last executing test programs: 15.884698533s ago: executing program 2 (id=180): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x50) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0x2000000009d) r5 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0) io_setup(0x6, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609000200", @ANYRESOCT], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="656e633d6f61658983b59173683d7385dfb99ef2a2f2852050a368b66861312d617678000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000089a501000000000000004658f352271a64b5203757d4f4c2d576a71c35c0b9155293b6b8ae3c169510dffb122a3aecb31ae2482f58979b9a0bb58d8d19e6"], &(0x7f0000000700)="9cc272d79287a35bfc0cfe207c8b0fefb3a30555e5153f5269f17033a43885430f18d1565f", &(0x7f0000000780)=""/26) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x20000800) 13.514936051s ago: executing program 2 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x68040000) socket$inet_smc(0x2b, 0x1, 0x0) fchdir(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x376bd2ae0a1097ca, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[], 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xb5) getdents64(r4, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000006c0), 0x0) 11.762417754s ago: executing program 2 (id=190): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000280)={'nat\x00', 0x2, [{}, {}]}, 0x48) sendmmsg$inet6(r3, &(0x7f0000000800), 0x0, 0x4c0c0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) 9.141002477s ago: executing program 4 (id=201): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000280)={'nat\x00', 0x2, [{}, {}]}, 0x48) sendmmsg$inet6(r4, &(0x7f0000000800), 0x0, 0x4c0c0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)=""/2, &(0x7f0000000140)=0x2) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) openat$zero(0xffffffffffffff9c, 0x0, 0x42200, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ifreq(r6, 0x8931, &(0x7f0000000a40)={'veth1_to_team\x00', @ifru_ivalue}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 8.565067151s ago: executing program 0 (id=204): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, 0x0) gettid() r3 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r3) 8.458048714s ago: executing program 0 (id=205): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x50) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0x2000000009d) r5 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0) io_setup(0x6, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609000200", @ANYRESOCT], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="656e633d6f61658983b59173683d7385dfb99ef2a2f2852050a368b66861312d617678000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000089a501000000000000004658f352271a64b5203757d4f4c2d576a71c35c0b9155293b6b8ae3c169510dffb122a3aecb31ae2482f58979b9a0bb58d8d19e6"], &(0x7f0000000700)="9cc272d79287a35bfc0cfe207c8b0fefb3a30555e5153f5269f17033a43885430f18d1565f", &(0x7f0000000780)=""/26) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x20000800) 8.146167042s ago: executing program 4 (id=206): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000600)={0x0, 0x2c01, @ioapic={0xf000, 0x100, 0x1ff, 0x6, 0x0, [{0x4, 0xbd, 0xff, '\x00', 0x81}, {0x3, 0x6f, 0x5, '\x00', 0xc7}, {0x9, 0xc4, 0x6, '\x00', 0x68}, {0x9, 0xf9, 0x7, '\x00', 0x72}, {0x9, 0xfc, 0x10, '\x00', 0x81}, {0xd, 0x8, 0x3, '\x00', 0x8}, {0x9, 0x20, 0x10, '\x00', 0xed}, {0x0, 0x4, 0x5, '\x00', 0xa1}, {0x3, 0x2, 0x7, '\x00', 0x8}, {0x8, 0xe1, 0x7f, '\x00', 0x8}, {0x1, 0xff, 0x2, '\x00', 0x2}, {0xfa, 0x6, 0x10, '\x00', 0xca}, {0x6, 0xe, 0xc, '\x00', 0x7}, {0x3, 0x5, 0x1, '\x00', 0xf2}, {0x7, 0x7, 0xfa, '\x00', 0x9}, {0xff, 0x8, 0x5, '\x00', 0x8f}, {0x80, 0x9, 0x2, '\x00', 0x8}, {0x6, 0x7, 0x8, '\x00', 0x1}, {0x8, 0x3, 0x9, '\x00', 0x7}, {0x5, 0xd, 0xa2, '\x00', 0x3}, {0x1, 0x0, 0x8, '\x00', 0x2}, {0x2, 0x0, 0x7, '\x00', 0xd}, {0x10, 0xf7, 0x8, '\x00', 0x7f}, {0x5, 0x7f, 0x8d, '\x00', 0x8}]}}) 6.800449785s ago: executing program 4 (id=208): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ptrace(0x10, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000a00000005000100060000000500006173683a69702c706f727400000000050005000a0000000900020073797a3100000000"], 0x4c}}, 0x2) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000036c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c", @ANYRESHEX], 0x120}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x50, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xff) socket$l2tp(0x2, 0x2, 0x73) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) epoll_create1(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.399883659s ago: executing program 2 (id=210): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='name', &(0x7f00000000c0)='ceph\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000080)="edaa64c308d3eade6e71a36aa0a4a845264b59887a3a0a8978653a88d3042e46a2e9dac3", 0x24}, {&(0x7f0000000100)="f48ba253d9eb66672fd2908c10aa1e5788a5ad", 0x13}, {&(0x7f0000000280)="34451d3af9980aaa8f7b1d36b18056e0cc07ca92cef401778e4e7d6d0e66dba5a7856b8d582bea0d0f0db50a660697f1a20d10e4f54cab228a3e361dd378719dc9b1ab335356ffaa0f4b906643702dc421be9e8a113f8d90c525187501c5c801b97d0a36ec7c613be5134b719cde44c62c823e97da82b6000ab06484a9eec7e13b97680e7a5688abe917fb97e067a4edd368ad", 0x93}, {&(0x7f0000000e40)="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", 0xf36}], 0x4) close(r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r11 = syz_usb_connect(0x0, 0x32, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x802, 0x0) close(r12) syz_usb_disconnect(r11) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01000000241400001c0012800b0001006d616373656300000c00028005000f000100000008000500", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) 5.324383461s ago: executing program 4 (id=211): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) mlockall(0x7) mlockall(0x7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='dummy_udc.0\n', 0xc) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f00000003c0)) 5.158973294s ago: executing program 0 (id=212): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309002500000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc60efd680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca512b5f379c4eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7f804bb4713019a83353dc519d11c3cc1c22a3b86cf3c645413fcea0ce9ded703699d2bb6a4a663b99b6069da5aaf64785a58847440f064b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200216032811fadcf1e0f49a514df529061e09ce45e3f303a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a250200000000000000d23d324205000000000000000a617f22133b6cb5087f4c6057942ad995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a3cff46591ccaff3075b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8841416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedcbefc5990d7fed29a002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d559b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756d732533c2722e03002293e37966611602f297de6ff5408777d7a93c45cee3ee5c56e8a3e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f6579ef62866a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c909cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc562507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f80000000000001700000000000000000000000000000000000200"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, 0x0, 0x0) r5 = accept(r3, 0x0, 0x0) sendto$packet(r5, &(0x7f0000000240), 0x0, 0x4004010, 0x0, 0x0) 5.076968696s ago: executing program 3 (id=213): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0x1d6b\x00', 0x6) write(0xffffffffffffffff, &(0x7f0000000180)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='123456789', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='Linux Foundation\x00', 0x11) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r4, &(0x7f0000000480)='Conf 1\x00', 0x7) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r5, &(0x7f0000000540)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) write(r6, &(0x7f0000000640)='Conf 2\x00', 0x7) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r7, &(0x7f00000006c0)='midi.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) nanosleep(0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x15, 0x2) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x80045505, &(0x7f0000000800)=0x2) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000840)={0x0, 0x9, 0x0, 0x0, 0x0, 0x3e8, 0x0}) 4.575544539s ago: executing program 3 (id=214): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0x1d6b\x00', 0x6) write(0xffffffffffffffff, &(0x7f0000000180)='0x0104\x00', 0x6) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) 4.562183929s ago: executing program 1 (id=215): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, 0x0) gettid() r3 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r3) 4.486951491s ago: executing program 1 (id=216): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000280)={'nat\x00', 0x2, [{}, {}]}, 0x48) sendmmsg$inet6(r3, &(0x7f0000000800), 0x0, 0x4c0c0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)=""/2, &(0x7f0000000140)=0x2) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) openat$zero(0xffffffffffffff9c, 0x0, 0x42200, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ifreq(r5, 0x8931, &(0x7f0000000a40)={'veth1_to_team\x00', @ifru_ivalue}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.486423511s ago: executing program 2 (id=217): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x50) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0x2000000009d) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad4000200"], 0x0, 0x28}, 0x28) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0) io_setup(0x6, &(0x7f00000000c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609000200", @ANYRESOCT], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="656e633d6f61658983b59173683d7385dfb99ef2a2f2852050a368b66861312d617678000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000089a501000000000000004658f352271a64b5203757d4f4c2d576a71c35c0b9155293b6b8ae3c169510dffb122a3aecb31ae2482f58979b9a0bb58d8d19e6"], &(0x7f0000000700)="9cc272d79287a35bfc0cfe207c8b0fefb3a30555e5153f5269f17033a43885430f18d1565f", &(0x7f0000000780)=""/26) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x20000800) 4.476857411s ago: executing program 3 (id=218): syz_open_dev$dri(0x0, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x2, 0x300) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) 4.408899803s ago: executing program 0 (id=219): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffd, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x9, 0x3, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x4, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r3, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000280), 0x100000000, 0x0) 3.474944395s ago: executing program 1 (id=220): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000280)={'nat\x00', 0x2, [{}, {}]}, 0x48) sendmmsg$inet6(r3, &(0x7f0000000800), 0x0, 0x4c0c0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) 2.623981236s ago: executing program 3 (id=221): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000007200010b2bbd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="080001000100000026dbe73796371b0673f466a10fae6ee0ac4af775cf361332f0df088b23ab2cf4c3e97a2d56c654a4fdb8812ac29b7ac60b580aa21d56dcb2912e7eb0d536bf0c3f5dcf17825c0761e26993e37747aba9f4b4c5e002b548bb2034ac4f7fc5802d5abc4ca46d8c2e0c5f5370ee300430390b97e7073bff25449117f4845c53b54b58b41581535d08cdb5a41a5bbcc12de0c06573a01660c1d5d41b1c61a494f2d8c549ccae837ecf0c02f13a8c"], 0x20}}, 0x4040) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000001400)={'pcm3724\x00', [0x100, 0xd, 0x4d0, 0x2, 0x1, 0x100, 0x2001, 0x20000000, 0x8, 0x8, 0x0, 0xf, 0x1, 0x401, 0xfffd, 0x0, 0x0, 0x8, 0xea9, 0x401, 0x7, 0x12, 0x8, 0x9, 0x3, 0x7, 0x7, 0x0, 0x7, 0x7, 0x8]}) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x6f}, 0x94) syz_emit_ethernet(0x4e, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @remote}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0xdc, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x5, 0xe1, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffb, 