165583][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.176286][ T5773] veth1_vlan: entered promiscuous mode [ 86.198820][ T5774] veth1_vlan: entered promiscuous mode [ 86.321630][ T5773] veth0_macvtap: entered promiscuous mode [ 86.363745][ T5773] veth1_macvtap: entered promiscuous mode [ 86.406058][ T5774] veth0_macvtap: entered promiscuous mode [ 86.422430][ T5775] veth0_macvtap: entered promiscuous mode [ 86.439587][ T5775] veth1_macvtap: entered promiscuous mode [ 86.456837][ T5774] veth1_macvtap: entered promiscuous mode [ 86.511941][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.529031][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.542769][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.557857][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.574379][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.579574][ T5837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 86.595539][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.612445][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.627756][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.666746][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.695603][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.705974][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.721022][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.747124][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.769156][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.802382][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.837348][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.867289][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.902065][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.912673][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.923420][ T5776] udevd[5776]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 86.960337][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.973244][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.986257][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.998132][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.028960][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.062427][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.088740][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.113724][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.140518][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.160475][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.192062][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.230870][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.279581][ T5845] process 'syz.0.5' launched '/dev/fd/-1/./cgroup.cpu/cgroup.procs' with NULL argv: empty string added [ 87.319394][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.402497][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.478126][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.488849][ T5085] Bluetooth: hci3: command tx timeout [ 87.488959][ T5789] Bluetooth: hci2: command tx timeout [ 87.503412][ T5085] Bluetooth: hci1: command tx timeout [ 87.508957][ T51] Bluetooth: hci0: command tx timeout [ 87.654566][ T5849] syz.0.5: attempt to access beyond end of device [ 87.654566][ T5849] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 87.715509][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.769963][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.831922][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.894090][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.319559][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.350435][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.359223][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.376340][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.666376][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.840433][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.151588][ T5864] batadv_slave_1: entered promiscuous mode [ 89.166779][ T5865] vlan2: entered allmulticast mode [ 89.172387][ T5865] bond0: entered allmulticast mode [ 89.177556][ T5865] bond_slave_0: entered allmulticast mode [ 89.183468][ T5865] bond_slave_1: entered allmulticast mode [ 89.267062][ T5858] batadv_slave_1: left promiscuous mode [ 89.428315][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.450645][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.504682][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 89.513571][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 89.546075][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.561037][ T5789] Bluetooth: hci3: command tx timeout [ 89.566842][ T5789] Bluetooth: hci2: command tx timeout [ 89.569152][ T51] Bluetooth: hci0: command tx timeout [ 89.573880][ T5789] Bluetooth: hci1: command tx timeout [ 89.595739][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.681388][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 89.690781][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 89.718218][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.736895][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.797943][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.826007][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.865876][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.877816][ T5869] Zero length message leads to an empty skb [ 89.899308][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.060660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 92.395161][ T1192] cfg80211: failed to load regulatory.db [ 93.620353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.102945][ T5896] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 99.191209][ T5901] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 100.435781][ T5904] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 103.860630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 105.411949][ T5924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'. [ 105.524128][ T5919] syz.1.10: attempt to access beyond end of device [ 105.524128][ T5919] loop1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 106.162938][ T5931] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 106.768712][ T27] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 108.691903][ T27] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 108.720317][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.754085][ T27] usb 2-1: Product: syz [ 108.762612][ T27] usb 2-1: Manufacturer: syz [ 108.787722][ T27] usb 2-1: SerialNumber: syz [ 108.827590][ T27] usb 2-1: config 0 descriptor?? [ 108.867400][ T27] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 108.900601][ T27] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 108.908926][ T27] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 109.009483][ T27] usb 2-1: USB disconnect, device number 2 [ 114.510226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 116.550915][ T5956] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 118.164603][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 118.769595][ T5963] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 119.696280][ T5977] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 120.212480][ T5974] syz.2.23: attempt to access beyond end of device [ 120.212480][ T5974] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 121.780545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 122.190255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 124.765824][ T6006] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 130.181057][ T6019] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 130.333890][ T6029] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 130.942215][ T6036] batadv_slave_1: entered promiscuous mode [ 131.138401][ T6038] ======================================================= [ 131.138401][ T6038] WARNING: The mand mount option has been deprecated and [ 131.138401][ T6038] and is ignored by this kernel. Remove the mand [ 131.138401][ T6038] option from the mount to silence this warning. [ 131.138401][ T6038] ======================================================= [ 131.212553][ T6030] batadv_slave_1: left promiscuous mode [ 133.286196][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.580583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 134.890609][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.185484][ T6059] binder: 6058:6059 ioctl 4018620d 0 returned -22 [ 136.261667][ T6064] binder: 6058:6064 ioctl c0306201 0 returned -14 [ 136.319888][ T6063] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 139.700311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 140.093975][ T6074] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 140.720318][ T5780] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 140.955938][ T5780] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 140.990384][ T5780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.010267][ T5780] usb 2-1: Product: syz [ 141.014517][ T5780] usb 2-1: Manufacturer: syz [ 141.019163][ T5780] usb 2-1: SerialNumber: syz [ 141.051206][ T5780] usb 2-1: config 0 descriptor?? [ 141.092215][ T5780] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 141.099162][ T5780] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 141.119056][ T5780] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 141.505633][ T6081] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 141.791562][ T1192] usb 2-1: USB disconnect, device number 3 [ 142.260248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 143.293176][ T6108] ceph: No mds server is up or the cluster is laggy [ 143.958763][ T1192] libceph: connect (1)[c::]:6789 error -101 [ 144.438239][ T6102] netlink: 20 bytes leftover after parsing attributes in process `syz.3.53'. [ 144.821355][ T1192] libceph: mon0 (1)[c::]:6789 connect error [ 145.317967][ T6119] ceph: No mds server is up or the cluster is laggy [ 145.328826][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 145.430961][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 145.754279][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 145.808641][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 146.367637][ T1192] libceph: connect (1)[c::]:6789 error -101 [ 146.432217][ T1192] libceph: mon0 (1)[c::]:6789 connect error [ 148.413081][ T5776] udevd[5776]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 148.435744][ T8] libceph: connect (1)[c::]:6789 error -101 [ 148.442816][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 148.451505][ T9] libceph: connect (1)[c::]:6789 error -101 [ 148.457633][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 149.401798][ T6139] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 155.060252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 156.080742][ T6159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.67'. [ 156.542968][ T6157] udevd[6157]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 161.574612][ T6190] batadv_slave_1: entered promiscuous mode [ 162.020702][ T6186] batadv_slave_1: left promiscuous mode [ 164.854993][ T6201] batadv_slave_1: entered promiscuous mode [ 164.975077][ T6197] batadv_slave_1: left promiscuous mode [ 171.261678][ T6217] netlink: 240 bytes leftover after parsing attributes in process `syz.2.66'. [ 176.933129][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.948526][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.957659][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.968642][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.977383][ T5782] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 176.990516][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.564759][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.820630][ T5782] Bluetooth: hci4: command tx timeout [ 179.903344][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.332719][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.633326][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.345642][ T6256] syz.1.84: attempt to access beyond end of device [ 181.345642][ T6256] loop1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 183.386666][ T5789] Bluetooth: hci4: command tx timeout [ 183.512576][ T6231] chnl_net:caif_netlink_parms(): no params data found [ 185.400558][ T5789] Bluetooth: hci4: command tx timeout [ 185.486994][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.502115][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.509382][ T6231] bridge_slave_0: entered allmulticast mode [ 185.541959][ T6231] bridge_slave_0: entered promiscuous mode [ 185.608824][ T6231] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.616983][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.642641][ T6231] bridge_slave_1: entered allmulticast mode [ 185.670384][ T6231] bridge_slave_1: entered promiscuous mode [ 185.891453][ T6231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.943819][ T6231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.757122][ T5789] Bluetooth: hci4: command tx timeout [ 188.578955][ T6231] team0: Port device team_slave_0 added [ 188.589566][ T6231] team0: Port device team_slave_1 added [ 188.885595][ T6231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.921725][ T6231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.010629][ T6231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.229842][ T6231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.305229][ T6231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.553807][ T6231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.953436][ T6231] hsr_slave_0: entered promiscuous mode [ 192.765548][ T6231] hsr_slave_1: entered promiscuous mode [ 193.192146][ T6231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.199754][ T6231] Cannot create hsr debugfs directory [ 193.401982][ T6322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.94'. [ 195.138281][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.146097][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.884024][ T12] hsr_slave_0: left promiscuous mode [ 196.960644][ T12] hsr_slave_1: left promiscuous mode [ 197.009752][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.032407][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.066095][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.074771][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.151291][ T12] bridge_slave_1: left allmulticast mode [ 197.157026][ T12] bridge_slave_1: left promiscuous mode [ 197.199413][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.271200][ T12] bridge_slave_0: left allmulticast mode [ 197.289005][ T12] bridge_slave_0: left promiscuous mode [ 197.491319][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.795086][ T12] veth1_macvtap: left promiscuous mode [ 198.091769][ T12] veth0_macvtap: left promiscuous mode [ 198.110467][ T12] veth1_vlan: left promiscuous mode [ 198.116221][ T12] veth0_vlan: left promiscuous mode [ 202.426696][ T12] team0 (unregistering): Port device team_slave_1 removed [ 202.486511][ T12] team0 (unregistering): Port device team_slave_0 removed [ 202.554058][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.608932][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.198127][ T12] bond0 (unregistering): Released all slaves [ 204.433935][ T6231] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 204.503371][ T6231] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 204.543700][ T6231] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.581642][ T6231] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 205.753380][ T6231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.854706][ T6231] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.909011][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.916292][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.942118][ T5085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.970666][ T5085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.980385][ T5085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.000609][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.009445][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 206.032110][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 206.120768][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.128094][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.844867][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 207.844889][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 207.857113][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 208.120365][ T5782] Bluetooth: hci2: command tx timeout [ 210.404827][ T51] Bluetooth: hci2: command tx timeout [ 210.857843][ T6231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.079796][ T6382] chnl_net:caif_netlink_parms(): no params data found [ 211.617666][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.705792][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.746127][ T6382] bridge_slave_0: entered allmulticast mode [ 211.781795][ T6382] bridge_slave_0: entered promiscuous mode [ 211.827707][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.874119][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.890408][ T6382] bridge_slave_1: entered allmulticast mode [ 211.898593][ T6382] bridge_slave_1: entered promiscuous mode [ 212.448684][ T51] Bluetooth: hci2: command tx timeout [ 212.616977][ T6382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.647232][ T6382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.907755][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.079981][ T6382] team0: Port device team_slave_0 added [ 214.173636][ T6435] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 214.461396][ T6382] team0: Port device team_slave_1 added [ 214.531758][ T51] Bluetooth: hci2: command tx timeout [ 214.607493][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.908389][ T6444] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 215.635052][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.916010][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.968581][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.025450][ T6382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.052802][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.065573][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.120794][ T6382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.093151][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.131095][ T6231] veth0_vlan: entered promiscuous mode [ 217.145173][ T6231] veth1_vlan: entered promiscuous mode [ 217.219060][ T6231] veth0_macvtap: entered promiscuous mode [ 217.308032][ T6456] fuse: Bad value for 'rootmode' [ 217.324016][ T6231] veth1_macvtap: entered promiscuous mode [ 217.376208][ T6382] hsr_slave_0: entered promiscuous mode [ 217.413219][ T6382] hsr_slave_1: entered promiscuous mode [ 217.426839][ T6382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.488435][ T6382] Cannot create hsr debugfs directory [ 217.945162][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.990811][ T6462] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 218.020407][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.130192][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.181150][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.234391][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.248167][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.269931][ T6231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.112391][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.326056][ T6475] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 221.041913][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.110276][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.146405][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.170228][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.207124][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.235552][ T6231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.339122][ T6231] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.410423][ T6231] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.430626][ T6231] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.439426][ T6231] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.790436][ T6382] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 223.847590][ T6382] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 223.993108][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.030437][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.075734][ T6382] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 224.124071][ T6382] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 224.330860][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.338805][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.496356][ T6382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.832399][ T6507] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 229.026979][ T6382] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.814000][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.821254][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.538967][ T12] hsr_slave_0: left promiscuous mode [ 230.642411][ T12] hsr_slave_1: left promiscuous mode [ 