last executing test programs: 2m50.839693622s ago: executing program 3 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r5, 0x5441, 0x9) syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x98, &(0x7f00000004c0)=ANY=[], 0xff, 0xa4, &(0x7f00000000c0)="$eJzs0b+pAkEQB+C5e/C4A9EC7OFq0CKswBKMBEEsyFYswdTIwNTkZHFFuGDBQFH4Ptg/P4ZdBuZw3U9jHNFvI/q/eOiT1XoXJf/FKr+gzmeThj655/M8YhYRVaqn7bJZHvMaPF80xd9Hb+sbAAB4XTXIdXTdM53afGk/2RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAN7kFAAD//z7jFwY=") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x149442, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_SET_TIME(r6, 0x4024700a, 0x0) 2m49.021150163s ago: executing program 3 (id=18): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x10000, 0x1bd, 0x85, 0xfffffbc5, 0x0, [{0x6c, 0x4, 0x9, '\x00', 0x12}, {0x7, 0x8, 0x6f, '\x00', 0x3}, {0x0, 0x41, 0x5, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x9}, {0x8, 0x50, 0x4, '\x00', 0x49}, {0xf3, 0x0, 0x2, '\x00', 0x7}, {0x6, 0xf4, 0x1, '\x00', 0x8}, {0xa, 0x47, 0xb, '\x00', 0x45}, {0x7, 0xd, 0xfe, '\x00', 0xff}, {0x6, 0x3, 0x4, '\x00', 0x6}, {0x38, 0x11, 0x2}, {0x4, 0x4, 0x2}, {0x1, 0x86, 0x10, '\x00', 0x5}, {0x5, 0x4f, 0x2, '\x00', 0x2}, {0x4, 0x4, 0x1, '\x00', 0x9}, {0x0, 0x8, 0xf2, '\x00', 0x7f}, {0x8, 0x7, 0xd1, '\x00', 0x99}, {0xd, 0x3, 0x2, '\x00', 0xff}, {0xa, 0x9e, 0xc0, '\x00', 0x2}, {0x2, 0x3f, 0xb}, {0x7, 0x21, 0x23, '\x00', 0x1}, {0x5, 0x0, 0xff, '\x00', 0x77}, {0x93, 0x1, 0x4, '\x00', 0xe6}, {0x3, 0x4, 0xa, '\x00', 0x54}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x629a}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000180)="19", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x9}, 0x8) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x83, 0xd, 0xd3, 0x0, 0x3, 0x4, 0xbb, 0xf4, 0xc8, 0x6d, 0x7, 0x61, 0xb, 0x98, 0xd}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m47.531452961s ago: executing program 3 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000004140)={0x9, 0xffff, 0xfff8, 0x8, 0x11, "414d2276ba0cc02b"}) ioctl$TIOCGPTPEER(r5, 0x5441, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x149442, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_SET_TIME(r6, 0x4024700a, 0x0) 2m46.0388597s ago: executing program 3 (id=23): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2, 0xcccccccc}) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESHEX=r4, @ANYRESHEX, @ANYRESDEC=r0, @ANYRES64=r3], 0x0, 0x2d0, &(0x7f0000000980)="$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") setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x15, &(0x7f0000000600)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x49, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@gettclass={0x24, 0x2a, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xe, 0xf}, {0x5, 0x4}, {0x8, 0xc}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48804}, 0x20044084) r10 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x700, 0x1, 0x900}}) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r11, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0x41, "0062ba7d82000000000000000000f7ffffff00"}) r12 = syz_open_pts(r11, 0x0) r13 = dup3(r12, r11, 0x0) read$FUSE(r13, &(0x7f0000000e00)={0x2020}, 0x2020) ioctl$TCSETSW2(r11, 0x402c542c, &(0x7f0000000200)={0x0, 0xfffffefc, 0x7c, 0xfffffffa, 0xc6, "84b53f5dc1d996eee7d479db86fe609ea2029b", 0x7f, 0x2}) r14 = syz_pidfd_open(r7, 0x0) syz_io_uring_setup(0x70d7, &(0x7f0000000500)={0x0, 0x9b08, 0x4, 0x3, 0x152}, &(0x7f0000000940), &(0x7f00000002c0)) setns(r14, 0x24020000) r15 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r15, &(0x7f0000000100)='.\x00', 0x8100, &(0x7f0000001dc0)={0x8c, 0x85, 0x20000}, 0x20) 2m44.30472876s ago: executing program 3 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r4, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x2, 0x5, 0xffffffff, 0x0, 0x0, 0x1, 0x74}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x4}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', 0x0, 0x8c) 2m41.563842686s ago: executing program 3 (id=31): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") mkdir(&(0x7f0000000000)='./control\x00', 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rmdir(&(0x7f0000000100)='./control\x00') r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926", 0x20}], 0x1}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r1}]}, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200810, &(0x7f00000003c0)={[{@noenospc_debug}, {@clear_cache}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@nodatasum}, {@user_subvol_rm}, {@ssd}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2441, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r5, 0x4004510d, &(0x7f0000000400)=0xb8e7) write$binfmt_script(r4, &(0x7f0000000480)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) pipe2(&(0x7f0000000000), 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 2m40.513358732s ago: executing program 32 (id=31): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") mkdir(&(0x7f0000000000)='./control\x00', 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rmdir(&(0x7f0000000100)='./control\x00') r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926", 0x20}], 0x1}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r1}]}, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200810, &(0x7f00000003c0)={[{@noenospc_debug}, {@clear_cache}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@nodatasum}, {@user_subvol_rm}, {@ssd}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2441, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r5, 0x4004510d, &(0x7f0000000400)=0xb8e7) write$binfmt_script(r4, &(0x7f0000000480)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) pipe2(&(0x7f0000000000), 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 1m53.817048393s ago: executing program 5 (id=185): sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x18}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x41, 0xc, 0x0, 0x0, 0x0, 0x10, 0x4, 0x0, 0x80, 0x9, 0x0, 0x0, 0x102, 0xfffffff8, 0x0, 0x8, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0xdddd0000, 0x80, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0x3}, {0x0, 0x8, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0x0, '\x00', 0xf}, {0xfd, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x7, 0x50, '\x00', 0xfd}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x3, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x3}, {0xfe, 0x3, 0x26}, {0x9, 0x3, 0x8, '\x00', 0x6}, {0xf, 0x3, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x4, 0x6, 0xb, '\x00', 0x1}, {0x4, 0x1, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xca}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x4, 0x12, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x7}, {0x7, 0x4, 0x4}]}}) 1m51.514008147s ago: executing program 5 (id=189): syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x24800) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000900000030000380140002007369"], 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x4048080) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m49.19528759s ago: executing program 5 (id=193): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, 0x42, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1m48.095523697s ago: executing program 5 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x500, 0x40) r1 = open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 1m47.838352698s ago: executing program 5 (id=198): prlimit64(0x0, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0xffffffc0}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) 1m47.43386568s ago: executing program 5 (id=203): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040), 0x8) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x4004041) listen(r1, 0x1) accept4(r1, 0x0, 0x0, 0x80800) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m47.045578212s ago: executing program 33 (id=203): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040), 0x8) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x4004041) listen(r1, 0x1) accept4(r1, 0x0, 0x0, 0x80800) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m31.084938725s ago: executing program 6 (id=204): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) socket(0x15, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0201000004000080080000000100000080000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/25], 0x50) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x3da}], 0x1, 0x8) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000001c0)=0x2001) 1m30.023316991s ago: executing program 6 (id=262): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc574450d1af1b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_STATE={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}}, 0x40) 1m26.078186964s ago: executing program 6 (id=272): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1800040, &(0x7f0000000c80)={[{@noswap}]}) r1 = getpgid(0x0) getpgrp(r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r2) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000100)={0xffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r4, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008884) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f00000005c0)="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", 0x7a5}], 0x2) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000015c0), 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) r7 = dup3(r6, r0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='net/tcp\x00') bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980), 0x0, 0x20000810) pread64(r8, &(0x7f0000000080)=""/220, 0xdc, 0x4007) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 1m23.781188648s ago: executing program 6 (id=277): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) openat$zero(0xffffff9c, &(0x7f00000000c0), 0x102, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) rt_sigaction(0x1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') lseek(r3, 0x6, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000019140)={0x17, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f0000019080)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000019240)={0x2, @sdr={0x35303553, 0x1000}}) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) socket$kcm(0x2, 0x1, 0x84) 1m8.682457625s ago: executing program 34 (id=277): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) openat$zero(0xffffff9c, &(0x7f00000000c0), 0x102, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) rt_sigaction(0x1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') lseek(r3, 0x6, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000019140)={0x17, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f0000019080)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000019240)={0x2, @sdr={0x35303553, 0x1000}}) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) socket$kcm(0x2, 0x1, 0x84) 57.877585198s ago: executing program 2 (id=336): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@raw={0xfe, 0x4, "6ead5709701e"}) 57.653839829s ago: executing program 2 (id=338): timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000001}) 56.118381048s ago: executing program 2 (id=344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002280)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 54.243279809s ago: executing program 2 (id=355): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x48) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x80047437, &(0x7f0000000300)=0x8) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0xffffffffffffa82d, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r5, 0xc038563b, &(0x7f00000000c0)={0x1, 0x0, {0x80, 0x9, 0x9, 0x1}}) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) sync() 53.148773326s ago: executing program 2 (id=348): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000500006804c00040067636d2861657329"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 52.741942438s ago: executing program 2 (id=350): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 37.350400228s ago: executing program 35 (id=350): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 20.581691364s ago: executing program 0 (id=452): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x2a) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000100)={0xda, 0xf}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r5 = msgget$private(0x0, 0x9) msgctl$IPC_SET(r5, 0x1, &(0x7f0000f00f88)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x5, 0xffffffffe95bf9a6, 0xffffffffff, 0x3, 0xfffffffffffffffc, 0x2, 0x9, 0x100}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 19.689580059s ago: executing program 0 (id=453): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x206) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x792b6c6c) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x26, 0x80}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 14.785753784s ago: executing program 0 (id=466): socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 13.261145422s ago: executing program 4 (id=471): r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x105) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x17, 0x2, 0x7, "d30580c9042b7275077bafe6410c2087850000000000000000000080001500", 0x7d776419}) close(r3) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x8818) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x800, 0xb) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0xfffffffe, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 10.602368065s ago: executing program 4 (id=475): r0 = semget$private(0x0, 0x4000000009, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_open_dev$dri(0x0, 0x1f, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x1, 0x0, 0x2000}, 'syz1\x00', 0x35}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) semop(r0, &(0x7f0000000240)=[{0x2, 0x8000, 0x1000}], 0x1) semop(r0, &(0x7f0000000100)=[{0x2, 0xd5db}], 0x1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) syz_pidfd_open(r1, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x14, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xd, 0x0, 0x0, 0xe3e, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0xffffffff, 0x1, 0xa0d, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0xe, 0x0, 0x80000, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7ff, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0xfffffffd, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100081, 0x0, 0x0, 0x0, 0x4c6, 0x2, 0x0, 0x476f], [0x0, 0x7c, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x1, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe, 0x2, 0x0, 0x0, 0x9, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x1, 0x40000, 0x0, 0x0, 0xff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100f, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800], [0x2, 0x0, 0x6, 0x0, 0x0, 0x100, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x5, 0xfffffff8, 0x4, 0x800, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x80, 0x0, 0x7fe, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x4000, 0x8561, 0x2, 0x0, 0x0, 0x8000000, 0x4, 0x8000000, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) shmctl$SHM_LOCK(0x0, 0xb) ioctl$UI_DEV_CREATE(r3, 0x5501) creat(&(0x7f00000001c0)='./file0\x00', 0x0) utimes(&(0x7f0000000080)='./file0\x00', 0x0) semop(r0, &(0x7f0000000140)=[{0x0, 0xfffb}, {0x2, 0x7f, 0x1800}], 0x2) 8.877220074s ago: executing program 7 (id=480): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x8ce02, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x8, 0x9, 0x3, 0x8, 0x3, 0xd612, 0x8, 0x10001, 0x8000004, 0xfdfffffb, 0x10001, 0xb4b, 0x1, 0x6, 0x4, 0x10001, 0x2d, 0x5, 0x495, 0x7651, 0xfffffffc, 0x8, 0x1ff, 0x1, 0x4, 0x8, 0x3, 0x401, 0x0, 0x7fff, 0xffffffff, 0xbbb4]}) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000060000000000000000000000850000009b0000001801000020786c2500000000002020207b1af8ff00000000bfa10000000007010000f8ffffffb702000000040000b703000000000000850000009b00000095000000000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 7.036154284s ago: executing program 1 (id=486): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x2a) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000100)={0xda, 0xf}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r5 = msgget$private(0x0, 0x9) msgctl$IPC_SET(r5, 0x1, &(0x7f0000f00f88)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x5, 0xffffffffe95bf9a6, 0xffffffffff, 0x3, 0xfffffffffffffffc, 0x2, 0x9, 0x100}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 6.998173404s ago: executing program 0 (id=487): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000000440)) inotify_add_watch(0xffffffffffffffff, 0x0, 0xc00) 6.967858744s ago: executing program 4 (id=488): syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a240100f9ff0201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701040000fd80000000e80924030000000001"], 