0x1ff, 0x9ea, 0x10, 0x8, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x5, 0x7fffffff, 0x4, 0x7ffd, 0xd]}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x191) 2.48276916s ago: executing program 0 (id=222): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ptrace(0x10, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000a00000005000100060000000500006173683a69702c706f727400000000050005000a0000000900020073797a3100000000"], 0x4c}}, 0x2) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000036c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c", @ANYRESHEX], 0x120}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x50, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r6 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0xff) socket$l2tp(0x2, 0x2, 0x73) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) epoll_create1(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.173398511s ago: executing program 4 (id=223): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x50) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0x2000000009d) r5 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0) io_setup(0x6, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609000200", @ANYRESOCT], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="656e633d6f61658983b59173683d7385dfb99ef2a2f2852050a368b66861312d617678000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000089a501000000000000004658f352271a64b5203757d4f4c2d576a71c35c0b9155293b6b8ae3c169510dffb122a3aecb31ae2482f58979b9a0bb58d8d19e6"], &(0x7f0000000700)="9cc272d79287a35bfc0cfe207c8b0fefb3a30555e5153f5269f17033a43885430f18d1565f", &(0x7f0000000780)=""/26) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x20000800) 962.349297ms ago: executing program 3 (id=224): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r1 = openat(r0, &(0x7f0000001000)='nfsd.fh/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000001100)="6c6f63616c686f7374203120010000002032303030303030303030202f746d700a", 0x21) 848.960939ms ago: executing program 3 (id=225): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000280)=""/114, 0x72}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x124411, 0x0) 810.50347ms ago: executing program 1 (id=226): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0) gettid() r2 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r2) 739.482333ms ago: executing program 1 (id=227): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0x1d6b\x00', 0x6) write(0xffffffffffffffff, &(0x7f0000000180)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='123456789', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='Linux Foundation\x00', 0x11) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r4, &(0x7f0000000480)='Conf 1\x00', 0x7) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r5, &(0x7f0000000540)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) write(r6, &(0x7f0000000640)='Conf 2\x00', 0x7) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r7, &(0x7f00000006c0)='midi.usb0\x00') write(0xffffffffffffffff, 0x0, 0x0) nanosleep(0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x15, 0x2) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x80045505, &(0x7f0000000800)=0x2) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000840)={0x0, 0x9, 0x0, 0x0, 0x0, 0x3e8, 0x0}) 674.794994ms ago: executing program 1 (id=228): syz_usb_connect$uac3(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ba0d001040000102030109028d000301635006080b00ff010130020904000000"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) socket(0x2, 0x800, 0x0) sendmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="aa44b6f71da8d25c6c72f71b2f0d3aa48fc963b24588c3b60ea4b2d46fd94a38b2829231072ecbbcd2ba6f35846b14e662257e1ec14955f8d123d19e8d681a8d8854f837d16383479d3c18c8e02de6", 0x4f}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="3e188a59c7421bf370a71126d0f7c2247571b455bd3dfbc1f6b8cb3d23df18a3ca67778398e6ddf11cc53514ac8a3e488b3b120c34ce10a3d542b12a1a6689102791103095b7ade03d765d8fc0e7f98864c2afeb1a180a305efc451232522db7c584b6968baa9be9cc31c202152584140b67ae23fcd4efc9d997010b6ef128926021be3793c87b7ba9f7cd62457a64144ec84644d9e2ea063b1e6fafeddb5c", 0x9f}], 0x3, &(0x7f0000000600)=[{0xd0, 0x10a, 0x24b7, "358c649efa910a189d3be80274583749923bd1bf3ee92c25e5878edad8e2f5a64acc63fd03f6bd56e47ea7dac36e0d33416e66545b7dafb3c7ccb704a3f954d0d0241438511a36921244ce38041647fedbfafa9bb97d4f639b977cdbcab9f369f368929a8d1434c24881b222e11f6cdf97a18243ff4c37dd52c0319af58974df33a7efc325bf338830a6501408148682ae8e73fb02952671a364f05cf20be07e691aa7317ff563d8441e058764ca4ad4e6ef788152924936c35984b42f0153"}, {0x70, 0x10d, 0x0, "75d95d40629a2bac08cf10bc7a02ec28863cd469b9f5bb84f8b561f50f2419580e552d1420174d1894b16844bec8c79cb85fc249d9ad70d1d48b06ef28464b425605a9cc81dd8c674f66b31f151e2405ea0bff484700222a3cdc2e"}], 0x140}, 0x0) socket$inet6(0xa, 0xa, 0x7fff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) close(r7) statx(r7, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) fsmount(r6, 0x0, 0x1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 592.830196ms ago: executing program 0 (id=229): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendto$packet(r5, 0x0, 0x0, 0x4004010, 0x0, 0x0) 271.382224ms ago: executing program 2 (id=230): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x578410eb) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000880)={{0x2, 0x100, 0x6, 0x5, 0x7, 0x5}, 0x5e, [0x9, 0x4, 0xfffffffc, 0x401, 0xfffffffe, 0x7, 0x5, 0x80000000, 0x3, 0xf99d, 0x6, 0x3, 0xe, 0x3, 0x8, 0xb, 0x9, 0x398, 0x8, 0x2, 0x4, 0x3, 0x2, 0x8001, 0x80000000, 0x9, 0x5, 0xffff, 0x4, 0x9, 0x7, 0x1, 0x1000, 0x9, 0x80000001, 0x4, 0x2, 0xed, 0x9, 0x7191, 0xffffff0b, 0xfffff42d, 0x88, 0x2, 0x68, 0xc, 0x9c8, 0x40, 0x745, 0xff, 0x69a, 0x594, 0x9ebb, 0xe, 0x7, 0x1, 0x5017, 0x3, 0x4, 0x9, 0xcefb, 0xffff, 0xf0000000, 0x4, 0x1, 0x7, 0x5, 0x7, 0xfff, 0xe, 0x40, 0x4, 0x5, 0x0, 0x9, 0x2, 0x1, 0x8000, 0x7, 0x8, 0x7ff, 0x7, 0x0, 0x80, 0x4, 0x4, 0xfffffaf2, 0x8, 0x6, 0x6, 0x6, 0x6, 0x671a4dc6, 0x10001, 0x4, 0x7f, 0x0, 0x5, 0x800, 0x5, 0x8, 0x28, 0x4, 0x40d, 0x60000, 0x8, 0x4, 0x2, 0x3, 0x6, 0x9, 0x7e, 0x8, 0x52, 0x6, 0x40, 0x6, 0x6, 0x4, 0x7, 0x5, 0x3, 0xfffffff7, 0x5, 0x1, 0x94c, 0x81, 0x8, 0x9, 0x7fff, 0xd2a7, 0x0, 0x8, 0x1, 0x6, 0x3, 0x5, 0x0, 0x7, 0x3, 0x3, 0x7, 0x2, 0xcfd0, 0x4, 0x5, 0xc, 0x2, 0x9, 0xffffffff, 0x8, 0x9, 0x7, 0x22af, 0x100, 0x1, 0x8000, 0x0, 0x5, 0xd, 0x8001, 0x6, 0x1, 0x6, 0x6, 0xc9f, 0x7457b752, 0x1, 0x2, 0x6, 0x6, 0x2, 0x80000000, 0x5, 0x7, 0x4, 0x9, 0x1, 0x59, 0x7ff, 0x1, 0x3, 0x4c4, 0x7fffffff, 0x2, 0xfffffff8, 0x7148f66, 0x4, 0x7, 0x1, 0x101, 0x8ca5, 0x3ff, 0x6, 0x8e0a, 0x7, 0xfffffff9, 0x3, 0x4, 0x3, 0x1, 0xc, 0x9, 0x19, 0x6, 0x6, 0x0, 0x3, 0x2, 0x9a09, 0x9, 0x0, 0xd20, 0x6, 0x50c7, 0x100, 0xfffffffd, 0x4, 0x1, 0x8, 0x6, 0x10001, 0x6, 0x5ed, 0x4, 0x1ff, 0xfffffff9, 0x26db, 0x9, 0x7, 0x5, 0x7, 0x3ff, 0x3, 0x40, 0x1000, 0xb, 0x6, 0x4e4dbdee, 0x7fffffff, 0x73, 0x86d, 0x4, 0x5, 0x9, 0x3, 0x1, 0x2, 0x80000001, 0x7, 0xc, 0x0, 0x7, 0x9, 0x1e59, 0x1, 0x3, 0x1, 0x2f, 0x8, 0x3ff, 0x3, 0x0, 0x1, 0x937, 0x8, 0x8, 0x7, 0x10001, 0x8, 0x3, 0x10000, 0x7f, 0xffffffff, 0x9, 0xfffffff7, 0x81, 0xa2ba, 0xb, 0x0, 0x2, 0xfff, 0x6, 0x2, 0x1, 0x2, 0xf, 0x6, 0x225c, 0x7d1, 0x10001, 0x10000, 0x4, 0x5, 0x6, 0x0, 0x200, 0x8, 0x6, 0x7, 0x3, 0x0, 0x8001, 0xfff, 0x0, 0x7, 0xa, 0x192, 0x1, 0x9, 0x9, 0x0, 0x7827, 0xd60, 0x10001, 0x1000, 0x6, 0x8, 0x3, 0x5, 0xa5, 0x23, 0x7, 0x0, 0x9, 0xa7, 0x8, 0x7fff, 0x1, 0x6, 0x6, 0x9, 0x1, 0x0, 0x3, 0x9, 0x0, 0xe, 0x1, 0x4, 0xabd, 0x0, 0x7f, 0x9, 0x0, 0xcd97, 0x81, 0x8, 0x0, 0x2, 0x1, 0xa, 0x10000, 0x8, 0x35, 0x4, 0x32fb, 0x6, 0x2, 0x4, 0x5, 0x5, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7, 0xa, 0x1, 0x5f, 0x0, 0xc887, 0xffffffff, 0x8, 0xcd3, 0x4, 0x5, 0x0, 0x9, 0x9, 0xffffffff, 0x207, 0x401, 0x87e1, 0x10, 0x8, 0xc8, 0x7, 0x8, 0xa, 0x6, 0x8000, 0xc, 0x8fa, 0x5, 0x3ff, 0xfff, 0x81, 0x1, 0x9, 0x4, 0x252, 0x7ff, 0x6, 0x81, 0x3, 0x8, 0x9, 0x0, 0x9, 0x3, 0x9, 0x4, 0x101, 0x1, 0x4, 0x5, 0x1ff, 0x0, 0x1, 0x100, 0x0, 0x1ff, 0x4, 0x7, 0x4, 0x8, 0x8, 0xf252, 0x6, 0x6, 0x6, 0xf, 0x4, 0x9, 0x8, 0xfffffffd, 0x91, 0x5, 0x8, 0x2, 0x0, 0x5, 0x9, 0x2b, 0x8000, 0x9, 0x9, 0x0, 0x0, 0x78, 0x80000000, 0x10001, 0x7, 0x1, 0xff, 0x62b4, 0x400, 0xfffffffc, 0xf8b, 0x800, 0x7cae, 0x9, 0x3, 0x5, 0x4, 0x4, 0x9, 0x1ff, 0x1200000, 0x3, 0x94b, 0xfffffffa, 0x9, 0x7, 0x8, 0x9, 0x4, 0x5, 0xa, 0xec0, 0x4, 0xffff, 0xff, 0x8, 0xd2, 0x9, 0x7, 0x400, 0x7, 0xb512cc6, 0x0, 0x8, 0x9, 0x4, 0x8, 0x1, 0x1, 0xffffffff, 0x1170, 0x8, 0x0, 0x3b9, 0x0, 0x3, 0x7ff, 0x8, 0xb770, 0x0, 0xff, 0x40, 0x5b, 0xffffffff, 0x8, 0x3, 0x0, 0x7, 0x1, 0x6d2, 0x5, 0x7, 0x1, 0x931, 0x2, 0x7, 0x6, 0x3, 0x100, 0x0, 0xe88, 0xffffff5c, 0x8, 0x0, 0x8, 0x8, 0x2, 0xfc, 0x95, 0x80, 0x6, 0xf1, 0x10000, 0x0, 0x2, 0x9, 0xc00, 0x2, 0xa, 0x0, 0x3, 0x9a, 0x81, 0xa2e2, 0x1, 0x8, 0x0, 0x4, 0x9b35, 0x1, 0x9, 0x15040318, 0x8, 0x4, 0xfffffffa, 0x5, 0x1, 0x7, 0x8, 0x5, 0x8f, 0x5, 0xfffffffb, 0x0, 0x80000001, 0x200, 0xfffffffb, 0xc11018f, 0x8001, 0xfb, 0x2, 0x94c, 0x1, 0x1a8, 0x1ff, 0xd2, 0xe3, 0x80, 0xfffffffd, 0x5, 0x4, 0x0, 0x0, 0x2000000, 0x1000, 0x7, 0x7fff, 0xffff, 0x800000, 0x7, 0x5, 0x1, 0x1ff, 0xf, 0x4, 0x9, 0x0, 0xfffffffb, 0x7, 0x933, 0x3, 0x4, 0x100, 0xc, 0x100, 0xfff, 0x7, 0x4, 0x5, 0x3ff, 0x1000, 0x9, 0x5, 0x3, 0x6, 0x9, 0x1, 0x10, 0xffffffff, 0x0, 0x9, 0x3, 0x81, 0x3, 0xffffffff, 0x81, 0x3, 0x7, 0x8000, 0x401, 0x7, 0x3, 0x2, 0xffff9ace, 0xfffffffb, 0x3, 0x1, 0x4dc4, 0x2, 0x8, 0x3b, 0x1, 0x4, 0x8001, 0x6, 0x0, 0x7, 0x81, 0x0, 0x8, 0x4, 0x40, 0x3, 0x1c0000, 0x9, 0x2, 0x5, 0x6, 0x3, 0x92, 0x5b, 0x10, 0x5, 0x8, 0xb2, 0xfffffff9, 0x7, 0x0, 0xc, 0x2, 0x4, 0xcbf6, 0x5, 0x10000, 0x1, 0x4, 0x5, 0x401, 0x3ff, 0x7, 0x5, 0x4, 0x1, 0xe, 0x7fff, 0xfffffffb, 0x15d000, 0x7, 0x5, 0x9d, 0x7, 0xf6c, 0x4, 0x80000001, 0xa09, 0x8, 0x443c93fc, 0x0, 0x6, 0x40, 0x2, 0xe01f62b, 0xe, 0xffffffff, 0x2, 0x650, 0x7ff, 0x5, 0x475, 0xfffffffd, 0xf, 0x1, 0x7fff, 0x8, 0x7, 0x5, 0x9, 0xaf, 0xfffffffe, 0x2, 0x40, 0x6, 0xffff, 0x1, 0x484, 0x2, 0x2, 0x1, 0x401, 0x21, 0x8, 0x4, 0x3, 0xfffffffb, 0x100, 0xfffffffc, 0x0, 0x1, 0x4, 0x5, 0x9, 0x8, 0x10, 0x8, 0x3, 0x1, 0x2, 0x101, 0x0, 0x9, 0x7, 0xfffffff8, 0x9, 0x10000, 0x9, 0x1ff, 0x3, 0xfffffff7, 0x4, 0x4, 0x1, 0x7, 0x8, 0x400, 0x9, 0x549, 0xa41f, 0x2, 0x1c5, 0xb1, 0x7, 0x81, 0x3, 0x30fa, 0x8da4, 0x6894, 0x6, 0x6, 0x7, 0xff, 0xe, 0x7, 0x122, 0xf, 0x5, 0x4, 0xfffffffb, 0x87, 0x80, 0x5, 0x8, 0x2, 0x4, 0x1ff, 0x80000000, 0xbc, 0x400, 0x70, 0x54, 0x2, 0x6, 0xe5, 0x6, 0x8, 0x5, 0x7fff, 0x4, 0x2, 0x5, 0x0, 0x2, 0x0, 0x40, 0x9, 0x6, 0x0, 0x80000000, 0x12000, 0xb94e, 0x0, 0x4, 0xffff, 0x8, 0x92, 0x9, 0x9, 0x6, 0x2, 0xb, 0x7, 0xffff4a5d, 0x42f, 0x0, 0x80000000, 0x3, 0xf38e, 0x9, 0x40, 0x100, 0x8, 0x2, 0x9, 0x7, 0x0, 0x6, 0x6, 0x6, 0x7, 0xff, 0xffffce8f, 0xd, 0x521, 0x200, 0x8, 0x1, 0x3, 0x4, 0xf, 0x2, 0x3, 0xe5f, 0xffffac0b, 0x5, 0x0, 0x0, 0x4, 0x0, 0x1, 0x5, 0x0, 0x7, 0x93, 0x0, 0x80000001, 0x5, 0x3, 0x4, 0x6, 0xdab, 0x7f80000, 0x7, 0xa1, 0x5, 0x7b, 0x4, 0x80000001, 0x4, 0x2e511eb5, 0x0, 0x4, 0xe, 0x1, 0xe, 0x3, 0xd, 0x9, 0x10000, 0x15e934ee, 0x0, 0x3, 0x8, 0x2, 0x8, 0xffff, 0x4, 0x7fff, 0x3, 0x8, 0x6, 0x1, 0x10000, 0x3, 0x54, 0xa000000, 0x7fffffff, 0x4, 0x6, 0x7, 0x4, 0x3, 0x4, 0x6, 0x6, 0x5, 0x1ff, 0x1, 0xb, 0x1000000, 0x2, 0xa, 0x2, 0x8, 0x3, 0xfffffff9, 0x8001, 0x1000, 0x1, 0x8, 0x9, 0x8000, 0x3, 0x1, 0x4, 0x7f, 0x4, 0x3, 0xffff, 0x3ff, 0x7, 0x4, 0x2, 0x1, 0xd51, 0xd, 0xe2, 0xfff, 0x5, 0x52, 0xbd7, 0x7, 0xc32, 0x10001, 0xc2c, 0x9, 0x0, 0x6, 0x7f, 0x6, 0x5, 0x1f, 0x48f, 0x6, 0x3, 0x5, 0x68e, 0x5, 0x1, 0x72, 0x80000000, 0x3, 0xf, 0x800, 0xffff0001, 0x2, 0x3, 0x4, 0x3, 0xffffffff, 0x2, 0x3, 0x7, 0x10000, 0x355, 0x5, 0x1, 0x94a, 0x80000001, 0x6, 0x6, 0x0, 0x4, 0x9, 0x665bc6a5, 0x9, 0x1, 0x9b, 0x3, 0x5766, 0x8, 0x2, 0x3, 0x310, 0x18, 0x200]}) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$audion(&(0x7f0000000180), 0xfffffbff, 0x800) ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd27, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x3}}, 0x1c}}, 0xc000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) 0s ago: executing program 4 (id=231): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) close(0x3) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x44090}, 0x0) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r1, 