230.743833][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.823517][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.009442][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.107376][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.217557][ T12] bridge_slave_1: left allmulticast mode [ 231.260865][ T12] bridge_slave_1: left promiscuous mode [ 231.327475][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.539251][ T12] bridge_slave_0: left allmulticast mode [ 231.598186][ T12] bridge_slave_0: left promiscuous mode [ 231.672182][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.109435][ T12] veth1_macvtap: left promiscuous mode [ 232.162056][ T12] veth0_macvtap: left promiscuous mode [ 232.232581][ T12] veth1_vlan: left promiscuous mode [ 232.298749][ T12] veth0_vlan: left promiscuous mode [ 237.274441][ T12] team0 (unregistering): Port device team_slave_1 removed [ 237.348117][ T12] team0 (unregistering): Port device team_slave_0 removed [ 237.399296][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.190987][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.766651][ T12] bond0 (unregistering): Released all slaves [ 240.926696][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.933954][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.821046][ T6539] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 245.026183][ T6382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.993355][ T6382] veth0_vlan: entered promiscuous mode [ 246.027452][ T6382] veth1_vlan: entered promiscuous mode [ 246.170905][ T6382] veth0_macvtap: entered promiscuous mode [ 246.309932][ T6382] veth1_macvtap: entered promiscuous mode [ 246.481897][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.500789][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.513974][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.525941][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.538678][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.557666][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.574759][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.757025][ T6576] batadv_slave_1: entered promiscuous mode [ 247.083980][ T6572] batadv_slave_1: left promiscuous mode [ 247.125737][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.180429][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.232219][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.263482][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.327805][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.352558][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.378593][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.405940][ T6382] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.429782][ T6382] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.642136][ T6382] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.390674][ T6382] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.724729][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.750776][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.373099][ T6597] batadv_slave_1: entered promiscuous mode [ 249.400982][ T6598] vlan2: entered allmulticast mode [ 249.406239][ T6598] bond0: entered allmulticast mode [ 249.411518][ T6598] bond_slave_0: entered allmulticast mode [ 249.417380][ T6598] bond_slave_1: entered allmulticast mode [ 249.503629][ T6591] batadv_slave_1: left promiscuous mode [ 249.878346][ T6600] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop4": -EINTR [ 249.880964][ T6602] Can't find ip_set type has [ 250.872897][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.492076][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.191872][ T6621] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 255.965553][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.980240][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.801233][ T6647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.130'. [ 257.263431][ T6440] udevd[6440]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 262.616196][ T6689] batadv_slave_1: entered promiscuous mode [ 262.622681][ T6689] batadv_slave_1: left promiscuous mode [ 263.248144][ T6701] syz.5.138 uses obsolete (PF_INET,SOCK_PACKET) [ 268.737797][ T6737] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 269.132165][ T6733] fuse: Invalid rootmode [ 269.551566][ T6733] syzkaller0: entered promiscuous mode [ 269.576670][ T6733] syzkaller0: entered allmulticast mode [ 269.776491][ T6743] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 270.111247][ T6751] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 273.531618][ T51] Bluetooth: hci2: link tx timeout [ 273.538622][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 273.560664][ T51] Bluetooth: hci2: link tx timeout [ 273.576234][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 273.603932][ T51] Bluetooth: hci2: link tx timeout [ 273.964573][ T6785] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop4": -EINTR [ 273.971285][ T6783] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 274.009091][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.017774][ T51] Bluetooth: hci2: link tx timeout [ 274.023073][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 276.140305][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 278.225709][ T6818] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 279.635835][ T6825] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 281.867508][ T6831] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 282.255319][ T6836] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 283.046175][ T6839] netlink: 20 bytes leftover after parsing attributes in process `syz.0.161'. [ 284.854049][ T6854] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 285.631886][ T6859] binder: 6858:6859 ioctl c0306201 0 returned -14 [ 294.523273][ T6895] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 295.084855][ T6907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.174'. [ 297.660633][ T6921] binder: BINDER_SET_CONTEXT_MGR already set [ 297.667010][ T6921] binder: 6920:6921 ioctl 4018620d 200000004a80 returned -16 [ 297.759755][ T6440] udevd[6440]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 297.822219][ T6923] binder: 6920:6923 ioctl c0306201 0 returned -14 [ 298.111135][ T6929] batadv_slave_1: entered promiscuous mode [ 298.687308][ T6924] batadv_slave_1: left promiscuous mode [ 300.360717][ T6948] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 303.426483][ T6961] batadv_slave_1: entered promiscuous mode [ 303.589018][ T6954] batadv_slave_1: left promiscuous mode [ 307.751295][ T6973] batadv_slave_1: entered promiscuous mode [ 307.912993][ T6962] batadv_slave_1: left promiscuous mode [ 309.422009][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 309.920318][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 309.937742][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 309.952376][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 309.960900][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 310.016677][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 310.035165][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 310.311240][ T6989] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 311.620999][ T7004] netlink: 36 bytes leftover after parsing attributes in process `syz.5.186'. [ 311.641495][ T7004] netlink: 36 bytes leftover after parsing attributes in process `syz.5.186'. [ 313.479149][ T5789] Bluetooth: hci3: command tx timeout [ 313.522938][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.823776][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.981939][ T7027] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 314.913556][ T7028] syz.0.193: attempt to access beyond end of device [ 314.913556][ T7028] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 314.924372][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.067203][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.152012][ T6983] chnl_net:caif_netlink_parms(): no params data found [ 315.481219][ T7047] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 315.560370][ T5789] Bluetooth: hci3: command tx timeout [ 316.256312][ T7050] autofs4:pid:7050:autofs_fill_super: called with bogus options [ 316.547498][ T6983] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.693688][ T6983] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.727228][ T6983] bridge_slave_0: entered allmulticast mode [ 316.813789][ T7054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.198'. [ 316.825352][ T6983] bridge_slave_0: entered promiscuous mode [ 316.846833][ T6983] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.855614][ T6983] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.865544][ T6983] bridge_slave_1: entered allmulticast mode [ 316.886552][ T6983] bridge_slave_1: entered promiscuous mode [ 316.984787][ T7061] batadv_slave_1: entered promiscuous mode [ 317.451653][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.458082][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.587724][ T7056] batadv_slave_1: left promiscuous mode [ 317.609907][ T6440] block nbd64: NBD_DISCONNECT [ 317.624584][ T6983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.650276][ T5789] Bluetooth: hci3: command tx timeout [ 317.674894][ T6983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.292651][ T7071] sched: RT throttling activated [ 321.108508][ T6983] team0: Port device team_slave_0 added [ 321.120206][ T5789] Bluetooth: hci3: command tx timeout [ 321.164094][ T6983] team0: Port device team_slave_1 added [ 321.284988][ T6440] udevd[6440]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 321.545742][ T7085] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 322.608103][ T6983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.656695][ T6983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.735776][ T6983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.632864][ T6983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.639893][ T6983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.821490][ T6983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.301433][ T7107] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 325.000448][ T6983] hsr_slave_0: entered promiscuous mode [ 325.109676][ T6983] hsr_slave_1: entered promiscuous mode [ 325.138646][ T6983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.155379][ T6983] Cannot create hsr debugfs directory [ 328.214819][ T6983] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 328.227736][ T6983] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 328.255900][ T6983] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 