0x0) 6.902382755s ago: executing program 0 (id=489): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = gettid() pause() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xf1, 0x400) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000000800074000000000240002800c00028005000100000000001400018008000100ac1414bb080002007f000001240001801400018008000100e000000208000200ac1414000c00028005000100000000005c00068008000100ff"], 0xc0}}, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x40}) unshare(0x28000080) syz_clone(0x142000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="38010000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000e8001100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000600000000000000aaff0000000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000"], 0x138}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x0, 0x0}, 0x10) tkill(r1, 0x7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5.631494941s ago: executing program 1 (id=491): bpf$MAP_CREATE(0x0, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x7, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r0, &(0x7f0000000380), 0x0}, 0x20) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000045e000/0x2000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x3}) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) migrate_pages(0x0, 0x5, 0x0, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000dfa000/0x4000)=nil, 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 5.473984832s ago: executing program 1 (id=493): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, 0x0) 4.930185565s ago: executing program 7 (id=495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca14"], 0x1000f) 4.762123586s ago: executing program 1 (id=496): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x2a) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000100)={0xda, 0xf}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r5 = msgget$private(0x0, 0x9) msgctl$IPC_SET(r5, 0x1, &(0x7f0000f00f88)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x5, 0xffffffffe95bf9a6, 0xffffffffff, 0x3, 0xfffffffffffffffc, 0x2, 0x9, 0x100}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 4.144834779s ago: executing program 8 (id=498): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x104) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x81, 0x7, 0x63, 0x0, 0x7, 0xa, 0x0, 0x3, 0x7, 0x92, 0x3, 0x7, 0x0, 0x7f, 0x5ab, 0x2, 0xc9, 0x9, 0x1, '\x00', 0x8, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x6, 0xa6, 0x7, 0x0, 0x24, 0x6, 0x40, 0xf, 0x16, 0x2, 0x9, 0x13, 0x0, 0x401, 0xa8000000, 0xd, 0xa, 0x9, 0x8, '\x00', 0xfc, 0x7}) 3.951457859s ago: executing program 1 (id=499): r0 = semget$private(0x0, 0x4000000009, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_open_dev$dri(0x0, 0x1f, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x1, 0x0, 0x2000}, 'syz1\x00', 0x35}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) semop(r0, &(0x7f0000000240)=[{0x2, 0x8000, 0x1000}], 0x1) semop(r0, &(0x7f0000000100)=[{0x2, 0xd5db}], 0x1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) syz_pidfd_open(r1, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x14, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xd, 0x0, 0x0, 0xe3e, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0xffffffff, 0x1, 0xa0d, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0xe, 0x0, 0x80000, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7ff, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0xfffffffd, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100081, 0x0, 0x0, 0x0, 0x4c6, 0x2, 0x0, 0x476f], [0x0, 0x7c, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x1, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe, 0x2, 0x0, 0x0, 0x9, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x1, 0x40000, 0x0, 0x0, 0xff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100f, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800], [0x2, 0x0, 0x6, 0x0, 0x0, 0x100, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x5, 0xfffffff8, 0x4, 0x800, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x80, 0x0, 0x7fe, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x4000, 0x8561, 0x2, 0x0, 0x0, 0x8000000, 0x4, 0x8000000, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) shmctl$SHM_LOCK(0x0, 0xb) ioctl$UI_DEV_CREATE(r3, 0x5501) creat(&(0x7f00000001c0)='./file0\x00', 0x0) utimes(&(0x7f0000000080)='./file0\x00', 0x0) 3.90628342s ago: executing program 7 (id=500): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_setup(0xa4, &(0x7f0000000100)={0x0, 0x200089bb, 0x400, 0x5, 0x1c3}, &(0x7f0000000240), &(0x7f0000000440)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r5, 0x2, r3, 0x0, 0x80000}) 3.85798465s ago: executing program 8 (id=501): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x2a) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000100)={0xda, 0xf}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r5 = msgget$private(0x0, 0x9) msgctl$IPC_SET(r5, 0x1, &(0x7f0000f00f88)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x5, 0xffffffffe95bf9a6, 0xffffffffff, 0x3, 0xfffffffffffffffc, 0x2, 0x9, 0x100}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 3.618533321s ago: executing program 4 (id=502): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1) ioctl$TCFLSH(r0, 0x540b, 0x1) 2.742346326s ago: executing program 7 (id=503): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000004c0)={&(0x7f00005b8000/0x4000)=nil, 0x4000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x6020400) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) read(r8, &(0x7f0000000040)=""/252, 0xfc) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$isdn_base(0x22, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000400)={r9, @in6={{0xa, 0x4e21, 0xe5, @local, 0x6}}, 0x1, 0xffff}, &(0x7f0000000300)=0x90) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000003c0)={0x16, 0x1, 0x2, "00000040800000f7c28dca4c210000000000000000ff0700", 0x50424752}) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080)=0xffffffffffffffff, 0x4) 2.658503336s ago: executing program 8 (id=504): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f00000001c0)) 2.462181098s ago: executing program 4 (id=505): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) unlink(0x0) 2.425616818s ago: executing program 8 (id=506): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getdents64(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) lseek(r0, 0x3, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0xfffffff1) 1.429558693s ago: executing program 8 (id=507): socket(0xa, 0x3, 0xff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x36, 0x2d, 0x4e, 0x3a, 0x30, 0x2f]}}}, 0x4e}]}) writev(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x181820, 0x0) ioctl$IMDELTIMER(r6, 0x80044941, &(0x7f00000001c0)) 954.239865ms ago: executing program 7 (id=508): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xa4, &(0x7f0000000100)={0x0, 0x200089bb, 0x400, 0x5, 0x1c3}, &(0x7f0000000240)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x0, @fd=r0, 0xc000000, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}) io_uring_enter(r1, 0x32dc, 0x4, 0x40, 0x0, 0x0) 392.786178ms ago: executing program 0 (id=509): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x2a) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000100)={0xda, 0xf}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r5 = msgget$private(0x0, 0x9) msgctl$IPC_SET(r5, 0x1, &(0x7f0000f00f88)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x5, 0xffffffffe95bf9a6, 0xffffffffff, 0x3, 0xfffffffffffffffc, 0x2, 0x9, 0x100}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x15, 0x5, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 337.772968ms ago: executing program 1 (id=510): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xd, 0x4, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) syz_fuse_handle_req(r4, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x12, 0xfffffffffffffff5, 0x5a381511, {'-\x00'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 250.286719ms ago: executing program 7 (id=511): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendto$inet6(0xffffffffffffffff, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0a", 0x61, 0xbcff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) read$FUSE(r4, &(0x7f0000000d00)={0x2020}, 0x2020) 217.831799ms ago: executing program 8 (id=512): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ptrace(0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, 0x0, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000280)={'bond_slave_0\x00', &(0x7f0000000380)=@ethtool_rxnfc={0x4b, 0x12, 0x87, {0x6, @usr_ip4_spec={@broadcast, @empty, 0x800, 0x1, 0x1, 0x7}, {0x0, @multicast, 0x57f4, 0x4, [0x5, 0x9ad2]}, @tcp_ip6_spec={@rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x4e23, 0x6a}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x2, 0x9, [0x10001, 0x1000000]}, 0x7, 0x3}}}) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23}, 0x94) 0s ago: executing program 4 (id=513): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_setup(0xa4, &(0x7f0000000100)={0x0, 0x200089bb, 0x400, 0x5, 0x1c3}, &(0x7f0000000240), &(0x7f0000000440)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r4, 0x2, r3, 0x0, 0x80000}) kernel console output (not intermixed with test programs): ): macsec0: link becomes ready [ 67.083949][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.091749][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.103865][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.111354][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.119314][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.128375][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.137366][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.146535][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.157571][ T4191] device veth0_macvtap entered promiscuous mode [ 67.169582][ T4191] device veth1_macvtap entered promiscuous mode [ 67.180581][ T4182] device veth0_vlan entered promiscuous mode [ 67.191486][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.212230][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.221333][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.229804][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.239551][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.266278][ T4182] device veth1_vlan entered promiscuous mode [ 67.276066][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.284892][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.293605][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.306070][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.318885][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.329882][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.344649][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.356477][ T4187] device veth0_vlan entered promiscuous mode [ 67.365612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.374765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.384346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.393290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.410687][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.428578][ T4187] device veth1_vlan entered promiscuous mode [ 67.440947][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.451555][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.466154][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.475387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.485106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.494390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.503494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.512190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.522253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.542654][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.551524][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.561555][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.571247][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.589673][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.598753][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.608212][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.617139][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.660688][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.669937][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.697886][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.707413][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.726777][ T4190] device veth0_vlan entered promiscuous mode [ 67.747808][ T4187] device veth0_macvtap entered promiscuous mode [ 67.768907][ T4187] device veth1_macvtap entered promiscuous mode [ 67.793159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.801869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.816808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.825933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.841813][ T4190] device veth1_vlan entered promiscuous mode [ 67.877954][ T4182] device veth0_macvtap entered promiscuous mode [ 67.888312][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.900234][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.911478][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.926217][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.937469][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.946558][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.955406][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.964492][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.973666][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.982774][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.991530][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.999516][ T4239] Bluetooth: hci0: command 0x040f tx timeout [ 68.014969][ T4182] device veth1_macvtap entered promiscuous mode [ 68.024315][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.033363][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.050181][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.063041][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.073465][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.084864][ T4239] Bluetooth: hci1: command 0x040f tx timeout [ 68.091233][ T4239] Bluetooth: hci4: command 0x040f tx timeout [ 68.091412][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.097992][ T4239] Bluetooth: hci2: command 0x040f tx timeout [ 68.113751][ T4239] Bluetooth: hci3: command 0x040f tx timeout [ 68.115559][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.135704][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.148436][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.157603][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.167117][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.177866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.186376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.195077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.203232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.211951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.242202][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.252907][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.263146][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.273955][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.283974][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.294535][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.307551][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.344003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.354390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.364225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.372874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.384459][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.396398][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.407120][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.407170][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.425211][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.435798][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.445657][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.456411][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.467934][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.489250][ T4190] device veth0_macvtap entered promiscuous mode [ 68.506681][ T4190] device veth1_macvtap entered promiscuous mode [ 