0xa) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts. [ 62.875601][ T4176] cgroup: Unknown subsys name 'net' [ 63.011444][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.511812][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.940366][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 66.022286][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 66.063246][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 66.094190][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 66.108878][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.117745][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.126386][ T4195] device bridge_slave_0 entered promiscuous mode [ 66.162689][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.170401][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.178509][ T4195] device bridge_slave_1 entered promiscuous mode [ 66.228534][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.246863][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.283733][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 66.297658][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.304746][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.313450][ T4188] device bridge_slave_0 entered promiscuous mode [ 66.352660][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.359958][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.368123][ T4188] device bridge_slave_1 entered promiscuous mode [ 66.378399][ T4195] team0: Port device team_slave_0 added [ 66.409847][ T4195] team0: Port device team_slave_1 added [ 66.435439][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.442515][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.450753][ T4189] device bridge_slave_0 entered promiscuous mode [ 66.465267][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.495410][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.502420][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.528703][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.540536][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.550119][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.558544][ T4189] device bridge_slave_1 entered promiscuous mode [ 66.567502][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.589992][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.597227][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.605685][ T4191] device bridge_slave_0 entered promiscuous mode [ 66.613567][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.620758][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.647754][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.679148][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.687127][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.694995][ T4190] device bridge_slave_0 entered promiscuous mode [ 66.702506][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.709792][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.717984][ T4191] device bridge_slave_1 entered promiscuous mode [ 66.737447][ T4188] team0: Port device team_slave_0 added [ 66.747170][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.757087][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.764161][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.773193][ T4190] device bridge_slave_1 entered promiscuous mode [ 66.801513][ T4188] team0: Port device team_slave_1 added [ 66.809228][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.827729][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.838784][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.868079][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.879127][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.903067][ T4189] team0: Port device team_slave_0 added [ 66.930205][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.937290][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.963619][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.983608][ T4189] team0: Port device team_slave_1 added [ 66.994492][ T4195] device hsr_slave_0 entered promiscuous mode [ 67.001670][ T4195] device hsr_slave_1 entered promiscuous mode [ 67.018779][ T4191] team0: Port device team_slave_0 added [ 67.025845][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.032818][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.064857][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.083872][ T4190] team0: Port device team_slave_0 added [ 67.106113][ T4191] team0: Port device team_slave_1 added [ 67.121696][ T4190] team0: Port device team_slave_1 added [ 67.152011][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.159258][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.185885][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.197773][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.204754][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.235270][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.273388][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.281278][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.307357][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.323616][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.330704][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.356760][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.380520][ T4188] device hsr_slave_0 entered promiscuous mode [ 67.387276][ T4188] device hsr_slave_1 entered promiscuous mode [ 67.393963][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.402104][ T4188] Cannot create hsr debugfs directory [ 67.408312][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.415585][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.441806][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.454398][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.461455][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.487831][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.552387][ T4191] device hsr_slave_0 entered promiscuous mode [ 67.559659][ T4191] device hsr_slave_1 entered promiscuous mode [ 67.566643][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.574238][ T4191] Cannot create hsr debugfs directory [ 67.642482][ T4189] device hsr_slave_0 entered promiscuous mode [ 67.649346][ T4189] device hsr_slave_1 entered promiscuous mode [ 67.656538][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.664097][ T4189] Cannot create hsr debugfs directory [ 67.685837][ T4197] Bluetooth: hci0: command 0x0409 tx timeout [ 67.685837][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 67.687111][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 67.692671][ T4197] Bluetooth: hci3: command 0x0409 tx timeout [ 67.721979][ T4197] Bluetooth: hci1: command 0x0409 tx timeout [ 67.731488][ T4190] device hsr_slave_0 entered promiscuous mode [ 67.738797][ T4190] device hsr_slave_1 entered promiscuous mode [ 67.746044][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.753625][ T4190] Cannot create hsr debugfs directory [ 68.001798][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.016357][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.026772][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.036781][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.119841][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.142474][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.152250][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.168419][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.210111][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.237496][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.258757][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.267809][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.281261][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.297322][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.313131][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.323752][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.337338][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.370901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.380552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.402188][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.437358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.446775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.457037][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.464305][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.473068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.483365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.493107][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.500243][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.510062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.526789][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.539290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.565764][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.579061][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.602805][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.628606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.639386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.649605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.659828][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.688848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.698903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.724555][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.742923][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.752125][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.761091][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.771059][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.779832][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.790962][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.820328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.830084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.849801][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.864557][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.881330][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.889418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.898400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.912093][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.925454][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.934067][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.941215][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.973614][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.983022][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.992995][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.003134][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.013590][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.028987][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.040526][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.047697][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.063616][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.073079][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.088404][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.095552][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.104235][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.139664][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.152599][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.162366][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.171774][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.180659][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.188272][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.196431][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.206564][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.215562][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.224246][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.232995][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.240129][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.249414][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.290038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.300553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.311