last executing test programs: 1m50.67334996s ago: executing program 2 (id=108): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$user(&(0x7f00000001c0), 0x0, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) setns(0xc9, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02", 0x15) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/tipc/key_exchange_enabled\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1\n', 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1111}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x28, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) 1m48.655332277s ago: executing program 3 (id=114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex=0 wLength=0\x00', 0x36) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000000)=""/20, &(0x7f00000000c0)=0x14) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r4, 0x1) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) 1m48.320440675s ago: executing program 2 (id=115): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x204, &(0x7f0000000180)={[{0x79, 0x4e00, "8adc2324a7ed5577d4ae2916718153576bb4ba2cf6185ad7d4e6f6ec7eab3477205c6bf2ca0b74f366bcea4ee46f75120b930176ae33f30378e53e73b78c96b6885427c1a64aa4c6f1ccf46b0cc566488501d45e1b6babf075035c4fe22ea06a1454b94f8c387a246d30d2b114cd53a836a6ab89d44065542d"}, {0x6e, 0x4e00, "a42ece16b4d63a8668f1082d40d7bd93b5570314e2093bace1e8bf939436d4c0d5145dd7e9b10b2a73403c55169e3255a0ceb7b894e26d15e90d5f8fbf01129b48e143172b370e3ffe4df63329341728157de583ea2db904c0a50d0542bc0756c27fbf51dc9ac1f4f0a406d28e61"}, {0x7d, 0x4e00, "0fc1ad7425ff1c101ad721ef2c2709fed179ad1879553e7695183ddbdbbb82fc20a64f52bb03bfb373250dc7bb74b6fa1bfb890e06d5add613002d552cbae54c3b5c8b70f59fab090a3e3e811eb34ab0dc625f74b27b477fa3488c65047f77d81bd53a7d321610ec15788d0b2541feaa38d47a92b2a2355435a6db1594"}, {0x85, 0x4e00, "163b0d2a3e0dd62bfed826a1ea9020f5d2258477de977f74c2b0446143d584dde07f03ce787b862719ae91569eb17003287d67b42afa5f55466b7bd41d994794ee4857e6ccb983fff9626c0a2f9868a45a6880315aabc9f55881cc7df33a0786db64dc27eea7eee3ef6f27dd3480cd51fabcbb02a89d3231907f9ac2239e939eedb2791ca6"}]}) 1m47.293877294s ago: executing program 3 (id=116): socket(0x40000000015, 0x5, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 1m47.009345634s ago: executing program 3 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000805}, 0x24048040) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) socket(0x400000000010, 0x3, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) 1m45.662388738s ago: executing program 3 (id=119): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000400)='.log\x00', 0x80, 0x2b) ioctl$TCFLSH(r0, 0x540b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0xa08410, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 1m45.007925068s ago: executing program 0 (id=121): socket(0x10, 0x3, 0x0) timer_create(0xfffffffffffffffc, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000f80)={{0x12, 0x1, 0x201, 0xc8, 0x33, 0x89, 0x8, 0x4c8, 0x720, 0xb651, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x6, 0x50, 0x7f, "", [{{0x9, 0x4, 0xd4, 0x7, 0x0, 0x60, 0x3e, 0x70, 0x92}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000001000)={0x0, 0x0, 0x80000001, 0xfffffffffffffff7, 0xffffffffffffffff}) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, &(0x7f00000010c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$inet6(0xa, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f"], 0x48}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 1m43.584880639s ago: executing program 2 (id=123): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 1m43.429401186s ago: executing program 0 (id=125): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x10, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m42.947036329s ago: executing program 3 (id=126): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x130, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40085, &(0x7f0000000180)={0xa, 0x4e5e, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 1m42.845894489s ago: executing program 0 (id=127): socket(0x40000000015, 0x5, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 1m42.753688417s ago: executing program 3 (id=128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x7}}]}}]}, 0x48}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0x80000001, 0x7}, 0x42}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 1m42.468171302s ago: executing program 0 (id=129): mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) timer_gettime(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500000102000109023c00010100a032090400"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) 1m41.408740788s ago: executing program 1 (id=130): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000280)=0x3, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, 0x0, &(0x7f0000000040), &(0x7f0000000140)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0x0, 0x1d2}, 0x0, 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x3, 0xb66, 0x0, 0x0}}, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x9) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000400060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) syslog(0x3, &(0x7f0000000000)=""/112, 0x70) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0xffffffff, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x9, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x3, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0xd, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x51, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x4, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x40000a9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484451], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x20, 0x7e, 0x9, 0x9602, 0x40006, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) 1m40.591895128s ago: executing program 0 (id=131): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2006}) 1m39.365645331s ago: executing program 2 (id=132): r0 = openat$vimc0(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000100)={0x3, 0x1, [0x4, 0x9, 0xffffffff, 0x9, 0x8001, 0x5, 0xa720, 0xb2b]}) 1m37.94513898s ago: executing program 2 (id=133): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f00000031c0)={0x2020}, 0x2020) write$FUSE_STATX(r0, 0x0, 0x0) 1m37.682393917s ago: executing program 1 (id=134): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') socket$inet_smc(0x2b, 0x1, 0x0) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x21a6022, &(0x7f0000000580)=ANY=[@ANYBLOB="61756469742c67e1506910fc83995f747970653d696d9e2343237846886d617369672c736d61636b667368"]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_clone3(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 1m37.525333284s ago: executing program 0 (id=135): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 1m37.525115528s ago: executing program 2 (id=136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f000000ae00)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0xf2ff}, {0x0, 0xffff}, {0x300, 0x1}}}, 0x24}}, 0x0) 1m37.182858697s ago: executing program 1 (id=137): socket(0x40000000015, 0x5, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, 0x0, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000e07, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x404, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd25}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) 1m36.923515589s ago: executing program 1 (id=138): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x130, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40085, &(0x7f0000000180)={0xa, 0x4e5e, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 1m36.778904557s ago: executing program 1 (id=139): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') socket$inet_smc(0x2b, 0x1, 0x0) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0xba, &(0x7f00000005c0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x84, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x2, 0x2, [{0x0, 0x1, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@ipv4={'\x00', '\xff\xff', @local}, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], [0x5]}, {0x80, 0x4, 0x0, @mcast2, [], [0x1, 0x3, 0x20ad, 0xfffffffb]}]}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x21a6022, &(0x7f0000000580)=ANY=[@ANYBLOB="61756469742c67e1506910fc83995f747970653d696d9e2343237846886d617369672c736d61636b667368"]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) madvise(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(0x0, 0x0) read$FUSE(r3, 0x0, 0x0) 1m35.581720547s ago: executing program 1 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) r0 = gettid() r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff010000000000", @ANYRES32=r0], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002500)={0x11, 0x5, 0x0, 0x1, 0x7f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x1c}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) fsmount(0xffffffffffffffff, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000"], 0x48) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x2000000d, 0x2, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xfffffffffffffe26}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x80000) 1m27.619996467s ago: executing program 32 (id=128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x7}}]}}]}, 0x48}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0x80000001, 0x7}, 0x42}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 1m22.115958139s ago: executing program 33 (id=135): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 1m21.989337524s ago: executing program 34 (id=136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f000000ae00)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0xf2ff}, {0x0, 0xffff}, {0x300, 0x1}}}, 0x24}}, 0x0) 1m20.311327191s ago: executing program 35 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) r0 = gettid() r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff010000000000", @ANYRES32=r0], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002500)={0x11, 0x5, 0x0, 0x1, 0x7f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x1c}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) fsmount(0xffffffffffffffff, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000"], 0x48) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x2000000d, 0x2, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xfffffffffffffe26}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x80000) 18.345394148s ago: executing program 8 (id=250): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x4) fsopen(&(0x7f0000000280)='ufs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 16.115685348s ago: executing program 8 (id=259): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') socket$inet_smc(0x2b, 0x1, 0x0) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x21a6022, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_clone3(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 15.328373856s ago: executing program 7 (id=260): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="3830000001000000000080000300000095000000000000004a1aa9d2823d6f46"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000010000100dc080000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92a900000000000000f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb6000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(0x0, 0xc0, 0x40001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000380)=0x90000) 14.247925799s ago: executing program 8 (id=264): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)="030000001b0000000800000001000000000b000000010004000000", 0x1b) inotify_add_watch(r0, 0x0, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='e:my_read_msr1 msr/read_msr\n', 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000540)=@newtaction={0x48, 0x30, 0x100, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/events/msr/read_msr/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)="0891d81ff9b15a644ed2cfb3e1caf76f7129285785e38c14dbe68dfc70ce6c3e764cfc105d87de4abfbc2d4b80f3bad5cf211a74efb842bef63c2148040000d8d8813fc7fe0ccb46bdd6b60667ab4a5cedab", 0x52) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x444, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x37c, 0x238, 0x238, 0x37c, 0x238, 0x3, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0x0, 0xff000000], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x20c, 0x274, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@inet=@sctp={{0x144}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd], 0x6, [{}, {}, {}, {0x0, 0x0, 0x1}], 0x80, 0x1, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8000, 0x0, 0xb6, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [], 'batadv_slave_0\x00', 'gre0\x00', {}, {}, 0x87}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@mh={{0x24}, {"32cf", 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5, 0x14, {0x8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4a0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1\n', 0x2) 11.938392357s ago: executing program 8 (id=270): shmat(0x0, &(0x7f000051b000/0x3000)=nil, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$netlink(0x10, 0x3, 0x8000000004) socket(0x400000000010, 0x3, 0x0) r0 = io_uring_setup(0x4053, &(0x7f0000000040)={0x0, 0x2063, 0x0, 0x2, 0x94}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 10.631712627s ago: executing program 7 (id=273): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs/binder0\x00', 0x402, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000a40)=[@increfs], 0x0, 0x0, 0x0}) 10.291002586s ago: executing program 7 (id=275): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0xe4) setns(0xc9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x10, 0x2, 0x0) listen(r3, 0x2) 9.033318399s ago: executing program 6 (id=277): mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000000), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_null}]}) statfs(&(0x7f0000000240)='./bus\x00', &(0x7f0000000600)=""/4096) 8.633339713s ago: executing program 7 (id=279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591638d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0006cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296560000d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fd92bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f46dc53a26fd997f3af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde84f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c5770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46ba8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a650b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0c1043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077be00000000d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc654ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x3, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0xfffffffffffffe00, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r5, r6, 0x10000, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x26, 0x5, 0xffffffff8e040048, 0x0, 0xfffc, 0x8, 0xfffff5a3, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r5, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) close_range(r3, 0xffffffffffffffff, 0x0) 8.430528321s ago: executing program 6 (id=281): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400800c) 7.219661581s ago: executing program 7 (id=282): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xd1355000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x710}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 6.777399504s ago: executing program 6 (id=283): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="3830000001000000000080000300000095000000000000004a1aa9d2823d6f46"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000010000100dc080000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92a900000000000000f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb6000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(0x0, 0xc0, 0x40001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000380)=0x90000) 6.36200074s ago: executing program 7 (id=284): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 6.089481329s ago: executing program 5 (id=286): r0 = msgget$private(0x0, 0x508) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x800) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_RMID(r0, 0x0) 5.548190009s ago: executing program 4 (id=287): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07", 0x51}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49", 0xd2}], 0x2, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.498333938s ago: executing program 5 (id=288): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4(r0, 0x0, 0x0, 0x800) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffe) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$MSR(&(0x7f0000000000), 0x1ff, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4.581967089s ago: executing program 8 (id=289): socket$igmp(0x2, 0x3, 0x2) gettid() pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) setresgid(0xee00, 0x0, 0x0) sendto$unix(r2, &(0x7f00000004c0), 0x0, 0xd1, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 4.395279434s ago: executing program 6 (id=290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}]}}}, {0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}, @NFTA_TARGET_INFO={0x2a, 0x3, "ac1a91d256ebf87b31fd38a2be95c85844a4f447fd7a4bfafc0f574e29fdc1532d88822344f6"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc8}}, 0x0) 4.137040977s ago: executing program 8 (id=291): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0xe4) setns(0xc9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x10, 0x2, 0x0) listen(r3, 0x2) 4.135462453s ago: executing program 5 (id=292): socket$igmp(0x2, 0x3, 0x2) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x108) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 4.13403539s ago: executing program 4 (id=293): r0 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff0100000000", @ANYRES32=r0, @ANYBLOB="000000d17c"], 0x50) 3.472607566s ago: executing program 5 (id=294): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x204, &(0x7f0000000180)={[{0x79, 0x4e00, "8adc2324a7ed5577d4ae2916718153576bb4ba2cf6185ad7d4e6f6ec7eab3477205c6bf2ca0b74f366bcea4ee46f75120b930176ae33f30378e53e73b78c96b6885427c1a64aa4c6f1ccf46b0cc566488501d45e1b6babf075035c4fe22ea06a1454b94f8c387a246d30d2b114cd53a836a6ab89d44065542d"}, {0x6e, 0x4e00, "a42ece16b4d63a8668f1082d40d7bd93b5570314e2093bace1e8bf939436d4c0d5145dd7e9b10b2a73403c55169e3255a0ceb7b894e26d15e90d5f8fbf01129b48e143172b370e3ffe4df63329341728157de583ea2db904c0a50d0542bc0756c27fbf51dc9ac1f4f0a406d28e61"}, {0x7d, 0x4e00, "0fc1ad7425ff1c101ad721ef2c2709fed179ad1879553e7695183ddbdbbb82fc20a64f52bb03bfb373250dc7bb74b6fa1bfb890e06d5add613002d552cbae54c3b5c8b70f59fab090a3e3e811eb34ab0dc625f74b27b477fa3488c65047f77d81bd53a7d321610ec15788d0b2541feaa38d47a92b2a2355435a6db1594"}, {0x85, 0x4e00, "163b0d2a3e0dd62bfed826a1ea9020f5d2258477de977f74c2b0446143d584dde07f03ce787b862719ae91569eb17003287d67b42afa5f55466b7bd41d994794ee4857e6ccb983fff9626c0a2f9868a45a6880315aabc9f55881cc7df33a0786db64dc27eea7eee3ef6f27dd3480cd51fabcbb02a89d3231907f9ac2239e939eedb2791ca6"}]}) 3.068586088s ago: executing program 4 (id=295): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)="030000001b0000000800000001000000000b000000010004000000", 0x1b) inotify_add_watch(r0, 0x0, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='e:my_read_msr1 msr/read_msr\n', 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000540)=@newtaction={0x48, 0x30, 0x100, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/events/msr/read_msr/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)="0891d81ff9b15a644ed2cfb3e1caf76f7129285785e38c14dbe68dfc70ce6c3e764cfc105d87de4abfbc2d4b80f3bad5cf211a74efb842bef63c2148040000d8d8813fc7fe0ccb46bdd6b60667ab4a5cedab", 0x52) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x444, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x37c, 0x238, 0x238, 0x37c, 0x238, 0x3, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0x0, 0xff000000], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x20c, 0x274, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@inet=@sctp={{0x144}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd], 0x6, [{}, {}, {}, {0x0, 0x0, 0x1}], 0x80, 0x1, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8000, 0x0, 0xb6, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [], 'batadv_slave_0\x00', 'gre0\x00', {}, {}, 0x87}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@mh={{0x24}, {"32cf", 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5, 0x14, {0x8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4a0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1\n', 0x2) 3.066462573s ago: executing program 6 (id=296): mount(0x0, 0x0, &(0x7f0000000400)='sysv\x00', 0x2200030, &(0x7f0000000140)='discard') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000640), 0x0, 0x300100, 0x0) socket(0x5, 0x80805, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() syz_emit_ethernet(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) 2.930887695s ago: executing program 4 (id=297): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs/binder0\x00', 0x402, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 1.92516256s ago: executing program 5 (id=298): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840), 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') socket$inet_smc(0x2b, 0x1, 0x0) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0xfa, &(0x7f00000005c0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0xc4, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x2, 0x2, [{0x0, 0x1, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@ipv4={'\x00', '\xff\xff', @local}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], [0x5]}, {0x80, 0x4, 0x5, @mcast2, [@remote, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote], [0x1, 0x3, 0x20ad, 0xfffffffb]}]}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x21a6022, &(0x7f0000000580)=ANY=[@ANYBLOB="61756469742c67e1506910fc83995f747970653d696d9e2343237846886d617369672c736d61636b667368"]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) madvise(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(0x0, 0x0) read$FUSE(r3, 0x0, 0x0) 1.84742601s ago: executing program 4 (id=299): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000b00)={0x4, 0x0, [{0x10000, 0xfc, &(0x7f0000000700)=""/252}, {0x100000, 0x80, &(0x7f0000000880)=""/128}, {0x4000, 0x25, &(0x7f0000000900)=""/37}, {0x58000, 0x4a, &(0x7f0000000a80)=""/74}]}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x40110) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.798972119s ago: executing program 6 (id=300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x105100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYRESHEX=r1, @ANYRES32=r4, @ANYBLOB="0900340014020202250200000a00060008b71100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7e}, @device_a, @device_a, @from_mac, {0x1, 0xe}, @value=@ver_80211n={0x0, 0x7f, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x17, @val={0x8c, 0x10, {0x909, "36831dc8ca4b", @short="76d50701faca5d99"}}}, 0x30) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b0000000080211000000100000000200"/30], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x81}, @device_a, @device_b, @random="a495f621e873", {0xc, 0x7}, @value=@ver_80211n={0x0, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1}}, @void, @val={0x1, 0x6, [{0x9, 0x1}, {0xc}, {0x36}, {0x2, 0x1}, {0x60}, {0xc}]}, @val={0x3, 0x1, 0xb7}, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x1519, 0x7, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2}, 0x300, 0x10, 0x8c}}, @void, [{0xdd, 0xd, "52f1439b629ee1a116905333ad"}, {0xdd, 0x36, "7c2d38918017a87d6b21c07bd83b06db74c231bd8e524c06f1682bef47d7cb0193c320feada255d767aa2f601c581b7deed44c3d9618"}, {0xdd, 0xcb, "00f5c31d40ea9d6c3a237343578081def69f2aa1257536663fe2c725aba21daa4661ac37a2f48e32f74ebb374ec091c293bc99e4b1b058ff7f41eff40a2b37bd4b298425da2f2d4fba324f2a7723c7493b85fc6086884f1073902dd51e18c577ab22fa594a5dc78c4bcb2b8115d573b8197022d4c921dfc5a1308e8c453785fde3d921ac8707f6742f746d6d27e79099a0428098dcb69a1e3a70c26fd106bf9159e08efe4713460db4ef73d271a98e3fbb337ae1c41bddb1df9354a5cd38eaf4e9f5312a717103952d5e90"}, {0xdd, 0xdf, "1dbec2e72b22b1ffbc7048b49556047c8598e2c292251bbe0fbd08b10599f107837df0ce868f7dff3cb6c64eeb26f90abdf3472966e33a20e5c88b070a930deded05f8cb525dfe364dfb05d5edc7db21f78f380104d7a60e750e3d32d8d44a5355eee21b095c8839cc8327febe6f36173c1746aeed2a24e0ddeb01d68313c2aad8b029a4e8fbf3a7698bc97f65a8e9cc24f693fbf299dee2310131ca4bbc7ad12aea92f12259021bae01eba070c07736bee79c04acedef04a11a22b34b78a539de02c901dd014d2823ab42f7255d387e96f36fb455e84c4e00150ccf1a4da5"}]}, 0x238) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='nodev\x00', &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='sys/bus/pci/devices/0000:00:04.0/config\x00', 0x101041, 0x92) write(r5, &(0x7f0000000680)='1', 0x1) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000040)='sys\x00', 0x1ff) r7 = socket$netlink(0x10, 0x3, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r7) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys/bus/pci/devices/0000:00:04.0/config\x00', 0x2, 0x100) pwrite64(r8, &(0x7f0000000180)='\x00\x00', 0x2, 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r9, &(0x7f0000000200)='1', 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000100)={0x4}) syz_io_uring_setup(0x34, &(0x7f00000002c0)={0x0, 0x4000880e, 0x13100, 0x0, 0x4, 0x0, r9}, &(0x7f0000000280), &(0x7f0000000080), &(0x7f0000000000)) 946.775328ms ago: executing program 5 (id=301): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) fsopen(&(0x7f00000001c0)='bdev\x00', 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='16', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) close(r3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2b4950e2c1a0b5b052ae7609ba5aecca6e20beb023dcb1c"], 0x0) 0s ago: executing program 4 (id=302): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4(r0, 0x0, 0x0, 0x800) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffe) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$MSR(&(0x7f0000000000), 0x1ff, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts. [ 91.375094][ T5587] cgroup: Unknown subsys name 'net' [ 91.616922][ T5587] cgroup: Unknown subsys name 'cpuset' [ 91.671334][ T5587] cgroup: Unknown subsys name 'rlimit' [ 91.859154][ T821] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 93.608256][ T5587] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.102966][ T4916] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.108512][ T4916] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.113515][ T4916] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.139120][ T4916] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.140609][ T4916] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.319515][ T4916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.332461][ T4916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.334471][ T4916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.335830][ T4916] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.336770][ T4916] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.425405][ T4916] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.426581][ T4916] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.427236][ T4916] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.429980][ T4916] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.435966][ T4916] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.555198][ T4916] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.558292][ T4916] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.558970][ T4916] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.586472][ T4916] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.587537][ T4916] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.701451][ T4916] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.709731][ T4916] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.725847][ T4916] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.730009][ T4916] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.731547][ T4916] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.243457][ T59] Bluetooth: hci0: command tx timeout [ 98.400875][ T59] Bluetooth: hci1: command tx timeout [ 98.482150][ T59] Bluetooth: hci2: command tx timeout [ 98.640908][ T59] Bluetooth: hci3: command tx timeout [ 98.800870][ T59] Bluetooth: hci4: command tx timeout [ 98.960293][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.962498][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.963175][ T5613] bridge_slave_0: entered allmulticast mode [ 98.970954][ T5613] bridge_slave_0: entered promiscuous mode [ 99.007552][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.007680][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.007993][ T5606] bridge_slave_0: entered allmulticast mode [ 99.009660][ T5606] bridge_slave_0: entered promiscuous mode [ 99.058480][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.058590][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.058922][ T5613] bridge_slave_1: entered allmulticast mode [ 99.060655][ T5613] bridge_slave_1: entered promiscuous mode [ 99.102244][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.102362][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.102502][ T5606] bridge_slave_1: entered allmulticast mode [ 99.104733][ T5606] bridge_slave_1: entered promiscuous mode [ 99.106050][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.106150][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.106522][ T5617] bridge_slave_0: entered allmulticast mode [ 99.108313][ T5617] bridge_slave_0: entered promiscuous mode [ 99.178191][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.178295][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.178408][ T5611] bridge_slave_0: entered allmulticast mode [ 99.180205][ T5611] bridge_slave_0: entered promiscuous mode [ 99.217150][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.217255][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.217638][ T5617] bridge_slave_1: entered allmulticast mode [ 99.219443][ T5617] bridge_slave_1: entered promiscuous mode [ 99.261712][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.261912][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.262061][ T5611] bridge_slave_1: entered allmulticast mode [ 99.264346][ T5611] bridge_slave_1: entered promiscuous mode [ 99.330413][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.388261][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.424381][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.448895][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.461681][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.461906][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.462026][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.462174][ T5620] bridge_slave_0: entered allmulticast mode [ 99.464172][ T5620] bridge_slave_0: entered promiscuous mode [ 99.509002][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.532547][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.532931][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.533045][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.533159][ T5620] bridge_slave_1: entered allmulticast mode [ 99.535013][ T5620] bridge_slave_1: entered promiscuous mode [ 99.581805][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.633762][ T5613] team0: Port device team_slave_0 added [ 99.652457][ T5606] team0: Port device team_slave_0 added [ 99.687474][ T5613] team0: Port device team_slave_1 added [ 99.707444][ T5606] team0: Port device team_slave_1 added [ 99.709309][ T5617] team0: Port device team_slave_0 added [ 99.721955][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.745988][ T5611] team0: Port device team_slave_0 added [ 99.772668][ T5617] team0: Port device team_slave_1 added [ 99.775298][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.807759][ T5611] team0: Port device team_slave_1 added [ 99.854132][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.854144][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.854163][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.906648][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.906659][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.906678][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.976033][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.976053][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.976082][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.054069][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.054086][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.054116][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.055203][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.055213][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.055229][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.058287][ T5620] team0: Port device team_slave_0 added [ 100.097151][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.097187][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.097251][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.154885][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.154923][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.154986][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.163150][ T5620] team0: Port device team_slave_1 added [ 100.188439][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.188488][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.188552][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.320822][ T59] Bluetooth: hci0: command tx timeout [ 100.348729][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.348739][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.348756][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.428797][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.428809][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.428827][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.480836][ T59] Bluetooth: hci1: command tx timeout [ 100.483890][ T5613] hsr_slave_0: entered promiscuous mode [ 100.484992][ T5613] hsr_slave_1: entered promiscuous mode [ 100.560901][ T59] Bluetooth: hci2: command tx timeout [ 100.720910][ T59] Bluetooth: hci3: command tx timeout [ 100.808188][ T5606] hsr_slave_0: entered promiscuous mode [ 100.809149][ T5606] hsr_slave_1: entered promiscuous mode [ 100.809964][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 100.810037][ T5606] Cannot create hsr debugfs directory [ 100.877911][ T5617] hsr_slave_0: entered promiscuous mode [ 100.878709][ T5617] hsr_slave_1: entered promiscuous mode [ 100.879514][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 100.879529][ T5617] Cannot create hsr debugfs directory [ 100.880901][ T59] Bluetooth: hci4: command tx timeout [ 100.920293][ T5611] hsr_slave_0: entered promiscuous mode [ 100.927843][ T5611] hsr_slave_1: entered promiscuous mode [ 100.928794][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 100.928828][ T5611] Cannot create hsr debugfs directory [ 101.094291][ T5620] hsr_slave_0: entered promiscuous mode [ 101.095193][ T5620] hsr_slave_1: entered promiscuous mode [ 101.095872][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 101.095889][ T5620] Cannot create hsr debugfs directory [ 101.845380][ T5613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.901906][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.917426][ T5613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.964605][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.967560][ T5613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.989067][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.031102][ T5613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.055913][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.169248][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.200641][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.215482][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.246450][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.248185][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.294740][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.324528][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.356597][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.401288][ T59] Bluetooth: hci0: command tx timeout [ 102.489986][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.539708][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.551632][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.561054][ T59] Bluetooth: hci1: command tx timeout [ 102.604829][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.610502][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.640866][ T59] Bluetooth: hci2: command tx timeout [ 102.662220][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.687062][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.714380][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.801131][ T59] Bluetooth: hci3: command tx timeout [ 102.855025][ T5620] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.894913][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.901512][ T5620] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.934645][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.950007][ T5620] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.960893][ T59] Bluetooth: hci4: command tx timeout [ 102.985128][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.017954][ T5620] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.066047][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.157753][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.230194][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.266190][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.279281][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.309308][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.324661][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.364243][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.380018][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.407807][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.454415][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.493094][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.513552][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.514076][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.578214][ T3290] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.578315][ T3290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.723792][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.762253][ T3290] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.762577][ T3290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.804755][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.831674][ T3406] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.831775][ T3406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.937389][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.978320][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.978470][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.013272][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.062412][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.062548][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.226191][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.296978][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.315343][ T3406] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.315474][ T3406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.398091][ T3406] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.398239][ T3406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.481442][ T59] Bluetooth: hci0: command tx timeout [ 104.569904][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.631728][ T1428] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.632536][ T1428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.644887][ T59] Bluetooth: hci1: command tx timeout [ 104.708681][ T1428] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.708870][ T1428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.723026][ T59] Bluetooth: hci2: command tx timeout [ 104.880964][ T59] Bluetooth: hci3: command tx timeout [ 105.044546][ T59] Bluetooth: hci4: command tx timeout [ 105.110599][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.884956][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.233279][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.252503][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.285319][ T5613] veth0_vlan: entered promiscuous mode [ 106.327767][ T5617] veth0_vlan: entered promiscuous mode [ 106.382022][ T5613] veth1_vlan: entered