68.520937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.530172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.538360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.547107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.570489][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.581969][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.591175][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.600097][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.612711][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.622883][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.663655][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.680019][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.694246][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.704483][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.717140][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.727297][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.738060][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.748234][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.758992][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.770847][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.803273][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.812121][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.835016][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.848969][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.864710][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.877690][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.890263][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.900934][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.911121][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.921699][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.931880][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.942669][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.956932][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.971719][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.981155][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.981846][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.997080][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.001851][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.007014][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.032591][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.049347][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.080965][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.101526][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.409963][ T4293] loop0: detected capacity change from 0 to 4096 [ 70.010408][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.075475][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.104228][ T4239] Bluetooth: hci0: command 0x0419 tx timeout [ 70.133732][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.136596][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.151115][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.159474][ T1109] Bluetooth: hci1: command 0x0419 tx timeout [ 70.163794][ T4239] Bluetooth: hci3: command 0x0419 tx timeout [ 70.173145][ T4239] Bluetooth: hci2: command 0x0419 tx timeout [ 70.198354][ T4239] Bluetooth: hci4: command 0x0419 tx timeout [ 70.237458][ T4276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.264969][ T4276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.353409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.363756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.401866][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.412856][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.422204][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.425873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.459313][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.468239][ T4304] loop4: detected capacity change from 0 to 512 [ 70.480580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.552182][ T4304] EXT4-fs (loop4): inline encryption not supported [ 70.588126][ T4304] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.5: inode has both inline data and extents flags [ 70.604085][ T4304] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.5: couldn't read orphan inode 15 (err -117) [ 70.632726][ T1107] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.658286][ T4304] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,acl,i_version,grpquota,nombcache,noinit_itable,,errors=continue. Quota mode: writeback. [ 70.727557][ T4311] loop0: detected capacity change from 0 to 2048 [ 70.782520][ T4304] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.5: Directory hole found for htree leaf block 0 [ 70.790751][ T4308] loop1: detected capacity change from 0 to 16 [ 70.830708][ T4304] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.5: Directory hole found for htree leaf block 0 [ 70.885497][ T4315] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.891147][ T4308] erofs: (device loop1): mounted with root inode @ nid 36. [ 70.948133][ T4316] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.5: Directory hole found for htree leaf block 0 [ 70.979742][ T4304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 71.184988][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 71.195932][ T1107] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 71.205095][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.217872][ T1107] usb 4-1: config 0 descriptor?? [ 71.419343][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.436992][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.017898][ T4300] loop3: detected capacity change from 0 to 512 [ 72.092615][ T4300] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.4: iget: bad i_size value: 360287970189639690 [ 72.276200][ T4300] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 72.380993][ T4300] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.528048][ T4327] loop2: detected capacity change from 0 to 8192 [ 72.552717][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 72.561733][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 72.570710][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #188!!! [ 72.579717][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 72.588813][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 72.598292][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 72.668268][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 72.704489][ T4327] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 72.718814][ T4327] REISERFS (device loop2): using journaled data mode [ 72.725834][ T4327] reiserfs: using flush barriers [ 72.743576][ T4300] ext4 filesystem being mounted at /0/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.779074][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 72.788188][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #12!!! [ 72.797175][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #92!!! [ 72.806966][ T4327] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 72.825065][ T4327] REISERFS (device loop2): checking transaction log (loop2) [ 72.848883][ T4327] REISERFS (device loop2): Using r5 hash to sort names [ 72.862884][ T4327] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 72.877626][ T4327] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 73.505798][ T21] usb 4-1: USB disconnect, device number 2 [ 73.926047][ T4324] loop4: detected capacity change from 0 to 32768 [ 74.064993][ T4341] loop2: detected capacity change from 0 to 8192 [ 74.175353][ T4341] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 74.187782][ T4341] REISERFS (device loop2): using journaled data mode [ 74.194751][ T4341] reiserfs: using flush barriers [ 74.228818][ T4341] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.252795][ T4341] REISERFS (device loop2): checking transaction log (loop2) [ 74.271889][ T4341] REISERFS (device loop2): Using r5 hash to sort names [ 74.280357][ T4341] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 74.294305][ T4341] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 74.668616][ T4308] overlayfs: failed to get metacopy (-117) [ 74.679428][ T4324] XFS (loop4): Mounting V5 Filesystem [ 74.838985][ T4308] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 75.071466][ T4362] loop3: detected capacity change from 0 to 64 [ 75.081531][ T4324] XFS (loop4): AIL initialisation failed: error -12 [ 75.442134][ T4362] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 75.814399][ T4324] XFS (loop4): log mount failed [ 76.439404][ T4371] loop3: detected capacity change from 0 to 64 [ 76.511154][ T4371] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 76.830806][ T4376] loop1: detected capacity change from 0 to 64 [ 76.916890][ T4376] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 77.843347][ T4382] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.086215][ T4385] loop4: detected capacity change from 0 to 256 [ 78.403023][ T4391] loop1: detected capacity change from 0 to 8192 [ 78.513845][ T4391] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 78.528694][ T4391] REISERFS (device loop1): using journaled data mode [ 78.535618][ T4391] reiserfs: using flush barriers [ 78.561483][ T4391] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.579439][ T4391] REISERFS (device loop1): checking transaction log (loop1) [ 78.593895][ T4391] REISERFS (device loop1): Using r5 hash to sort names [ 78.602095][ T4391] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 78.617034][ T4391] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 79.080614][ T4385] FAT-fs (loop4): IO charset c not found [ 79.126374][ T4372] loop0: detected capacity change from 0 to 32768 [ 79.487062][ T4409] netlink: 72 bytes leftover after parsing attributes in process `syz.2.20'. [ 79.601492][ T4409] loop2: detected capacity change from 0 to 512 [ 80.797889][ T4413] loop3: detected capacity change from 0 to 128 [ 80.858910][ T4413] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.939082][ T4413] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.393356][ T4185] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 82.561419][ T4185] FAT-fs (loop3): Filesystem has been set read-only [ 82.782113][ T4185] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 83.447647][ T4434] loop4: detected capacity change from 0 to 8192 [ 83.599208][ T4434] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 83.610783][ T4434] REISERFS (device loop4): using journaled data mode [ 83.617722][ T4434] reiserfs: using flush barriers [ 83.646016][ T4434] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.663883][ T4434] REISERFS (device loop4): checking transaction log (loop4) [ 83.678749][ T4434] REISERFS (device loop4): Using r5 hash to sort names [ 83.687157][ T4434] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 83.701136][ T4434] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 83.830021][ T4434] Zero length message leads to an empty skb [ 84.224063][ T4426] loop0: detected capacity change from 0 to 32768 [ 84.357536][ T4429] loop1: detected capacity change from 0 to 32768 [ 84.377631][ T4426] XFS (loop0): Mounting V5 Filesystem [ 84.441739][ T4428] loop2: detected capacity change from 0 to 32768 [ 84.463258][ T4428] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.27 (4428) [ 84.470885][ T4426] XFS (loop0): Ending clean mount [ 84.514867][ T4429] XFS (loop1): Mounting V5 Filesystem [ 84.776141][ T4426] XFS (loop0): Quotacheck needed: Please wait. [ 84.795114][ T4428] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 84.811797][ T4429] XFS (loop1): Ending clean mount [ 84.832530][ T4428] BTRFS info (device loop2): force zlib compression, level 3 [ 84.845744][ T4429] XFS (loop1): Quotacheck needed: Please wait. [ 84.852775][ T4428] BTRFS info (device loop2): enabling ssd optimizations [ 84.875044][ T4428] BTRFS info (device loop2): using spread ssd allocation scheme [ 84.912571][ T4428] BTRFS info (device loop2): use no compression [ 85.016311][ T4428] BTRFS info (device loop2): force clearing of disk cache [ 85.084317][ T4428] BTRFS info (device loop2): force zlib compression, level 3 [ 85.115752][ T4426] XFS (loop0): Quotacheck: Done. [ 85.152512][ T4428] BTRFS info (device loop2): metadata ratio 1 [ 85.158770][ T4428] BTRFS info (device loop2): setting nodatacow [ 85.178910][ T4429] XFS (loop1): Quotacheck: Done. [ 85.183540][ T4191] XFS (loop0): Unmounting Filesystem [ 85.395289][ T4428] BTRFS info (device loop2): disabling free space tree [ 85.547921][ T4428] BTRFS info (device loop2): has skinny extents [ 86.039101][ T4182] XFS (loop1): Unmounting Filesystem [ 86.274367][ T4428] BTRFS error (device loop2): open_ctree failed: -12 [ 86.388588][ T4342] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.556914][ T4342] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.706968][ T4342] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.716336][ T7] cfg80211: failed to load regulatory.db [ 86.848383][ T4342] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.070696][ T146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 87.080608][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 87.088203][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.098405][ T146] Workqueue: hci4 hci_rx_work [ 87.103159][ T146] Call Trace: [ 87.106475][ T146] [ 87.109447][ T146] dump_stack_lvl+0x168/0x230 [ 87.114173][ T146] ? show_regs_print_info+0x20/0x20 [ 87.119422][ T146] ? load_image+0x3b0/0x3b0 [ 87.123985][ T146] sysfs_create_dir_ns+0x252/0x280 [ 87.129154][ T146] ? __lock_acquire+0x7c60/0x7c60 [ 87.134221][ T146] ? sysfs_warn_dup+0xa0/0xa0 [ 87.138947][ T146] ? le_conn_complete_evt+0xcbc/0x1590 [ 87.144447][ T146] ? hci_event_packet+0xe05/0x12f0 [ 87.149598][ T146] ? process_one_work+0x863/0x1000 [ 87.154748][ T146] ? do_raw_spin_unlock+0x11d/0x230 [ 87.160002][ T146] kobject_add_internal+0x662/0xd00 [ 87.165270][ T146] kobject_add+0x152/0x210 [ 87.169732][ T146] ? kobject_init+0x1d0/0x1d0 [ 87.174545][ T146] ? klist_children_get+0x50/0x50 [ 87.179611][ T146] ? get_device_parent+0x121/0x3f0 [ 87.184771][ T146] device_add+0x483/0xfb0 [ 87.189193][ T146] hci_conn_add_sysfs+0xd1/0x1e0 [ 87.194174][ T146] le_conn_complete_evt+0xcbc/0x1590 [ 87.199534][ T146] ? cs_le_create_conn+0x5e0/0x5e0 [ 87.204707][ T146] ? __mutex_trylock_common+0x14f/0x250 [ 87.210390][ T146] hci_le_meta_evt+0xd04/0x3b80 [ 87.215297][ T146] ? hci_event_packet+0x36d/0x12f0 [ 87.220451][ T146] ? hci_event_packet+0x2e2/0x12f0 [ 87.225610][ T146] ? __lock_acquire+0x7c60/0x7c60 [ 87.230688][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 87.236807][ T146] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 87.242607][ T146] ? mark_lock+0x94/0x320 [ 87.246971][ T146] ? mutex_unlock+0x10/0x10 [ 87.251515][ T146] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 87.257545][ T146] ? lock_chain_count+0x20/0x20 [ 87.262449][ T146] ? __rwlock_init+0x140/0x140 [ 87.267262][ T146] hci_event_packet+0xe05/0x12f0 [ 87.272247][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 87.277494][ T146] ? rcu_lock_release+0x20/0x20 [ 87.282382][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 87.287621][ T146] hci_rx_work+0x255/0xa10 [ 87.292094][ T146] process_one_work+0x863/0x1000 [ 87.297091][ T146] ? worker_detach_from_pool+0x240/0x240 [ 87.302767][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 87.308119][ T146] ? _raw_spin_lock_irq+0xab/0xe0 [ 87.313182][ T146] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 87.318599][ T146] ? wq_worker_running+0x97/0x170 [ 87.323668][ T146] worker_thread+0xaa8/0x12a0 [ 87.328456][ T146] kthread+0x436/0x520 [ 87.332568][ T146] ? rcu_lock_release+0x20/0x20 [ 87.337449][ T146] ? kthread_blkcg+0xd0/0xd0 [ 87.342141][ T146] ret_from_fork+0x1f/0x30 [ 87.346611][ T146] [ 87.349883][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.360698][ T146] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 87.374437][ T146] Bluetooth: hci4: failed to register connection device [ 87.465521][ T4486] chnl_net:caif_netlink_parms(): no params data found [ 87.809208][ T146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 87.819202][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 87.826715][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.837043][ T146] Workqueue: hci0 hci_rx_work [ 87.841762][ T146] Call Trace: [ 87.845076][ T146] [ 87.848047][ T146] dump_stack_lvl+0x168/0x230 [ 87.852843][ T146] ? show_regs_print_info+0x20/0x20 [ 87.858106][ T146] ? load_image+0x3b0/0x3b0 [ 87.862648][ T146] sysfs_create_dir_ns+0x252/0x280 [ 87.867798][ T146] ? __lock_acquire+0x7c60/0x7c60 [ 87.872855][ T146] ? sysfs_warn_dup+0xa0/0xa0 [ 87.877605][ T146] kobject_add_internal+0x662/0xd00 [ 87.882844][ T146] kobject_add+0x152/0x210 [ 87.887288][ T146] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 87.892947][ T146] ? kobject_init+0x1d0/0x1d0 [ 87.897685][ T146] ? get_device_parent+0x20/0x3f0 [ 87.902744][ T146] ? get_device_parent+0x41/0x3f0 [ 87.907879][ T146] ? get_device_parent+0x121/0x3f0 [ 87.913023][ T146] device_add+0x483/0xfb0 [ 87.917392][ T146] hci_conn_add_sysfs+0xd1/0x1e0 [ 87.922408][ T146] le_conn_complete_evt+0xcbc/0x1590 [ 87.927732][ T146] ? cs_le_create_conn+0x5e0/0x5e0 [ 87.933655][ T146] ? __switch_to_asm+0x34/0x60 [ 87.938537][ T146] ? __schedule+0x11c3/0x4390 [ 87.943249][ T146] ? __mutex_trylock_common+0x14f/0x250 [ 87.948825][ T146] hci_le_meta_evt+0x289/0x3b80 [ 87.953700][ T146] ? hci_event_packet+0x36d/0x12f0 [ 87.958840][ T146] ? hci_event_packet+0x2e2/0x12f0 [ 87.963976][ T146] ? __lock_acquire+0x7c60/0x7c60 [ 87.969268][ T146] ? release_firmware_map_entry+0x190/0x190 [ 87.975293][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 87.981403][ T146] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 87.987070][ T146] ? mutex_unlock+0x10/0x10 [ 87.991601][ T146] ? preempt_schedule+0xa7/0xb0 [ 87.996481][ T146] ? schedule_preempt_disabled+0x20/0x20 [ 88.002141][ T146] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 88.007811][ T146] hci_event_packet+0xe05/0x12f0 [ 88.012888][ T146] ? rcu_lock_release+0x20/0x20 [ 88.017790][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 88.023019][ T146] hci_rx_work+0x255/0xa10 [ 88.027502][ T146] process_one_work+0x863/0x1000 [ 88.032496][ T146] ? worker_detach_from_pool+0x240/0x240 [ 88.038170][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 88.043494][ T146] ? _raw_spin_lock_irq+0xab/0xe0 [ 88.048542][ T146] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 88.053939][ T146] ? wq_worker_running+0x97/0x170 [ 88.058989][ T146] worker_thread+0xaa8/0x12a0 [ 88.063724][ T146] kthread+0x436/0x520 [ 88.067816][ T146] ? rcu_lock_release+0x20/0x20 [ 88.072685][ T146] ? kthread_blkcg+0xd0/0xd0 [ 88.077307][ T146] ret_from_fork+0x1f/0x30 [ 88.081765][ T146] [ 88.084874][ C0] vkms_vblank_simulate: vblank timer overrun [ 88.194633][ T146] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 88.209886][ T146] Bluetooth: hci0: failed to register connection device [ 88.952493][ T4470] Bluetooth: hci1: command 0x0409 tx timeout [ 89.122025][ T4486] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.134169][ T4486] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.167658][ T4486] device bridge_slave_0 entered promiscuous mode [ 89.176543][ T4486] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.184894][ T4486] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.218931][ T4486] device bridge_slave_1 entered promiscuous mode [ 89.525660][ T4486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.545192][ T4486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.707869][ T4486] team0: Port device team_slave_0 added [ 89.877890][ T4486] team0: Port device team_slave_1 added [ 90.175582][ T4486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.200221][ T4486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.361140][ T4486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.482823][ T4486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.649147][ T4486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.881991][ T4486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.052547][ T4470] Bluetooth: hci1: command 0x041b tx timeout [ 91.466271][ T4486] device hsr_slave_0 entered promiscuous mode [ 91.510945][ T4486] device hsr_slave_1 entered promiscuous mode [ 91.533936][ T4486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.570441][ T4486] Cannot create hsr debugfs directory [ 91.602411][ T4470] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.865684][ T4470] usb 2-1: Using ep0 maxpacket: 8 [ 91.999200][ T4470] usb 2-1: config 4 has an invalid interface number: 102 but max is 0 [ 92.013232][ T4470] usb 2-1: config 4 has no interface number 0 [ 92.040603][ T4470] usb 2-1: config 4 interface 102 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 92.173739][ T4470] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.00 [ 92.219404][ T4470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.300097][ T4596] wg2 speed is unknown, defaulting to 1000 [ 92.308079][ T4572] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 92.376224][ T4470] ums-jumpshot 2-1:4.102: USB Mass Storage device detected [ 92.414270][ T4342] device hsr_slave_0 left promiscuous mode [ 92.434211][ T4470] ums-jumpshot 2-1:4.102: Quirks match for vid 05dc pid 0001: 2 [ 92.450208][ T4342] device hsr_slave_1 left promiscuous mode [ 92.458951][ T4342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.528654][ T4342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.569445][ T4342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.620461][ T21] usb 2-1: USB disconnect, device number 2 [ 92.621345][ T4342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.656729][ T4342] device bridge_slave_1 left promiscuous mode [ 92.679782][ T4342] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.745100][ T4342] device bridge_slave_0 left promiscuous mode [ 92.751899][ T4342] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.814156][ T4342] device veth1_macvtap left promiscuous mode [ 93.025872][ T4342] device veth0_macvtap left promiscuous mode [ 93.202390][ T4342] device veth1_vlan left promiscuous mode [ 93.212824][ T4342] device veth0_vlan left promiscuous mode [ 93.352481][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 94.600495][ T4342] team0 (unregistering): Port device team_slave_1 removed [ 94.624375][ T4342] team0 (unregistering): Port device team_slave_0 removed [ 94.647052][ T4342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.687697][ T4342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.811749][ T4342] bond0 (unregistering): Released all slaves [ 94.912937][ T4596] wg2 speed is unknown, defaulting to 1000 [ 94.937730][ T4596] wg2 speed is unknown, defaulting to 1000 [ 95.112250][ T4625] netlink: 'syz.2.67': attribute type 1 has an invalid length. [ 95.293668][ T4486] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.432391][ T4237] Bluetooth: hci1: command 0x0419 tx timeout [ 95.617243][ T4486] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.834340][ T4486] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.887199][ T4486] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.950999][ T4596] infiniband syz0: set active [ 95.994022][ T4596] infiniband syz0: added wg2 [ 96.059894][ T4596] infiniband syz0: Couldn't open port 1 [ 96.130338][ T4470] wg2 speed is unknown, defaulting to 1000 [ 96.858825][ T4596] RDS/IB: syz0: added [ 96.917657][ T4596] smc: adding ib device syz0 with port count 1 [ 96.964403][ T4596] smc: ib device syz0 port 1 has pnetid [ 97.002521][ T26] audit: type=1326 audit(1761995357.440:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50fa08fc9 code=0x7ffc0000 [ 97.036810][ T7] wg2 speed is unknown, defaulting to 1000 [ 97.065893][ T4596] wg2 speed is unknown, defaulting to 1000 [ 97.114029][ T26] audit: type=1326 audit(1761995357.490:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe50fa08fc9 code=0x7ffc0000 [ 97.241397][ T4486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.271202][ T26] audit: type=1326 audit(1761995357.490:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50fa08fc9 code=0x7ffc0000 [ 97.333752][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.350698][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.374860][ T4486] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.391126][ T26] audit: type=1326 audit(1761995357.490:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fe50fa08fc9 code=0x7ffc0000 [ 97.434513][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.460265][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.367253][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.374401][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.385456][ T26] audit: type=1326 audit(1761995357.490:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50fa08fc9 code=0x7ffc0000 [ 98.435241][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.500759][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.539867][ T26] audit: type=1326 audit(1761995357.490:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe50fa08fc9 code=0x7ffc0000 [ 98.590656][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.627490][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.634636][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.646433][ T26] audit: type=1326 audit(1761995357.490:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50fa08fc9 code=0x7ffc0000 [ 98.698304][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.747126][ T4596] wg2 speed is unknown, defaulting to 1000 [ 98.770238][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.770714][ T26] audit: type=1326 audit(1761995357.490:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe50fa08fc9 code=0x7ffc0000 [ 98.827156][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.867232][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.911146][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.959169][ T4486] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.983743][ T26] audit: type=1326 audit(1761995357.500:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50fa08fc9 code=0x7ffc0000 [ 99.057540][ T4486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.119410][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.146520][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.172614][ T26] audit: type=1326 audit(1761995357.500:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe50fa08fc9 code=0x7ffc0000 [ 99.179690][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.326570][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.370476][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.412701][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.486641][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.535179][ T4596] wg2 speed is unknown, defaulting to 1000 [ 100.195884][ T4596] wg2 speed is unknown, defaulting to 1000 [ 100.217544][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.262758][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.347870][ T4486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.887228][ T4596] wg2 speed is unknown, defaulting to 1000 [ 102.221458][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.222862][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.332542][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.347844][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.401227][ T4486] device veth0_vlan entered promiscuous mode [ 102.425405][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.461388][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.564101][ T4486] device veth1_vlan entered promiscuous mode [ 103.224988][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.263444][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.293641][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.313614][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.331275][ T4486] device veth0_macvtap entered promiscuous mode [ 103.380454][ T4486] device veth1_macvtap entered promiscuous mode [ 103.582232][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.695267][ T4769] hfs: can't find a HFS filesystem on dev nullb0 [ 103.954088][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.964022][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.974582][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.195398][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.212414][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.222267][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.452314][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.524382][ T4486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.568678][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.582438][ T4480] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.612750][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.683360][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.725891][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.767043][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.822362][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.852495][ T4480] usb 5-1: Using ep0 maxpacket: 32 [ 104.862571][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.888231][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.924773][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.952376][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.002678][ T4480] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 105.012147][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.031180][ T4480] usb 5-1: config 0 has no interface number 0 [ 105.062431][ T4486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.070131][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.103890][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.150567][ T4486] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.185688][ T4486] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.242442][ T4486] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.252601][ T4480] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 105.281732][ T4486] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.291673][ T4480] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.303317][ T4480] usb 5-1: Product: syz [ 105.320386][ T4480] usb 5-1: Manufacturer: syz [ 105.337400][ T4480] usb 5-1: SerialNumber: syz [ 105.369349][ T4480] usb 5-1: config 0 descriptor?? [ 105.464029][ T4480] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 105.578430][ T4394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.612715][ T4394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.687603][ T4480] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 105.687909][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.762641][ T4480] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 105.765437][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.840535][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.937511][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.172354][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 106.186105][ T4480] usb 5-1: USB disconnect, device number 2 [ 106.204421][ T4480] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 106.262068][ T4480] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 106.419526][ T4480] quatech2 5-1:0.51: device disconnected [ 107.209205][ T4223] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 107.402719][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.233400][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 109.402762][ T21] usb 3-1: config 10 has an invalid interface number: 93 but max is 0 [ 109.419866][ T21] usb 3-1: config 10 has no interface number 0 [ 109.472476][ T4223] usb 6-1: unable to read config index 0 descriptor/all [ 109.504545][ T4223] usb 6-1: can't read configurations, error -71 [ 109.802434][ T21] usb 3-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=1e.08 [ 109.816727][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.282288][ C0] sched: RT throttling activated [ 112.290106][ T21] usb 3-1: Product: syz [ 112.294999][ T21] usb 3-1: Manufacturer: syz [ 112.300002][ T21] usb 3-1: SerialNumber: syz [ 112.360622][ T4857] wg2 speed is unknown, defaulting to 1000 [ 112.442574][ T21] usb 3-1: can't set config #10, error -71 [ 112.444368][ T21] usb 3-1: USB disconnect, device number 2 [ 113.222255][ T4897] netlink: 48 bytes leftover after parsing attributes in process `syz.5.123'. [ 116.450751][ T4938] netlink: 'syz.2.130': attribute type 12 has an invalid length. [ 117.486600][ T4960] input: syz0 as /devices/virtual/input/input5 [ 118.280991][ T4974] device bond0 entered promiscuous mode [ 118.342388][ T4974] device bond_slave_0 entered promiscuous mode [ 118.348949][ T4974] device bond_slave_1 entered promiscuous mode [ 118.434074][ T4974] device batadv0 entered promiscuous mode [ 118.617935][ T4980] process 'syz.4.140' launched './file1' with NULL argv: empty string added [ 118.700599][ T4974] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 118.754573][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 119.334313][ T4995] netlink: 72 bytes leftover after parsing attributes in process `syz.5.144'. [ 125.261710][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 125.261726][ T26] audit: type=1326 audit(1761995385.700:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50fa08fc9 code=0x7ffc0000 [ 125.333506][ T5076] netlink: 31 bytes leftover after parsing attributes in process `syz.2.158'. [ 125.436631][ T26] audit: type=1326 audit(1761995385.750:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe50fa08fc9 code=0x7ffc0000 [ 126.264287][ T26] audit: type=1326 audit(1761995385.750:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50fa08fc9 code=0x7ffc0000 [ 126.264332][ T26] audit: type=1326 audit(1761995385.750:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe50fa08fc9 code=0x7ffc0000 [ 126.264369][ T26] audit: type=1326 