466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.320699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.329502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.338490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.347357][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.354432][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.363474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.373539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.382449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.391429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.400182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.409248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.418356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.425931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.433405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.442319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.454403][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.470264][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.481843][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.494820][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.506843][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.518242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.530835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.539058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.549223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.558157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.567545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.577144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.592120][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.600309][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.627309][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.659194][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.673175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.694156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.712415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.722191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.746540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.755915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.764592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.767886][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 69.780360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.790676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.795723][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 69.801692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.815395][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 69.824230][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 69.832833][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 69.840163][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.855282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.864061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.873807][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.880952][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.938511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.966399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.986651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.006579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.020045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.029876][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.037063][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.052113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.061835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.082278][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.097301][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.129662][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.139109][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.151317][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.160676][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.182641][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.191285][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.200603][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.219607][ T4195] device veth0_vlan entered promiscuous mode [ 70.230211][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.252856][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.265343][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.273628][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.283973][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.293463][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.307890][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.320764][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.333372][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.344148][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.368901][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.390368][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.403796][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.417665][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.428071][ T4195] device veth1_vlan entered promiscuous mode [ 70.470823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.487910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.505416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.529311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.591100][ T4195] device veth0_macvtap entered promiscuous mode [ 70.613055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.627306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.642383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.653151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.668971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.706138][ T4195] device veth1_macvtap entered promiscuous mode [ 70.713442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.722032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.732566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.743071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.751499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.762006][ T4188] device veth0_vlan entered promiscuous mode [ 70.791656][ T4190] device veth0_vlan entered promiscuous mode [ 70.808371][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.820688][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.829318][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.839169][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.849109][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.857824][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.866585][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.888043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.898487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.908501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.917387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.932647][ T4190] device veth1_vlan entered promiscuous mode [ 70.943353][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.954881][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.966857][ T4188] device veth1_vlan entered promiscuous mode [ 70.984169][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.993780][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.002535][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.012335][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.026401][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.038176][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.048016][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.057094][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.073731][ T4191] device veth0_vlan entered promiscuous mode [ 71.098050][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.106471][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.114531][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.128678][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.137704][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.146311][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.184363][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.194072][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.206908][ T4191] device veth1_vlan entered promiscuous mode [ 71.225515][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.233722][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.257153][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.269033][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.280690][ T4189] device veth0_vlan entered promiscuous mode [ 71.294171][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.298223][ T4189] device veth1_vlan entered promiscuous mode [ 71.301230][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.347307][ T4190] device veth0_macvtap entered promiscuous mode [ 71.355608][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.363704][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.374412][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.385429][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.394163][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.403645][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.414838][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.423648][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.432374][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.443514][ T4191] device veth0_macvtap entered promiscuous mode [ 71.465543][ T4188] device veth0_macvtap entered promiscuous mode [ 71.480184][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.488920][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.498444][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.510854][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.522362][ T4190] device veth1_macvtap entered promiscuous mode [ 71.531484][ T4191] device veth1_macvtap entered promiscuous mode [ 71.570482][ T4188] device veth1_macvtap entered promiscuous mode [ 71.579916][ T4189] device veth0_macvtap entered promiscuous mode [ 71.604252][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.613973][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.621381][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.632651][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.645754][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.660180][ T4189] device veth1_macvtap entered promiscuous mode [ 71.681514][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.692521][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.704187][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.715224][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.728633][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.736697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.746108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.754143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.762344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.771507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.779774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.788088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.797484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.806402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.815517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.827475][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.841673][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.851407][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 71.858475][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.865721][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 71.865938][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 71.880914][ T1248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.890347][ T1248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.897828][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 71.905015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.916664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.925560][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 