promiscuous mode [ 106.409621][ T5617] veth1_vlan: entered promiscuous mode [ 106.478906][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.558050][ T5620] veth0_vlan: entered promiscuous mode [ 106.569385][ T5611] veth0_vlan: entered promiscuous mode [ 106.588335][ T5613] veth0_macvtap: entered promiscuous mode [ 106.603693][ T5617] veth0_macvtap: entered promiscuous mode [ 106.625271][ T5613] veth1_macvtap: entered promiscuous mode [ 106.629703][ T5620] veth1_vlan: entered promiscuous mode [ 106.648399][ T5611] veth1_vlan: entered promiscuous mode [ 106.649880][ T5617] veth1_macvtap: entered promiscuous mode [ 106.726124][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.728526][ T5606] veth0_vlan: entered promiscuous mode [ 106.745702][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.767032][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.787836][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.820285][ T5606] veth1_vlan: entered promiscuous mode [ 106.844773][ T5620] veth0_macvtap: entered promiscuous mode [ 106.866942][ T5611] veth0_macvtap: entered promiscuous mode [ 106.887275][ T5620] veth1_macvtap: entered promiscuous mode [ 106.981285][ T5611] veth1_macvtap: entered promiscuous mode [ 107.326813][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.413052][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.449860][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.454497][ T5606] veth0_macvtap: entered promiscuous mode [ 107.514161][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.545073][ T5606] veth1_macvtap: entered promiscuous mode [ 107.604362][ T3406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.604388][ T3406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.786518][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.786539][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.942203][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.017976][ T1428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.017992][ T1428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.140511][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.423843][ T3302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.423864][ T3302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.714412][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.714431][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.181747][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.181767][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.194131][ T1169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.330364][ T1236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.330385][ T1236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.527482][ T44] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.527860][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.528742][ T44] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.540795][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.540815][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.710878][ T3392] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.710937][ T3392] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.710996][ T3392] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.711041][ T3392] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.711078][ T3392] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.711114][ T3392] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.711152][ T3392] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.711187][ T3392] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.711224][ T3392] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.711259][ T3392] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.711295][ T3392] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.711332][ T3392] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.711369][ T3392] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.711406][ T3392] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.711443][ T3392] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.711498][ T3392] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.414056][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.414078][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.078491][ T5793] bridge_slave_0: left allmulticast mode [ 111.078529][ T5793] bridge_slave_0: left promiscuous mode [ 111.084922][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.587404][ T5793] bridge_slave_1: left allmulticast mode [ 111.587434][ T5793] bridge_slave_1: left promiscuous mode [ 111.587726][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.852239][ T5793] bond0: (slave bond_slave_0): Releasing backup interface [ 111.922094][ T5793] bond0: (slave bond_slave_1): Releasing backup interface [ 111.977338][ T5793] team0: Port device team_slave_0 removed [ 112.027099][ T5793] team0: Port device team_slave_1 removed [ 112.027845][ T5793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.027862][ T5793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.072793][ T5793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.072813][ T5793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.105109][ T5793] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 112.105331][ T5714] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.413288][ T5714] usb 4-1: Using ep0 maxpacket: 32 [ 112.442378][ T5714] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 112.442405][ T5714] usb 4-1: config 0 has no interface number 0 [ 112.442453][ T5714] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 112.477468][ T3406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.477522][ T3406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.503706][ T5714] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 112.503737][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.503758][ T5714] usb 4-1: Product: syz [ 112.503773][ T5714] usb 4-1: Manufacturer: syz [ 112.503788][ T5714] usb 4-1: SerialNumber: syz [ 112.791405][ T5714] usb 4-1: config 0 descriptor?? [ 112.820260][ T5802] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 113.059969][ T5802] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 113.421149][ T5813] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9'. [ 113.916830][ T37] audit: type=1326 audit(1785713810.291:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5803 comm="syz.0.1" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08947ce019 code=0x7ffc0000 [ 113.916933][ T37] audit: type=1326 audit(1785713810.311:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5803 comm="syz.0.1" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08947ce019 code=0x7ffc0000 [ 114.879157][ T37] audit: type=1326 audit(1785713811.291:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5803 comm="syz.0.1" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f089478e84e code=0x7ffc0000 [ 114.879250][ T37] audit: type=1326 audit(1785713811.291:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5803 comm="syz.0.1" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f089478e84e code=0x7ffc0000 [ 114.879306][ T37] audit: type=1326 audit(1785713811.291:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5803 comm="syz.0.1" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f089478e84e code=0x7ffc0000 [ 114.879419][ T37] audit: type=1326 audit(1785713811.291:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5803 comm="syz.0.1" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08947ce019 code=0x7ffc0000 [ 114.879549][ T37] audit: type=1326 audit(1785713811.291:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5803 comm="syz.0.1" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08947ce019 code=0x7ffc0000 [ 114.953853][ T37] audit: type=1326 audit(1785713811.371:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5803 comm="syz.0.1" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08947ce019 code=0x7ffc0000 [ 114.955542][ T37] audit: type=1326 audit(1785713811.371:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5803 comm="syz.0.1" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08947ce019 code=0x7ffc0000 [ 114.956184][ T37] audit: type=1326 audit(1785713811.371:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5803 comm="syz.0.1" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f08947ce019 code=0x7ffc0000 [ 115.888421][ T5714] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 115.888452][ T5714] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 115.889019][ T5714] asix 4-1:0.188: probe with driver asix failed with error -71 [ 116.070879][ T5714] usb 4-1: USB disconnect, device number 2 [ 117.500727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.690739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.807117][ T5839] gadgetfs: bound to dummy_udc driver [ 119.172899][ T198] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 119.173235][ C0] gadgetfs: connected [ 119.173712][ T198] gadgetfs: disconnected [ 119.242740][ T5840] gadgetfs: suspended from state 2 [ 119.515916][ T198] usb 1-1: device not accepting address 2, error -71 [ 120.981418][ T5859] syz.1.23 (5859): drop_caches: 2 [ 121.465419][ T5865] binder: 5863:5865 ioctl c0306201 200000000540 returned -22 [ 122.342236][ T5877] Zero length message leads to an empty skb [ 125.080180][ T198] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.957075][ T198] usb 1-1: device not accepting address 4, error -71 [ 129.422267][ T198] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.911170][ T198] usb 1-1: Using ep0 maxpacket: 8 [ 130.076291][ T198] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.076321][ T198] usb 1-1: config 0 has no interface number 0 [ 130.076464][ T198] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 130.076580][ T198] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 130.076637][ T198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.392209][ T5919] binder: 5918:5919 ioctl c0306201 200000000540 returned -22 [ 131.900318][ T198] usb 1-1: config 0 descriptor?? [ 133.112008][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.112098][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.242011][ T198] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 134.288733][ T198] usb 1-1: USB disconnect, device number 6 [ 134.696285][ T5936] binder: 5935:5936 ioctl 4018620d 0 returned -22 [ 134.714816][ T5936] binder: 5935:5936 ioctl c0306201 200000000540 returned -22 [ 134.771284][ T5938] binder: 5935:5938 ioctl c0306201 200000000640 returned -22 [ 137.131126][ T5729] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 137.322190][ T5729] usb 1-1: Using ep0 maxpacket: 16 [ 137.330038][ T5729] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.330096][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.330145][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 137.330167][ T5729] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 137.330196][ T5729] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.380574][ T5729] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 137.380661][ T5729] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 137.380899][ T5729] usb 1-1: Manufacturer: syz [ 137.497421][ T5729] usb 1-1: config 0 descriptor?? [ 137.681216][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 137.685590][ T5966] sg_write: process 29 (syz.2.54) changed security contexts after opening file descriptor, this is not allowed. [ 137.880798][ T5729] rc_core: IR keymap rc-hauppauge not found [ 137.880819][ T5729] Registered IR keymap rc-empty [ 137.881380][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 137.881509][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 137.883922][ T31] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 137.883946][ T31] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 137.883983][ T31] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 137.884007][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.900877][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 138.255207][ T5729] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 138.292249][ T31] usb 5-1: string descriptor 0 read error: -71 [ 138.316839][ T31] usb 5-1: USB disconnect, device number 2 [ 138.436014][ T5981] binder: 5980:5981 ioctl 4018620d 0 returned -22 [ 138.467285][ T5981] binder: 5980:5981 ioctl c0306201 200000000540 returned -22 [ 138.550907][ T5983] binder: 5980:5983 ioctl c0306201 200000000640 returned -22 [ 140.724131][ T5729] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 143.741314][ T821] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 145.415556][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.432456][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.462259][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.483761][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.501010][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.521315][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.551780][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.571044][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.590942][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.613052][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.636274][ T5729] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 145.636297][ T5729] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 145.691197][ T5729] usb 1-1: USB disconnect, device number 7 [ 146.180717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 146.300723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 146.420714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 146.970716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 