330.222804][ T6983] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 331.009165][ T49] hsr_slave_0: left promiscuous mode [ 331.019506][ T49] hsr_slave_1: left promiscuous mode [ 331.331817][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.339335][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.481259][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.521520][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.541429][ T49] bridge_slave_1: left allmulticast mode [ 331.561242][ T49] bridge_slave_1: left promiscuous mode [ 331.567063][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.622206][ T49] bridge_slave_0: left allmulticast mode [ 331.627938][ T49] bridge_slave_0: left promiscuous mode [ 331.676376][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.568612][ T7156] Can't find ip_set type hash:ma [ 332.612395][ T7155] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop5": -EINTR [ 335.634744][ T49] veth1_macvtap: left promiscuous mode [ 335.730310][ T49] veth0_macvtap: left promiscuous mode [ 335.736057][ T49] veth1_vlan: left promiscuous mode [ 335.770380][ T49] veth0_vlan: left promiscuous mode [ 337.100767][ T7176] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop5": -EINTR [ 337.920434][ T5780] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 338.174634][ T5780] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 338.197723][ T5780] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.600451][ T5780] usb 6-1: Product: syz [ 339.604709][ T5780] usb 6-1: Manufacturer: syz [ 339.613992][ T5780] usb 6-1: SerialNumber: syz [ 339.635099][ T5780] usb 6-1: config 0 descriptor?? [ 339.645989][ T5780] usb 6-1: Waiting for MOTU Microbook II to boot up... [ 339.660302][ T5780] usb 6-1: failed setting the sample rate for Motu MicroBook II: -22 [ 339.668615][ T5780] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 340.447082][ T7199] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 340.814547][ T49] team0 (unregistering): Port device team_slave_1 removed [ 341.296606][ T49] team0 (unregistering): Port device team_slave_0 removed [ 341.436398][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.525297][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.080949][ T49] bond0 (unregistering): Released all slaves [ 342.306101][ T7201] netlink: 48 bytes leftover after parsing attributes in process `syz.1.219'. [ 342.339578][ T27] usb 6-1: USB disconnect, device number 2 [ 342.481739][ T7201] netlink: 48 bytes leftover after parsing attributes in process `syz.1.219'. [ 343.498787][ T7204] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 343.609034][ T6983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.720729][ T6983] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.782525][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.789695][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.922754][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.929947][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.605362][ T6983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.239407][ T7233] autofs4:pid:7233:autofs_fill_super: called with bogus options [ 348.298230][ T6983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.734932][ T7246] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 349.192166][ T7240] socket: no more sockets [ 349.275534][ T7240] Failed to initialize the IGMP6 autojoin socket (err -23) [ 351.931183][ T7263] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 352.765009][ T6983] veth0_vlan: entered promiscuous mode [ 353.050602][ T6983] veth1_vlan: entered promiscuous mode [ 353.089797][ T7265] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 353.269611][ T6983] veth0_macvtap: entered promiscuous mode [ 353.351983][ T6983] veth1_macvtap: entered promiscuous mode [ 353.568896][ T7275] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 353.617672][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.745082][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.804787][ T7274] Failed to initialize the IGMP6 control socket (err -105) [ 353.855510][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.928126][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.980493][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.239060][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.259773][ T6983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.275618][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.286260][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.316703][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.333332][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.353687][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.367206][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.391864][ T6983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.417382][ T6983] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.448466][ T6983] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.465252][ T6983] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.484299][ T6983] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.663170][ T7285] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 357.185028][ T6311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.210286][ T6311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.677342][ T7296] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 357.986969][ T746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.125008][ T746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.157021][ T7342] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 368.798727][ T7372] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 371.233309][ T7389] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 374.226861][ T7415] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 375.983819][ T7435] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 378.025564][ T7443] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 378.191168][ T7446] syzkaller0: entered promiscuous mode [ 378.200061][ T7446] syzkaller0: entered allmulticast mode [ 378.256323][ T7450] tipc: Started in network mode [ 378.288353][ T7450] tipc: Node identity 2ec2518c2356, cluster identity 4711 [ 378.343486][ T7450] tipc: Enabled bearer , priority 0 [ 378.424052][ T7445] tipc: Resetting bearer [ 378.608848][ T5789] Bluetooth: hci3: link tx timeout [ 378.614585][ T5789] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 378.627178][ T5789] Bluetooth: hci3: link tx timeout [ 378.847622][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.854066][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.949869][ T5789] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 378.965268][ T5789] Bluetooth: hci3: link tx timeout [ 378.970685][ T5789] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 378.980898][ T5789] Bluetooth: hci3: link tx timeout [ 378.989591][ T5789] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 379.492415][ T7458] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop0": -EINTR [ 379.505219][ T7445] tipc: Disabling bearer [ 379.557924][ T971] tipc: Node number set to 227824012 [ 379.672033][ T7460] Can't find ip_set type hash:ma [ 380.023763][ T7475] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 380.902084][ T7477] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 381.080387][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 382.458184][ T7488] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 383.240404][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 384.120651][ T7511] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 388.772303][ T7537] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 396.500305][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 396.728765][ T7583] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 402.224556][ T7619] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 404.725694][ T7634] ceph: No mds server is up or the cluster is laggy [ 404.767222][ T9] libceph: connect (1)[c::]:6789 error -101 [ 404.914528][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 407.218186][ T7646] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 409.374628][ T7658] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 417.959707][ T7703] netlink: 48 bytes leftover after parsing attributes in process `syz.1.317'. [ 417.978709][ T7703] netlink: 48 bytes leftover after parsing attributes in process `syz.1.317'. [ 418.773638][ T7706] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 419.228822][ T7716] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 420.107209][ T7734] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 422.750551][ T7738] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 422.993145][ T27] libceph: connect (1)[c::]:6789 error -101 [ 422.999384][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 423.787964][ T7742] ceph: No mds server is up or the cluster is laggy [ 424.058668][ T27] libceph: connect (1)[c::]:6789 error -101 [ 424.073172][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 429.752910][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 429.763781][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 429.774658][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 429.782985][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 429.811057][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 429.818568][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 431.891031][ T51] Bluetooth: hci3: command tx timeout [ 433.145452][ T7794] chnl_net:caif_netlink_parms(): no params data found [ 433.239591][ T7826] comedi comedi1: Minor 2 could not be opened [ 433.960203][ T51] Bluetooth: hci3: command tx timeout [ 435.634636][ T7830] ICMPv6: NDISC: Failed to initialize the control socket (err -105) [ 435.778970][ T3523] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.752737][ T51] Bluetooth: hci3: command tx timeout [ 436.939163][ T3523] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.034482][ T7794] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.059456][ T7794] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.080893][ T7794] bridge_slave_0: entered allmulticast mode [ 437.109050][ T7794] bridge_slave_0: entered promiscuous mode [ 437.151236][ T7794] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.158457][ T7794] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.240357][ T7794] bridge_slave_1: entered allmulticast mode [ 437.248735][ T7794] bridge_slave_1: entered promiscuous mode [ 437.464659][ T3523] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.158058][ T51] Bluetooth: hci3: command tx timeout [ 439.345028][ T7794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.492652][ T3523] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.572845][ T7794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.811248][ T7794] team0: Port device team_slave_0 added [ 439.834800][ T7794] team0: Port device team_slave_1 added [ 440.098211][ T7794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.125866][ T7794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.300086][ T7794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.312139][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.318495][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.341841][ T7794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.349311][ T7794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.480246][ T7794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.720003][ T3523] tipc: Left network mode [ 440.881871][ T7794] hsr_slave_0: entered promiscuous mode [ 440.938870][ T7794] hsr_slave_1: entered promiscuous mode [ 440.965481][ T7794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.000314][ T7794] Cannot create hsr debugfs directory [ 443.637233][ T7881] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 448.970752][ T7794] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 449.017606][ T7794] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 449.392473][ T7794] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 449.446343][ T7794] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 449.790287][ T3523] hsr_slave_0: left promiscuous mode [ 449.834509][ T3523] hsr_slave_1: left promiscuous mode [ 449.841530][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.848988][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.906858][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.923791][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.000970][ T3523] bridge_slave_1: left allmulticast mode [ 450.006715][ T3523] bridge_slave_1: left promiscuous mode [ 450.020341][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.049129][ T3523] bridge_slave_0: left allmulticast mode [ 450.072491][ T3523] bridge_slave_0: left promiscuous mode [ 450.079187][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.177290][ T3523] veth1_macvtap: left promiscuous mode [ 450.200314][ T3523] veth0_macvtap: left promiscuous mode [ 450.206051][ T3523] veth1_vlan: left promiscuous mode [ 450.230354][ T3523] veth0_vlan: left promiscuous mode [ 451.091997][ T789] libceph: connect (1)[c::]:6789 error -101 [ 451.128929][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 451.268705][ T7931] ceph: No mds server is up or the cluster is laggy [ 454.052704][ T3523] team0 (unregistering): Port device team_slave_1 removed [ 454.194449][ T3523] team0 (unregistering): Port device team_slave_0 removed [ 454.298846][ T3523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.388143][ T3523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.179615][ T3523] bond0 (unregistering): Released all slaves [ 455.442140][ T7943] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 458.256565][ T7794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.337918][ T7794] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.383704][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.390971][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.432066][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.439301][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.389805][ T7794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.571316][ T7973] batadv_slave_1: entered promiscuous mode [ 460.030163][ T7952] batadv_slave_1: left promiscuous mode [ 460.092714][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 460.120692][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 460.129848][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 460.160359][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 460.170285][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 460.177759][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 460.521578][ T3523] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.152608][ T3523] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.432589][ T3523] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.576854][ T3523] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.732674][ T7794] veth0_vlan: entered promiscuous mode [ 461.805260][ T8002] autofs4:pid:8002:autofs_fill_super: called with bogus options [ 461.815929][ T7794] veth1_vlan: entered promiscuous mode [ 462.280496][ T51] Bluetooth: hci2: command tx timeout [ 463.962143][ T7794] veth0_macvtap: entered promiscuous mode [ 464.030573][ T7794] veth1_macvtap: entered promiscuous mode [ 464.054474][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.070096][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.079991][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.110305][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.120764][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.131583][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.149131][ T7794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.162244][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.172834][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.183256][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.197018][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.210134][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.250198][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.326369][ T7794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.360590][ T51] Bluetooth: hci2: command tx timeout [ 464.542903][ T7794] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.581380][ T7794] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.654067][ T7794] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.745386][ T7794] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.965714][ T8026] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 465.620992][ T7984] chnl_net:caif_netlink_parms(): no params data found [ 465.779680][ T8030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.363'. [ 467.838757][ T51] Bluetooth: hci2: command tx timeout [ 468.235418][ T8046] autofs4:pid:8046:autofs_fill_super: called with bogus options [ 468.508406][ T7984] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.524447][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.550461][ T7984] bridge_slave_0: entered allmulticast mode [ 468.574863][ T7984] bridge_slave_0: entered promiscuous mode [ 469.760724][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.768755][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.822002][ T7984] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.829209][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.870689][ T7984] bridge_slave_1: entered allmulticast mode [ 469.880501][ T51] Bluetooth: hci2: command tx timeout [ 469.891785][ T7984] bridge_slave_1: entered promiscuous mode [ 470.152498][ T7984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.168340][ T8062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.367'. [ 470.404697][ T7984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.507696][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.560169][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.716504][ T7984] team0: Port device team_slave_0 added [ 470.777426][ T7984] team0: Port device team_slave_1 added [ 470.926708][ T6440] udevd[6440]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 474.220256][ T3523] hsr_slave_0: left promiscuous mode [ 474.236210][ T3523] hsr_slave_1: left promiscuous mode [ 474.280701][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.315517][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.351129][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.390495][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.460646][ T3523] bridge_slave_1: left allmulticast mode [ 474.466386][ T3523] bridge_slave_1: left promiscuous mode [ 474.500960][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.898289][ T3523] bridge_slave_0: left allmulticast mode [ 474.904545][ T3523] bridge_slave_0: left promiscuous mode [ 474.911548][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.266594][ T3523] veth1_macvtap: left promiscuous mode [ 475.272333][ T3523] veth0_macvtap: left promiscuous mode [ 475.278053][ T3523] veth1_vlan: left promiscuous mode [ 475.293143][ T3523] veth0_vlan: left promiscuous mode [ 478.211767][ T8106] autofs4:pid:8106:autofs_fill_super: called with bogus options [ 483.271439][ T3523] team0 (unregistering): Port device team_slave_1 removed [ 483.409102][ T3523] team0 (unregistering): Port device team_slave_0 removed [ 483.548035][ T3523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.714353][ T3523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.173582][ T3523] bond0 (unregistering): Released all slaves [ 485.383816][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.396225][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.438525][ T7984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.481054][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.514584][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.592943][ T7984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.541860][ T7984] hsr_slave_0: entered promiscuous mode [ 487.596429][ T7984] hsr_slave_1: entered promiscuous mode [ 487.666900][ T7984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.707666][ T7984] Cannot create hsr debugfs directory [ 490.599917][ T7984] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 490.733582][ T7984] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 490.794009][ T7984] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 490.826263][ T7984] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 491.032193][ T8154] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 492.037575][ T7984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.155904][ T7984] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.230810][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.238037][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.299408][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.306615][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.544790][ T8163] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 494.514868][ T8182] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 495.233600][ T7984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.581099][ T8188] autofs4:pid:8188:autofs_fill_super: called with bogus options [ 495.899323][ T8199] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 496.976868][ T7984] veth0_vlan: entered promiscuous mode [ 497.025717][ T7984] veth1_vlan: entered promiscuous mode [ 497.157932][ T7984] veth0_macvtap: entered promiscuous mode [ 497.315833][ T7984] veth1_macvtap: entered promiscuous mode [ 497.412710][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.456010][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.568647][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.604144][ T8208] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 498.205267][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.236249][ T8209] comedi comedi1: Minor 2 could not be opened [ 498.279004][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.190836][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.216223][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.386944][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.410374][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.420920][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.440332][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.460523][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.515462][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.741610][ T8223] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 500.180916][ T8229] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 500.554867][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.844603][ T7984] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.926437][ T7984] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.971414][ T7984] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.010405][ T7984] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.268116][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.310078][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.433789][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.785486][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.834933][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.841923][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.615566][ T8261] netlink: 20 bytes leftover after parsing attributes in process `syz.7.397'. [ 504.106235][ T8277] autofs4:pid:8277:autofs_fill_super: called with bogus options [ 504.151836][ T6440] udevd[6440]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 504.354162][ T6440] udevd[6440]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 505.907433][ T8276] socket: no more sockets [ 505.953696][ T8276] Failed to initialize the IGMP6 autojoin socket (err -23) [ 512.078185][ T8313] netlink: 20 bytes leftover after parsing attributes in process `syz.7.401'. [ 512.635227][ T8322] Failed to initialize the IGMP6 control socket (err -105) [ 512.698587][ T6440] udevd[6440]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 513.531181][ T8332] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 514.313034][ T8342] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 518.779847][ T8360] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 518.919749][ T8365] comedi comedi1: Minor 2 could not be opened [ 520.087670][ T8371] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 521.056541][ T8372] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 522.023963][ T8391] netlink: 6380 bytes leftover after parsing attributes in process `syz.0.421'. [ 522.444074][ T8406] 8021q: VLANs not supported on ip6gre0 [ 522.461283][ T8408] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 524.603546][ T5780] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 524.611914][ T5818] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 524.821297][ T5780] usb 2-1: Using ep0 maxpacket: 8 [ 524.832952][ T5818] usb 9-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 524.851292][ T5818] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.864999][ T5780] usb 2-1: unable to get BOS descriptor or descriptor too short [ 524.880672][ T5780] usb 2-1: config 193 has an invalid interface number: 216 but max is 0 [ 524.906213][ T5780] usb 2-1: config 193 has no interface number 0 [ 524.924312][ T5780] usb 2-1: config 193 interface 216 has no altsetting 0 [ 524.943359][ T5780] usb 2-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=f6.a9 [ 524.956158][ T5780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.965035][ T5780] usb 2-1: Product: syz [ 524.969359][ T5780] usb 2-1: Manufacturer: syz [ 524.975163][ T5780] usb 2-1: SerialNumber: syz [ 525.219845][ T5780] upd78f0730 2-1:193.216: upd78f0730 converter detected [ 525.291689][ T5780] usb 2-1: upd78f0730 converter now attached to ttyUSB0 [ 525.343496][ T5780] usb 2-1: USB disconnect, device number 4 [ 525.368156][ T5780] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 525.403347][ T5780] upd78f0730 2-1:193.216: device disconnected [ 525.519271][ C1] usb 9-1: NFC: It it not the response to the last command [ 525.530196][ T5818] usb 9-1: NFC: Unable to get FW version [ 525.548808][ T5818] pn533_usb: probe of 9-1:1.0 failed with error -5 [ 525.727471][ T5780] usb 9-1: USB disconnect, device number 2 [ 525.950561][ T8455] usb usb7: usbfs: process 8455 (syz.1.434) did not claim interface 0 before use [ 526.213626][ T8463] mmap: syz.1.436 (8463) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 526.260491][ T5818] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 526.276323][ T8447] CUSE: unknown device info "n|zQC*" [ 526.320205][ T8447] CUSE: unknown device info "G2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0KV,${\d+" [ 526.364189][ T8447] CUSE: unknown device info "" [ 526.398863][ T8447] CUSE: unknown device info "LPt|%IOKu GǪ|QU˜DvF,*p(o9{u[赨gIPYV" [ 526.454625][ T8447] CUSE: DEVNAME unspecified [ 526.492154][ T5818] usb 1-1: config 248 has an invalid interface number: 168 but max is 0 [ 526.506953][ T5818] usb 1-1: config 248 has no interface number 0 [ 526.524935][ T5818] usb 1-1: config 248 interface 168 has no altsetting 0 [ 526.559568][ T5818] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 6.7c [ 526.581200][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.599603][ T5818] usb 1-1: Product: syz [ 526.608099][ T5818] usb 1-1: Manufacturer: syz [ 526.614616][ T5818] usb 1-1: SerialNumber: syz [ 526.970523][ T5818] usb 1-1: USB disconnect, device number 2 [ 527.479910][ T8447] syz.7.430[8447]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 527.719326][ T28] audit: type=1326 audit(1788756641.392:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.7.430" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13ad19e159 code=0x0 [ 527.837652][ T8509] binder: BINDER_SET_CONTEXT_MGR already set [ 527.846836][ T8509] binder: 8508:8509 ioctl 4018620d 200000004a80 returned -16 [ 527.862269][ T8509] binder: 8508:8509 ioctl c0306201 200000000180 returned -11 [ 528.928104][ T8531] [U]  [ 529.401393][ T8548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.453'. [ 529.570336][ T5835] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 529.671528][ T8555] : renamed from vlan0 (while UP) [ 529.778649][ T5835] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.804766][ T5835] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 529.830190][ T5835] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 529.839933][ T5835] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 529.887875][ T5835] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 529.924694][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.194157][ T8570] xt_hashlimit: size too large, truncated to 1048576 [ 530.795035][ T8582] kvm: user requested TSC rate below hardware speed [ 531.036282][ T5835] [drm] Initialized gud 1.0.0 20200422 for 1-1:1.0 on minor 2 [ 531.292827][ T8597] capability: warning: `syz.1.466' uses deprecated v2 capabilities in a way that may be insecure [ 531.307541][ T5835] gud 1-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 531.347751][ T5835] usb 1-1: USB disconnect, device number 3 [ 532.170152][ T971] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 532.310100][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 532.370657][ T971] usb 1-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 532.390154][ T971] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 532.409545][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.463995][ T8612] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 532.508506][ T971] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 532.524292][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 532.551433][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.576988][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.602672][ T27] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 532.620201][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.638527][ T27] usb 2-1: Product: syz [ 532.643085][ T27] usb 2-1: Manufacturer: syz [ 532.647731][ T27] usb 2-1: SerialNumber: syz [ 532.876374][ T27] usb 2-1: 0:2 : does not exist [ 532.891020][ T5835] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 532.917073][ T27] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 532.978499][ T27] usb 2-1: USB disconnect, device number 5 [ 533.049892][ T6440] udevd[6440]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 533.093152][ T5835] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.106984][ T5835] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 533.135162][ T5835] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 533.149276][ T5835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.168967][ T5835] usb 8-1: config 0 descriptor?? [ 533.187088][ T5835] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 533.398016][ T5835] usb 8-1: USB disconnect, device number 2 [ 534.020501][ T5835] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 534.160136][ T971] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 534.212796][ T5835] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.229500][ T5835] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 534.250342][ T5835] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 534.259467][ T5835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.286730][ T5835] usb 8-1: config 0 descriptor?? [ 534.301704][ T5835] hub 8-1:0.0: bad descriptor, ignoring hub [ 534.321429][ T5835] hub: probe of 8-1:0.0 failed with error -5 [ 534.329669][ T5835] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 534.356019][ T971] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.374517][ T971] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 534.385592][ T971] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 534.406234][ T971] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 534.425510][ T971] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 534.435734][ T971] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.470382][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 534.662065][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 534.681683][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.698462][ T27] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 534.716329][ T27] usb 2-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 534.727133][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.749807][ T27] usb 2-1: config 0 descriptor?? [ 534.983253][ T27] usb 2-1: USB disconnect, device number 6 [ 535.026420][ T23] usb 1-1: USB disconnect, device number 4 [ 535.495391][ T971] gud 9-1:1.0: USB-1: Failed to add properties (ret=-71) [ 535.507822][ T971] gud 9-1:1.0: Failed to get connectors (error=-71) [ 535.516715][ T971] gud: probe of 9-1:1.0 failed with error -71 [ 535.602547][ T971] usb 9-1: USB disconnect, device number 3 [ 535.770364][ T5835] usb 8-1: USB disconnect, device number 3 [ 535.875130][ T8691] syz_tun: entered allmulticast mode [ 536.120992][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 536.180192][ T5835] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 536.340136][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 536.352429][ T23] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 536.362620][ T23] usb 2-1: config 0 has no interface number 0 [ 536.368801][ T23] usb 2-1: config 0 interface 12 has no altsetting 0 [ 536.382108][ T5835] usb 8-1: Using ep0 maxpacket: 8 [ 536.390452][ T23] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 536.409389][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.413366][ T5835] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 536.429362][ T23] usb 2-1: Product: syz [ 536.439542][ T23] usb 2-1: Manufacturer: syz [ 536.444686][ T5835] usb 8-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config [ 536.452678][ T23] usb 2-1: SerialNumber: syz [ 536.470254][ T789] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 536.477912][ T5835] usb 8-1: config 0 has no interface number 0 [ 536.490382][ T23] usb 2-1: config 0 descriptor?? [ 536.492985][ T5835] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 536.519626][ T5835] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.533926][ T5835] usb 8-1: Product: syz [ 536.538168][ T5835] usb 8-1: Manufacturer: syz [ 536.550811][ T5835] usb 8-1: SerialNumber: syz [ 536.571320][ T5835] usb 8-1: config 0 descriptor?? [ 536.693923][ T789] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.716620][ T789] usb 9-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 536.729130][ T789] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.742214][ T789] usb 9-1: Product: syz [ 536.746534][ T789] usb 9-1: Manufacturer: syz [ 536.753010][ T789] usb 9-1: SerialNumber: syz [ 536.783213][ T789] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 536.893148][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 537.086048][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 537.095450][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.121481][ T27] usb 1-1: config 0 descriptor?? [ 537.149183][ T27] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 537.890469][ T789] gspca_mr97310a: reg write [19] error -110 [ 537.905184][ T789] mr97310a: probe of 9-1:1.0 failed with error -110 [ 538.133187][ T971] usb 9-1: USB disconnect, device number 4 [ 538.400774][ T27] gspca_stv06xx: I2C: Read error writing address: -71 [ 538.428452][ T27] usb 1-1: USB disconnect, device number 5 [ 538.804398][ T971] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 538.916769][ T5835] usb 8-1: Found UVC 0.04 device syz (046d:08c3) [ 538.939092][ T5835] usb 8-1: No valid video chain found. [ 538.965797][ T5835] usb 8-1: USB disconnect, device number 4 [ 539.080426][ T971] usb 9-1: device descriptor read/64, error -71 [ 539.341924][ T23] f81534 2-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 539.350884][ T23] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 539.358257][ T23] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 539.366605][ T23] f81534: probe of 2-1:0.12 failed with error -71 [ 539.432380][ T23] usb 2-1: USB disconnect, device number 7 [ 539.532192][ T8755] loop5: detected capacity change from 0 to 7 [ 539.599256][ T971] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 539.652105][ T8755] Dev loop5: unable to read RDB block 7 [ 539.663086][ T8759] hsr0: entered promiscuous mode [ 539.668241][ T8755] loop5: unable to read partition table [ 539.709154][ T8755] loop5: partition table beyond EOD, truncated [ 539.721632][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.7.492'. [ 539.821688][ T8755] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 539.902742][ T971] usb 9-1: device descriptor read/64, error -71 [ 539.916577][ T8759] hsr_slave_0: left promiscuous mode [ 539.944613][ T8757] Dev loop5: unable to read RDB block 7 [ 539.963565][ T8757] loop5: unable to read partition table [ 540.031625][ T8757] loop5: partition table beyond EOD, truncated [ 540.059493][ T8757] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 540.093434][ T971] usb usb9-port1: attempt power cycle [ 540.102345][ T8759] hsr_slave_1: left promiscuous mode [ 540.630172][ T971] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 540.683148][ T971] usb 9-1: device descriptor read/8, error -71 [ 540.710246][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 540.906849][ T23] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 540.936263][ T23] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 540.967938][ T971] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 540.980161][ T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 540.998409][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.020914][ T971] usb 9-1: device descriptor read/8, error -71 [ 541.096398][ T8765] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 541.140818][ T971] usb usb9-port1: unable to enumerate USB device [ 541.166556][ T23] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 541.266275][ T27] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 541.430593][ T8205] usb 2-1: USB disconnect, device number 8 [ 541.495802][ T27] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 541.543511][ T27] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 541.606507][ T27] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 541.641800][ T8788] netlink: 52 bytes leftover after parsing attributes in process `syz.8.499'. [ 541.656295][ T27] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.688524][ T27] usb 8-1: Product: syz [ 541.698363][ T27] usb 8-1: Manufacturer: syz [ 541.720420][ T27] usb 8-1: SerialNumber: syz [ 541.940591][ T7997] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 541.993537][ T27] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 542.170172][ T7997] usb 1-1: Using ep0 maxpacket: 8 [ 542.178687][ T7997] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 542.194389][ T7997] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 542.227837][ T27] usb 8-1: USB disconnect, device number 5 [ 542.242307][ T7997] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 542.274947][ T27] usblp0: removed [ 542.282501][ T7997] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 542.324353][ T7997] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 542.373040][ T7997] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.425485][ T7997] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 542.470095][ T7997] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.730254][ T7997] usb 1-1: GET_CAPABILITIES returned 0 [ 542.750182][ T7997] usbtmc 1-1:16.0: can't read capabilities [ 542.830424][ T27] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 542.850628][ T8807] syzkaller0: entered promiscuous mode [ 542.856186][ T8807] syzkaller0: entered allmulticast mode [ 543.021218][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 543.063109][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 543.089743][ T27] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 543.114119][ T27] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 543.158277][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 543.197081][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.214846][ T27] usb 2-1: Product: syz [ 543.229639][ T27] usb 2-1: Manufacturer: syz [ 543.246414][ T27] usb 2-1: SerialNumber: syz [ 543.271833][ T8802] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 543.400658][ T971] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 543.446316][ T5835] usb 1-1: USB disconnect, device number 6 [ 543.485607][ T8802] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 543.615075][ T971] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.637225][ T971] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 543.651443][ T8825] loop2: detected capacity change from 0 to 7 [ 543.659907][ T971] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.702032][ T971] usb 8-1: config 0 descriptor?? [ 543.726423][ T8825] Dev loop2: unable to read RDB block 7 [ 543.742587][ T8825] loop2: unable to read partition table [ 543.748650][ T8825] loop2: partition table beyond EOD, truncated [ 543.770846][ T5857] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 543.779036][ T8825] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 543.926930][ T971] usbhid 8-1:0.0: can't add hid device: -71 [ 543.963369][ T971] usbhid: probe of 8-1:0.0 failed with error -71 [ 544.002316][ T971] usb 8-1: USB disconnect, device number 6 [ 544.038594][ T5857] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.080109][ T5857] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.110125][ T5857] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.145923][ T5857] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 544.190119][ T5857] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 544.199295][ T5857] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.530680][ T971] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 544.676605][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 544.699896][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 544.717759][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 544.737038][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 544.751329][ T971] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.770101][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 544.780360][ T971] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 544.801409][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 544.808562][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 544.820498][ T971] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.839177][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 544.867181][ T971] usb 8-1: config 0 descriptor?? [ 544.890412][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 544.919394][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 544.937355][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 544.957923][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 544.975961][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 544.990131][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 545.010123][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 545.050868][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 545.089195][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 545.142863][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 545.150607][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 545.157856][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 545.166295][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 545.173724][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 545.186504][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 545.195125][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 545.211738][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 545.222319][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 545.229686][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 545.283125][ T5857] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 545.309533][ T8815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.333236][ T5857] lg-g15 0003:046D:C222.0001: unbalanced collection at end of report description [ 545.344620][ T8815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.432112][ T5857] lg-g15: probe of 0003:046D:C222.0001 failed with error -22 [ 545.475828][ T8802] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 545.536851][ T5857] usb 9-1: USB disconnect, device number 9 [ 545.689958][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.8.512'. [ 545.702451][ T27] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 545.723856][ T8849] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.753464][ T27] cdc_ncm 2-1:1.0: dwNtbInMaxSize=15 is too small. Using 2048 [ 545.789142][ T27] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 545.795932][ T971] aiptek 8-1:0.0: Aiptek using 400 ms programming speed [ 545.827709][ T971] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input6 [ 545.902440][ C1] ================================================================================ [ 545.911849][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 545.920487][ C1] index 65036 is out of range for type 'const int[34]' [ 545.926655][ T8802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.927431][ C1] CPU: 1 PID: 5140 Comm: udevd Not tainted syzkaller #0 [ 545.942741][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 545.952878][ C1] Call Trace: [ 545.956259][ C1] [ 545.959149][ C1] dump_stack_lvl+0x18c/0x250 [ 545.963909][ C1] ? show_regs_print_info+0x20/0x20 [ 545.969161][ C1] ? load_image+0x420/0x420 [ 545.973714][ C1] ? kcov_remote_start+0x29f/0x810 [ 545.978869][ C1] ubsan_epilogue+0xa/0x30 [ 545.983313][ C1] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 545.989068][ C1] aiptek_irq+0x1eb8/0x2920 [ 545.993611][ C1] ? usb_unanchor_urb+0xa5/0xc0 [ 545.998492][ C1] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 546.004242][ C1] __usb_hcd_giveback_urb+0x35d/0x520 [ 546.009648][ C1] dummy_timer+0xa58/0x34e0 [ 546.014221][ C1] ? dummy_free_streams+0x520/0x520 [ 546.019446][ C1] ? dummy_free_streams+0x520/0x520 [ 546.024670][ C1] __hrtimer_run_queues+0x525/0xc10 [ 546.030007][ C1] ? hrtimer_interrupt+0x980/0x980 [ 546.035184][ C1] ? read_tsc+0x9/0x20 [ 546.039312][ C1] hrtimer_run_softirq+0x177/0x290 [ 546.044482][ C1] handle_softirqs+0x27d/0x820 [ 546.049279][ C1] ? read_tsc+0x9/0x20 [ 546.053383][ C1] ? ktime_get+0x24b/0x280 [ 546.057841][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 546.062644][ C1] ? do_softirq+0x1a0/0x1a0 [ 546.067182][ C1] __irq_exit_rcu+0xd3/0x190 [ 546.071808][ C1] ? irq_exit_rcu+0x20/0x20 [ 546.076355][ C1] irq_exit_rcu+0x9/0x20 [ 546.080618][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 546.086286][ C1] [ 546.089244][ C1] [ 546.092205][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 546.098280][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 546.103618][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 546.123250][ C1] RSP: 0018:ffffc90003147ba0 EFLAGS: 00000206 [ 546.129351][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 590de4fa53b7dd00 [ 546.137374][ C1] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d35e0 [ 546.145396][ C1] RBP: ffffc90003147cb8 R08: dffffc0000000000 R09: 1ffffffff223dea2 [ 546.153428][ C1] R10: dffffc0000000000 R11: fffffbfff223dea3 R12: 1ffff92000628f80 [ 546.161423][ C1] R13: ffffffff8d2171c0 R14: 0000000000000246 R15: dffffc0000000000 [ 546.169440][ C1] ? lock_chain_count+0x20/0x20 [ 546.174321][ C1] ? read_lock_is_recursive+0x20/0x20 [ 546.179726][ C1] ? kasan_quarantine_put+0xd8/0x220 [ 546.185061][ C1] fs_reclaim_acquire+0x71/0x100 [ 546.190048][ C1] ? slab_pre_alloc_hook+0x2a/0x300 [ 546.195284][ C1] slab_pre_alloc_hook+0x2a/0x300 [ 546.200363][ C1] kmem_cache_alloc+0x5a/0x2c0 [ 546.205182][ C1] ? getname_flags+0xbb/0x500 [ 546.209902][ C1] getname_flags+0xbb/0x500 [ 546.214443][ C1] do_sys_openat2+0xda/0x1d0 [ 546.219078][ C1] ? do_sys_open+0xe0/0xe0 [ 546.223528][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 546.229626][ C1] ? lock_chain_count+0x20/0x20 [ 546.234514][ C1] __x64_sys_openat+0x139/0x160 [ 546.239400][ C1] do_syscall_64+0x55/0xb0 [ 546.243842][ C1] ? clear_bhb_loop+0x40/0x90 [ 546.248540][ C1] ? clear_bhb_loop+0x40/0x90 [ 546.253254][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.259171][ C1] RIP: 0033:0x7f269e115c3a [ 546.263627][ C1] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 546.283442][ C1] RSP: 002b:00007ffdb9755dc8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 546.291896][ C1] RAX: ffffffffffffffda RBX: 00005623d1a064c0 RCX: 00007f269e115c3a [ 546.299888][ C1] RDX: 0000000000090800 RSI: 00005623d19e23f0 RDI: 00000000ffffff9c [ 546.307889][ C1] RBP: 00005623d19e23f0 R08: 0000000000000000 R09: 0000000000000001 [ 546.316006][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00005623d19ee7b0 [ 546.324019][ C1] R13: 00000000000000fe R14: 00005623b1bf4be0 R15: 00007ffdb9756090 [ 546.332042][ C1] [ 546.335090][ C1] ================================================================================ [ 546.344497][ C1] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 546.351708][ C1] CPU: 1 PID: 5140 Comm: udevd Not tainted syzkaller #0 [ 546.358667][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 546.368747][ C1] Call Trace: [ 546.372051][ C1] [ 546.374923][ C1] dump_stack_lvl+0x18c/0x250 [ 546.379634][ C1] ? show_regs_print_info+0x20/0x20 [ 546.384859][ C1] ? load_image+0x420/0x420 [ 546.389394][ C1] panic+0x2ca/0x720 [ 546.393323][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 546.397871][ C1] check_panic_on_warn+0x84/0xa0 [ 546.402844][ C1] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 546.408597][ C1] aiptek_irq+0x1eb8/0x2920 [ 546.413135][ C1] ? usb_unanchor_urb+0xa5/0xc0 [ 546.418014][ C1] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 546.423760][ C1] __usb_hcd_giveback_urb+0x35d/0x520 [ 546.429173][ C1] dummy_timer+0xa58/0x34e0 [ 546.433756][ C1] ? dummy_free_streams+0x520/0x520 [ 546.438989][ C1] ? dummy_free_streams+0x520/0x520 [ 546.444241][ C1] __hrtimer_run_queues+0x525/0xc10 [ 546.449512][ C1] ? hrtimer_interrupt+0x980/0x980 [ 546.454658][ C1] ? read_tsc+0x9/0x20 [ 546.458785][ C1] hrtimer_run_softirq+0x177/0x290 [ 546.463926][ C1] handle_softirqs+0x27d/0x820 [ 546.468715][ C1] ? read_tsc+0x9/0x20 [ 546.472808][ C1] ? ktime_get+0x24b/0x280 [ 546.477249][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 546.482042][ C1] ? do_softirq+0x1a0/0x1a0 [ 546.486576][ C1] __irq_exit_rcu+0xd3/0x190 [ 546.491193][ C1] ? irq_exit_rcu+0x20/0x20 [ 546.495763][ C1] irq_exit_rcu+0x9/0x20 [ 546.500030][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 546.505705][ C1] [ 546.508655][ C1] [ 546.511609][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 546.517619][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 546.522927][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 546.542655][ C1] RSP: 0018:ffffc90003147ba0 EFLAGS: 00000206 [ 546.548775][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 590de4fa53b7dd00 [ 546.556783][ C1] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d35e0 [ 546.564781][ C1] RBP: ffffc90003147cb8 R08: dffffc0000000000 R09: 1ffffffff223dea2 [ 546.572781][ C1] R10: dffffc0000000000 R11: fffffbfff223dea3 R12: 1ffff92000628f80 [ 546.580777][ C1] R13: ffffffff8d2171c0 R14: 0000000000000246 R15: dffffc0000000000 [ 546.588793][ C1] ? lock_chain_count+0x20/0x20 [ 546.593691][ C1] ? read_lock_is_recursive+0x20/0x20 [ 546.599087][ C1] ? kasan_quarantine_put+0xd8/0x220 [ 546.604435][ C1] fs_reclaim_acquire+0x71/0x100 [ 546.609399][ C1] ? slab_pre_alloc_hook+0x2a/0x300 [ 546.614626][ C1] slab_pre_alloc_hook+0x2a/0x300 [ 546.619687][ C1] kmem_cache_alloc+0x5a/0x2c0 [ 546.624531][ C1] ? getname_flags+0xbb/0x500 [ 546.629258][ C1] getname_flags+0xbb/0x500 [ 546.633797][ C1] do_sys_openat2+0xda/0x1d0 [ 546.638431][ C1] ? do_sys_open+0xe0/0xe0 [ 546.642895][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 546.648929][ C1] ? lock_chain_count+0x20/0x20 [ 546.653816][ C1] __x64_sys_openat+0x139/0x160 [ 546.658699][ C1] do_syscall_64+0x55/0xb0 [ 546.663145][ C1] ? clear_bhb_loop+0x40/0x90 [ 546.667852][ C1] ? clear_bhb_loop+0x40/0x90 [ 546.672556][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.678481][ C1] RIP: 0033:0x7f269e115c3a [ 546.682940][ C1] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 546.702566][ C1] RSP: 002b:00007ffdb9755dc8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 546.711093][ C1] RAX: ffffffffffffffda RBX: 00005623d1a064c0 RCX: 00007f269e115c3a [ 546.719084][ C1] RDX: 0000000000090800 RSI: 00005623d19e23f0 RDI: 00000000ffffff9c [ 546.727080][ C1] RBP: 00005623d19e23f0 R08: 0000000000000000 R09: 0000000000000001 [ 546.735073][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00005623d19ee7b0 [ 546.743067][ C1] R13: 00000000000000fe R14: 00005623b1bf4be0 R15: 00007ffdb9756090 [ 546.751077][ C1] [ 546.754704][ C1] Kernel Offset: disabled [ 546.759040][ C1] Rebooting in 86400 seconds..