71.933140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.944545][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.956695][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.966026][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.974865][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.990109][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.001544][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.012461][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.023309][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.034441][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.045147][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.057664][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.068072][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.081409][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.092071][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.102571][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.113785][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.125240][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.133976][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.143311][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.152492][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.164712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.182038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.197716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.212791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.226631][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.237796][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.250079][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.261385][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.271726][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.283486][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.301545][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.310343][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.321382][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.333993][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.344755][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.354964][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.366073][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.376003][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.387238][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.398906][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.424517][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.433711][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.442801][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.452432][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.465428][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.474179][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.498783][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.512176][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.559271][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.579989][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.596285][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.616897][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.630844][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.656856][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.676031][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.692859][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.707128][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.813115][ T1248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.843751][ T1248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.884428][ T1248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.902667][ T1248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.268548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.287100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.296729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.304793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.050519][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 74.126664][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.142369][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.157705][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.165623][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 74.173243][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 74.179471][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 74.185591][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 74.196547][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.294441][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.312668][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.340734][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.349254][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.442479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.451588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.270782][ T4287] Cannot find del_set index 0 as target [ 75.553795][ T26] audit: type=1800 audit(1785461823.523:2): pid=4294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="idVendor" dev="configfs" ino=33024 res=0 errno=0 [ 75.628823][ T26] audit: type=1800 audit(1785461823.523:3): pid=4294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="serialnumber" dev="configfs" ino=33026 res=0 errno=0 [ 77.292741][ T4281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.158354][ T26] audit: type=1800 audit(1785461823.553:4): pid=4294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="manufacturer" dev="configfs" ino=33027 res=0 errno=0 [ 78.179720][ T26] audit: type=1800 audit(1785461823.553:5): pid=4294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="product" dev="configfs" ino=33028 res=0 errno=0 [ 78.215506][ T4281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.262489][ T4292] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 78.280790][ T4297] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 78.289742][ T4292] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 78.304143][ T4292] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 78.316623][ T4297] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 78.324491][ T4297] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 78.332036][ T4297] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 78.343043][ T4297] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 78.351232][ T4297] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 78.359558][ T4297] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 78.370023][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.379024][ T4297] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 78.409223][ T4298] device bridge1 entered promiscuous mode [ 78.417992][ T4298] team0: Port device bridge1 added [ 78.437860][ T4297] comedi comedi0: 8255: I/O port conflict (0x1000007,4) [ 78.457595][ T4297] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 78.464121][ T4297] comedi comedi0: 8255: I/O port conflict (0x10003,4) [ 78.472473][ T1248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.487677][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.504281][ T1248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.515043][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.518883][ T4297] comedi comedi0: 8255: I/O port conflict (0x801000,4) [ 79.264220][ T4304] ceph: No mds server is up or the cluster is laggy [ 79.271874][ T4297] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 79.279522][ T4297] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 79.286850][ T4297] comedi comedi0: 8255: I/O port conflict (0x1001010,4) [ 79.297082][ T4297] comedi comedi0: 8255: I/O port conflict (0x1ff,4) [ 79.306161][ T23] libceph: connect (1)[c::]:6789 error -101 [ 79.307688][ T4297] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 79.325373][ T4297] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 79.352748][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 79.355641][ T4297] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 79.365921][ T4297] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 79.372420][ T4297] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 79.380061][ T4297] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 79.387012][ T4297] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 79.394046][ T4297] comedi comedi0: 8255: I/O port conflict (0xfffd,4) [ 79.413476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.433523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.490110][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.519820][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.425532][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.162968][ T4330] netlink: 'syz.0.14': attribute type 2 has an invalid length. [ 82.184972][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 82.194959][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 82.204954][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 82.214950][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 82.244962][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 83.504963][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 83.524949][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 83.534933][ C0] sched: RT throttling activated [ 83.554946][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 83.584961][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 83.594946][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 84.396228][ T4347] block device autoloading is deprecated and will be removed. [ 84.475907][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.483573][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 85.614408][ T4356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 87.036130][ T4350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.356594][ T3160] cfg80211: failed to load regulatory.db [ 89.551702][ T4370] Cannot find del_set index 0 as target [ 89.804233][ T4374] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 90.866028][ T4374] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 90.925033][ T4374] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 91.143705][ T4380] ceph: No mds server is up or the cluster is laggy [ 91.151534][ T4234] libceph: connect (1)[c::]:6789 error -101 [ 91.159224][ T4234] libceph: mon0 (1)[c::]:6789 connect error [ 91.240579][ T4392] netlink: 'syz.2.30': attribute type 2 has an invalid length. [ 91.562181][ T26] audit: type=1800 audit(1785461839.533:6): pid=4391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.31" name="idVendor" dev="configfs" ino=33459 res=0 errno=0 [ 91.591418][ T3160] libceph: connect (1)[c::]:6789 error -101 [ 91.648940][ T3160] libceph: mon0 (1)[c::]:6789 connect error [ 91.693448][ T26] audit: type=1800 audit(1785461839.533:7): pid=4391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.31" name="serialnumber" dev="configfs" ino=33460 res=0 errno=0 [ 91.847120][ T4400] device bridge2 entered promiscuous mode [ 91.859897][ T4400] team0: Port device bridge2 added [ 94.158596][ T26] audit: type=1800 audit(1785461839.623:8): pid=4391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.31" name="manufacturer" dev="configfs" ino=32620 res=0 errno=0 [ 94.179915][ T26] audit: type=1800 audit(1785461839.633:9): pid=4391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.31" name="product" dev="configfs" ino=32625 res=0 errno=0 [ 94.200047][ T26] audit: type=1800 audit(1785461839.643:10): pid=4391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.31" name="configuration" dev="configfs" ino=32629 res=0 errno=0 [ 94.222070][ T26] audit: type=1800 audit(1785461839.663:11): pid=4391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.31" name="UDC" dev="configfs" ino=33466 res=0 errno=0 [ 94.282044][ T26] audit: type=1800 audit(1785461842.243:12): pid=4409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.36" name="idVendor" dev="configfs" ino=32638 res=0 errno=0 [ 94.586121][ T26] audit: type=1800 audit(1785461842.253:13): pid=4409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.36" name="serialnumber" dev="configfs" ino=32639 res=0 errno=0 [ 94.607735][ T26] audit: type=1800 