147.670734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 148.453028][ T6030] evm: overlay not supported [ 149.400727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 149.480717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 151.810717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 152.251081][ T198] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 152.405853][ T198] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 152.405884][ T198] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.405904][ T198] usb 4-1: config 0 has no interface number 0 [ 152.405937][ T198] usb 4-1: config 0 interface 205 has no altsetting 0 [ 152.409319][ T198] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 152.409350][ T198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.409371][ T198] usb 4-1: Product: syz [ 152.409386][ T198] usb 4-1: Manufacturer: syz [ 152.409401][ T198] usb 4-1: SerialNumber: syz [ 152.414051][ T5729] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 152.547234][ T198] usb 4-1: config 0 descriptor?? [ 152.631250][ T198] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 152.631648][ T198] dvb-usb: bulk message failed: -22 (3/0) [ 152.659015][ T5729] usb 2-1: Using ep0 maxpacket: 32 [ 152.671973][ T5729] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 152.672013][ T5729] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 152.672049][ T5729] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 152.672074][ T5729] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 152.672099][ T5729] usb 2-1: config 0 interface 0 has no altsetting 0 [ 152.676955][ T5729] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 152.676985][ T5729] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 152.677007][ T5729] usb 2-1: Product: syz [ 152.677021][ T5729] usb 2-1: Manufacturer: syz [ 152.677035][ T5729] usb 2-1: SerialNumber: syz [ 152.813297][ T5729] usb 2-1: config 0 descriptor?? [ 153.195078][ T5729] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 156.981452][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.057355][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.057654][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.139026][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.208872][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.209105][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.213003][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.295819][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.296020][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.368930][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 159.364859][ T6060] syz.3.78 (6060) used greatest stack depth: 18728 bytes left [ 159.412531][ T821] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 159.412768][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 159.464004][ T5729] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 159.469605][ T198] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 159.476848][ T198] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 159.476954][ T198] usb 4-1: media controller created [ 159.540505][ T198] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.566831][ T5729] usb 2-1: USB disconnect, device number 2 [ 159.570845][ T821] usb 1-1: device descriptor read/64, error -32 [ 159.597326][ T5729] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 159.672623][ T6075] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 159.777948][ T198] dvb-usb: bulk message failed: -22 (6/0) [ 159.778023][ T198] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 159.815175][ T198] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 159.857142][ T198] dvb-usb: schedule remote query interval to 150 msecs. [ 159.857213][ T198] dvb-usb: bulk message failed: -22 (3/0) [ 159.874734][ T198] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 159.892646][ T821] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 159.977925][ T198] usb 4-1: USB disconnect, device number 4 [ 160.080905][ T821] usb 1-1: Using ep0 maxpacket: 16 [ 160.174395][ T821] usb 1-1: config 0 interface 0 has no altsetting 0 [ 160.174476][ T821] usb 1-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 160.174500][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.436379][ T1253] dvb-usb: bulk message failed: -22 (1/0) [ 160.436427][ T1253] dvb-usb: error while querying for an remote control event. [ 161.441753][ T5887] dvb-usb: bulk message failed: -22 (1/0) [ 161.441796][ T5887] dvb-usb: error while querying for an remote control event. [ 161.603495][ T1253] dvb-usb: bulk message failed: -22 (1/0) [ 161.603529][ T1253] dvb-usb: error while querying for an remote control event. [ 161.693285][ T821] usb 1-1: config 0 descriptor?? [ 161.693986][ T821] usb 1-1: can't set config #0, error -71 [ 161.714829][ T821] usb 1-1: USB disconnect, device number 9 [ 161.761152][ T1253] dvb-usb: bulk message failed: -22 (1/0) [ 161.761185][ T1253] dvb-usb: error while querying for an remote control event. [ 163.308932][ T6082] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd3": -EINTR [ 164.541371][ T6105] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 164.546090][ T198] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 166.175381][ T6126] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 166.260318][ T6133] [U]  [ 166.260355][ T6133] [U] K{ [ 166.267109][ T6133] [U] T 1ŠFFˊ`GJǘGO/MC [ 166.338378][ T6133] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 166.339087][ T6133] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 166.379339][ T6133] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 166.460460][ T6133] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 166.489978][ T6133] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 166.507393][ T6133] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 166.527819][ T6133] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 166.624736][ T6133] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 166.635723][ T6133] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 166.636193][ T6133] [U] 22Ʃ۩X?0;3U [ 166.690035][ T6133] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 166.691540][ T6133] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 166.706310][ T6133] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 166.717112][ T6133] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 166.752633][ T6133] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 166.752821][ T6133] [U] EC [ 166.796284][ T6133] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 166.840301][ T6129] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 167.301745][ T1253] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 167.731660][ T1253] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.731720][ T1253] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 167.731745][ T1253] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.748956][ T1253] usb 3-1: config 0 descriptor?? [ 167.870624][ T1253] pwc: Askey VC010 type 2 USB webcam detected. [ 171.087202][ T4916] Bluetooth: hci4: link tx timeout [ 171.087399][ T4916] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.405249][ T1253] pwc: recv_control_msg error -71 req 02 val 2b00 [ 171.406291][ T1253] pwc: recv_control_msg error -71 req 02 val 2700 [ 171.406775][ T1253] pwc: recv_control_msg error -71 req 02 val 2c00 [ 171.407281][ T1253] pwc: recv_control_msg error -71 req 04 val 1000 [ 171.499836][ T1253] pwc: recv_control_msg error -71 req 04 val 1300 [ 171.500370][ T1253] pwc: recv_control_msg error -71 req 04 val 1400 [ 171.516212][ T1253] pwc: recv_control_msg error -71 req 02 val 2000 [ 171.516739][ T1253] pwc: recv_control_msg error -71 req 02 val 2100 [ 171.517257][ T1253] pwc: recv_control_msg error -71 req 04 val 1500 [ 171.518711][ T1253] pwc: recv_control_msg error -71 req 02 val 2500 [ 171.519374][ T1253] pwc: recv_control_msg error -71 req 02 val 2400 [ 171.566044][ T1253] pwc: recv_control_msg error -71 req 02 val 2600 [ 171.566552][ T1253] pwc: recv_control_msg error -71 req 02 val 2900 [ 171.584547][ T1253] pwc: recv_control_msg error -71 req 02 val 2800 [ 171.585274][ T1253] pwc: recv_control_msg error -71 req 04 val 1100 [ 171.585766][ T1253] pwc: recv_control_msg error -71 req 04 val 1200 [ 171.747974][ T1253] pwc: Registered as video103. [ 171.770867][ T1253] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 171.836005][ T1253] usb 3-1: USB disconnect, device number 2 [ 171.856783][ T4916] Bluetooth: hci4: link tx timeout [ 171.856805][ T4916] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.621144][ T6180] tipc: Started in network mode [ 172.621205][ T6180] tipc: Node identity 1000001, cluster identity 4369 [ 172.621289][ T6180] tipc: Node number set to 16777217 [ 172.859881][ T6180] tipc: Cannot configure node identity twice [ 172.861899][ T6179] tipc: Enabling of bearer rejected, failed to enable media [ 173.216202][ T4916] Bluetooth: hci4: command 0x0406 tx timeout [ 174.925727][ T6185] bond1: option xmit_hash_policy: invalid value (6) [ 175.017084][ T6185] bond1 (unregistering): Released all slaves [ 175.283272][ T5695] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 176.370811][ T5695] usb 3-1: Using ep0 maxpacket: 32 [ 176.373179][ T5695] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 176.373206][ T5695] usb 3-1: config 0 has no interface number 0 [ 176.543023][ T5695] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 176.543046][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.543061][ T5695] usb 3-1: Product: syz [ 176.543071][ T5695] usb 3-1: Manufacturer: syz [ 176.543082][ T5695] usb 3-1: SerialNumber: syz [ 176.610634][ T5695] usb 3-1: config 0 descriptor?? [ 176.689547][ T5695] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 177.393861][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 177.473327][ T5695] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 177.552005][ T5695] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 177.622379][ T5695] usb 3-1: USB disconnect, device number 3 [ 177.727265][ T5695] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 177.822702][ T5695] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 177.826776][ T5695] quatech2 3-1:0.51: device disconnected [ 179.090813][ T5695] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 179.222454][ T5695] usb 3-1: device descriptor read/64, error -71 [ 179.471663][ T5695] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 179.646360][ T5695] usb 3-1: device descriptor read/64, error -71 [ 179.751186][ T5695] usb usb3-port1: attempt power cycle [ 179.879279][ T6234] syzkaller0: entered promiscuous mode [ 179.879301][ T6234] syzkaller0: entered allmulticast mode [ 180.102331][ T5695] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 180.132634][ T5695] usb 3-1: device descriptor read/8, error -71 [ 180.170785][ T31] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 180.322400][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 180.323539][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.350545][ T31] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 180.350576][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 180.350598][ T31] usb 1-1: Product: syz [ 180.350614][ T31] usb 1-1: Manufacturer: syz [ 180.439708][ T31] sisusb 1-1:1.0: Invalid USB2VGA device [ 180.439746][ T31] sisusb 1-1:1.0: probe with driver sisusb failed with error -22 [ 180.470790][ T5695] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 180.491592][ T5695] usb 3-1: device descriptor read/8, error -71 [ 180.601429][ T5695] usb usb3-port1: unable to enumerate USB device [ 180.662366][ T5695] usb 1-1: USB disconnect, device number 10 [ 182.200994][ T821] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 182.505541][ T821] usb 2-1: Using ep0 maxpacket: 8 [ 182.530470][ T821] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 182.530535][ T821] usb 2-1: config 0 has no interface number 0 [ 182.531938][ T821] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 182.531984][ T821] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 182.532010][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.571709][ T821] usb 2-1: config 0 descriptor?? [ 184.409977][ T821] usb 2-1: can't set config #0, error -71 [ 184.427527][ T821] usb 2-1: USB disconnect, device number 3 [ 189.670976][ T821] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 189.835176][ T821] usb 5-1: device descriptor read/64, error -71 [ 190.081505][ T821] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 190.223807][ T821] usb 5-1: device descriptor read/64, error -71 [ 190.333259][ T821] usb usb5-port1: attempt power cycle [ 190.690857][ T821] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 190.732343][ T821] usb 5-1: device descriptor read/8, error -71 [ 190.981353][ T821] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 191.018951][ T821] usb 5-1: device descriptor read/8, error -71 [ 191.121332][ T821] usb usb5-port1: unable to enumerate USB device [ 194.271909][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.271984][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.755173][ T4916] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 194.758597][ T4916] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 194.763361][ T4916] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 194.811398][ T4916] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 194.812190][ T4916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 196.889766][ T59] Bluetooth: hci5: command tx timeout [ 197.170886][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 197.311624][ T31] usb 5-1: device descriptor read/64, error -71 [ 197.550931][ T31] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 197.696761][ T31] usb 5-1: device descriptor read/64, error -71 [ 197.802487][ T31] usb usb5-port1: attempt power cycle [ 198.180928][ T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 198.201573][ T31] usb 5-1: device descriptor read/8, error -71 [ 198.451196][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 198.474441][ T31] usb 5-1: device descriptor read/8, error -71 [ 198.583548][ T31] usb usb5-port1: unable to enumerate USB device [ 198.960844][ T59] Bluetooth: hci5: command tx timeout [ 200.568976][ T5608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 200.612204][ T5608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 200.614175][ T5608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 200.616047][ T5608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 200.657980][ T6347] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 200.676786][ T5608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 200.710114][ T6347] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 200.713780][ T6347] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 200.717862][ T5608] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 200.818870][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 201.040823][ T4916] Bluetooth: hci5: command tx timeout [ 201.950573][ T6283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.140'. [ 202.004984][ T6283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.140'. [ 202.886174][ T4916] Bluetooth: hci6: command tx timeout [ 202.963966][ T4916] Bluetooth: hci7: command tx timeout [ 203.069320][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 203.099762][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 203.118781][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 203.121017][ T59] Bluetooth: hci5: command tx timeout [ 203.143919][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 203.188328][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 204.970813][ T59] Bluetooth: hci6: command tx timeout [ 205.054716][ T59] Bluetooth: hci7: command tx timeout [ 205.370879][ T59] Bluetooth: hci8: command tx timeout [ 206.130835][ T821] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 206.270901][ T821] usb 5-1: device descriptor read/64, error -71 [ 206.438677][ T3392] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.550843][ T821] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 206.680937][ T821] usb 5-1: device descriptor read/64, error -71 [ 206.791133][ T821] usb usb5-port1: attempt power cycle [ 206.941445][ T3392] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.041413][ T59] Bluetooth: hci6: command tx timeout [ 207.121745][ T59] Bluetooth: hci7: command tx timeout [ 207.141878][ T821] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 207.172071][ T821] usb 5-1: device descriptor read/8, error -71 [ 207.212817][ T3392] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.410844][ T821] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 207.433652][ T821] usb 5-1: device descriptor read/8, error -71 [ 207.440822][ T59] Bluetooth: hci8: command tx timeout [ 207.506461][ T3392] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.541318][ T821] usb usb5-port1: unable to enumerate USB device [ 208.318727][ T6311] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.319145][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.319350][ T6311] bridge_slave_0: entered allmulticast mode [ 208.328721][ T6311] bridge_slave_0: entered promiscuous mode [ 208.394198][ T6311] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.394302][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.394660][ T6311] bridge_slave_1: entered allmulticast mode [ 208.397757][ T6311] bridge_slave_1: entered promiscuous mode [ 208.439775][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.439902][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.440055][ T6341] bridge_slave_0: entered allmulticast mode [ 208.447767][ T6341] bridge_slave_0: entered promiscuous mode [ 208.542077][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.542217][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.542353][ T6341] bridge_slave_1: entered allmulticast mode [ 208.544285][ T6341] bridge_slave_1: entered promiscuous mode [ 208.658142][ T6311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.717826][ T6311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.760012][ T6341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.788556][ T6340] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.788713][ T6340] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.788844][ T6340] bridge_slave_0: entered allmulticast mode [ 208.790788][ T6340] bridge_slave_0: entered promiscuous mode [ 208.912957][ T3392] bridge_slave_1: left allmulticast mode [ 208.913129][ T3392] bridge_slave_1: left promiscuous mode [ 208.915508][ T3392] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.130830][ T59] Bluetooth: hci6: command tx timeout [ 209.132199][ T3392] bridge_slave_0: left allmulticast mode [ 209.132223][ T3392] bridge_slave_0: left promiscuous mode [ 209.157552][ T3392] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.210828][ T59] Bluetooth: hci7: command tx timeout [ 209.520785][ T59] Bluetooth: hci8: command tx timeout [ 211.601042][ T59] Bluetooth: hci8: command tx timeout [ 212.071675][ T3392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.161560][ T3392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.203398][ T3392] bond0 (unregistering): Released all slaves [ 212.236208][ T6341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.260623][ T6340] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.260981][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.261166][ T6340] bridge_slave_1: entered allmulticast mode [ 212.269734][ T6340] bridge_slave_1: entered promiscuous mode [ 212.350965][ T198] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 212.481912][ T198] usb 5-1: device descriptor read/64, error -71 [ 212.537567][ T6311] team0: Port device team_slave_0 added [ 212.604558][ T6311] team0: Port device team_slave_1 added [ 212.622442][ T6372] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.622529][ T6372] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.622660][ T6372] bridge_slave_0: entered allmulticast mode [ 212.625330][ T6372] bridge_slave_0: entered promiscuous mode [ 212.629025][ T6341] team0: Port device team_slave_0 added [ 212.704754][ T6340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.705118][ T6372] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.705317][ T6372] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.705498][ T6372] bridge_slave_1: entered allmulticast mode [ 212.707909][ T6372] bridge_slave_1: entered promiscuous mode [ 212.714953][ T6341] team0: Port device team_slave_1 added [ 212.750807][ T198] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 212.789414][ T6340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.861313][ T6311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.861327][ T6311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.861346][ T6311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.890817][ T198] usb 5-1: device descriptor read/64, error -71 [ 213.001634][ T198] usb usb5-port1: attempt power cycle [ 213.230751][ T6311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.230766][ T6311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.230789][ T6311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.261224][ T6372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.273392][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.273444][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.273526][ T6341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.362492][ T6340] team0: Port device team_slave_0 added [ 213.378695][ T6372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.382337][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.382378][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.382445][ T6341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.390868][ T198] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 213.418860][ T198] usb 5-1: device descriptor read/8, error -71 [ 213.544397][ T6340] team0: Port device team_slave_1 added [ 213.651015][ T198] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 213.671402][ T198] usb 5-1: device descriptor read/8, error -71 [ 213.781672][ T198] usb usb5-port1: unable to enumerate USB device [ 214.144910][ T6372] team0: Port device team_slave_0 added [ 214.272739][ T6340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.272756][ T6340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.272782][ T6340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.335245][ T6372] team0: Port device team_slave_1 added [ 214.378898][ T6340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.378914][ T6340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.378960][ T6340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.452204][ T6311] hsr_slave_0: entered promiscuous mode [ 214.453289][ T6311] hsr_slave_1: entered promiscuous mode [ 214.453985][ T6311] debugfs: 'hsr0' already exists in 'hsr' [ 214.454019][ T6311] Cannot create hsr debugfs directory [ 214.766675][ T6341] hsr_slave_0: entered promiscuous mode [ 214.768161][ T6341] hsr_slave_1: entered promiscuous mode [ 214.784027][ T6341] debugfs: 'hsr0' already exists in 'hsr' [ 214.784053][ T6341] Cannot create hsr debugfs directory [ 214.788832][ T6372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.788847][ T6372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.788875][ T6372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.990971][ T3392] hsr_slave_0: left promiscuous mode [ 215.010974][ T3392] hsr_slave_1: left promiscuous mode [ 215.011963][ T3392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.012042][ T3392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.062937][ T3392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.062968][ T3392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.183758][ T3392] veth1_macvtap: left promiscuous mode [ 215.184085][ T3392] veth0_macvtap: left promiscuous mode [ 215.184408][ T3392] veth1_vlan: left promiscuous mode [ 215.184768][ T3392] veth0_vlan: left promiscuous mode [ 216.772263][ T3392] team0 (unregistering): Port device team_slave_1 removed [ 216.831617][ T3392] team0 (unregistering): Port device team_slave_0 removed [ 217.085634][ T6372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.085646][ T6372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.085664][ T6372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.088407][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 217.397470][ T6340] hsr_slave_0: entered promiscuous mode [ 217.398555][ T6340] hsr_slave_1: entered promiscuous mode [ 217.399293][ T6340] debugfs: 'hsr0' already exists in 'hsr' [ 217.399310][ T6340] Cannot create hsr debugfs directory [ 217.711474][ T6372] hsr_slave_0: entered promiscuous mode [ 217.712915][ T6372] hsr_slave_1: entered promiscuous mode [ 217.713878][ T6372] debugfs: 'hsr0' already exists in 'hsr' [ 217.713903][ T6372] Cannot create hsr debugfs directory [ 218.639213][ T6484] overlayfs: failed to resolve './file1': -2 [ 220.128856][ T5263] 8021q: adding VLAN 0 to HW filter on device eth2 [ 220.285534][ T6311] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 220.390935][ T6311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.393053][ T6311] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 220.426735][ T6311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.442227][ T6311] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 220.521532][ T6311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 221.390228][ T3392] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.473881][ T6311] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 221.536990][ T6311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 221.921031][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 221.980972][ T3392] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.132728][ T5263] 8021q: adding VLAN 0 to HW filter on device eth3 [ 222.295688][ T6341] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 222.328760][ T6341] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 222.467307][ T3392] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.523345][ T6341] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 222.568579][ T6341] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.591204][ T6341] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 222.684871][ T6341] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.688583][ T6341] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 222.826207][ T6341] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 223.128861][ T3392] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.077451][ T5263] 8021q: adding VLAN 0 to HW filter on device eth4 [ 224.297871][ T6340] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 224.386410][ T6340] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 224.521475][ T6340] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 224.589260][ T6340] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 224.617470][ T6340] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 224.657351][ T6340] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 224.744177][ T6340] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 224.827067][ T6340] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 225.166571][ T6311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.667258][ T3392] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.717402][ T6372] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 226.757473][ T6372] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.770789][ T1253] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 226.770940][ T6372] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 226.845930][ T6372] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.847774][ T6311] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.872405][ T6372] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 226.895977][ T6372] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.914245][ T6372] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 226.930896][ T1253] usb 5-1: Using ep0 maxpacket: 8 [ 226.932881][ T1253] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 226.932908][ T1253] usb 5-1: config 179 has no interface number 0 [ 226.932954][ T1253] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 226.932974][ T1253] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 226.932994][ T1253] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 226.933012][ T1253] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 226.933032][ T1253] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 226.933062][ T1253] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 226.933078][ T1253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.940409][ T6565] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 227.051393][ T6372] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 227.401963][ T3392] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.498716][ T3406] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.498887][ T3406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.656190][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.656373][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.788188][ T6341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.809651][ T198] usb 5-1: USB disconnect, device number 19 [ 227.809706][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 227.809754][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 227.868138][ T1253] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input8 [ 228.033018][ T3392] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.249218][ T3392] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.475557][ T6341] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.644500][ T3416] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.644777][ T3416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.785392][ T3416] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.785552][ T3416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.822495][ T5263] 8021q: adding VLAN 0 to HW filter on device eth5 [ 230.199223][ T6340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.466459][ T6340] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.621283][ T3392] bridge_slave_1: left allmulticast mode [ 230.621311][ T3392] bridge_slave_1: left promiscuous mode [ 230.630532][ T3392] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.772151][ T3392] bridge_slave_0: left allmulticast mode [ 230.772180][ T3392] bridge_slave_0: left promiscuous mode [ 230.772399][ T3392] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.083862][ T3392] bridge_slave_1: left allmulticast mode [ 231.083901][ T3392] bridge_slave_1: left promiscuous mode [ 231.084165][ T3392] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.496159][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060cbac00: rx timeout, send abort [ 231.997334][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060cbac00: abort rx timeout. Force session deactivation [ 232.057822][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060cba800: rx timeout, send abort [ 232.557963][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060cba800: abort rx timeout. Force session deactivation [ 233.020027][ T3392] bridge_slave_0: left allmulticast mode [ 233.038764][ T3392] bridge_slave_0: left promiscuous mode [ 233.064184][ T3392] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.121692][ T3392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.201609][ T3392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.223455][ T3392] bond0 (unregistering): Released all slaves [ 234.731430][ T3392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.791593][ T3392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.834085][ T3392] bond0 (unregistering): Released all slaves [ 234.896639][ T3416] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.899111][ T3416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.947609][ T6372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.093777][ T3416] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.095002][ T3416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.288071][ T6372] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.491965][ T1428] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.492107][ T1428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.585096][ T3290] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.585188][ T3290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.349112][ T6311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.018871][ T5263] 8021q: adding VLAN 0 to HW filter on device eth6 [ 238.954423][ T6341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.526854][ T6340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.616997][ T6311] veth0_vlan: entered promiscuous mode [ 240.031052][ T3392] hsr_slave_0: left promiscuous mode [ 240.095730][ T3392] hsr_slave_1: left promiscuous mode [ 240.096981][ T3392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.096999][ T3392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.153250][ T3392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.153272][ T3392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.371528][ T3392] hsr_slave_0: left promiscuous mode [ 240.410885][ T3392] hsr_slave_1: left promiscuous mode [ 240.414706][ T3392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.414727][ T3392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.481332][ T3392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.481362][ T3392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.658382][ T3392] veth1_macvtap: left promiscuous mode [ 240.658456][ T3392] veth0_macvtap: left promiscuous mode [ 240.658626][ T3392] veth1_vlan: left promiscuous mode [ 240.658746][ T3392] veth0_vlan: left promiscuous mode [ 240.806605][ T3392] veth1_macvtap: left promiscuous mode [ 240.806678][ T3392] veth0_macvtap: left promiscuous mode [ 240.806844][ T3392] veth1_vlan: left promiscuous mode [ 240.841197][ T3392] veth0_vlan: left promiscuous mode [ 241.764079][ T3392] team0 (unregistering): Port device team_slave_1 removed [ 241.821339][ T3392] team0 (unregistering): Port device team_slave_0 removed [ 243.226848][ T3392] team0 (unregistering): Port device team_slave_1 removed [ 243.281514][ T3392] team0 (unregistering): Port device team_slave_0 removed [ 243.527018][ T5263] 8021q: adding VLAN 0 to HW filter on device eth7 [ 243.546693][ T6311] veth1_vlan: entered promiscuous mode [ 243.858111][ T6372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.859548][ T6311] veth0_macvtap: entered promiscuous mode [ 243.888139][ T6311] veth1_macvtap: entered promiscuous mode [ 245.275292][ T6311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.372379][ T6311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.376685][ T5263] 8021q: adding VLAN 0 to HW filter on device eth8 [ 246.809516][ T6340] veth0_vlan: entered promiscuous mode [ 247.176518][ T6341] veth0_vlan: entered promiscuous mode [ 247.366031][ T6340] veth1_vlan: entered promiscuous mode [ 247.511007][ T6372] veth0_vlan: entered promiscuous mode [ 247.517576][ T6341] veth1_vlan: entered promiscuous mode [ 247.565155][ T3381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.565170][ T3381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.633024][ T6372] veth1_vlan: entered promiscuous mode [ 247.851835][ T3381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.851855][ T3381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.962633][ T6340] veth0_macvtap: entered promiscuous mode [ 248.009668][ T6340] veth1_macvtap: entered promiscuous mode [ 248.073924][ T6341] veth0_macvtap: entered promiscuous mode [ 248.193751][ T6341] veth1_macvtap: entered promiscuous mode [ 248.232095][ T6372] veth0_macvtap: entered promiscuous mode [ 248.268946][ T6372] veth1_macvtap: entered promiscuous mode [ 248.300525][ T6340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.366294][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.402010][ T6340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.446012][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.460572][ T6772] input: syz0 as /devices/virtual/input/input9 [ 248.613423][ T6372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.930400][ T6372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.231741][ T5263] 8021q: adding VLAN 0 to HW filter on device eth9 [ 250.628710][ T3302] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.655931][ T3302] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.993245][ T1428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.993268][ T1428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.366351][ T3392] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.375056][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.375078][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.585101][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.585123][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.615069][ T3416] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.615336][ T3416] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.617081][ T3416] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.672428][ T3416] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.672915][ T3416] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.699868][ T3416] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.089707][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.089727][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.186416][ T44] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.186864][ T44] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.187287][ T44] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.188026][ T44] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.188453][ T44] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.188843][ T44] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.392187][ T3392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.392218][ T3392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.678229][ T3416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.678250][ T3416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.822178][ T3416] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.213390][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.215'. [ 255.974550][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.974619][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.535622][ T6871] netlink: 277 bytes leftover after parsing attributes in process `syz.4.227'. [ 256.673953][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.7.229'. [ 261.755875][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.242'. [ 262.640714][ T5263] 8021q: adding VLAN 0 to HW filter on device eth10 [ 263.951157][ T109] netdevsim netdevsim3 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.955418][ T109] netdevsim netdevsim3 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.964187][ T109] netdevsim netdevsim3 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.000180][ T109] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.000222][ T109] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.000256][ T109] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.000290][ T109] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.000323][ T109] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.000356][ T109] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.000390][ T109] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.000423][ T109] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.000457][ T109] netdevsim netdevsim3 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.202754][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 265.400756][ T6002] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 265.564260][ T6002] usb 6-1: Using ep0 maxpacket: 16 [ 265.567789][ T6002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 265.588496][ T6002] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 265.588521][ T6002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.588538][ T6002] usb 6-1: Product: syz [ 265.588551][ T6002] usb 6-1: Manufacturer: syz [ 265.588564][ T6002] usb 6-1: SerialNumber: syz [ 265.646019][ T6002] usb 6-1: config 0 descriptor?? [ 265.693987][ T6002] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 265.694043][ T6002] em28xx 6-1:0.0: DVB interface 0 found: isoc [ 265.730296][ T5263] 8021q: adding VLAN 0 to HW filter on device eth11 [ 266.921144][ T6002] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 267.569991][ T6002] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 267.570058][ T6002] em28xx 6-1:0.0: board has no eeprom [ 267.651456][ T6002] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 267.651503][ T6002] em28xx 6-1:0.0: dvb set to isoc mode. [ 267.654475][ T6004] em28xx 6-1:0.0: Binding DVB extension [ 267.848970][ T6002] usb 6-1: USB disconnect, device number 2 [ 267.938291][ T6002] em28xx 6-1:0.0: Disconnecting em28xx [ 267.990845][ T5728] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 268.150804][ T5728] usb 8-1: Using ep0 maxpacket: 8 [ 268.157003][ T5728] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.157050][ T5728] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.157074][ T5728] usb 8-1: config 0 interface 0 has no altsetting 0 [ 268.157111][ T5728] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 268.157136][ T5728] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.294618][ T5728] usb 8-1: config 0 descriptor?? [ 268.758866][ T6004] em28xx 6-1:0.0: Registering input extension [ 268.759331][ T6002] em28xx 6-1:0.0: Closing input extension [ 269.262618][ T5728] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 269.262660][ T5728] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 269.262688][ T5728] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 269.262715][ T5728] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 269.262741][ T5728] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 269.394497][ T5728] mcp2221 0003:04D8:00DD.0001: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 269.831694][ T7076] Line length is too long: Should be less than 4094 [ 269.833024][ T31] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 269.990873][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 269.993324][ T31] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 269.993374][ T31] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 269.993400][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.069588][ T31] usb 7-1: config 0 descriptor?? [ 270.558197][ T6002] em28xx 6-1:0.0: Freeing device [ 271.942705][ T5263] 8021q: adding VLAN 0 to HW filter on device eth12 [ 273.095866][ T5715] usb 7-1: USB disconnect, device number 2 [ 273.396785][ T5728] usb 8-1: USB disconnect, device number 2 [ 273.545992][ T7137] smc: net device lo applied user defined pnetid SYZ0 [ 273.918260][ T7146] ======================================================= [ 273.918260][ T7146] WARNING: The mand mount option has been deprecated and [ 273.918260][ T7146] and is ignored by this kernel. Remove the mand [ 273.918260][ T7146] option from the mount to silence this warning. [ 273.918260][ T7146] ======================================================= [ 275.622257][ T7139] syz.5.278 (7139) used obsolete PPPIOCDETACH ioctl [ 275.953227][ T5715] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 276.100747][ T5715] usb 7-1: Using ep0 maxpacket: 8 [ 276.108375][ T5715] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.108404][ T5715] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.108425][ T5715] usb 7-1: config 0 interface 0 has no altsetting 0 [ 276.108452][ T5715] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 276.108472][ T5715] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.157746][ T5715] usb 7-1: config 0 descriptor?? [ 276.643628][ T5715] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 276.643666][ T5715] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 276.643695][ T5715] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 276.643723][ T5715] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 276.643751][ T5715] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 276.661609][ T5715] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 277.124364][ T5715] usb 7-1: USB disconnect, device number 3 [ 277.274124][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.330854][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.127152][ T7196] Line length is too long: Should be less than 4094 [ 280.145800][ T7205] binder: 7204:7205 ioctl c0306201 0 returned -14 [ 280.194739][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.265997][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.517866][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.6.300'. [ 281.573113][ T7217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.810352][ T7217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.158913][ T7245] binder: 7244:7245 ioctl c0306201 0 returned -14 [ 285.225592][ T44] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.280767][ T109] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.280822][ T109] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.280873][ T109] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.280908][ T109] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.507162][ T44] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.958363][ T44] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.077711][ T7227] ------------[ cut here ]------------ [ 289.077726][ T7227] dev->config->get_status(dev) [ 289.077743][ T7227] WARNING: drivers/virtio/virtio.c:378 at virtio_dev_remove+0x18b/0x1b0, CPU#1: syz.6.300/7227 [ 289.077794][ T7227] Modules linked in: [ 289.077830][ T7227] CPU: 1 UID: 0 PID: 7227 Comm: syz.6.300 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 289.077857][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 289.077873][ T7227] RIP: 0010:virtio_dev_remove+0x18b/0x1b0 [ 289.077895][ T7227] Code: 4c 89 f7 2e 2e 2e 41 ff d3 0c 01 0f b6 f0 4c 89 f7 4d 89 fb 5b 41 5c 41 5d 41 5e 41 5f 5d 2e e9 a7 f7 c1 1a e8 66 ca 87 fc 90 <0f> 0b 90 e9 6e ff ff ff 44 89 e9 80 e1 07 38 c1 0f 8c c2 fe ff ff [ 289.077913][ T7227] RSP: 0018:ffffc900048277d8 EFLAGS: 00010246 [ 289.077931][ T7227] RAX: ffffffff853e114a RBX: ffff88802038e6d0 RCX: 0000000000080000 [ 289.077947][ T7227] RDX: ffffc90023e16000 RSI: 000000000007ffff RDI: 0000000000080000 [ 289.077961][ T7227] RBP: 00000000000000ff R08: 0000000000000000 R09: 0000000000000000 [ 289.077973][ T7227] R10: dffffc0000000000 R11: ffffffff85406e00 R12: 1ffff11004071cda [ 289.077989][ T7227] R13: dffffc0000000000 R14: ffff88802038e000 R15: ffffffff8bd67cf8 [ 289.078043][ T7227] FS: 00007f6038cf16c0(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 289.078062][ T7227] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.078077][ T7227] CR2: 00007fc3cd41ee9c CR3: 0000000063e12000 CR4: 00000000003526f0 [ 289.078095][ T7227] Call Trace: [ 289.078103][ T7227] [ 289.078115][ T7227] ? __pfx_virtio_dev_remove+0x10/0x10 [ 289.078165][ T7227] device_release_driver_internal+0x48b/0x880 [ 289.078209][ T7227] bus_remove_device+0x449/0x560 [ 289.078243][ T7227] ? __pfx_bus_remove_device+0x10/0x10 [ 289.078271][ T7227] ? up_read+0x34/0x180 [ 289.078306][ T7227] ? kernfs_remove_by_name_ns+0x101/0x140 [ 289.078342][ T7227] device_del+0x528/0x8f0 [ 289.078372][ T7227] ? irqentry_exit+0x218/0x8f0 [ 289.078413][ T7227] ? __pfx_device_del+0x10/0x10 [ 289.078457][ T7227] device_unregister+0x21/0xf0 [ 289.078490][ T7227] unregister_virtio_device+0x37/0x60 [ 289.078523][ T7227] virtio_pci_remove+0x7f/0xf0 [ 289.078561][ T7227] pci_device_remove+0x99/0x1c0 [ 289.078589][ T7227] ? __pfx_pci_device_remove+0x10/0x10 [ 289.078613][ T7227] device_release_driver_internal+0x48b/0x880 [ 289.078656][ T7227] pci_stop_bus_device+0xf6/0x120 [ 289.078691][ T7227] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 289.078724][ T7227] remove_store+0xe5/0x150 [ 289.078761][ T7227] ? __pfx_remove_store+0x10/0x10 [ 289.078795][ T7227] ? sysfs_file_kobj+0x1e4/0x230 [ 289.078832][ T7227] ? sysfs_kf_write+0x166/0x260 [ 289.078858][ T7227] ? __pfx_sysfs_kf_write+0x10/0x10 [ 289.078878][ T7227] kernfs_fop_write_iter+0x3a5/0x540 [ 289.078917][ T7227] vfs_write+0x61e/0xbb0 [ 289.078958][ T7227] ? __pfx_vfs_write+0x10/0x10 [ 289.078992][ T7227] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 289.079024][ T7227] ? lockdep_hardirqs_on+0x7a/0x110 [ 289.079057][ T7227] ? mutex_lock_nested+0x152/0x1d0 [ 289.079080][ T7227] ? fdget_pos+0x252/0x320 [ 289.079115][ T7227] ksys_write+0x156/0x270 [ 289.079154][ T7227] ? __pfx_ksys_write+0x10/0x10 [ 289.079195][ T7227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.079221][ T7227] do_syscall_64+0x174/0x580 [ 289.079252][ T7227] ? trace_irq_disable+0x3b/0x140 [ 289.079276][ T7227] ? clear_bhb_loop+0x40/0x90 [ 289.079304][ T7227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.079327][ T7227] RIP: 0033:0x7f603aefe019 [ 289.079354][ T7227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.079371][ T7227] RSP: 002b:00007f6038cf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 289.079394][ T7227] RAX: ffffffffffffffda RBX: 00007f603b186270 RCX: 00007f603aefe019 [ 289.079411][ T7227] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 000000000000000a [ 289.079425][ T7227] RBP: 00007f603af9500c R08: 0000000000000000 R09: 0000000000000000 [ 289.079439][ T7227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.079452][ T7227] R13: 00007f603b186308 R14: 00007f603b186270 R15: 00007ffdc76954d8 [ 289.079490][ T7227] [ 289.079501][ T7227] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 289.079517][ T7227] CPU: 1 UID: 0 PID: 7227 Comm: syz.6.300 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 289.079540][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 289.079553][ T7227] Call Trace: [ 289.079562][ T7227] [ 289.079571][ T7227] vpanic+0x56c/0xa60 [ 289.079594][ T7227] ? __pfx__printk+0x10/0x10 [ 289.079622][ T7227] ? __pfx_vpanic+0x10/0x10 [ 289.079642][ T7227] ? is_bpf_text_address+0x292/0x2b0 [ 289.079670][ T7227] ? is_bpf_text_address+0x26/0x2b0 [ 289.079707][ T7227] panic+0xc5/0xd0 [ 289.079728][ T7227] ? __pfx_panic+0x10/0x10 [ 289.079771][ T7227] __warn+0x315/0x4c0 [ 289.079791][ T7227] ? virtio_dev_remove+0x18b/0x1b0 [ 289.079818][ T7227] ? virtio_dev_remove+0x18b/0x1b0 [ 289.079841][ T7227] __report_bug+0x276/0x570 [ 289.079871][ T7227] ? do_syscall_64+0x174/0x580 [ 289.079899][ T7227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.079926][ T7227] ? virtio_dev_remove+0x18b/0x1b0 [ 289.079952][ T7227] ? __pfx___report_bug+0x10/0x10 [ 289.080003][ T7227] ? virtio_dev_remove+0x18b/0x1b0 [ 289.080026][ T7227] report_bug+0x16a/0x220 [ 289.080059][ T7227] ? virtio_dev_remove+0x18b/0x1b0 [ 289.080080][ T7227] ? virtio_dev_remove+0x18d/0x1b0 [ 289.080102][ T7227] handle_bug+0x9c/0x200 [ 289.080151][ T7227] exc_invalid_op+0x1a/0x50 [ 289.080186][ T7227] asm_exc_invalid_op+0x1a/0x20 [ 289.080206][ T7227] RIP: 0010:virtio_dev_remove+0x18b/0x1b0 [ 289.080230][ T7227] Code: 4c 89 f7 2e 2e 2e 41 ff d3 0c 01 0f b6 f0 4c 89 f7 4d 89 fb 5b 41 5c 41 5d 41 5e 41 5f 5d 2e e9 a7 f7 c1 1a e8 66 ca 87 fc 90 <0f> 0b 90 e9 6e ff ff ff 44 89 e9 80 e1 07 38 c1 0f 8c c2 fe ff ff [ 289.080248][ T7227] RSP: 0018:ffffc900048277d8 EFLAGS: 00010246 [ 289.080266][ T7227] RAX: ffffffff853e114a RBX: ffff88802038e6d0 RCX: 0000000000080000 [ 289.080283][ T7227] RDX: ffffc90023e16000 RSI: 000000000007ffff RDI: 0000000000080000 [ 289.080298][ T7227] RBP: 00000000000000ff R08: 0000000000000000 R09: 0000000000000000 [ 289.080312][ T7227] R10: dffffc0000000000 R11: ffffffff85406e00 R12: 1ffff11004071cda [ 289.080329][ T7227] R13: dffffc0000000000 R14: ffff88802038e000 R15: ffffffff8bd67cf8 [ 289.080352][ T7227] ? __pfx_vp_get_status+0x10/0x10 [ 289.080384][ T7227] ? virtio_dev_remove+0x18a/0x1b0 [ 289.080414][ T7227] ? virtio_dev_remove+0x18a/0x1b0 [ 289.080439][ T7227] ? __pfx_virtio_dev_remove+0x10/0x10 [ 289.080461][ T7227] device_release_driver_internal+0x48b/0x880 [ 289.080502][ T7227] bus_remove_device+0x449/0x560 [ 289.080536][ T7227] ? __pfx_bus_remove_device+0x10/0x10 [ 289.080564][ T7227] ? up_read+0x34/0x180 [ 289.080596][ T7227] ? kernfs_remove_by_name_ns+0x101/0x140 [ 289.080634][ T7227] device_del+0x528/0x8f0 [ 289.080664][ T7227] ? irqentry_exit+0x218/0x8f0 [ 289.080703][ T7227] ? __pfx_device_del+0x10/0x10 [ 289.080745][ T7227] device_unregister+0x21/0xf0 [ 289.080778][ T7227] unregister_virtio_device+0x37/0x60 [ 289.080800][ T7227] virtio_pci_remove+0x7f/0xf0 [ 289.080844][ T7227] pci_device_remove+0x99/0x1c0 [ 289.080868][ T7227] ? __pfx_pci_device_remove+0x10/0x10 [ 289.080889][ T7227] device_release_driver_internal+0x48b/0x880 [ 289.080927][ T7227] pci_stop_bus_device+0xf6/0x120 [ 289.080960][ T7227] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 289.080991][ T7227] remove_store+0xe5/0x150 [ 289.081024][ T7227] ? __pfx_remove_store+0x10/0x10 [ 289.081055][ T7227] ? sysfs_file_kobj+0x1e4/0x230 [ 289.081088][ T7227] ? sysfs_kf_write+0x166/0x260 [ 289.081112][ T7227] ? __pfx_sysfs_kf_write+0x10/0x10 [ 289.081138][ T7227] kernfs_fop_write_iter+0x3a5/0x540 [ 289.081174][ T7227] vfs_write+0x61e/0xbb0 [ 289.081211][ T7227] ? __pfx_vfs_write+0x10/0x10 [ 289.081242][ T7227] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 289.081271][ T7227] ? lockdep_hardirqs_on+0x7a/0x110 [ 289.081301][ T7227] ? mutex_lock_nested+0x152/0x1d0 [ 289.081322][ T7227] ? fdget_pos+0x252/0x320 [ 289.081354][ T7227] ksys_write+0x156/0x270 [ 289.081385][ T7227] ? __pfx_ksys_write+0x10/0x10 [ 289.081422][ T7227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.081446][ T7227] do_syscall_64+0x174/0x580 [ 289.081473][ T7227] ? trace_irq_disable+0x3b/0x140 [ 289.081494][ T7227] ? clear_bhb_loop+0x40/0x90 [ 289.081520][ T7227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.081541][ T7227] RIP: 0033:0x7f603aefe019 [ 289.081560][ T7227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.081576][ T7227] RSP: 002b:00007f6038cf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 289.081597][ T7227] RAX: ffffffffffffffda RBX: 00007f603b186270 RCX: 00007f603aefe019 [ 289.081612][ T7227] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 000000000000000a [ 289.081625][ T7227] RBP: 00007f603af9500c R08: 0000000000000000 R09: 0000000000000000 [ 289.081639][ T7227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.081651][ T7227] R13: 00007f603b186308 R14: 00007f603b186270 R15: 00007ffdc76954d8 [ 289.081685][ T7227] [ 289.082362][ T7227] Kernel Offset: disabled