audit(1761995385.750:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50fa08fc9 code=0x7ffc0000 [ 126.264405][ T26] audit: type=1326 audit(1761995385.750:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe50fa08fc9 code=0x7ffc0000 [ 126.264441][ T26] audit: type=1326 audit(1761995385.750:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50fa08fc9 code=0x7ffc0000 [ 126.264477][ T26] audit: type=1326 audit(1761995385.770:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe50fa08fc9 code=0x7ffc0000 [ 126.264513][ T26] audit: type=1326 audit(1761995385.770:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50fa08fc9 code=0x7ffc0000 [ 126.264549][ T26] audit: type=1326 audit(1761995385.770:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe50fa08fc9 code=0x7ffc0000 [ 127.662550][ T4250] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.908342][ T5098] netlink: 'syz.4.165': attribute type 6 has an invalid length. [ 128.402993][ T4250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.446103][ T4250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.512521][ T4237] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 128.562639][ T4250] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 128.577567][ T4250] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 128.601284][ T4250] usb 1-1: Manufacturer: syz [ 128.637974][ T4250] usb 1-1: config 0 descriptor?? [ 128.762359][ T4237] usb 2-1: Using ep0 maxpacket: 16 [ 128.830491][ T1107] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 128.840589][ T1107] Bluetooth: hci4: Injecting HCI hardware error event [ 128.850892][ T4194] Bluetooth: hci4: hardware error 0x00 [ 128.897176][ T4237] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.939570][ T4237] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.998291][ T4237] usb 2-1: config 0 interface 0 has no altsetting 0 [ 129.042971][ T4237] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 129.078441][ T4237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.114309][ T4237] usb 2-1: config 0 descriptor?? [ 129.737824][ T4237] hid-generic 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 129.816885][ T4250] input: syz Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input6 [ 129.829426][ T4301] usb 2-1: USB disconnect, device number 3 [ 130.023814][ T5124] netlink: 48 bytes leftover after parsing attributes in process `syz.5.173'. [ 130.086093][ T4250] input: syz Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input7 [ 130.138442][ T5121] fido_id[5121]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 130.308070][ T4250] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 130.337266][ T4250] usb 1-1: USB disconnect, device number 2 [ 130.637869][ T5128] fido_id[5128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 131.468150][ T5145] netlink: 'syz.0.176': attribute type 3 has an invalid length. [ 132.856267][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.862794][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.400490][ T5196] fuse: Invalid rootmode [ 135.866374][ T5196] wg2 speed is unknown, defaulting to 1000 [ 138.731799][ T5177] ODEBUG: Out of memory. ODEBUG disabled [ 138.800429][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 139.919477][ T5261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.206'. [ 140.457435][ T5261] device vlan2 entered promiscuous mode [ 140.546039][ T5261] device gretap0 entered promiscuous mode [ 140.710220][ T5267] wg2 speed is unknown, defaulting to 1000 [ 140.765033][ T5272] 9pnet_virtio: no channels available for device syz [ 141.783503][ T5291] 9p: Unknown Cache mode fsc [ 141.868946][ T5267] chnl_net:caif_netlink_parms(): no params data found [ 142.261337][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.318051][ T5267] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.338708][ T5267] device bridge_slave_0 entered promiscuous mode [ 142.369298][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.405534][ T5267] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.434125][ T5267] device bridge_slave_1 entered promiscuous mode [ 142.586761][ T5267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.653298][ T5267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.722373][ T4301] Bluetooth: hci1: command 0x0409 tx timeout [ 142.870256][ T5267] team0: Port device team_slave_0 added [ 142.924861][ T5267] team0: Port device team_slave_1 added [ 143.024664][ T5267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.075179][ T5267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.121493][ T5329] netlink: 'syz.2.215': attribute type 22 has an invalid length. [ 143.242320][ T5267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.312336][ T5267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.372338][ T5267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.465241][ T5337] bad cache= option: l [ 143.465241][ T5337] [ 143.532247][ T5337] CIFS: VFS: bad cache= option: l [ 143.537581][ T5267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.603191][ T5331] device batadv_slave_1 entered promiscuous mode [ 143.804076][ T5331] device batadv_slave_1 left promiscuous mode [ 143.890141][ T5349] Cannot find add_set index 0 as target [ 143.994374][ T5267] device hsr_slave_0 entered promiscuous mode [ 144.047966][ T5267] device hsr_slave_1 entered promiscuous mode [ 144.092580][ T5267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.120510][ T5267] Cannot create hsr debugfs directory [ 144.442507][ T4301] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 144.623921][ T4480] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 144.656187][ T5365] program syz.1.222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.112905][ T4225] Bluetooth: hci1: command 0x041b tx timeout [ 145.222629][ T4301] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 145.262799][ T4301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.302873][ T4301] usb 3-1: Product: syz [ 145.328809][ T4301] usb 3-1: Manufacturer: syz [ 145.340244][ T5267] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 145.352208][ T5267] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 145.357952][ T4301] usb 3-1: SerialNumber: syz [ 145.383086][ T5267] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 145.392439][ T4480] usb 1-1: Using ep0 maxpacket: 16 [ 145.417548][ T4301] usb 3-1: config 0 descriptor?? [ 145.429069][ T5267] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 145.442864][ T4480] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 145.489687][ T4301] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 145.552668][ T4480] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.588342][ T5267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.608639][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.617827][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.645918][ T5267] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.672624][ T4480] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.688586][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.720101][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.731578][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.738802][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.782450][ T4480] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.788956][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.821869][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.831764][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.841059][ T4518] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.848238][ T4518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.891917][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.929008][ T4301] gspca_sunplus: reg_r err -71 [ 145.934861][ T4480] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.945506][ T4301] sunplus: probe of 3-1:0.0 failed with error -71 [ 145.970363][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.991701][ T4301] usb 3-1: USB disconnect, device number 3 [ 146.052793][ T4480] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.075220][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.112590][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.188913][ T4480] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.291001][ T5392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'. [ 146.302781][ T4480] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.323270][ T5392] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.334525][ T5392] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.423564][ T4480] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.588156][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.612701][ T4480] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 146.652741][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.663060][ T4480] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 146.703150][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.729525][ T4480] usb 1-1: SerialNumber: syz [ 146.752216][ T4480] usb 1-1: config 0 descriptor?? [ 146.816465][ T4480] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 146.885002][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.949786][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.982474][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.999648][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.019797][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.052838][ T5360] input: syz1 as /devices/virtual/input/input9 [ 147.169541][ T5360] input: syz0 as /devices/virtual/input/input10 [ 147.193444][ T4301] Bluetooth: hci1: command 0x040f tx timeout [ 147.423068][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 147.498180][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 147.539203][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.547710][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.644357][ T4328] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.690482][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.712519][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 147.721814][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.756601][ T4328] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.805688][ T5267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.839864][ T4328] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.863488][ T7] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.887197][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.909341][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 147.931638][ T7] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.953673][ T7] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 147.979695][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.089065][ T4328] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.282685][ T7] usb 3-1: GET_CAPABILITIES returned 0 [ 148.290146][ T7] usbtmc 3-1:16.0: can't read capabilities [ 148.342627][ T3545] bcm5974 1-1:0.0: could not read from device [ 148.382449][ T1107] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 148.491688][ T4480] usb 1-1: USB disconnect, device number 3 [ 148.496213][ T4237] usb 3-1: USB disconnect, device number 4 [ 148.632984][ T1107] usb 2-1: Using ep0 maxpacket: 8 [ 148.693747][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.710632][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.752614][ T1107] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.769745][ T1107] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.799981][ T1107] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.814990][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.825979][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.847185][ T1107] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.849521][ T5267] device veth0_vlan entered promiscuous mode [ 148.887912][ T1107] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.904185][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.918750][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.932452][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.958273][ T5267] device veth1_vlan entered promiscuous mode [ 148.982714][ T4480] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 149.178760][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.218119][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 149.232552][ T1107] usb 2-1: GET_CAPABILITIES returned 0 [ 149.274476][ T1107] usbtmc 2-1:16.0: can't read capabilities [ 149.280162][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.289062][ T4301] Bluetooth: hci1: command 0x0419 tx timeout [ 149.296538][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.372759][ T4480] usb 1-1: Using ep0 maxpacket: 16 [ 149.573685][ T4480] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.734768][ T4480] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.117637][ T5267] device veth0_macvtap entered promiscuous mode [ 150.152360][ T4480] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 150.168014][ T4480] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 150.178024][ T4480] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.189562][ T4480] usb 1-1: config 0 descriptor?? [ 150.196712][ T4225] usb 2-1: USB disconnect, device number 4 [ 150.344290][ T5267] device veth1_macvtap entered promiscuous mode [ 150.370173][ T5494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.244'. [ 150.976245][ T4480] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 151.119658][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.265089][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.378365][ T4480] microsoft 0003:045E:07DA.0003: unsupported Resolution Multiplier 0 [ 151.393792][ T4480] microsoft 0003:045E:07DA.0003: implement() called with n (152) > 32! (kworker/0:11) [ 151.432024][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.443009][ T4480] microsoft 0003:045E:07DA.0003: unsupported Resolution Multiplier 0 [ 151.451847][ T4480] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 151.460555][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.470924][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.483646][ T4480] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 151.495451][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.506746][ T4480] microsoft 0003:045E:07DA.0003: no inputs found [ 151.513559][ T4480] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 151.522677][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.546991][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.562481][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.580355][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.603084][ T5267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.632239][ T5504] device macvlan0 entered promiscuous mode [ 151.675145][ T5504] netlink: 36 bytes leftover after parsing attributes in process `syz.2.248'. [ 151.692824][ T4225] usb 1-1: USB disconnect, device number 4 [ 151.837026][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.031056][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.035580][ T5512] fido_id[5512]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 152.647500][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.682517][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.802374][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.834787][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.925821][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.434228][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.462168][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.491485][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.510782][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.529887][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.567408][ T5267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.622092][ T5267] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.653402][ T5267] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.680139][ T5267] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.722437][ T5267] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.943622][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.719847][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.209206][ T4394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.244987][ T4394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.282699][ T1107] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 155.300481][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.364283][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.405008][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.457556][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.532509][ T1107] usb 1-1: Using ep0 maxpacket: 16 [ 155.636952][ T4328] device hsr_slave_0 left promiscuous mode [ 155.652657][ T1107] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 155.675888][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.686867][ T4328] device hsr_slave_1 left promiscuous mode [ 155.717253][ T1107] usb 1-1: config 0 descriptor?? [ 155.893983][ T1107] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 155.903377][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.922437][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.365511][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.578671][ T1107] usb 1-1: Detected FT232BM [ 156.682471][ T1107] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 156.732422][ T1107] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 156.745629][ T1107] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 156.784914][ T1107] usb 1-1: USB disconnect, device number 5 [ 156.816187][ T1107] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 156.848803][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.856920][ T1107] ftdi_sio 1-1:0.0: device disconnected [ 156.869327][ T4328] device bridge_slave_1 left promiscuous mode [ 156.908541][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.975988][ T4328] device bridge_slave_0 left promiscuous mode [ 156.989274][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.074954][ T4328] device veth1_macvtap left promiscuous mode [ 157.102464][ T4328] device veth0_macvtap left promiscuous mode [ 157.108594][ T4328] device veth1_vlan left promiscuous mode [ 157.157954][ T4328] device veth0_vlan left promiscuous mode [ 159.135372][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 159.150421][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 160.043954][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.078445][ T4328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.369267][ T4328] bond0 (unregistering): Released all slaves [ 160.516399][ T5579] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.524086][ T5579] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.531184][ T5579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.541325][ T5593] netlink: 'syz.1.265': attribute type 4 has an invalid length. [ 160.596308][ T5613] ======================================================= [ 160.596308][ T5613] WARNING: The mand mount option has been deprecated and [ 160.596308][ T5613] and is ignored by this kernel. Remove the mand [ 160.596308][ T5613] option from the mount to silence this warning. [ 160.596308][ T5613] ======================================================= [ 160.702595][ T4225] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 161.379944][ T5613] tmpfs: Unknown parameter 'noswap' [ 162.032520][ T4225] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 162.043449][ T4225] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.064041][ T4225] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.085742][ T4225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.097160][ T5619] binder: 5612:5619 ioctl c0306201 0 returned -14 [ 162.100715][ T4225] usb 1-1: config 0 descriptor?? [ 162.122645][ T5608] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 162.157704][ T5619] binder: 5612:5619 ioctl c0306201 0 returned -14 [ 162.168106][ T4225] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 162.232902][ T5624] netlink: 104 bytes leftover after parsing attributes in process `syz.1.274'. [ 162.247063][ T5619] binder: 5612:5619 ioctl c0306201 0 returned -14 [ 165.236484][ T4301] usb 1-1: USB disconnect, device number 6 [ 172.045273][ T5679] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 173.202855][ T5689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.287'. [ 176.564041][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 176.564056][ T26] audit: type=1326 audit(1761995437.010:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.0.296" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f4c288fc9 code=0x0 [ 179.187347][ T5754] wg2 speed is unknown, defaulting to 1000 [ 181.756553][ T5754] chnl_net:caif_netlink_parms(): no params data found [ 182.023093][ T4301] Bluetooth: hci1: command 0x0409 tx timeout [ 182.121198][ T5797] tipc: Started in network mode [ 182.147308][ T5797] tipc: Node identity f6dc50704502, cluster identity 4711 [ 182.188294][ T5797] tipc: Enabled bearer , priority 0 [ 182.312429][ T5805] device syzkaller0 entered promiscuous mode [ 182.331201][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.344138][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.362936][ T5754] device bridge_slave_0 entered promiscuous mode [ 182.387304][ T5797] netlink: 44 bytes leftover after parsing attributes in process `syz.1.312'. [ 182.419476][ T5805] tipc: Resetting bearer [ 182.436639][ T5810] Invalid option length (938168) for dns_resolver key [ 182.447631][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.457828][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.481063][ T5754] device bridge_slave_1 entered promiscuous mode [ 182.716189][ T5795] tipc: Resetting bearer [ 182.744869][ T5795] tipc: Disabling bearer [ 182.825782][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.887592][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.145196][ T5834] hfs: can't find a HFS filesystem on dev nullb0 [ 183.856988][ T5754] team0: Port device team_slave_0 added [ 183.945672][ T5754] team0: Port device team_slave_1 added [ 184.064593][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.071629][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.098351][ T4301] Bluetooth: hci1: command 0x041b tx timeout [ 184.270408][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.362313][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.420278][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.528132][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.666812][ T5754] device hsr_slave_0 entered promiscuous mode [ 184.683405][ T5754] device hsr_slave_1 entered promiscuous mode [ 184.721411][ T5754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.757765][ T5754] Cannot create hsr debugfs directory [ 186.091629][ T4301] Bluetooth: hci0: command 0x0406 tx timeout [ 186.200678][ T4301] Bluetooth: hci3: command 0x0406 tx timeout [ 186.235850][ T4301] Bluetooth: hci2: command 0x0406 tx timeout [ 186.251161][ T4328] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.310370][ T4301] Bluetooth: hci1: command 0x040f tx timeout [ 186.368235][ T4328] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.557501][ T4328] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.682381][ T4328] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.720141][ T5882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 186.741776][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'. [ 186.983089][ T5887] ax25_connect(): syz.2.328 uses autobind, please contact jreuter@yaina.de [ 187.019514][ T5754] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 187.043997][ T5754] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 187.092859][ T5754] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 187.144786][ T5754] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 187.491849][ T5904] hfs: can't find a HFS filesystem on dev nullb0 [ 188.266305][ T5910] ptrace attach of "./syz-executor exec"[4187] was attempted by "./syz-executor exec"[5910] [ 188.366139][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.392369][ T1109] Bluetooth: hci1: command 0x0419 tx timeout [ 188.449178][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.513969][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.557770][ T5917] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 188.564149][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.666110][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.716402][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.811117][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.818319][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.898432][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.927312][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.968605][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.016420][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.023617][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.114240][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.978848][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.112119][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.169132][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.213391][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.240682][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.273515][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.308433][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.348268][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.397723][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.452872][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.536798][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.031986][ T4328] device hsr_slave_0 left promiscuous mode [ 191.218607][ T4328] device hsr_slave_1 left promiscuous mode [ 191.496261][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.512444][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.540679][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.572329][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.654320][ T4328] device bridge_slave_1 left promiscuous mode [ 191.754462][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.857266][ T4328] device bridge_slave_0 left promiscuous mode [ 191.876314][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.917275][ T4328] device veth1_macvtap left promiscuous mode [ 191.977731][ T4328] device veth0_macvtap left promiscuous mode [ 192.002445][ T4328] device veth1_vlan left promiscuous mode [ 192.024376][ T4328] device veth0_vlan left promiscuous mode [ 193.621656][ T5986] netlink: 104 bytes leftover after parsing attributes in process `syz.2.348'. [ 193.657484][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 193.678198][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 193.690660][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.706080][ T4328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.781191][ T4328] bond0 (unregistering): Released all slaves [ 193.922388][ T4225] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 194.087775][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.110437][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.120341][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.202464][ T4225] usb 2-1: Using ep0 maxpacket: 32 [ 194.244037][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.250360][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.332625][ T4225] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 194.344182][ T4225] usb 2-1: config 0 has no interface number 0 [ 194.357140][ T4225] usb 2-1: config 0 interface 21 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 1023 [ 194.378616][ T4225] usb 2-1: config 0 interface 21 has no altsetting 0 [ 194.552807][ T4225] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0121, bcdDevice= 9.64 [ 194.569935][ T4225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.605239][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.607031][ T4225] usb 2-1: Product: syz [ 194.624247][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.624586][ T4225] usb 2-1: Manufacturer: syz [ 194.647081][ T4225] usb 2-1: SerialNumber: syz [ 194.661660][ T4225] usb 2-1: config 0 descriptor?? [ 194.702604][ T5988] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 194.721955][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.734094][ T4225] option 2-1:0.21: GSM modem (1-port) converter detected [ 194.741570][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.752400][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 194.760418][ T4225] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 194.768474][ T5754] device veth0_vlan entered promiscuous mode [ 194.798418][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.813464][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.847569][ T5754] device veth1_vlan entered promiscuous mode [ 194.864573][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 194.944868][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.992622][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 195.009996][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.033826][ T21] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 195.096829][ T5754] device veth0_macvtap entered promiscuous mode [ 195.115384][ T5754] device veth1_macvtap entered promiscuous mode [ 195.128178][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.233141][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.298596][ T5754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.339940][ T5754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.342666][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.387147][ T5754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.542910][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.622568][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.712579][ T5754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.712671][ T5754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.712730][ T5754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.712825][ T5754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.712879][ T5754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.728137][ T4250] usb 2-1: USB disconnect, device number 5 [ 195.729557][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.731215][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.731863][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.732480][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.733141][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.738437][ T4250] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 195.738979][ T4250] option 2-1:0.21: device disconnected [ 195.742420][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.743425][ T5754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.743446][ T5754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.743458][ T5754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.743471][ T5754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.743482][ T5754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.743495][ T5754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.743506][ T5754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.743520][ T5754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.744792][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.745402][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.746035][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.776713][ T5754] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.776778][ T5754] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.776807][ T5754] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.776835][ T5754] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.822614][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.062390][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.091063][ T4394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.091134][ T4394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.189693][ T6034] netlink: 'syz.1.352': attribute type 3 has an invalid length. [ 196.282722][ T21] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 196.282777][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 196.282845][ T21] usb 5-1: SerialNumber: syz [ 196.319139][ T21] usb 5-1: config 0 descriptor?? [ 196.483834][ T21] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 196.944726][ T6008] input: syz1 as /devices/virtual/input/input12 [ 196.975214][ T6008] input: syz0 as /devices/virtual/input/input13 [ 197.022440][ T3545] bcm5974 5-1:0.0: could not read from device [ 197.406685][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.569751][ T6045] hfs: can't find a HFS filesystem on dev nullb0 [ 197.639742][ T4394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.660705][ T4394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.764292][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 198.860390][ T4188] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 198.870736][ T4188] CPU: 1 PID: 4188 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 198.878444][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 198.888522][ T4188] Workqueue: hci1 hci_rx_work [ 198.893249][ T4188] Call Trace: [ 198.896579][ T4188] [ 198.899538][ T4188] dump_stack_lvl+0x168/0x230 [ 198.904245][ T4188] ? show_regs_print_info+0x20/0x20 [ 198.909469][ T4188] ? load_image+0x3b0/0x3b0 [ 198.914008][ T4188] sysfs_create_dir_ns+0x252/0x280 [ 198.919149][ T4188] ? __lock_acquire+0x7c60/0x7c60 [ 198.924455][ T4188] ? sysfs_warn_dup+0xa0/0xa0 [ 198.929185][ T4188] kobject_add_internal+0x662/0xd00 [ 198.934455][ T4188] kobject_add+0x152/0x210 [ 198.938912][ T4188] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 198.944717][ T4188] ? kobject_init+0x1d0/0x1d0 [ 198.949437][ T4188] ? get_device_parent+0x8b/0x3f0 [ 198.954494][ T4188] ? get_device_parent+0x121/0x3f0 [ 198.959642][ T4188] device_add+0x483/0xfb0 [ 198.964008][ T4188] hci_conn_add_sysfs+0xd1/0x1e0 [ 198.968975][ T4188] le_conn_complete_evt+0xcbc/0x1590 [ 198.974294][ T4188] ? cs_le_create_conn+0x5e0/0x5e0 [ 198.979437][ T4188] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 198.985453][ T4188] ? lockdep_hardirqs_on+0x94/0x140 [ 198.991226][ T4188] hci_le_meta_evt+0x289/0x3b80 [ 198.996120][ T4188] ? hci_event_packet+0x36d/0x12f0 [ 199.001289][ T4188] ? __lock_acquire+0x7c60/0x7c60 [ 199.006356][ T4188] ? release_firmware_map_entry+0x190/0x190 [ 199.012277][ T4188] ? hci_remote_host_features_evt+0x280/0x280 [ 199.018365][ T4188] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 199.024026][ T4188] ? mutex_unlock+0x10/0x10 [ 199.028565][ T4188] ? preempt_schedule+0xa7/0xb0 [ 199.033455][ T4188] ? schedule_preempt_disabled+0x20/0x20 [ 199.039116][ T4188] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 199.044872][ T4188] hci_event_packet+0xe05/0x12f0 [ 199.049850][ T4188] ? rcu_lock_release+0x20/0x20 [ 199.054732][ T4188] ? hci_send_to_monitor+0x9c/0x4a0 [ 199.059959][ T4188] hci_rx_work+0x255/0xa10 [ 199.064719][ T4188] process_one_work+0x863/0x1000 [ 199.069701][ T4188] ? worker_detach_from_pool+0x240/0x240 [ 199.075359][ T4188] ? lockdep_hardirqs_off+0x70/0x100 [ 199.080671][ T4188] ? _raw_spin_lock_irq+0xab/0xe0 [ 199.085711][ T4188] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 199.091115][ T4188] ? wq_worker_running+0x97/0x170 [ 199.096165][ T4188] worker_thread+0xaa8/0x12a0 [ 199.100898][ T4188] kthread+0x436/0x520 [ 199.104984][ T4188] ? rcu_lock_release+0x20/0x20 [ 199.109858][ T4188] ? kthread_blkcg+0xd0/0xd0 [ 199.114585][ T4188] ret_from_fork+0x1f/0x30 [ 199.119044][ T4188] [ 199.191421][ T4188] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 199.261157][ T4188] Bluetooth: hci1: failed to register connection device [ 199.419592][ T21] usb 5-1: USB disconnect, device number 3 [ 199.423749][ T3545] bcm5974 5-1:0.0: could not read from device [ 201.853093][ T6094] netlink: 'syz.4.366': attribute type 3 has an invalid length. [ 203.131858][ T6105] hfs: can't find a HFS filesystem on dev nullb0 [ 203.212419][ T4301] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 203.482455][ T4301] usb 5-1: Using ep0 maxpacket: 16 [ 203.542718][ T4301] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 203.643863][ T4301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.782544][ T4301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.892602][ T4301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.012752][ T4301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.152580][ T4301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.312652][ T4301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.462576][ T4301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.682499][ T4301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.812452][ T4301] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 204.852391][ T4301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 204.907978][ T4301] usb 5-1: SerialNumber: syz [ 204.955645][ T4301] usb 5-1: config 0 descriptor?? [ 205.014476][ T4301] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14 [ 206.632360][ T3545] bcm5974 5-1:0.0: could not read from device [ 206.665848][ T4301] usb 5-1: USB disconnect, device number 4 [ 207.078110][ T6148] hfs: can't find a HFS filesystem on dev nullb0 [ 207.149668][ T6152] netlink: 20 bytes leftover after parsing attributes in process `syz.4.383'. [ 207.487661][ T6159] hfs: can't find a HFS filesystem on dev nullb0 [ 209.312366][ T4225] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 209.684769][ T4225] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 209.702406][ T4225] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 209.767485][ T4225] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 209.792347][ T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 209.808508][ T4225] usb 8-1: config 220 has no interface number 2 [ 209.838927][ T4225] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 209.882396][ T4225] usb 8-1: config 220 interface 0 has no altsetting 0 [ 209.902526][ T4225] usb 8-1: config 220 interface 76 has no altsetting 0 [ 209.940309][ T4225] usb 8-1: config 220 interface 1 has no altsetting 0 [ 210.072401][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 210.112645][ T21] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 210.132559][ T4225] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 210.141657][ T4225] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.166255][ T4225] usb 8-1: Product: syz [ 210.170513][ T4225] usb 8-1: Manufacturer: syz [ 210.180187][ T4225] usb 8-1: SerialNumber: syz [ 210.193770][ T6196] wg2 speed is unknown, defaulting to 1000 [ 210.233276][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.272618][ T4250] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 210.348359][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.476300][ T6203] hfs: can't find a HFS filesystem on dev nullb0 [ 210.771778][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.832632][ T4250] usb 2-1: Using ep0 maxpacket: 16 [ 210.862761][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.998562][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.009133][ T4250] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 211.058246][ T4250] usb 2-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 211.098719][ T6196] chnl_net:caif_netlink_parms(): no params data found [ 211.112895][ T4225] usb 8-1: selecting invalid altsetting 0 [ 211.119294][ T4225] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 211.126215][ T4250] usb 2-1: config 0 interface 0 has no altsetting 0 [ 211.155009][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.160413][ T4225] usb 8-1: No valid video chain found. [ 211.252632][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.283698][ T4225] usb 8-1: selecting invalid altsetting 0 [ 211.289503][ T4225] usbtest: probe of 8-1:220.1 failed with error -22 [ 211.353881][ T4225] usb 8-1: USB disconnect, device number 2 [ 211.515546][ T4250] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 211.525508][ T4250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.533600][ T4250] usb 2-1: Product: syz [ 211.537795][ T4250] usb 2-1: Manufacturer: syz [ 211.542579][ T4250] usb 2-1: SerialNumber: syz [ 211.554938][ T4250] usb 2-1: config 0 descriptor?? [ 211.562464][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.646375][ T6196] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.662527][ T6228] hfs: can't find a HFS filesystem on dev nullb0 [ 211.748160][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.763247][ T21] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 211.789612][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 211.803414][ T6196] device bridge_slave_0 entered promiscuous mode [ 211.818248][ T21] usb 5-1: SerialNumber: syz [ 211.843041][ T6196] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.878224][ T21] usb 5-1: config 0 descriptor?? [ 211.970440][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.989745][ T6196] device bridge_slave_1 entered promiscuous mode [ 212.221176][ T4239] Bluetooth: hci5: command 0x0409 tx timeout [ 212.345316][ T21] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 212.482768][ T3545] bcm5974 5-1:0.0: could not read from device [ 212.532518][ T21] bcm5974 5-1:0.0: could not read from device [ 212.537197][ T6196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.658845][ T4237] usb 2-1: USB disconnect, device number 6 [ 212.662930][ T3545] bcm5974 5-1:0.0: could not read from device [ 212.789119][ T21] input: failed to attach handler mousedev to device input15, error: -5 [ 212.872385][ T21] usb 5-1: USB disconnect, device number 5 [ 212.875505][ T3545] bcm5974 5-1:0.0: could not read from device [ 213.011604][ T6196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.177802][ T6196] team0: Port device team_slave_0 added [ 213.816068][ T6196] team0: Port device team_slave_1 added [ 214.000067][ T6256] hfs: can't find a HFS filesystem on dev nullb0 [ 214.143430][ T6196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.150564][ T6196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.297064][ T6196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.312461][ T1109] Bluetooth: hci5: command 0x041b tx timeout [ 214.702737][ T6267] hfs: can't find a HFS filesystem on dev nullb0 [ 215.053239][ T6196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.065086][ T6196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.097395][ T6196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.846698][ T6196] device hsr_slave_0 entered promiscuous mode [ 215.901286][ T6196] device hsr_slave_1 entered promiscuous mode [ 215.949108][ T6196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.967294][ T6196] Cannot create hsr debugfs directory [ 216.032394][ T1109] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 216.382381][ T1109] usb 1-1: Using ep0 maxpacket: 16 [ 216.392876][ T4301] Bluetooth: hci5: command 0x040f tx timeout [ 216.423199][ T1109] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 216.512772][ T1109] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.015645][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'. [ 217.172593][ T1109] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.186386][ T6196] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 217.252778][ T6310] hfs: can't find a HFS filesystem on dev nullb0 [ 217.925178][ T6196] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 217.953391][ T1109] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.028045][ T6196] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 218.175342][ T6196] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 218.302381][ T1109] usb 1-1: unable to read config index 3 descriptor/all [ 218.309417][ T1109] usb 1-1: can't read configurations, error -71 [ 218.468873][ T6324] program syz.4.423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.816962][ T4225] Bluetooth: hci5: command 0x0419 tx timeout [ 219.000207][ T6196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.093325][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.105661][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.162391][ T21] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 219.177211][ T6196] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.243880][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.267457][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.286782][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.293964][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.310752][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.319788][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.399807][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.406966][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.462648][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.521396][ T6358] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 220.172395][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 220.196221][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.381052][ T6359] hfs: can't find a HFS filesystem on dev nullb0 [ 220.656368][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.657303][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.658405][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.659097][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.659794][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.660523][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.702613][ T21] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 220.702643][ T21] usb 2-1: config 1 has no interface number 0 [ 220.702675][ T21] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 220.702701][ T21] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 220.702726][ T21] usb 2-1: config 1 interface 105 has no altsetting 0 [ 220.717449][ T6196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.717469][ T6196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.852762][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.853480][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.854251][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.854782][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.856257][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.972605][ T21] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 220.972639][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.972662][ T21] usb 2-1: Product: syz [ 220.972679][ T21] usb 2-1: Manufacturer: syz [ 220.972696][ T21] usb 2-1: SerialNumber: syz [ 220.996185][ T6372] input: syz1 as /devices/virtual/input/input16 [ 221.003539][ T6368] hfs: can't find a HFS filesystem on dev nullb0 [ 221.004743][ T6343] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 221.004873][ T6343] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 221.472982][ T6343] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 221.473103][ T6343] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 221.554738][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.554851][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.580438][ T6196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.142604][ T21] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 222.202420][ T21] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 222.365737][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.375033][ T21] aqc111 2-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, fa:2d:50:b9:8f:a2 [ 222.452526][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.461978][ T21] usb 2-1: USB disconnect, device number 7 [ 222.562400][ T21] aqc111 2-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 222.579021][ T6401] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 223.024110][ T21] aqc111 2-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 223.037192][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.062803][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.087183][ T21] aqc111 2-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 223.100083][ T6196] device veth0_vlan entered promiscuous mode [ 223.117608][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.127749][ T21] aqc111 2-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 223.147420][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.187786][ T6196] device veth1_vlan entered promiscuous mode [ 223.270771][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.301457][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.513302][ T6196] device veth0_macvtap entered promiscuous mode [ 223.555796][ T6196] device veth1_macvtap entered promiscuous mode [ 224.034286][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.232286][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.261791][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.331159][ T6434] hfs: can't find a HFS filesystem on dev nullb0 [ 225.314120][ T6436] input: syz1 as /devices/virtual/input/input17 [ 225.538030][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.554629][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.569862][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.631474][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.676635][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.741081][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.760993][ T6449] netlink: 'syz.0.449': attribute type 29 has an invalid length. [ 225.782393][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.809634][ T6196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.885573][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.968091][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 225.990311][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.005284][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.022321][ T6449] netlink: 'syz.0.449': attribute type 29 has an invalid length. [ 226.063818][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.113642][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.176260][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.188597][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.205063][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.224619][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.238380][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.257162][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.270227][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.286564][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.427750][ T6196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.439366][ T6452] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 226.458528][ T6452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.467289][ T6452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.510132][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 226.529024][ T6460] hfs: can't find a HFS filesystem on dev nullb0 [ 226.980348][ T6452] device bridge_slave_0 left promiscuous mode [ 227.028251][ T6452] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.059278][ T6452] device bridge_slave_1 left promiscuous mode [ 227.067160][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.087421][ T6452] bond0: (slave bond_slave_0): Releasing backup interface [ 227.130346][ T6452] bond0: (slave bond_slave_1): Releasing backup interface [ 227.223021][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 227.248226][ T6452] team0: Port device team_slave_0 removed [ 227.306466][ T6452] team0: Port device team_slave_1 removed [ 227.329131][ T6452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.338671][ T6452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.358992][ T6452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.369681][ T6452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.382566][ T7] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 227.402430][ T7] usb 2-1: config 179 has no interface number 0 [ 227.435478][ T6453] team0: Mode changed to "loadbalance" [ 227.452696][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'. [ 227.462408][ T7] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 227.497821][ T7] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 227.529959][ T7] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 227.550769][ T7] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 227.582806][ T7] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 227.631305][ T7] usb 2-1: config 179 interface 65 has no altsetting 0 [ 227.659607][ T7] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 227.696927][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.810754][ T7] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input18 [ 227.935214][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 227.956034][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.028608][ T6196] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.047781][ T7] usb 2-1: USB disconnect, device number 8 [ 228.057725][ T7] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 228.073470][ T6196] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.227663][ T6196] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.241283][ T6196] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.071004][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.100769][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.125987][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.152607][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.166216][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 229.406389][ T6484] hfs: can't find a HFS filesystem on dev nullb0 [ 229.470566][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 230.065668][ T6495] input: syz1 as /devices/virtual/input/input19 [ 230.994644][ T6506] hfs: can't find a HFS filesystem on dev nullb0 [ 231.777320][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.7.461'. [ 232.635461][ T6512] netlink: 'syz.4.465': attribute type 10 has an invalid length. [ 232.935156][ T6512] syz.4.465 (6512) used greatest stack depth: 21184 bytes left [ 233.712098][ T6540] hfs: can't find a HFS filesystem on dev nullb0 [ 234.532334][ T4238] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 234.621012][ T6544] syz.4.471[6544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.621500][ T6544] syz.4.471[6544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.385794][ T6553] hfs: can't find a HFS filesystem on dev nullb0 [ 237.056423][ T1109] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 237.142363][ T4238] usb 2-1: unable to read config index 0 descriptor/all [ 237.152380][ T4238] usb 2-1: can't read configurations, error -71 [ 237.201745][ T6558] netlink: 19 bytes leftover after parsing attributes in process `syz.1.477'. [ 237.352395][ T1109] usb 5-1: Using ep0 maxpacket: 16 [ 237.392709][ T1109] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 237.492511][ T1109] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.602522][ T1109] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.712648][ T1109] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.869591][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 237.879129][ T1109] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.992708][ T1109] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.066951][ T6578] netlink: 'syz.7.480': attribute type 4 has an invalid length. [ 238.082458][ T1109] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.105916][ T6578] netlink: 17 bytes leftover after parsing attributes in process `syz.7.480'. [ 238.192596][ T1109] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.316049][ T1109] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.422663][ T1109] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 238.445713][ T1109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 238.488579][ T1109] usb 5-1: SerialNumber: syz [ 238.520245][ T1109] usb 5-1: config 0 descriptor?? [ 238.587881][ T1109] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input20 [ 238.784866][ T6549] input: syz1 as /devices/virtual/input/input21 [ 238.856885][ T6549] input: syz0 as /devices/virtual/input/input22 [ 238.932517][ T3545] bcm5974 5-1:0.0: could not read from device [ 238.953242][ T1109] usb 5-1: USB disconnect, device number 6 [ 239.107824][ T3545] bcm5974 5-1:0.0: could not read from device [ 239.571915][ T6597] hfs: can't find a HFS filesystem on dev nullb0 [ 240.130478][ T6610] hfs: can't find a HFS filesystem on dev nullb0 [ 241.248022][ T6621] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 241.352457][ T4250] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 241.516954][ T6626] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 241.555575][ T6626] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 241.589122][ T6626] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 241.642403][ T4250] usb 5-1: Using ep0 maxpacket: 16 [ 241.772591][ T4250] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 241.781350][ T4250] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.804590][ T4250] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.650250][ T4250] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.666024][ T4250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.674577][ T4250] usb 5-1: Product: syz [ 242.678878][ T4250] usb 5-1: Manufacturer: syz [ 242.683874][ T4250] usb 5-1: SerialNumber: syz [ 243.924470][ T4253] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 243.928755][ T4250] usb 5-1: 0:2 : does not exist [ 244.232399][ T4253] usb 2-1: Using ep0 maxpacket: 16 [ 244.272546][ T4253] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 244.362498][ T4253] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.472913][ T4253] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.323501][ T4253] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.665524][ T4250] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 245.771066][ T6692] tmpfs: Bad value for 'mpol' [ 246.392624][ T4253] usb 2-1: unable to read config index 3 descriptor/all [ 246.399674][ T4253] usb 2-1: can't read configurations, error -71 [ 247.094269][ T6710] hfs: can't find a HFS filesystem on dev nullb0 [ 247.296812][ T6708] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497 [ 247.306689][ T6708] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 6708, name: syz.8.512 [ 247.315682][ T6708] 1 lock held by syz.8.512/6708: [ 247.320249][ T4250] usb 5-1: USB disconnect, device number 7 [ 247.320661][ T6708] #0: ffffffff8c142078 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 247.336313][ T6708] irq event stamp: 2384 [ 247.340579][ T6708] hardirqs last enabled at (2383): [] asm_sysvec_call_function_single+0x16/0x20 [ 247.351300][ T6708] hardirqs last disabled at (2384): [] _raw_spin_lock_irq+0x7a/0xe0 [ 247.360894][ T6708] softirqs last enabled at (600): [] ip_setsockopt+0x4c0/0x3070 [ 247.370189][ T6708] softirqs last disabled at (598): [] release_sock+0x2b/0x1b0 [ 247.379211][ T6708] Preemption disabled at: [ 247.379218][ T6708] [<0000000000000000>] 0x0 [ 247.388071][ T6708] CPU: 0 PID: 6708 Comm: syz.8.512 Not tainted syzkaller #0 [ 247.395348][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 247.405406][ T6708] Call Trace: [ 247.408682][ T6708] [ 247.411611][ T6708] dump_stack_lvl+0x168/0x230 [ 247.416306][ T6708] ? ip_setsockopt+0x4c0/0x3070 [ 247.421162][ T6708] ? show_regs_print_info+0x20/0x20 [ 247.426363][ T6708] ? load_image+0x3b0/0x3b0 [ 247.430874][ T6708] ___might_sleep+0x47c/0x600 [ 247.435555][ T6708] ? __might_sleep+0xf0/0xf0 [ 247.440159][ T6708] down_read+0x20/0x2e0 [ 247.444339][ T6708] kernfs_walk_and_get_ns+0x81/0x2b0 [ 247.449636][ T6708] ? kernfs_find_ns+0x510/0x510 [ 247.454492][ T6708] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 247.460652][ T6708] cgroup_get_from_path+0x5f/0x2f0 [ 247.465765][ T6708] cgroup_mt_check_v1+0x1ae/0x2c0 [ 247.470797][ T6708] xt_check_match+0x3c6/0xaa0 [ 247.475476][ T6708] ? xt_check_proc_name+0x240/0x240 [ 247.480679][ T6708] ? strcmp+0x24/0xb0 [ 247.484667][ T6708] ? xt_find_match+0x1e1/0x210 [ 247.489432][ T6708] translate_table+0x14f8/0x1fe0 [ 247.494381][ T6708] ? ipt_register_table+0x7e0/0x7e0 [ 247.499588][ T6708] ? __might_fault+0xb7/0x110 [ 247.504288][ T6708] ? __lock_acquire+0x7c60/0x7c60 [ 247.509425][ T6708] ? _copy_from_user+0x111/0x170 [ 247.514367][ T6708] do_ipt_set_ctl+0x96c/0xcf0 [ 247.519050][ T6708] ? release_firmware_map_entry+0x190/0x190 [ 247.524944][ T6708] ? nf_setsockopt+0x218/0x280 [ 247.529708][ T6708] ? ipt_unregister_table_exit+0x220/0x220 [ 247.535572][ T6708] ? __lock_acquire+0x7c60/0x7c60 [ 247.540602][ T6708] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 247.546590][ T6708] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 247.552490][ T6708] ? mutex_unlock+0x10/0x10 [ 247.557431][ T6708] ? asm_sysvec_call_function_single+0x16/0x20 [ 247.563585][ T6708] ? nf_setsockopt+0xf3/0x280 [ 247.568266][ T6708] nf_setsockopt+0x25f/0x280 [ 247.572870][ T6708] ip_setsockopt+0x2127/0x3070 [ 247.577729][ T6708] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 247.583554][ T6708] ? __might_sleep+0xf0/0xf0 [ 247.588155][ T6708] ? rcu_lock_release+0x9/0x20 [ 247.592937][ T6708] tcp_setsockopt+0x21a/0x1d70 [ 247.597700][ T6708] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 247.603079][ T6708] ? aa_af_perm+0x2b0/0x2b0 [ 247.607582][ T6708] ? __fget_files+0x40f/0x480 [ 247.612274][ T6708] ? aa_sock_opt_perm+0x74/0x100 [ 247.617217][ T6708] ? sock_common_setsockopt+0x32/0xb0 [ 247.622585][ T6708] ? sock_common_recvmsg+0x1b0/0x1b0 [ 247.627865][ T6708] __sys_setsockopt+0x2bf/0x3d0 [ 247.632714][ T6708] __x64_sys_setsockopt+0xb1/0xc0 [ 247.637832][ T6708] do_syscall_64+0x4c/0xa0 [ 247.642246][ T6708] ? clear_bhb_loop+0x30/0x80 [ 247.646916][ T6708] ? clear_bhb_loop+0x30/0x80 [ 247.651587][ T6708] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.657490][ T6708] RIP: 0033:0x7f65cc785fc9 [ 247.661926][ T6708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.681533][ T6708] RSP: 002b:00007f65ca9cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 247.689941][ T6708] RAX: ffffffffffffffda RBX: 00007f65cc9dd090 RCX: 00007f65cc785fc9 [ 247.697924][ T6708] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 247.705889][ T6708] RBP: 00007f65cc808f91 R08: 00000000000022f8 R09: 0000000000000000 [ 247.713858][ T6708] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 247.721828][ T6708] R13: 00007f65cc9dd128 R14: 00007f65cc9dd090 R15: 00007ffc1f821b48 [ 247.729805][ T6708] [ 247.732838][ T6708] [ 247.735153][ T6708] ============================= [ 247.739985][ T6708] [ BUG: Invalid wait context ] [ 247.744821][ T6708] syzkaller #0 Tainted: G W [ 247.750612][ T6708] ----------------------------- [ 247.755444][ T6708] syz.8.512/6708 is trying to lock: [ 247.760629][ T6708] ffffffff8c24d5b0 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x81/0x2b0 [ 247.770103][ T6708] other info that might help us debug this: [ 247.775974][ T6708] context-{4:4} [ 247.779420][ T6708] 1 lock held by syz.8.512/6708: [ 247.784343][ T6708] #0: ffffffff8c142078 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 247.794075][ T6708] stack backtrace: [ 247.797783][ T6708] CPU: 0 PID: 6708 Comm: syz.8.512 Tainted: G W syzkaller #0 [ 247.806447][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 247.816496][ T6708] Call Trace: [ 247.819941][ T6708] [ 247.822864][ T6708] dump_stack_lvl+0x168/0x230 [ 247.827560][ T6708] ? show_regs_print_info+0x20/0x20 [ 247.832754][ T6708] ? load_image+0x3b0/0x3b0 [ 247.837277][ T6708] __lock_acquire+0x1be9/0x7c60 [ 247.842135][ T6708] ? verify_lock_unused+0x140/0x140 [ 247.847333][ T6708] ? __printk_cpu_unlock+0x5f/0x70 [ 247.852437][ T6708] ? dump_stack_lvl+0x1bf/0x230 [ 247.857285][ T6708] ? ip_setsockopt+0x4c0/0x3070 [ 247.862129][ T6708] ? show_regs_print_info+0x20/0x20 [ 247.867321][ T6708] ? load_image+0x3b0/0x3b0 [ 247.871876][ T6708] lock_acquire+0x197/0x3f0 [ 247.876396][ T6708] ? kernfs_walk_and_get_ns+0x81/0x2b0 [ 247.881871][ T6708] ? __might_sleep+0xf0/0xf0 [ 247.886470][ T6708] ? read_lock_is_recursive+0x10/0x10 [ 247.891845][ T6708] down_read+0x44/0x2e0 [ 247.896109][ T6708] ? kernfs_walk_and_get_ns+0x81/0x2b0 [ 247.901803][ T6708] kernfs_walk_and_get_ns+0x81/0x2b0 [ 247.907090][ T6708] ? kernfs_find_ns+0x510/0x510 [ 247.911943][ T6708] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 247.918103][ T6708] cgroup_get_from_path+0x5f/0x2f0 [ 247.923214][ T6708] cgroup_mt_check_v1+0x1ae/0x2c0 [ 247.928248][ T6708] xt_check_match+0x3c6/0xaa0 [ 247.933057][ T6708] ? xt_check_proc_name+0x240/0x240 [ 247.938364][ T6708] ? strcmp+0x24/0xb0 [ 247.942354][ T6708] ? xt_find_match+0x1e1/0x210 [ 247.947119][ T6708] translate_table+0x14f8/0x1fe0 [ 247.952063][ T6708] ? ipt_register_table+0x7e0/0x7e0 [ 247.957273][ T6708] ? __might_fault+0xb7/0x110 [ 247.961960][ T6708] ? __lock_acquire+0x7c60/0x7c60 [ 247.966990][ T6708] ? _copy_from_user+0x111/0x170 [ 247.971927][ T6708] do_ipt_set_ctl+0x96c/0xcf0 [ 247.976605][ T6708] ? release_firmware_map_entry+0x190/0x190 [ 247.982508][ T6708] ? nf_setsockopt+0x218/0x280 [ 247.987274][ T6708] ? ipt_unregister_table_exit+0x220/0x220 [ 247.993088][ T6708] ? __lock_acquire+0x7c60/0x7c60 [ 247.998108][ T6708] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 248.004110][ T6708] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 248.009760][ T6708] ? mutex_unlock+0x10/0x10 [ 248.014346][ T6708] ? asm_sysvec_call_function_single+0x16/0x20 [ 248.020526][ T6708] ? nf_setsockopt+0xf3/0x280 [ 248.025214][ T6708] nf_setsockopt+0x25f/0x280 [ 248.029802][ T6708] ip_setsockopt+0x2127/0x3070 [ 248.034593][ T6708] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 248.040001][ T6708] ? __might_sleep+0xf0/0xf0 [ 248.044610][ T6708] ? rcu_lock_release+0x9/0x20 [ 248.049369][ T6708] tcp_setsockopt+0x21a/0x1d70 [ 248.054150][ T6708] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 248.059521][ T6708] ? aa_af_perm+0x2b0/0x2b0 [ 248.064020][ T6708] ? __fget_files+0x40f/0x480 [ 248.068697][ T6708] ? aa_sock_opt_perm+0x74/0x100 [ 248.073631][ T6708] ? sock_common_setsockopt+0x32/0xb0 [ 248.079001][ T6708] ? sock_common_recvmsg+0x1b0/0x1b0 [ 248.084287][ T6708] __sys_setsockopt+0x2bf/0x3d0 [ 248.089144][ T6708] __x64_sys_setsockopt+0xb1/0xc0 [ 248.094168][ T6708] do_syscall_64+0x4c/0xa0 [ 248.098601][ T6708] ? clear_bhb_loop+0x30/0x80 [ 248.103286][ T6708] ? clear_bhb_loop+0x30/0x80 [ 248.107982][ T6708] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.113873][ T6708] RIP: 0033:0x7f65cc785fc9 [ 248.118373][ T6708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.137980][ T6708] RSP: 002b:00007f65ca9cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 248.146390][ T6708] RAX: ffffffffffffffda RBX: 00007f65cc9dd090 RCX: 00007f65cc785fc9 [ 248.154367][ T6708] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 248.162331][ T6708] RBP: 00007f65cc808f91 R08: 00000000000022f8 R09: 0000000000000000 [ 248.170297][ T6708] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 248.178281][ T6708] R13: 00007f65cc9dd128 R14: 00007f65cc9dd090 R15: 00007ffc1f821b48 [ 248.186258][ T6708] [ 248.198333][ T6708] xt_cgroup: invalid path, errno=-2 [ 248.202361][ T6715] hub 1-0:1.0: USB hub found [ 248.215376][ T6715] hub 1-0:1.0: 1 port detected [ 248.356335][ T4294] udevd[4294]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.674299][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.680663][ T1422] ieee802154 phy1 wpan1: encryption failed: -22