audit(1785461842.303:14): pid=4409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.36" name="manufacturer" dev="configfs" ino=32646 res=0 errno=0 [ 94.628749][ T26] audit: type=1800 audit(1785461842.453:15): pid=4409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.36" name="product" dev="configfs" ino=32650 res=0 errno=0 [ 94.753099][ T4415] Zero length message leads to an empty skb [ 99.238271][ T4438] ceph: No mds server is up or the cluster is laggy [ 99.298667][ T4445] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.374372][ T4421] libceph: connect (1)[c::]:6789 error -101 [ 99.385459][ T4421] libceph: mon0 (1)[c::]:6789 connect error [ 99.442388][ T4453] Cannot find del_set index 0 as target [ 99.515411][ T4275] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.681800][ T4458] netlink: 'syz.1.43': attribute type 2 has an invalid length. [ 99.701391][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 100.175564][ T4455] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 100.185252][ T4455] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 100.193843][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 100.243417][ T4455] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 100.425082][ T4275] usb 3-1: Using ep0 maxpacket: 8 [ 100.467929][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 100.467944][ T26] audit: type=1800 audit(1785461848.443:17): pid=4462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.46" name="idVendor" dev="configfs" ino=33548 res=0 errno=0 [ 100.545206][ T4275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 100.607599][ T4473] device bridge1 entered promiscuous mode [ 100.622359][ T4473] team0: Port device bridge1 added [ 100.654733][ T4275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.828218][ T4275] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 100.859522][ T26] audit: type=1800 audit(1785461848.513:18): pid=4462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.46" name="serialnumber" dev="configfs" ino=33549 res=0 errno=0 [ 100.995612][ T4275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.190508][ T26] audit: type=1800 audit(1785461848.573:19): pid=4462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.46" name="manufacturer" dev="configfs" ino=33553 res=0 errno=0 [ 101.359006][ T4275] usb 3-1: config 0 descriptor?? [ 101.546103][ T26] audit: type=1800 audit(1785461848.643:20): pid=4462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.46" name="product" dev="configfs" ino=33555 res=0 errno=0 [ 101.570108][ T26] audit: type=1800 audit(1785461848.773:21): pid=4462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.46" name="configuration" dev="configfs" ino=33556 res=0 errno=0 [ 101.591162][ T26] audit: type=1800 audit(1785461848.863:22): pid=4462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.46" name="UDC" dev="configfs" ino=33557 res=0 errno=0 [ 101.645210][ T4275] usb 3-1: can't set config #0, error -71 [ 101.654720][ T26] audit: type=1800 audit(1785461849.623:23): pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.49" name="idVendor" dev="configfs" ino=33565 res=0 errno=0 [ 101.714051][ T4275] usb 3-1: USB disconnect, device number 2 [ 102.123910][ T26] audit: type=1800 audit(1785461849.683:24): pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.49" name="serialnumber" dev="configfs" ino=33567 res=0 errno=0 [ 102.146046][ T26] audit: type=1800 audit(1785461849.713:25): pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.49" name="manufacturer" dev="configfs" ino=33568 res=0 errno=0 [ 102.166990][ T26] audit: type=1800 audit(1785461849.723:26): pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.49" name="product" dev="configfs" ino=33569 res=0 errno=0 [ 102.495173][ T4303] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.608821][ T4491] device bridge_slave_1 left promiscuous mode [ 102.936734][ T4491] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.749500][ T4303] Bluetooth: hci0: command 0x0406 tx timeout [ 104.969485][ T4491] device bridge_slave_0 left promiscuous mode [ 105.090114][ T4491] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.736808][ T4519] Cannot find del_set index 0 as target [ 107.762990][ T4509] netlink: 'syz.2.56': attribute type 2 has an invalid length. [ 109.327796][ T4547] ODEBUG: Out of memory. ODEBUG disabled [ 110.580000][ T4558] device syzkaller0 entered promiscuous mode [ 112.241350][ T4595] netlink: 'syz.4.80': attribute type 2 has an invalid length. [ 112.820833][ T4594] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 114.615468][ T4605] crypto_alloc_aead failed rc=-2 [ 114.965027][ T13] Bluetooth: hci3: command 0x0405 tx timeout [ 115.231483][ T4632] block device autoloading is deprecated and will be removed. [ 115.974018][ T4645] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.893553][ T4651] device syzkaller0 entered promiscuous mode [ 116.977012][ T4657] netlink: 'syz.2.91': attribute type 2 has an invalid length. [ 119.736049][ T4677] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.816405][ T4683] capability: warning: `syz.1.99' uses deprecated v2 capabilities in a way that may be insecure [ 120.975084][ T4197] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.265106][ T4197] usb 4-1: Using ep0 maxpacket: 8 [ 121.546895][ T4692] lo speed is unknown, defaulting to 1000 [ 121.553055][ T4692] lo speed is unknown, defaulting to 1000 [ 121.570822][ T4197] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 121.590340][ T4197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.820427][ T4692] lo speed is unknown, defaulting to 1000 [ 121.860940][ T4692] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 121.873056][ T4692] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 121.895483][ T4692] lo speed is unknown, defaulting to 1000 [ 121.902202][ T4692] lo speed is unknown, defaulting to 1000 [ 121.908828][ T4692] lo speed is unknown, defaulting to 1000 [ 121.915389][ T4692] lo speed is unknown, defaulting to 1000 [ 121.929358][ T4692] lo speed is unknown, defaulting to 1000 [ 121.935817][ T4692] lo speed is unknown, defaulting to 1000 [ 122.183006][ T4197] usb 4-1: Product: syz [ 122.188852][ T4197] usb 4-1: Manufacturer: syz [ 122.193793][ T4197] usb 4-1: SerialNumber: syz [ 122.202945][ T4197] usb 4-1: config 0 descriptor?? [ 122.259386][ T4197] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 122.629330][ T4706] netlink: 'syz.1.104': attribute type 2 has an invalid length. [ 122.736342][ T4197] pctv452e: pctv452e_power_ctrl: 1 [ 122.736342][ T4197] [ 122.743999][ T4197] usb 4-1: selecting invalid altsetting 3 [ 122.750350][ T4197] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 122.750350][ T4197] [ 122.761320][ T4197] dvb-usb: bulk message failed: -22 (5/0) [ 122.775796][ T4197] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.013455][ T4197] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 123.055168][ T4197] usb 4-1: media controller created [ 123.061671][ T4197] dvb-usb: bulk message failed: -22 (8/0) [ 123.068322][ T4197] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 123.101687][ T4197] dvb-usb: MAC address reading failed. [ 123.122512][ T4197] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.328647][ T4681] 9pnet_virtio: no channels available for device syz [ 123.440520][ T4197] DVB: Unable to find symbol stb0899_attach() [ 123.448945][ T4197] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 123.777808][ T4719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.106'. [ 123.791411][ T4719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.106'. [ 123.835788][ T4719] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.845154][ T4719] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.853960][ T4719] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.862968][ T4719] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.985103][ T4197] rc_core: IR keymap rc-tt-1500 not found [ 123.999969][ T4197] Registered IR keymap rc-empty [ 124.024863][ T4197] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 124.069866][ T4197] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input11 [ 124.098817][ T4731] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.150487][ T4197] dvb-usb: schedule remote query interval to 100 msecs. [ 124.166888][ T4197] pctv452e: pctv452e_power_ctrl: 0 [ 124.166888][ T4197] [ 124.188009][ T4197] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 124.510405][ T4731] syz.2.110 uses obsolete (PF_INET,SOCK_PACKET) [ 124.517607][ T1327] dvb-usb: bulk message failed: -22 (4/0) [ 124.517685][ T1327] dvb-usb: error -22 while querying for an remote control event. [ 124.626879][ T4197] dvb-usb: bulk message failed: -22 (4/0) [ 124.626909][ T4197] dvb-usb: error -22 while querying for an remote control event. [ 124.738275][ T1327] dvb-usb: bulk message failed: -22 (4/0) [ 124.738303][ T1327] dvb-usb: error -22 while querying for an remote control event. [ 124.795067][ T4269] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.851210][ T1327] dvb-usb: bulk message failed: -22 (4/0) [ 124.851240][ T1327] dvb-usb: error -22 while querying for an remote control event. [ 124.875269][ T4264] usb 4-1: USB disconnect, device number 2 [ 125.894174][ T4264] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 125.955180][ T4269] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.955208][ T4269] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.178237][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 126.178265][ T26] audit: type=1800 audit(1785461874.143:28): pid=4750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.117" name="idVendor" dev="configfs" ino=34347 res=0 errno=0 [ 126.343717][ T4269] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 126.355081][ T4269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.363130][ T4269] usb 1-1: Product: syz [ 126.367481][ T4269] usb 1-1: Manufacturer: syz [ 126.374978][ T4269] usb 1-1: SerialNumber: syz [ 127.222467][ T4736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.113'. [ 127.388865][ T26] audit: type=1800 audit(1785461875.153:29): pid=4750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.117" name="serialnumber" dev="configfs" ino=34351 res=0 errno=0 [ 127.414448][ T26] audit: type=1800 audit(1785461875.153:30): pid=4750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.117" name="manufacturer" dev="configfs" ino=34352 res=0 errno=0 [ 127.604975][ T26] audit: type=1800 audit(1785461875.153:31): pid=4750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.117" name="product" dev="configfs" ino=34353 res=0 errno=0 [ 127.722662][ T26] audit: type=1800 audit(1785461875.153:32): pid=4750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.117" name="configuration" dev="configfs" ino=34354 res=0 errno=0 [ 128.175234][ T1327] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 128.259430][ T4771] device syzkaller0 entered promiscuous mode [ 128.408342][ T4779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 128.428789][ T4779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.122'. [ 128.441860][ T4779] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.451472][ T4779] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.460594][ T4779] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.469505][ T4779] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.478551][ T4779] netdevsim netdevsim10 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.488452][ T1327] usb 5-1: Using ep0 maxpacket: 16 [ 128.549713][ T4269] usb 1-1: USB disconnect, device number 2 [ 128.615853][ T1327] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 129.595165][ T1327] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 129.617723][ T1327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.628196][ T4575] udevd[4575]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.645386][ T1327] usb 5-1: Product: syz [ 129.652843][ T1327] usb 5-1: Manufacturer: syz [ 129.658208][ T1327] usb 5-1: SerialNumber: syz [ 129.893404][ T4264] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 129.904054][ T1327] usb 5-1: config 0 descriptor?? [ 130.154985][ T4264] usb 3-1: Using ep0 maxpacket: 8 [ 130.445197][ T4264] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 130.460368][ T4264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.468934][ T4264] usb 3-1: Product: syz [ 130.473193][ T4264] usb 3-1: Manufacturer: syz [ 130.574991][ T4264] usb 3-1: SerialNumber: syz [ 130.581517][ T4264] usb 3-1: config 0 descriptor?? [ 130.627114][ T4264] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 130.645020][ T4264] pctv452e: pctv452e_power_ctrl: 1 [ 130.645020][ T4264] [ 130.652401][ T4264] usb 3-1: selecting invalid altsetting 3 [ 130.685104][ T4264] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 130.685104][ T4264] [ 130.715039][ T4264] dvb-usb: bulk message failed: -22 (5/0) [ 130.735756][ T4264] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 130.786186][ T4264] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 130.794621][ T4264] usb 3-1: media controller created [ 130.822421][ T4264] dvb-usb: bulk message failed: -22 (8/0) [ 131.113272][ T4264] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 131.133077][ T4264] dvb-usb: MAC address reading failed. [ 131.250902][ T4264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.254266][ T4783] 9pnet_virtio: no channels available for device syz [ 131.306295][ T4269] usb 5-1: USB disconnect, device number 2 [ 131.317071][ T4264] DVB: Unable to find symbol stb0899_attach() [ 131.323199][ T4264] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 131.507096][ T4264] rc_core: IR keymap rc-tt-1500 not found [ 131.517841][ T4264] Registered IR keymap rc-empty [ 131.531672][ T4264] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 131.575739][ T4264] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input13 [ 131.715010][ T4275] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.553719][ T4264] dvb-usb: schedule remote query interval to 100 msecs. [ 132.561584][ T4264] pctv452e: pctv452e_power_ctrl: 0 [ 132.561584][ T4264] [ 132.569321][ T4264] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 132.627348][ T23] usb 3-1: USB disconnect, device number 3 [ 132.744221][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.750565][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.834540][ T23] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 132.850038][ T4822] device syzkaller0 entered promiscuous mode [ 133.055137][ T4275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.066265][ T4275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.076176][ T4275] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.144612][ T4275] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.154321][ T4275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.179080][ T4275] usb 1-1: config 0 descriptor?? [ 133.952103][ T4830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 133.961228][ T4830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.138'. [ 133.973711][ T4830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 133.982670][ T4830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.138'. [ 135.755439][ T4275] usbhid 1-1:0.0: can't add hid device: -71 [ 135.764508][ T4275] usbhid: probe of 1-1:0.0 failed with error -71 [ 136.113321][ T4275] usb 1-1: USB disconnect, device number 3 [ 137.085815][ T4840] netlink: 'syz.4.141': attribute type 2 has an invalid length. [ 137.166074][ T26] audit: type=1800 audit(1785461885.073:33): pid=4839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.142" name="idVendor" dev="configfs" ino=35577 res=0 errno=0 [ 137.238811][ T26] audit: type=1800 audit(1785461885.073:34): pid=4839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.142" name="serialnumber" dev="configfs" ino=35578 res=0 errno=0 [ 137.270175][ T26] audit: type=1800 audit(1785461885.083:35): pid=4839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.142" name="manufacturer" dev="configfs" ino=35579 res=0 errno=0 [ 137.292133][ T26] audit: type=1800 audit(1785461885.083:36): pid=4839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.142" name="configuration" dev="configfs" ino=35580 res=0 errno=0 [ 137.408269][ T4846] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 137.604350][ T4857] device ipip0 entered promiscuous mode [ 137.825052][ T4301] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 138.006704][ T4864] device syzkaller0 entered promiscuous mode [ 138.115513][ T4301] usb 4-1: Using ep0 maxpacket: 8 [ 138.313593][ T4869] ======================================================= [ 138.313593][ T4869] WARNING: The mand mount option has been deprecated and [ 138.313593][ T4869] and is ignored by this kernel. Remove the mand [ 138.313593][ T4869] option from the mount to silence this warning. [ 138.313593][ T4869] ======================================================= [ 138.389769][ T4869] overlayfs: invalid redirect (./bus) [ 138.515359][ T4301] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 138.531311][ T4301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.539502][ T26] audit: type=1800 audit(1785461886.513:37): pid=4871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.152" name="idVendor" dev="configfs" ino=35628 res=0 errno=0 [ 138.577859][ T26] audit: type=1800 audit(1785461886.513:38): pid=4871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.152" name="serialnumber" dev="configfs" ino=35629 res=0 errno=0 [ 138.604960][ T4301] usb 4-1: Product: syz [ 138.605000][ T26] audit: type=1800 audit(1785461886.513:39): pid=4871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.152" name="manufacturer" dev="configfs" ino=35630 res=0 errno=0 [ 138.609256][ T4301] usb 4-1: Manufacturer: syz [ 138.609275][ T4301] usb 4-1: SerialNumber: syz [ 138.660287][ T26] audit: type=1800 audit(1785461886.513:40): pid=4871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.152" name="product" dev="configfs" ino=35631 res=0 errno=0 [ 138.689815][ T3160] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 138.697731][ T4301] usb 4-1: config 0 descriptor?? [ 138.729285][ T26] audit: type=1800 audit(1785461886.523:41): pid=4871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.152" name="configuration" dev="configfs" ino=35632 res=0 errno=0 [ 138.755062][ T26] audit: type=1800 audit(1785461886.523:42): pid=4871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.152" name="UDC" dev="configfs" ino=35633 res=0 errno=0 [ 138.763604][ T4301] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 138.918137][ T150] block nbd4: Attempted send on invalid socket [ 138.924781][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.945239][ T4875] FAT-fs (nbd4): unable to read boot sector [ 139.007163][ T4878] netlink: 'syz.2.153': attribute type 2 has an invalid length. [ 139.301779][ T4301] pctv452e: pctv452e_power_ctrl: 1 [ 139.301779][ T4301] [ 139.309762][ T4301] usb 4-1: selecting invalid altsetting 3 [ 139.321913][ T4301] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 139.321913][ T4301] [ 139.414448][ T4301] dvb-usb: bulk message failed: -22 (5/0) [ 139.425225][ T4301] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.456655][ T4301] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 139.456782][ T3160] usb 1-1: Dual-Role OTG device on HNP port [ 139.487708][ T4301] usb 4-1: media controller created [ 139.493063][ T4301] dvb-usb: bulk message failed: -22 (8/0) [ 139.580875][ T4301] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 139.593466][ T4301] dvb-usb: MAC address reading failed. [ 139.603581][ T3160] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0000, bcdDevice= 5.15 [ 139.624058][ T4301] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.684987][ T4881] 9pnet_virtio: no channels available for device syz [ 139.710398][ T3160] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.782088][ T4301] DVB: Unable to find symbol stb0899_attach() [ 139.789140][ T4301] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 139.802280][ T3160] usb 1-1: Product: Test Gadget [ 139.840316][ T3160] usb 1-1: Manufacturer: Linux Foundation [ 139.878117][ T3160] usb 1-1: SerialNumber: 123456789 [ 140.165068][ T4301] rc_core: IR keymap rc-tt-1500 not found [ 140.327612][ T4301] Registered IR keymap rc-empty [ 140.357058][ T4301] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 141.276433][ T4301] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input14 [ 141.290767][ T4301] dvb-usb: schedule remote query interval to 100 msecs. [ 141.298100][ T4301] pctv452e: pctv452e_power_ctrl: 0 [ 141.298100][ T4301] [ 141.305796][ T4301] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 141.487609][ T1327] dvb-usb: bulk message failed: -22 (4/0) [ 141.493815][ T1327] dvb-usb: error -22 while querying for an remote control event. [ 141.561594][ T3160] usb 4-1: USB disconnect, device number 3 [ 141.630664][ T4901] device syzkaller0 entered promiscuous mode [ 141.649870][ T3160] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 142.469585][ T26] audit: type=1800 audit(1785461890.443:43): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.164" name="idVendor" dev="configfs" ino=34557 res=0 errno=0 [ 142.531650][ T26] audit: type=1800 audit(1785461890.483:44): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.164" name="serialnumber" dev="configfs" ino=34558 res=0 errno=0 [ 142.573812][ T4910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.163'. [ 142.583258][ T4910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.163'. [ 142.912782][ T4923] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by ""[4923] [ 142.931615][ T4923] netlink: 'syz.1.165': attribute type 29 has an invalid length. [ 142.943259][ T4923] netlink: 'syz.1.165': attribute type 29 has an invalid length. [ 142.954124][ T4923] netlink: 'syz.1.165': attribute type 29 has an invalid length. [ 142.967715][ T4923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.825422][ T26] audit: type=1800 audit(1785461890.483:45): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.164" name="manufacturer" dev="configfs" ino=34559 res=0 errno=0 [ 143.851251][ T264] block nbd0: Attempted send on invalid socket [ 143.857817][ T264] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.875472][ T4926] FAT-fs (nbd0): unable to read boot sector [ 143.909035][ T26] audit: type=1800 audit(1785461890.483:46): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.164" name="product" dev="configfs" ino=34560 res=0 errno=0 [ 143.940196][ T26] audit: type=1800 audit(1785461890.493:47): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.164" name="configuration" dev="configfs" ino=34561 res=0 errno=0 [ 143.961125][ T26] audit: type=1800 audit(1785461890.493:48): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.164" name="UDC" dev="configfs" ino=34562 res=0 errno=0 [ 144.141470][ T4930] udc dummy_udc.0: unsupported command 'discon' [ 144.171690][ T4930] udc dummy_udc.0: UDC had already started [ 144.216850][ T4932] Cannot find del_set index 0 as target [ 144.281290][ T26] audit: type=1800 audit(1785461892.253:49): pid=4935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.173" name="idVendor" dev="configfs" ino=35758 res=0 errno=0 [ 144.405710][ T4939] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 144.414111][ T4939] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 144.423098][ T4939] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 144.824610][ T26] audit: type=1800 audit(1785461892.283:50): pid=4935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.173" name="serialnumber" dev="configfs" ino=34591 res=0 errno=0 [ 145.023452][ T26] audit: type=1800 audit(1785461892.283:51): pid=4935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.173" name="configuration" dev="configfs" ino=34592 res=0 errno=0 [ 145.068041][ T4944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.172'. [ 146.602955][ T26] audit: type=1800 audit(1785461894.573:52): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.177" name="idVendor" dev="configfs" ino=34619 res=0 errno=0 [ 147.326577][ T4960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 147.337005][ T4960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.180'. [ 147.377868][ T4960] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.387360][ T4960] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.396242][ T4960] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.405022][ T4960] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.449369][ T4956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 147.458374][ T4956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.180'. [ 147.561307][ T264] block nbd0: Attempted send on invalid socket [ 147.567914][ T264] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.580322][ T4968] FAT-fs (nbd0): unable to read boot sector [ 147.985225][ T4975] netlink: 'syz.1.185': attribute type 2 has an invalid length. [ 150.374806][ T4985] lo speed is unknown, defaulting to 1000 [ 151.549632][ T4992] Cannot find del_set index 0 as target [ 151.737608][ T4999] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 151.762463][ T4999] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 151.805505][ T4999] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 152.158793][ T150] block nbd0: Attempted send on invalid socket [ 152.165176][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 152.176905][ T5005] FAT-fs (nbd0): unable to read boot sector [ 154.124487][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 154.124503][ T26] audit: type=1800 audit(1785461902.093:58): pid=5018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.200" name="idVendor" dev="configfs" ino=35877 res=0 errno=0 [ 154.150831][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.241964][ T26] audit: type=1800 audit(1785461902.213:59): pid=5018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.200" name="serialnumber" dev="configfs" ino=34785 res=0 errno=0 [ 154.350141][ T26] audit: type=1800 audit(1785461902.213:60): pid=5018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.200" name="manufacturer" dev="configfs" ino=34786 res=0 errno=0 [ 154.381089][ T26] audit: type=1800 audit(1785461902.213:61): pid=5018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.200" name="product" dev="configfs" ino=34787 res=0 errno=0 [ 154.456243][ T26] audit: type=1800 audit(1785461902.243:62): pid=5018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.200" name="configuration" dev="configfs" ino=34788 res=0 errno=0 [ 154.500888][ T26] audit: type=1800 audit(1785461902.253:63): pid=5018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.200" name="UDC" dev="configfs" ino=34789 res=0 errno=0 [ 157.334757][ T5045] netlink: 40 bytes leftover after parsing attributes in process `syz.4.208'. [ 157.367219][ T5045] netlink: 60 bytes leftover after parsing attributes in process `syz.4.208'. [ 157.411344][ T5045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.208'. [ 157.442399][ T5045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.208'. [ 158.185101][ T26] audit: type=1800 audit(1785461906.153:64): pid=5058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.213" name="idVendor" dev="configfs" ino=36973 res=0 errno=0 [ 158.275522][ T26] audit: type=1800 audit(1785461906.243:65): pid=5058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.213" name="serialnumber" dev="configfs" ino=36974 res=0 errno=0 [ 158.340948][ T26] audit: type=1800 audit(1785461906.313:66): pid=5058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.213" name="manufacturer" dev="configfs" ino=36975 res=0 errno=0 [ 158.436202][ T26] audit: type=1800 audit(1785461906.373:67): pid=5058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.213" name="product" dev="configfs" ino=36976 res=0 errno=0 [ 158.706617][ T264] block nbd3: Attempted send on invalid socket [ 158.712845][ T264] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.726185][ T5072] FAT-fs (nbd3): unable to read boot sector [ 161.290853][ T5089] comedi comedi0: comedi_config --init_data is deprecated [ 161.998235][ T5088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.222'. [ 162.048051][ T5088] netlink: 60 bytes leftover after parsing attributes in process `syz.0.222'. [ 162.120501][ T5088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.222'. [ 162.190785][ T5088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.222'. [ 162.400767][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 162.400783][ T26] audit: type=1800 audit(1785461910.373:72): pid=5103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.227" name="idVendor" dev="configfs" ino=35975 res=0 errno=0 [ 162.458114][ T26] audit: type=1800 audit(1785461910.373:73): pid=5103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.227" name="serialnumber" dev="configfs" ino=35976 res=0 errno=0 [ 162.530389][ T26] audit: type=1800 audit(1785461910.373:74): pid=5103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.227" name="manufacturer" dev="configfs" ino=35977 res=0 errno=0 [ 162.550938][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.583768][ T26] audit: type=1800 audit(1785461910.383:75): pid=5103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.227" name="product" dev="configfs" ino=35978 res=0 errno=0 [ 162.606089][ T26] audit: type=1800 audit(1785461910.383:76): pid=5103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.227" name="configuration" dev="configfs" ino=35979 res=0 errno=0 [ 162.775079][ T3160] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 163.153356][ T150] configfs-gadget gadget: f_midi_do_transmit: Couldn't get usb request [ 163.162990][ T150] configfs-gadget gadget: f_midi_do_transmit: Couldn't get usb request [ 163.171616][ T150] configfs-gadget gadget: f_midi_do_transmit: Couldn't get usb request [ 163.181365][ T264] configfs-gadget gadget: f_midi_do_transmit: Couldn't get usb request [ 163.190251][ T264] configfs-gadget gadget: f_midi_do_transmit: Couldn't get usb request [ 163.199031][ T264] configfs-gadget gadget: f_midi_do_transmit: Couldn't get usb request [ 163.205328][ T3160] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.217800][ T150] configfs-gadget gadget: f_midi_do_transmit: Couldn't get usb request [ 163.227665][ T150] configfs-gadget gadget: f_midi_do_transmit: Couldn't get usb request [ 163.236401][ T150] configfs-gadget gadget: f_midi_do_transmit: Couldn't get usb request [ 163.245343][ T150] configfs-gadget gadget: f_midi_do_transmit: Couldn't get usb request [ 163.254571][ T3160] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.288451][ T23] [ 163.290825][ T23] ============================================ [ 163.296970][ T23] WARNING: possible recursive locking detected [ 163.303125][ T23] syzkaller #0 Not tainted [ 163.307555][ T23] -------------------------------------------- [ 163.313696][ T23] kworker/1:1/23 is trying to acquire lock: [ 163.319582][ T23] ffff88802a0d5130 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x1cb/0x8c0 [ 163.329343][ T23] [ 163.329343][ T23] but task is already holding lock: [ 163.336714][ T23] ffff888073bf0130 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x1cb/0x8c0 [ 163.346455][ T23] [ 163.346455][ T23] other info that might help us debug this: [ 163.354510][ T23] Possible unsafe locking scenario: [ 163.354510][ T23] [ 163.361950][ T23] CPU0 [ 163.365233][ T23] ---- [ 163.368526][ T23] lock(&grp->list_lock); [ 163.372960][ T23] lock(&grp->list_lock); [ 163.377393][ T23] [ 163.377393][ T23] *** DEADLOCK *** [ 163.377393][ T23] [ 163.385525][ T23] May be due to missing lock nesting notation [ 163.385525][ T23] [ 163.393834][ T23] 3 locks held by kworker/1:1/23: [ 163.398865][ T23] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 163.409128][ T23] #1: ffffc90000ddfd00 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 163.420957][ T23] #2: ffff888073bf0130 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x1cb/0x8c0 [ 163.431137][ T23] [ 163.431137][ T23] stack backtrace: [ 163.437050][ T23] CPU: 1 PID: 23 Comm: kworker/1:1 Not tainted syzkaller #0 [ 163.444372][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.454604][ T23] Workqueue: events snd_rawmidi_input_event_work [ 163.460953][ T23] Call Trace: [ 163.464232][ T23] [ 163.467162][ T23] dump_stack_lvl+0x188/0x250 [ 163.471855][ T23] ? show_regs_print_info+0x20/0x20 [ 163.477075][ T23] ? load_image+0x410/0x410 [ 163.481587][ T23] __lock_acquire+0x1247/0x7b50 [ 163.486448][ T23] ? verify_lock_unused+0x140/0x140 [ 163.491748][ T23] ? verify_lock_unused+0x140/0x140 [ 163.497055][ T23] ? verify_lock_unused+0x140/0x140 [ 163.502351][ T23] ? ktime_get_real_ts64+0x440/0x440 [ 163.507645][ T23] lock_acquire+0x19e/0x400 [ 163.512152][ T23] ? snd_seq_deliver_event+0x1cb/0x8c0 [ 163.517612][ T23] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 163.523613][ T23] ? read_lock_is_recursive+0x10/0x10 [ 163.529009][ T23] ? __rwlock_init+0x140/0x140 [ 163.533775][ T23] ? do_raw_read_unlock+0x39/0x70 [ 163.538802][ T23] _raw_read_lock+0x32/0x40 [ 163.543396][ T23] ? snd_seq_deliver_event+0x1cb/0x8c0 [ 163.548855][ T23] snd_seq_deliver_event+0x1cb/0x8c0 [ 163.554243][ T23] snd_seq_kernel_client_dispatch+0x1fc/0x2f0 [ 163.560328][ T23] snd_seq_control_queue+0x8ff/0x1010 [ 163.565714][ T23] ? snd_seq_queue_remove_cells+0x2e0/0x2e0 [ 163.571636][ T23] ? mark_lock+0x94/0x320 [ 163.575980][ T23] ? snd_seq_port_use_ptr+0xfd/0x120 [ 163.581319][ T23] ? __lock_acquire+0x7b50/0x7b50 [ 163.586363][ T23] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 163.592273][ T23] ? _raw_spin_unlock+0x40/0x40 [ 163.597123][ T23] ? mark_lock+0x94/0x320 [ 163.601453][ T23] ? do_raw_read_unlock+0x39/0x70 [ 163.606490][ T23] ? _raw_read_unlock+0x24/0x40 [ 163.611353][ T23] ? snd_seq_port_use_ptr+0xfd/0x120 [ 163.616657][ T23] ? snd_seq_system_notify+0x170/0x170 [ 163.622150][ T23] snd_seq_deliver_single_event+0x806/0xb30 [ 163.628051][ T23] ? snd_seq_deliver_event+0x1e2/0x8c0 [ 163.633512][ T23] ? snd_sequencer_device_done+0x20/0x20 [ 163.639147][ T23] snd_seq_kernel_client_dispatch+0x1fc/0x2f0 [ 163.645214][ T23] snd_seq_oss_timer_start+0x2ce/0x510 [ 163.650673][ T23] ? snd_seq_oss_process_timer_event+0x3d0/0x3d0 [ 163.657003][ T23] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 163.662897][ T23] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 163.668790][ T23] ? _raw_spin_unlock+0x40/0x40 [ 163.673633][ T23] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 163.679525][ T23] ? _raw_spin_unlock+0x40/0x40 [ 163.684372][ T23] ? snd_seq_oss_readq_put_timestamp+0x333/0x5b0 [ 163.690717][ T23] snd_seq_oss_midi_input+0x2e8/0x890 [ 163.696094][ T23] ? snd_seq_oss_midi_get_addr+0x260/0x260 [ 163.701905][ T23] ? do_raw_read_unlock+0x39/0x70 [ 163.706931][ T23] ? _raw_read_unlock+0x24/0x40 [ 163.711780][ T23] ? snd_seq_port_use_ptr+0xfd/0x120 [ 163.717080][ T23] ? snd_seq_oss_process_event+0x2910/0x2910 [ 163.723056][ T23] snd_seq_deliver_single_event+0x806/0xb30 [ 163.728951][ T23] ? lockdep_hardirqs_on+0x94/0x140 [ 163.734161][ T23] ? snd_sequencer_device_done+0x20/0x20 [ 163.739801][ T23] ? do_raw_read_unlock+0x39/0x70 [ 163.744855][ T23] snd_seq_deliver_event+0x49d/0x8c0 [ 163.750225][ T23] snd_seq_kernel_client_dispatch+0x1fc/0x2f0 [ 163.756300][ T23] snd_midi_input_event+0x289/0x3d0 [ 163.761535][ T23] ? event_process_midi+0x3e0/0x3e0 [ 163.766739][ T23] ? __schedule+0x11cb/0x4350 [ 163.771421][ T23] ? _raw_spin_unlock_irq+0x1f/0x40 [ 163.776656][ T23] process_one_work+0x867/0xff0 [ 163.781525][ T23] ? worker_detach_from_pool+0x240/0x240 [ 163.787163][ T23] ? lockdep_hardirqs_off+0x70/0x100 [ 163.792453][ T23] ? _raw_spin_lock_irq+0xb7/0xf0 [ 163.797480][ T23] ? _raw_spin_lock_irqsave+0x100/0x100 [ 163.803029][ T23] ? wq_worker_running+0x97/0x170 [ 163.808156][ T23] worker_thread+0xad7/0x12a0 [ 163.812960][ T23] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 163.818857][ T23] kthread+0x42e/0x520 [ 163.823016][ T23] ? rcu_lock_release+0x20/0x20 [ 163.827963][ T23] ? kthread_blkcg+0xd0/0xd0 [ 163.832558][ T23] ret_from_fork+0x1f/0x30 [ 163.837008][ T23] [ 163.893890][ T150] block nbd3: Attempted send on invalid socket [ 163.900177][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 163.911360][ T5116] FAT-fs (nbd3): unable to read boot sector [ 163.995257][ T3160] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 164.017241][ T3160] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.028049][ T3160] usb 2-1: Product: syz [ 164.032263][ T3160] usb 2-1: Manufacturer: syz [ 164.038660][ T3160] usb 2-1: SerialNumber: syz [ 164.313606][ T5105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.228'. [ 164.417384][ T3160] usb 2-1: USB disconnect, device number 2 [ 164.625912][ T4575] udevd[4575]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory