last executing test programs: 1m56.578587186s ago: executing program 0 (id=104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7, 0x1, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1m52.834412742s ago: executing program 0 (id=110): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="adcd1a9a3fc36e961ed00fe41b0cd69504a93b22de4d307894d5d308bf40560fef910001d079e7ef7999ba45e9ea808d165ec4be287dfdee382206d045cb73b2d56e13ec1121aa907f18a7b813f0ce8c0224c25fc04925656fd7e064", 0x5c) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xc}], 0x1, 0x800) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001a00010027bd7000ffdbdf251c200007ff04000b001300000c00090003000205", @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000d00)=' f 127.0.0.1 2\\000\\00 : l\\calhost\n', 0x24) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @empty}, &(0x7f0000000180)=0xc) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000008da47f56090000000000000000100000", @ANYRES32=r5, @ANYBLOB="ffffff7f00"/18, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="020000000100000001000079ca000000000000"], 0x50) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) 1m50.557594489s ago: executing program 0 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x4080}, 0x8000) 1m49.45357752s ago: executing program 0 (id=113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 1m47.492439312s ago: executing program 0 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x18410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./lower/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000340)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') write$P9_RREADDIR(r0, &(0x7f0000000180)={0xb, 0x29, 0x2, {0x67a}}, 0xb) unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/file1\x00', 0x0) 1m45.748552464s ago: executing program 0 (id=120): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="adcd1a9a3fc36e961ed00fe41b0cd69504a93b22de4d307894d5d308bf40560fef910001d079e7ef7999ba45e9ea808d165ec4be287dfdee382206d045cb73b2d56e13ec1121aa907f18a7b813f0ce8c0224c25fc04925656fd7e064", 0x5c) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xc}], 0x1, 0x800) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001a00010027bd7000ffdbdf251c200007ff04000b001300000c00090003000205", @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000d00)=' f 127.0.0.1 2\\000\\00 : l\\calhost\n', 0x24) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @empty}, &(0x7f0000000180)=0xc) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000008da47f56090000000000000000100000", @ANYRES32=r5, @ANYBLOB="ffffff7f00"/18, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="020000000100000001000079ca000000000000"], 0x50) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) 1m29.914910176s ago: executing program 32 (id=120): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="adcd1a9a3fc36e961ed00fe41b0cd69504a93b22de4d307894d5d308bf40560fef910001d079e7ef7999ba45e9ea808d165ec4be287dfdee382206d045cb73b2d56e13ec1121aa907f18a7b813f0ce8c0224c25fc04925656fd7e064", 0x5c) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xc}], 0x1, 0x800) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001a00010027bd7000ffdbdf251c200007ff04000b001300000c00090003000205", @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000d00)=' f 127.0.0.1 2\\000\\00 : l\\calhost\n', 0x24) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @empty}, &(0x7f0000000180)=0xc) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000008da47f56090000000000000000100000", @ANYRES32=r5, @ANYBLOB="ffffff7f00"/18, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="020000000100000001000079ca000000000000"], 0x50) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) 26.65838724s ago: executing program 2 (id=222): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c9"], 0x16) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, 0x0) 24.770709519s ago: executing program 2 (id=225): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000206050000000000000000"], 0x2c}}, 0x20004890) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000100)={{0xf9, 0x5}, 0x0, 0x8, 0x2, {0x5, 0x98}, 0x4, 0x13}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1c018050}, 0x44014) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 24.267515392s ago: executing program 3 (id=226): openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) syz_pidfd_open(0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000070}, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) 23.171318214s ago: executing program 3 (id=228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x2, 0x7fff, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000214000e00002f74214b34586d47423cddcb0000008000008276000000000000006e81a357601e3876", 0x2e}], 0x1}, 0x5) 20.629248823s ago: executing program 2 (id=230): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4(r1, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000200)=0x80, 0x1c0000) stat(&(0x7f0000003c00)='./file0\x00', &(0x7f0000003c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000002a80)={0x50, 0x0, 0xfffffffffffffca6, {0x7, 0x2d, 0x2, 0x4500b820, 0x3, 0x1462, 0x0, 0x9, 0x0, 0x0, 0x56, 0x2}}, &(0x7f0000002b00)={0x18, 0x0, 0x0, {0x80000001}}, 0x0, &(0x7f0000002b80)={0x18, 0x0, 0x0, {0x4}}, &(0x7f0000002bc0)={0x18, 0xfffffffffffffffe, 0x6, {0x9}}, &(0x7f0000002c00)={0x28, 0xfffffffffffffff5, 0x3, {{0x5, 0x1000, 0x2}}}, &(0x7f0000002c40)={0x60, 0xfffffffffffffffe, 0x800, {{0x383, 0x4, 0x7ff, 0xc6, 0x7fff, 0x5, 0x1, 0x6}}}, &(0x7f0000002cc0)={0x18, 0xfffffffffffffffe, 0x5, {0x7f}}, &(0x7f0000002d00)={0x11, 0x0, 0x0, {'.'}}, &(0x7f0000002d40)={0x20, 0xffffffffffffffda, 0x7, {0x0, 0x2}}, &(0x7f0000002d80)={0x78, 0x0, 0x8, {0x3ff, 0x35d3, 0x0, {0x2, 0x5, 0x6, 0x4, 0x8, 0x7f, 0x66, 0x4, 0x3, 0x8000, 0x9, 0x0, 0x0, 0x2, 0x400}}}, &(0x7f0000002e00)={0x90, 0xfffffffffffffffe, 0x800, {0x5, 0x0, 0xfffffffffffffff8, 0x401, 0x7f, 0x7, {0x2, 0x0, 0x7, 0x8, 0xf2, 0x7, 0x1d1, 0xfffffff8, 0x7, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x9c}}}, &(0x7f0000000500)={0x198, 0xfffffffffffffff5, 0x8, [{0x5, 0x3, 0x0, 0x6ba1}, {0x5, 0x3bd5, 0xe, 0x80000000, '/dev/swradio#\x00'}, {0x6, 0xffffffffffff7fff, 0x7, 0x7, 'target '}, {0x6, 0x100, 0x7, 0x26bd, 'target '}, {0x4, 0x10000, 0x1, 0xc, 'c'}, {0x0, 0x7, 0x9, 0x9, '/dev/kvm\x00'}, {0x0, 0x1, 0x1, 0x5, '\x00'}, {0x3, 0x1, 0x60, 0x200, '\xcb\xa7\x88\vbp\xbbn\xa0\xd3\xeb|\x14\xcc\xbe\xc6\x14\xcc\xb1\x12?\xc8\xff6\xae\xfdL\xa9#\xa4\x04-\x1f\xaegC\xa9\xf9\xc2\xfeg\xfffr\x1du\x7f\xab\xfd\xabx@\xae@L\x9d\x80=\xc5\x8eA\xf8RCd\x9d\xf8\xca\xfc\xc3]\xd6At\xd9q\xaayu\x106\x8f]\xe5\xa6Ko\x8a\xe3\x9b\xe2\nZ\xb5Fm'}, {0x5, 0x10000, 0x9, 0x0, '/dev/kvm\x00'}]}, &(0x7f0000003480)=ANY=[@ANYBLOB="60060000000000000002000000000000060000000000000001000000000000000002000000000000ff7f000000000000f6ffffff0500000001000000000000007f000000000000000000c000000000000200000000000000002000000000000000000000000000000200000040000000ea0000000060000000100000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0600000000800000000000000400000000000000060000000000000002000000aaa00000232f0000000000000600000000000000030000000000000004000000000000000600000000000000ffffffff020000000500000000000000040000000000000001f8ffffffffffff4380d615000000000400000000000000080000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fffeffff07000000000000000500000000000000030000000000000002000000810000004026000000000000010000000000000003000000000000000800000000000000000000000000000002000000080000000300000000000000af0400000000000000100000000000000200000001000000fcffffffffffffffd401000000000000fbffffff010000000a0000000000000002000000", @ANYRES8=r3, @ANYRES32=0x0, @ANYBLOB="0700000004000000000000000100000000000000b60000000000000001000000070000003a000000000000000400000000000000010000000000000000040000000000000600000000000000010000000d0000000600000000000000d4080000000000000700000000000000000000000000000006000000000000000100000000000080f005000000040000feffffff7e9046e405000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000027020000000000000000000000000000040d00000000000004000000ff0700002f6465762f7667615f617262697465720000000000000000050000000000000000000000000000000000000000000000fdffffffffffffff8100000000000000010000000000000007000000000000000500000000000000000000000000000002000000000000000c00000000002100030000000200000007ffffff00b0000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="060000000104000000000000050000000000000005000000000000000700000000000000746172676574200005000000000000000200000000000000060000000000000005000000000000000c00000005000000000000000000000000000001000000000500000000000000040000000000000036000000000000000300000000000000000400007e8b00000200000000c0000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000000c000000000000000500000000000000070000000000000001000000370000002e00000000000000000000000000000001000000000000000300000000000000020000000000000007000000000000000400000000000000ffff0000000000000000008000000000010000000000000008000000000000000500000000000000c100000000800000090000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="08000000080000000000000005000000000000000900000000000000030000000f0000007b2b2f000000000006000000000000000300000000000000f8ffffffffffffff0500000000000000000000000101000001000000000000000100000000000000040000000000000009000000000000000800000000000000ff0100000000000007000000040000004ff600000010000008000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fd51000000080000000000000100000000000000e165ffffffffffff0d000000710600007d2f5b2bf15b2d2e253a212d2e0000000600000000000000010000000000000002000000000000000100000000000000170300000e00000002000000000000000000000000000000cb0000000000000046f20000000000000f000000000000000100000000000000060000000000ffff0400000000100000feffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000002000000000000000600000000000000080000000000000007000000feffffff242c247b795e210000000000000000000000000000000000bb0000000000000053ca000000000000010000000900000000000000000000000900000000000000ff010000000000000100000000000000100000000000000009000000000000007f00000001000000010000000040000000000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000500000000"], &(0x7f0000003b00)={0xa0, 0x0, 0x7, {{0x0, 0x1, 0x100000000, 0x3, 0x9, 0x1000, {0x0, 0x1, 0x3, 0x1, 0x4, 0x0, 0x2, 0x1, 0x9, 0x8000, 0x1, 0xee01, 0x0, 0x4, 0xc}}}}, &(0x7f0000003bc0)={0x20, 0xffffffffffffffda, 0x6, {0x3, 0x0, 0x4, 0x4}}, &(0x7f0000003cc0)={0x130, 0x0, 0x3, {0x9, 0x8, 0x0, '\x00', {0x7ff, 0x6, 0x6, 0x5, 0xffffffffffffffff, r3, 0x2000, '\x00', 0xd5dc, 0x4f, 0x1, 0xfffffffffffffffb, {0x1, 0x1000}, {0xa, 0x80}, {0x1000, 0x9}, {0x7fffffffffffffff, 0x1}, 0x1, 0xe, 0x100, 0x1}}}}) syz_open_dev$dri(0x0, 0xd21, 0x4000) r4 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x4, 0x10, 0x2}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgsnd(0x0, 0x0, 0xe3, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xfffffffc, 0xffffffffffffffff, 0x8000000000000000, 0xd0b, 0x40, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmmsg$inet(r0, &(0x7f0000004100)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x6401011f}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="89a5e7e2d5061ecbb22e42e6a1fa46c8761ede6d75a773dee8fea83182086096500c7183f8a09e2e116c5f4f7e4b9db73dc2e363432d2e50880571a92d7ee970a4b7276af9ead063b9c4dc9f72bb26fa060146354e2c49b09fafda6fe52c1af66c52ff3a96c1dc04b6ebcdb40853bbf356829c3b4a7ba5050ef7411716e157908fd1de7f6c37f6b55ca720561be02cb3942eb1b1528bfd9803aac17a5067c9faf11be77571807315e6341eddc8cc7286439df5668a4a1db696", 0xb9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="a05b", 0x2}], 0x1}}], 0x2, 0x48000) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r8, &(0x7f0000000000)=@target={'target ', {'PCI:', '1e', ':', 'c', ':', '7', '.', 'a'}}, 0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000340)=@assoc_value, &(0x7f00000002c0)=0x8) 20.625749273s ago: executing program 3 (id=231): r0 = socket(0x10, 0x803, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r1, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x20002}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a, 0x4010}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x4f54}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x58}}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, r5, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}}, 0x400400c) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="05170000fffe0002140012800b0001006d616373656300000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00B'], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x13, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1000000}, 0x10, 0xffffffffffffffff}, 0x94) 20.072301759s ago: executing program 1 (id=232): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000bdc000/0x2000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) close(r0) 19.012031939s ago: executing program 3 (id=233): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$kcm(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000200)={[{@creator={'creator', 0x3d, "91b6afda"}}, {@nls={'nls', 0x3d, 'cp866'}}, {@gid}, {@type={'type', 0x3d, "abe89a7a"}}, {@nobarrier}]}, 0x1, 0x5d9, &(0x7f0000000cc0)="$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") unlink(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, 0x0, 0x0) chdir(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) syz_mount_image$fuse(0x0, 0x0, 0x300f401, 0x0, 0x2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x0) 18.875945065s ago: executing program 1 (id=234): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c9"], 0x16) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, 0x0) 17.698428091s ago: executing program 4 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_create_resource$binfmt(0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 17.377129466s ago: executing program 1 (id=235): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x3) sendmmsg(r1, &(0x7f0000005280), 0x4000000000001cd, 0x1008c811) 17.255839431s ago: executing program 3 (id=236): syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000300)='./file0\x00') fchdir(0xffffffffffffffff) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000002400)={0xc, {"a2e3ad21ed0d52f91b5d300887f70e06d038e7ff7fc6e5539b3272298b089b07081b37090890e0878f0e1ac6e7049b364a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b78583709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc825d8e524b2451138e495bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b4fd42513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cfe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541e4505bc3a45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd735892892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca810461b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b47dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880ad6988170ba1712e2998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd9432d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae408925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937caea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c730600000000000000bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b839b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a974064bcd2b29f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599af400046edb44a78f615255490a4b621501f2a9e4d24624c4dace874118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb84d9a88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", 0x1025}}, 0x1006) 12.934667244s ago: executing program 1 (id=237): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='dummy_udc.0', 0xb) 12.932776764s ago: executing program 2 (id=238): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000180)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x3, 0x7c4, 0x7}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f00000001c0)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000280)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0xe9db, 0x5f, 0x5}) close_range(r0, 0xffffffffffffffff, 0x0) 12.918016674s ago: executing program 3 (id=239): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000200)={&(0x7f0000000740)=[{0x0, 0x6011, 0x0, 0x0}], 0x1}) 12.753261202s ago: executing program 2 (id=240): openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xc000, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0x2, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4004, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xff, 0x8000012f, 0x8004, 0x5, 0xffff7fe3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xfc, 0x5, 0x1000003, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x0, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0xa, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 11.566331598s ago: executing program 1 (id=241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) 11.566082748s ago: executing program 2 (id=242): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000bdc000/0x2000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) close(r0) 10.378566273s ago: executing program 4 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_create_resource$binfmt(0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 10.298587897s ago: executing program 1 (id=243): socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) munmap(&(0x7f0000002000/0x3000)=nil, 0x3000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x20008000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) openat(0xffffffffffffff9c, 0x0, 0x111a42, 0x7) 7.298794068s ago: executing program 4 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_create_resource$binfmt(0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 4.955427868s ago: executing program 4 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_create_resource$binfmt(0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 2.520749662s ago: executing program 4 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_create_resource$binfmt(0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 0s ago: executing program 4 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_create_resource$binfmt(0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts. [ 62.229600][ T5761] cgroup: Unknown subsys name 'net' [ 62.364122][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.761936][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.319961][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.328782][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.338474][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.346054][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.358395][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.360931][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.387319][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.395770][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.398810][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.404082][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.415957][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.417956][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.425015][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.432730][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.439060][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.445574][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.459336][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.459883][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.468178][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.474350][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.482039][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.489021][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.503026][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.526907][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.916604][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 65.950307][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 66.047312][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 66.151472][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 66.179053][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.186803][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.194304][ T5775] bridge_slave_0: entered allmulticast mode [ 66.201171][ T5775] bridge_slave_0: entered promiscuous mode [ 66.215828][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.223032][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.230273][ T5775] bridge_slave_1: entered allmulticast mode [ 66.237381][ T5775] bridge_slave_1: entered promiscuous mode [ 66.288612][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.295822][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.303307][ T5773] bridge_slave_0: entered allmulticast mode [ 66.312565][ T5773] bridge_slave_0: entered promiscuous mode [ 66.319880][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.327008][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.334789][ T5776] bridge_slave_0: entered allmulticast mode [ 66.343809][ T5776] bridge_slave_0: entered promiscuous mode [ 66.368327][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.381019][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.388350][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.395645][ T5773] bridge_slave_1: entered allmulticast mode [ 66.403407][ T5773] bridge_slave_1: entered promiscuous mode [ 66.424222][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.431505][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.440991][ T5776] bridge_slave_1: entered allmulticast mode [ 66.448686][ T5776] bridge_slave_1: entered promiscuous mode [ 66.466990][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.499810][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.512541][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.557333][ T5775] team0: Port device team_slave_0 added [ 66.576158][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.586193][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.594140][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.601552][ T5774] bridge_slave_0: entered allmulticast mode [ 66.610869][ T5774] bridge_slave_0: entered promiscuous mode [ 66.620422][ T5775] team0: Port device team_slave_1 added [ 66.626410][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.633642][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.640915][ T5774] bridge_slave_1: entered allmulticast mode [ 66.648134][ T5774] bridge_slave_1: entered promiscuous mode [ 66.664317][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.693514][ T5773] team0: Port device team_slave_0 added [ 66.722236][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.729350][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.755687][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.776951][ T5773] team0: Port device team_slave_1 added [ 66.791969][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.800642][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.827665][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.841306][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.854566][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.881971][ T5776] team0: Port device team_slave_0 added [ 66.891151][ T5776] team0: Port device team_slave_1 added [ 66.919272][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.926252][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.953104][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.993598][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.000843][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.027221][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.044744][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.051925][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.078277][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.091200][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.098474][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.124556][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.138352][ T5774] team0: Port device team_slave_0 added [ 67.175684][ T5774] team0: Port device team_slave_1 added [ 67.186731][ T5775] hsr_slave_0: entered promiscuous mode [ 67.193238][ T5775] hsr_slave_1: entered promiscuous mode [ 67.265096][ T5776] hsr_slave_0: entered promiscuous mode [ 67.273067][ T5776] hsr_slave_1: entered promiscuous mode [ 67.279436][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.287185][ T5776] Cannot create hsr debugfs directory [ 67.311583][ T5773] hsr_slave_0: entered promiscuous mode [ 67.318118][ T5773] hsr_slave_1: entered promiscuous mode [ 67.324486][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.332279][ T5773] Cannot create hsr debugfs directory [ 67.338973][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.345917][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.372178][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.384419][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.391469][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.417433][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.583483][ T5774] hsr_slave_0: entered promiscuous mode [ 67.589953][ T5085] Bluetooth: hci3: command tx timeout [ 67.590123][ T5085] Bluetooth: hci1: command tx timeout [ 67.601962][ T5784] Bluetooth: hci0: command tx timeout [ 67.602063][ T5774] hsr_slave_1: entered promiscuous mode [ 67.607541][ T5784] Bluetooth: hci2: command tx timeout [ 67.619699][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.627247][ T5774] Cannot create hsr debugfs directory [ 67.868397][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.880393][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.891470][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.933509][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.989383][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.003162][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.022242][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.042944][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.077134][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.111362][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.122585][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.132299][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.212768][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.225080][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.235248][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.245407][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.380303][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.414294][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.434995][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.466864][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.486152][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.493566][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.506987][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.514138][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.532913][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.559922][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.581258][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.588414][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.619869][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.627014][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.640741][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.647914][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.666976][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.710616][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.717795][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.733728][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.745614][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.752750][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.794958][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.802231][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.099486][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.193104][ T5773] veth0_vlan: entered promiscuous mode [ 69.240119][ T5773] veth1_vlan: entered promiscuous mode [ 69.324945][ T5773] veth0_macvtap: entered promiscuous mode [ 69.364575][ T5773] veth1_macvtap: entered promiscuous mode [ 69.396565][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.416453][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.430011][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.449333][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.461493][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.471432][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.482101][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.490983][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.524383][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.642777][ T5776] veth0_vlan: entered promiscuous mode [ 69.661163][ T5774] veth0_vlan: entered promiscuous mode [ 69.670686][ T5784] Bluetooth: hci2: command tx timeout [ 69.676130][ T5784] Bluetooth: hci1: command tx timeout [ 69.681648][ T5085] Bluetooth: hci0: command tx timeout [ 69.687056][ T5085] Bluetooth: hci3: command tx timeout [ 69.689616][ T5775] veth0_vlan: entered promiscuous mode [ 69.702471][ T5776] veth1_vlan: entered promiscuous mode [ 69.744158][ T5774] veth1_vlan: entered promiscuous mode [ 69.760208][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.769664][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.790756][ T5775] veth1_vlan: entered promiscuous mode [ 69.817980][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.825826][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.844303][ T5776] veth0_macvtap: entered promiscuous mode [ 69.855657][ T5776] veth1_macvtap: entered promiscuous mode [ 69.916988][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.932337][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.944592][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.957514][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.969452][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.981827][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.007028][ T5774] veth0_macvtap: entered promiscuous mode [ 70.026939][ T5775] veth0_macvtap: entered promiscuous mode [ 70.061636][ T5774] veth1_macvtap: entered promiscuous mode [ 70.088556][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.097305][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.113144][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.122347][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.140394][ T5775] veth1_macvtap: entered promiscuous mode [ 70.221387][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.246999][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.257017][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.264978][ T5836] syz.0.5[5836]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 70.269181][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.288794][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.301598][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.331623][ T5836] loop0: detected capacity change from 0 to 4096 [ 70.333246][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.362336][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.374626][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.386326][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.398135][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.445564][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.454629][ T5836] ext4: Unknown parameter 'noacl' [ 70.488116][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.507903][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.527958][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.548332][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.560784][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.599777][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.613667][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.623940][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.635412][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.645719][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.656334][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.669306][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.691132][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.700703][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.712142][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.721303][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.745328][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.756166][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.765597][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.774577][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.812132][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.839976][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.934661][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.970835][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.991758][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.999896][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.071935][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.103719][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.172333][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.186830][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.213050][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.223160][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.308131][ T5813] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.431770][ T5852] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET) [ 71.528315][ T5813] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 71.536951][ T5857] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2'. [ 71.560740][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.595237][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.595666][ T5813] usb 1-1: Product: syz [ 71.602236][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.617175][ T5813] usb 1-1: Manufacturer: syz [ 71.663850][ T5813] usb 1-1: SerialNumber: syz [ 71.748546][ T5782] Bluetooth: hci1: command tx timeout [ 71.749127][ T5784] Bluetooth: hci3: command tx timeout [ 71.754081][ T5782] Bluetooth: hci0: command tx timeout [ 71.759767][ T5085] Bluetooth: hci2: command tx timeout [ 71.814205][ T5863] syzkaller0: entered promiscuous mode [ 71.820219][ T5863] syzkaller0: entered allmulticast mode [ 71.954630][ T5866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10'. [ 71.981327][ T5813] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 72.011177][ T5813] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 72.011928][ T5866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10'. [ 73.818720][ T5882] ======================================================= [ 73.818720][ T5882] WARNING: The mand mount option has been deprecated and [ 73.818720][ T5882] and is ignored by this kernel. Remove the mand [ 73.818720][ T5882] option from the mount to silence this warning. [ 73.818720][ T5882] ======================================================= [ 73.853815][ T5085] Bluetooth: hci0: command tx timeout [ 73.853850][ T5085] Bluetooth: hci1: command tx timeout [ 73.858398][ T5784] Bluetooth: hci2: command tx timeout [ 73.873012][ T5085] Bluetooth: hci3: command tx timeout [ 73.916951][ T5813] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 74.096326][ T5887] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 74.361769][ T5813] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 74.381317][ T5813] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 74.397362][ T5813] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 74.428143][ T5813] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 74.448766][ T5813] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 74.461459][ T5813] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 74.482335][ T5813] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 74.495269][ T5813] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 74.522199][ T5813] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 74.556083][ T5813] lan78xx: probe of 1-1:1.0 failed with error -71 [ 74.614402][ T5893] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.759304][ T5813] usb 1-1: USB disconnect, device number 2 [ 75.818638][ T5911] loop1: detected capacity change from 0 to 256 [ 75.904454][ T5911] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x990b46a1, utbl_chksum : 0xe619d30d) [ 75.922544][ T5915] syz_tun: entered allmulticast mode [ 75.949016][ T5915] dvmrp6: entered allmulticast mode [ 76.001744][ T5914] syz_tun: left allmulticast mode [ 76.011653][ T5911] process 'syz.1.22' launched './file0' with NULL argv: empty string added [ 76.057175][ T5911] exFAT-fs (loop1): error, broken FAT chain. [ 76.079097][ T5911] exFAT-fs (loop1): error, failed to bmap (inode : ffff888073c087e0 iblock : 0, err : -5) [ 76.096150][ T5911] exFAT-fs (loop1): error, broken FAT chain. [ 76.102971][ T5911] exFAT-fs (loop1): error, failed to bmap (inode : ffff888073c087e0 iblock : 0, err : -5) [ 76.129499][ T5911] exFAT-fs (loop1): error, broken FAT chain. [ 76.135537][ T5911] exFAT-fs (loop1): error, failed to bmap (inode : ffff888073c087e0 iblock : 1, err : -5) [ 76.152717][ T5911] exFAT-fs (loop1): error, broken FAT chain. [ 76.160044][ T5911] exFAT-fs (loop1): error, failed to bmap (inode : ffff888073c087e0 iblock : 2, err : -5) [ 76.170487][ T5911] exFAT-fs (loop1): error, broken FAT chain. [ 76.177249][ T5911] exFAT-fs (loop1): error, failed to bmap (inode : ffff888073c087e0 iblock : 3, err : -5) [ 76.188423][ T5911] exFAT-fs (loop1): error, broken FAT chain. [ 76.195989][ T5911] exFAT-fs (loop1): error, failed to bmap (inode : ffff888073c087e0 iblock : 4, err : -5) [ 76.206452][ T5911] exFAT-fs (loop1): error, broken FAT chain. [ 76.237635][ T5911] exFAT-fs (loop1): error, failed to bmap (inode : ffff888073c087e0 iblock : 5, err : -5) [ 76.273633][ T5911] exFAT-fs (loop1): error, broken FAT chain. [ 76.306796][ T5911] exFAT-fs (loop1): error, failed to bmap (inode : ffff888073c087e0 iblock : 6, err : -5) [ 76.347437][ T5911] exFAT-fs (loop1): error, broken FAT chain. [ 76.478260][ T5911] exFAT-fs (loop1): error, failed to bmap (inode : ffff888073c087e0 iblock : 7, err : -5) [ 76.662567][ T5911] exFAT-fs (loop1): error, broken FAT chain. [ 76.832340][ T5911] exFAT-fs (loop1): error, failed to bmap (inode : ffff888073c087e0 iblock : 0, err : -5) [ 77.072722][ T5911] exFAT-fs (loop1): error, broken FAT chain. [ 77.163962][ T5911] exFAT-fs (loop1): error, broken FAT chain. [ 77.231139][ T5911] exFAT-fs (loop1): error, broken FAT chain. [ 77.297827][ T5911] exFAT-fs (loop1): error, broken FAT chain. [ 77.300649][ T5928] loop9: detected capacity change from 0 to 7 [ 77.303863][ T5911] exFAT-fs (loop1): error, broken FAT chain. [ 77.319334][ T5911] exFAT-fs (loop1): error, broken FAT chain. [ 77.325382][ T5911] exFAT-fs (loop1): error, broken FAT chain. [ 77.353809][ T5930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28'. [ 77.363862][ T5928] Dev loop9: unable to read RDB block 7 [ 77.376201][ T5928] loop9: unable to read partition table [ 77.388241][ T5928] loop9: partition table beyond EOD, truncated [ 77.500187][ T5928] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 77.500187][ T5928] ) failed (rc=-5) [ 78.804946][ T28] audit: type=1800 audit(1789557595.834:2): pid=5949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.31" name="max_speed" dev="configfs" ino=8286 res=0 errno=0 [ 79.020069][ T5954] syzkaller0: entered promiscuous mode [ 79.025588][ T5954] syzkaller0: entered allmulticast mode [ 79.167225][ T5961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.36'. [ 79.176333][ T5961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.36'. [ 79.189731][ T5961] ip6gretap0: entered promiscuous mode [ 79.196067][ T5961] syz_tun: entered promiscuous mode [ 79.368075][ T5963] kvm_intel: kvm [5962]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1 [ 79.661272][ T5972] syzkaller0: entered promiscuous mode [ 79.687801][ T5972] syzkaller0: entered allmulticast mode [ 79.851705][ T5976] gve 0000:00:00.0: Failed to map pci bar! [ 79.943718][ T5976] gve: probe of 0000:00:00.0 failed with error -12 [ 80.126512][ T5982] capability: warning: `syz.1.50' uses deprecated v2 capabilities in a way that may be insecure [ 80.684524][ T5992] loop1: detected capacity change from 0 to 2048 [ 80.750891][ T5992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.787666][ C1] net_ratelimit: 2 callbacks suppressed [ 81.666971][ T6004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.46'. [ 81.706752][ T5763] Process accounting resumed [ 81.978461][ T9] cfg80211: failed to load regulatory.db [ 85.817224][ T6037] bridge_slave_0: left allmulticast mode [ 85.826151][ C1] net_ratelimit: 42 callbacks suppressed [ 85.896409][ T6037] bridge_slave_0: left promiscuous mode [ 85.903301][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.969734][ T6037] bridge_slave_1: left allmulticast mode [ 85.987015][ T6037] bridge_slave_1: left promiscuous mode [ 86.022454][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.210785][ T27] Process accounting resumed [ 86.422983][ T6037] bond0: (slave bond_slave_0): Releasing backup interface [ 86.825248][ T6037] bond0: (slave bond_slave_1): Releasing backup interface [ 86.973062][ T6037] team0: Port device team_slave_0 removed [ 86.985967][ T6037] team0: Port device team_slave_1 removed [ 87.002909][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.029310][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.051988][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.075499][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.187773][ T6051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.57'. [ 87.714243][ T6046] loop0: detected capacity change from 0 to 40427 [ 87.754412][ T6046] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 87.784955][ T6046] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 87.799029][ T6067] kvm: pic: level sensitive irq not supported [ 87.823210][ T6046] F2FS-fs (loop0): invalid crc value [ 88.005915][ T6082] loop1: detected capacity change from 0 to 512 [ 88.036334][ T6082] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.052022][ T6082] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.095575][ T6082] EXT4-fs (loop1): 1 truncate cleaned up [ 88.103633][ T6082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.106151][ T6046] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 88.160430][ T6046] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 88.505480][ T6090] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 89.435397][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.310953][ T6100] binder: 6099:6100 ioctl c0306201 200000000180 returned -14 [ 90.579779][ T6106] EXT4-fs warning (device sda1): verify_group_input:175: Bad blocks count 0 [ 90.841929][ T6111] net_ratelimit: 40 callbacks suppressed [ 90.841963][ T6111] ip_tables: iptables: counters copy to user failed while replacing table [ 91.479492][ T6114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.70'. [ 91.532258][ T27] Process accounting resumed [ 92.012912][ T6127] loop2: detected capacity change from 0 to 16 [ 92.085107][ T6127] erofs: (device loop2): mounted with root inode @ nid 36. [ 93.051036][ T6137] Bluetooth: MGMT ver 1.22 [ 93.072876][ T6137] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 94.034182][ T6123] loop3: detected capacity change from 0 to 32768 [ 94.112536][ T6123] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.75 (6123) [ 94.160899][ T6143] syzkaller0: entered promiscuous mode [ 94.166485][ T6143] syzkaller0: entered allmulticast mode [ 94.246215][ T6123] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.261903][ T6123] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 94.272923][ T6123] BTRFS info (device loop3): setting nodatasum [ 94.279581][ T6123] BTRFS info (device loop3): force zlib compression, level 3 [ 94.316711][ T6123] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 94.327971][ T6123] BTRFS info (device loop3): use lzo compression, level 0 [ 94.331921][ T6147] syz_tun: entered allmulticast mode [ 94.335109][ T6123] BTRFS info (device loop3): turning on flush-on-commit [ 94.351867][ T6123] BTRFS info (device loop3): enabling auto defrag [ 94.376975][ T6123] BTRFS info (device loop3): max_inline at 4096 [ 94.391589][ T6123] BTRFS info (device loop3): using free space tree [ 94.718244][ T6123] BTRFS info (device loop3): enabling ssd optimizations [ 95.512331][ T5775] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.722173][ T6179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.85'. [ 95.761102][ T5813] Process accounting resumed [ 95.876804][ C0] net_ratelimit: 51 callbacks suppressed [ 96.701137][ T6188] syzkaller0: entered promiscuous mode [ 96.740291][ T6188] syzkaller0: entered allmulticast mode [ 99.272154][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.527166][ T6245] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 100.256254][ T6247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.98'. [ 100.284726][ T788] Process accounting resumed [ 100.317661][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 100.504380][ T27] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 100.573002][ T27] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 100.613347][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.637536][ T27] usb 4-1: Product: syz [ 100.656187][ T27] usb 4-1: Manufacturer: syz [ 100.684362][ T27] usb 4-1: SerialNumber: syz [ 100.855106][ T6263] loop0: detected capacity change from 0 to 256 [ 100.871203][ T6263] exfat: Deprecated parameter 'namecase' [ 100.912971][ T6263] exfat: Deprecated parameter 'namecase' [ 100.956415][ T6263] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 101.071593][ T6263] exFAT-fs (loop0): invalid start cluster (4278190088) [ 101.267911][ C1] net_ratelimit: 38 callbacks suppressed [ 101.716662][ T6265] syzkaller0: entered promiscuous mode [ 101.997572][ C1] sched: RT throttling activated [ 102.003549][ T27] usb 4-1: can't set config #1, error -71 [ 103.198830][ T6265] syzkaller0: entered allmulticast mode [ 103.250140][ T27] usb 4-1: USB disconnect, device number 2 [ 103.502352][ T6278] (null): rxe_set_mtu: Set mtu to 1024 [ 104.213322][ T6278] wg1 speed is unknown, defaulting to 1000 [ 104.224092][ T6278] wg1 speed is unknown, defaulting to 1000 [ 104.232598][ T6278] wg1 speed is unknown, defaulting to 1000 [ 104.320741][ T6278] infiniband syz2: set active [ 104.325624][ T6278] infiniband syz2: added wg1 [ 104.332230][ T6278] syz2: rxe_create_cq: returned err = -12 [ 104.338399][ T6278] infiniband syz2: Couldn't create ib_mad CQ [ 104.344532][ T6278] infiniband syz2: Couldn't open port 1 [ 104.365854][ T6278] RDS/IB: syz2: added [ 104.370211][ T6278] smc: adding ib device syz2 with port count 1 [ 104.376488][ T6278] smc: ib device syz2 port 1 has pnetid [ 104.384919][ T6278] wg1 speed is unknown, defaulting to 1000 [ 104.470724][ T6278] wg1 speed is unknown, defaulting to 1000 [ 104.556636][ T6278] wg1 speed is unknown, defaulting to 1000 [ 104.643583][ T6278] wg1 speed is unknown, defaulting to 1000 [ 104.788929][ T5813] wg1 speed is unknown, defaulting to 1000 [ 104.804220][ T5813] wg1 speed is unknown, defaulting to 1000 [ 106.467042][ T6294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.110'. [ 106.476049][ C0] net_ratelimit: 33 callbacks suppressed [ 106.676676][ T5763] Process accounting resumed [ 108.617973][ T6307] syzkaller0: entered promiscuous mode [ 108.623476][ T6307] syzkaller0: entered allmulticast mode [ 111.759558][ C1] net_ratelimit: 50 callbacks suppressed [ 111.947998][ T28] audit: type=1800 audit(1789557628.974:3): pid=6328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.111" name="addr_trtype" dev="configfs" ino=9611 res=0 errno=0 [ 112.008081][ T28] audit: type=1800 audit(1789557628.974:4): pid=6328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.111" name="addr_adrfam" dev="configfs" ino=9612 res=0 errno=0 [ 112.054452][ T6331] syz.3.119 (6331): attempted to duplicate a private mapping with mremap. This is not supported. [ 112.101585][ T28] audit: type=1800 audit(1789557629.004:5): pid=6328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.111" name="addr_traddr" dev="configfs" ino=9613 res=0 errno=0 [ 115.593297][ T6348] syzkaller0: entered promiscuous mode [ 115.607960][ T6348] syzkaller0: entered allmulticast mode [ 115.787182][ T6346] loop2: detected capacity change from 0 to 32768 [ 115.832467][ T6346] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.118 (6346) [ 115.929915][ T6346] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.965154][ T6346] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 115.965193][ T6346] BTRFS info (device loop2): setting nodatasum [ 115.988043][ T6346] BTRFS info (device loop2): force zlib compression, level 3 [ 115.995442][ T6346] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 116.042676][ T6346] BTRFS info (device loop2): use lzo compression, level 0 [ 116.049864][ T6346] BTRFS info (device loop2): turning on flush-on-commit [ 116.056874][ T6346] BTRFS info (device loop2): enabling auto defrag [ 116.063605][ T6346] BTRFS info (device loop2): max_inline at 4096 [ 116.068633][ T6353] netlink: 'syz.3.123': attribute type 4 has an invalid length. [ 116.077840][ T6346] BTRFS info (device loop2): using free space tree [ 116.223616][ T6353] syz.3.123 (6353) used greatest stack depth: 20840 bytes left [ 116.234756][ T6352] syzkaller0: entered promiscuous mode [ 116.240643][ T6346] BTRFS info (device loop2): enabling ssd optimizations [ 116.257980][ T6352] syzkaller0: entered allmulticast mode [ 116.521880][ T28] audit: type=1800 audit(1789557633.554:6): pid=6346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.118" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 116.588975][ T6373] syzkaller0: entered promiscuous mode [ 116.595056][ T6373] syzkaller0: entered allmulticast mode [ 117.667919][ C0] net_ratelimit: 44 callbacks suppressed [ 118.655330][ T5776] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.000380][ T6395] loop1: detected capacity change from 0 to 128 [ 120.091186][ T5140] udevd[5140]: could not touch /run/udev/queue: No such file or directory [ 120.110961][ T5140] udevd[5140]: could not touch /run/udev/queue: No such file or directory [ 120.128519][ T28] audit: type=1804 audit(1789557637.164:7): pid=5773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/27/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 120.169446][ T5140] udevd[5140]: could not touch /run/udev/queue: No such file or directory [ 120.291583][ T5140] udevd[5140]: could not touch /run/udev/queue: No such file or directory [ 120.714124][ T6404] syz.1.134 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 122.787655][ C1] net_ratelimit: 36 callbacks suppressed [ 122.900594][ T6406] loop3: detected capacity change from 0 to 40427 [ 122.977132][ T6406] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 122.987376][ T6406] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 123.009661][ T6406] F2FS-fs (loop3): invalid crc value [ 123.324241][ T6406] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 123.344152][ T6406] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 123.635078][ T6422] syzkaller0: entered promiscuous mode [ 123.641105][ T6422] syzkaller0: entered allmulticast mode [ 123.890268][ T28] audit: type=1800 audit(1789557640.914:8): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.135" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 124.298703][ T5775] syz-executor: attempt to access beyond end of device [ 124.298703][ T5775] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.349544][ T5775] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 124.676290][ T6430] loop2: detected capacity change from 0 to 256 [ 124.726521][ T6430] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 125.426848][ T6432] syzkaller0: entered promiscuous mode [ 125.587760][ T6432] syzkaller0: entered allmulticast mode [ 125.791904][ T6428] loop1: detected capacity change from 0 to 32768 [ 125.801656][ T6428] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.141 (6428) [ 125.832870][ T6428] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.867037][ T6428] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 126.024594][ T6428] BTRFS info (device loop1): setting nodatasum [ 126.054137][ T6428] BTRFS info (device loop1): force zlib compression, level 3 [ 126.077768][ T6428] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 126.092571][ T6428] BTRFS info (device loop1): use lzo compression, level 0 [ 126.099803][ T6428] BTRFS info (device loop1): turning on flush-on-commit [ 126.106910][ T6428] BTRFS info (device loop1): enabling auto defrag [ 126.121340][ T6428] BTRFS info (device loop1): max_inline at 4096 [ 126.132969][ T6428] BTRFS info (device loop1): using free space tree [ 127.803084][ T6428] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 127.826632][ T6428] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 127.828005][ T6428] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 127.838373][ T6428] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 127.880358][ T6428] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 127.880684][ T6428] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 127.918448][ T6428] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 127.919108][ T6428] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 127.948759][ T6428] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 127.949368][ T6428] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 127.986568][ T6428] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 127.987241][ T6428] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 128.012902][ T6428] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 128.054912][ T6428] BTRFS error (device loop1): open_ctree failed: -12 [ 128.467694][ C0] net_ratelimit: 31 callbacks suppressed [ 129.708123][ T6467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 129.989552][ T6468] bridge1: port 1(veth3) entered blocking state [ 129.995946][ T6468] bridge1: port 1(veth3) entered disabled state [ 130.050738][ T6468] veth3: entered allmulticast mode [ 130.065411][ T6468] veth3: entered promiscuous mode [ 130.133071][ T6467] bridge1: port 2(veth0_to_bond) entered blocking state [ 130.156607][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 130.169673][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 130.192180][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 130.201211][ T6467] bridge1: port 2(veth0_to_bond) entered disabled state [ 130.208900][ T6467] veth0_to_bond: entered allmulticast mode [ 130.218304][ T6467] veth0_to_bond: entered promiscuous mode [ 130.231255][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 130.248996][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 130.256642][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 130.576098][ T6472] bridge1: port 3(veth5) entered blocking state [ 130.595240][ T6472] bridge1: port 3(veth5) entered disabled state [ 130.629797][ T6472] veth5: entered allmulticast mode [ 130.652994][ T6472] veth5: entered promiscuous mode [ 130.673981][ T6472] Zero length message leads to an empty skb [ 130.762112][ T1099] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.014316][ T1099] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.573369][ T1099] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.170483][ T6491] trusted_key: encrypted_key: key user:syz not found [ 133.507671][ C1] net_ratelimit: 34 callbacks suppressed [ 133.892178][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.898769][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.065342][ T1099] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.520245][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.530373][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.549635][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.560220][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.569771][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 134.578025][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.314216][ T6526] tipc: Started in network mode [ 137.329239][ T6526] tipc: Node identity 7ac3d55b4b98, cluster identity 4711 [ 137.348080][ T6526] tipc: Enabled bearer , priority 0 [ 137.413042][ T6521] syzkaller0: entered promiscuous mode [ 137.425581][ T6521] syzkaller0: entered allmulticast mode [ 137.555545][ T6526] tipc: Resetting bearer [ 137.642739][ T6519] tipc: Resetting bearer [ 137.708799][ T6519] tipc: Disabling bearer [ 137.888682][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.900821][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.910441][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.918898][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.927292][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.627652][ C1] net_ratelimit: 30 callbacks suppressed [ 139.158506][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 141.659679][ T6559] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 142.678712][ T1099] hsr_slave_0: left promiscuous mode [ 142.807712][ T1099] hsr_slave_1: left promiscuous mode [ 142.855765][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.868346][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 142.884253][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 142.892259][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 142.916203][ T6574] loop2: detected capacity change from 0 to 1024 [ 142.916541][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.930185][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 142.939362][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 142.946919][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 142.994760][ T6574] EXT4-fs: Ignoring removed bh option [ 143.069105][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.076547][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.109279][ T6574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 143.127972][ T6574] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.164934][ T1099] bridge_slave_1: left allmulticast mode [ 143.181321][ T1099] bridge_slave_1: left promiscuous mode [ 143.188853][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.251999][ T1099] bridge_slave_0: left allmulticast mode [ 143.258749][ T1099] bridge_slave_0: left promiscuous mode [ 143.267499][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.345486][ T6574] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 3: comm syz.2.162: lblock 3 mapped to illegal pblock 3 (length 3) [ 143.449272][ T6574] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 143.491087][ T6574] EXT4-fs (loop2): This should not happen!! Data will be lost [ 143.491087][ T6574] [ 143.513064][ T1099] veth1_macvtap: left promiscuous mode [ 143.521776][ T1099] veth0_macvtap: left promiscuous mode [ 143.535946][ T1099] veth1_vlan: left promiscuous mode [ 143.553197][ T1099] veth0_vlan: left promiscuous mode [ 143.589396][ T6597] EXT4-fs error (device loop2): ext4_ext_remove_space:2957: inode #15: comm syz.2.162: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 143.667725][ C0] net_ratelimit: 32 callbacks suppressed [ 143.747896][ T6597] EXT4-fs error (device loop2) in ext4_setattr:5695: Corrupt filesystem [ 144.028318][ T6048] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm kworker/u4:11: lblock 0 mapped to illegal pblock 0 (length 1) [ 144.077629][ T6048] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 144.120152][ T6048] EXT4-fs (loop2): This should not happen!! Data will be lost [ 144.120152][ T6048] [ 144.141855][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 147.482224][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.492944][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.503746][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.513735][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.527909][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.538695][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.776759][ T27] IPVS: starting estimator thread 0... [ 148.859123][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 148.879883][ T6628] IPVS: using max 19 ests per chain, 45600 per kthread [ 148.947642][ C1] net_ratelimit: 30 callbacks suppressed [ 148.954406][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 149.056111][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.132667][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.373917][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.386304][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.410089][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.421096][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.435665][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.445439][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.872249][ T1099] bond0 (unregistering): Released all slaves [ 150.548958][ T6652] loop3: detected capacity change from 0 to 512 [ 150.684825][ T6652] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 150.720064][ T6652] EXT4-fs (loop3): 1 truncate cleaned up [ 150.763859][ T6652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.247020][ T28] audit: type=1326 audit(1789557669.544:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.2.176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb821f9e159 code=0x0 [ 153.362716][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.510624][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.523186][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.533545][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.543294][ T6659] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 153.564388][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.574539][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.582473][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.147905][ C0] net_ratelimit: 24 callbacks suppressed [ 157.388727][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 157.408246][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.474614][ T6709] loop2: detected capacity change from 0 to 24 [ 157.522548][ T6709] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 157.622038][ T6709] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 157.664518][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.577661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 159.012584][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 159.022298][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 159.037847][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.047460][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 159.066473][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 159.077641][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.987672][ C1] net_ratelimit: 22 callbacks suppressed [ 162.219631][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.237727][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.246512][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.256788][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 162.273417][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 162.284571][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.832387][ T28] audit: type=1800 audit(1789557681.864:10): pid=6749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.194" name="addr_trtype" dev="configfs" ino=11502 res=0 errno=0 [ 165.597651][ C1] net_ratelimit: 24 callbacks suppressed [ 165.727740][ T28] audit: type=1800 audit(1789557681.904:11): pid=6749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.194" name="addr_trsvcid" dev="configfs" ino=11503 res=0 errno=0 [ 167.275737][ T6757] loop2: detected capacity change from 0 to 2048 [ 167.353486][ T6757] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 168.618383][ T6757] NILFS (loop2): mounting unchecked fs [ 168.678797][ T6507] udevd[6507]: incorrect nilfs2 checksum on /dev/loop2 [ 168.739803][ T6757] NILFS (loop2): recovery complete [ 168.789678][ T6765] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.997631][ T28] audit: type=1326 audit(1789557686.024:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.2.196" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb821f9e159 code=0x0 [ 169.082081][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.092978][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.101823][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.111819][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.128890][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 169.136570][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.734912][ T6049] net_ratelimit: 18 callbacks suppressed [ 172.463713][ T6786] netlink: 76 bytes leftover after parsing attributes in process `syz.1.199'. [ 172.474458][ T6786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'. [ 172.483888][ T6786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.199'. [ 173.301093][ T6790] loop3: detected capacity change from 0 to 1024 [ 174.129299][ T6790] EXT4-fs: Ignoring removed bh option [ 174.229089][ T6790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 174.302261][ T6790] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.453843][ T6790] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 3: comm syz.3.201: lblock 3 mapped to illegal pblock 3 (length 3) [ 174.490669][ T6790] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 174.537696][ T6790] EXT4-fs (loop3): This should not happen!! Data will be lost [ 174.537696][ T6790] [ 174.553197][ T6798] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: block 3: comm syz.3.201: lblock 3 mapped to illegal pblock 3 (length 1) [ 174.612166][ T6798] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: block 3: comm syz.3.201: lblock 3 mapped to illegal pblock 3 (length 1) [ 174.667168][ T6790] EXT4-fs error (device loop3): ext4_ext_remove_space:2957: inode #15: comm syz.3.201: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 174.721409][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.734509][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.745278][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.750177][ T6790] EXT4-fs error (device loop3) in ext4_setattr:5695: Corrupt filesystem [ 174.766321][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.788071][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 174.795780][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.039342][ T6049] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm kworker/u4:12: lblock 0 mapped to illegal pblock 0 (length 1) [ 175.090665][ T6049] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 175.117798][ T6049] EXT4-fs (loop3): This should not happen!! Data will be lost [ 175.117798][ T6049] [ 175.143379][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 175.907736][ C0] net_ratelimit: 27 callbacks suppressed [ 179.418020][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 179.430222][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 179.459390][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 179.480467][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.499555][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 179.507071][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.107654][ C0] net_ratelimit: 18 callbacks suppressed [ 182.597543][ T6839] netlink: 48 bytes leftover after parsing attributes in process `syz.1.210'. [ 182.794652][ T6839] netlink: 'syz.1.210': attribute type 11 has an invalid length. [ 183.134746][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 183.147037][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.156160][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.174690][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 183.186959][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 183.195275][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.551938][ T6847] kAFS: unable to lookup cell '' [ 183.816181][ T6853] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 186.335513][ C1] net_ratelimit: 29 callbacks suppressed [ 188.914066][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 188.925705][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 188.934868][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 188.944819][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 188.954373][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 188.962113][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 189.649994][ T6874] syz.1.218 (6874) used greatest stack depth: 20824 bytes left [ 191.427691][ C0] net_ratelimit: 24 callbacks suppressed [ 191.436598][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 192.197894][ T5784] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 192.208155][ T5784] CPU: 0 PID: 5784 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 192.215736][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.225901][ T5784] Workqueue: hci3 hci_rx_work [ 192.230652][ T5784] Call Trace: [ 192.233950][ T5784] [ 192.236894][ T5784] dump_stack_lvl+0x18c/0x250 [ 192.241604][ T5784] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 192.247267][ T5784] ? show_regs_print_info+0x20/0x20 [ 192.252489][ T5784] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 192.258170][ T5784] sysfs_create_dir_ns+0x26e/0x2a0 [ 192.263306][ T5784] ? sysfs_warn_dup+0xa0/0xa0 [ 192.268011][ T5784] ? do_raw_spin_unlock+0x121/0x230 [ 192.273240][ T5784] kobject_add_internal+0x617/0xc90 [ 192.278556][ T5784] kobject_add+0x164/0x240 [ 192.282994][ T5784] ? preempt_schedule_thunk+0x1a/0x30 [ 192.288395][ T5784] ? kobject_init+0x1d0/0x1d0 [ 192.293100][ T5784] ? get_device_parent+0x366/0x390 [ 192.298239][ T5784] device_add+0x3fa/0xc40 [ 192.302594][ T5784] hci_conn_add_sysfs+0xd5/0x1e0 [ 192.307570][ T5784] le_conn_complete_evt+0xe9a/0x1480 [ 192.312883][ T5784] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 192.319172][ T5784] hci_le_conn_complete_evt+0x187/0x440 [ 192.324743][ T5784] ? hci_remote_host_features_evt+0x150/0x150 [ 192.330827][ T5784] hci_event_packet+0x7b4/0x1280 [ 192.335787][ T5784] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 192.341453][ T5784] ? bis_list+0x290/0x290 [ 192.345819][ T5784] ? hci_send_to_monitor+0xd7/0x4f0 [ 192.351042][ T5784] hci_rx_work+0x43a/0xd60 [ 192.355492][ T5784] ? process_scheduled_works+0x975/0x1600 [ 192.361232][ T5784] process_scheduled_works+0xa60/0x1600 [ 192.366832][ T5784] ? worker_attach_to_pool+0x370/0x370 [ 192.372350][ T5784] ? assign_work+0x3cc/0x5d0 [ 192.376973][ T5784] worker_thread+0xa5e/0xfe0 [ 192.381799][ T5784] kthread+0x2fa/0x390 [ 192.385883][ T5784] ? pr_cont_work+0x550/0x550 [ 192.390616][ T5784] ? kthread_blkcg+0xd0/0xd0 [ 192.395220][ T5784] ret_from_fork+0x48/0x80 [ 192.399655][ T5784] ? kthread_blkcg+0xd0/0xd0 [ 192.404259][ T5784] ret_from_fork_asm+0x11/0x20 [ 192.409062][ T5784] [ 192.416250][ T5784] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 192.435889][ T5784] Bluetooth: hci3: failed to register connection device [ 193.560619][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.572725][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.581578][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.595723][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.605345][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 193.613356][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.483177][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.490156][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 194.512759][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.381091][ T6918] syzkaller0: entered promiscuous mode [ 195.386607][ T6918] syzkaller0: entered allmulticast mode [ 196.627766][ C1] net_ratelimit: 28 callbacks suppressed [ 197.389477][ T6929] macsec1: entered allmulticast mode [ 197.417771][ T6929] veth1_macvtap: entered allmulticast mode [ 197.454621][ T6929] veth1_macvtap: left allmulticast mode [ 197.701490][ T5784] block nbd0: Receive control failed (result -32) [ 197.701490][ T5085] block nbd0: Receive control failed (result -32) [ 198.745370][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.779481][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.817009][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.841944][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.851271][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 198.860018][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.935957][ T6940] loop3: detected capacity change from 0 to 1024 [ 200.121565][ T5085] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 200.131499][ T5085] CPU: 1 PID: 5085 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 200.139050][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.149146][ T5085] Workqueue: hci2 hci_rx_work [ 200.153847][ T5085] Call Trace: [ 200.153861][ T5085] [ 200.153871][ T5085] dump_stack_lvl+0x18c/0x250 [ 200.153906][ T5085] ? show_regs_print_info+0x20/0x20 [ 200.153933][ T5085] ? load_image+0x420/0x420 [ 200.153967][ T5085] sysfs_create_dir_ns+0x26e/0x2a0 [ 200.157450][ T5085] ? sysfs_warn_dup+0xa0/0xa0 [ 200.157479][ T5085] ? do_raw_spin_unlock+0x121/0x230 [ 200.157512][ T5085] kobject_add_internal+0x617/0xc90 [ 200.165105][ T5085] kobject_add+0x164/0x240 [ 200.165133][ T5085] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 200.165167][ T5085] ? kobject_init+0x1d0/0x1d0 [ 200.179965][ T5085] device_add+0x3fa/0xc40 [ 200.180003][ T5085] hci_conn_add_sysfs+0xd5/0x1e0 [ 200.180038][ T5085] le_conn_complete_evt+0xe9a/0x1480 [ 200.224654][ T5085] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 200.230949][ T5085] hci_le_conn_complete_evt+0x187/0x440 [ 200.236532][ T5085] ? hci_remote_host_features_evt+0x150/0x150 [ 200.242621][ T5085] hci_event_packet+0x7b4/0x1280 [ 200.247605][ T5085] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 200.253271][ T5085] ? bis_list+0x290/0x290 [ 200.257644][ T5085] ? hci_send_to_monitor+0xd7/0x4f0 [ 200.262882][ T5085] hci_rx_work+0x43a/0xd60 [ 200.267341][ T5085] ? process_scheduled_works+0x975/0x1600 [ 200.273095][ T5085] process_scheduled_works+0xa60/0x1600 [ 200.278699][ T5085] ? worker_attach_to_pool+0x370/0x370 [ 200.284191][ T5085] ? assign_work+0x3cc/0x5d0 [ 200.288819][ T5085] worker_thread+0xa5e/0xfe0 [ 200.293472][ T5085] kthread+0x2fa/0x390 [ 200.297560][ T5085] ? pr_cont_work+0x550/0x550 [ 200.302266][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 200.306877][ T5085] ret_from_fork+0x48/0x80 [ 200.311313][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 200.315927][ T5085] ret_from_fork_asm+0x11/0x20 [ 200.320730][ T5085] [ 200.336292][ T5085] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 200.350610][ T5085] Bluetooth: hci2: failed to register connection device [ 201.894865][ C1] net_ratelimit: 24 callbacks suppressed [ 202.387718][ T5085] Bluetooth: hci2: command tx timeout [ 205.103782][ T6965] configfs-gadget.g1 gadget.0: HOST MAC be:fe:c8:ee:53:c5 [ 205.140744][ T6965] configfs-gadget.g1 gadget.0: MAC d6:2e:b6:1f:35:f9 [ 205.996992][ T5815] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 206.148219][ T788] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 206.199785][ T5815] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.224872][ T5815] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 206.255369][ T5815] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 206.280778][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.293282][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.302635][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.312358][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.322044][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 206.329848][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.348074][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.369155][ T5815] usb 4-1: config 0 descriptor?? [ 206.381224][ T5815] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 206.388357][ T788] usb 1-1: Dual-Role OTG device on HNP port [ 206.408140][ T5815] dvb-usb: bulk message failed: -22 (3/0) [ 206.426985][ T788] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 206.447660][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.703861][ T5815] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 206.714191][ T5815] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 206.723250][ T5815] usb 4-1: media controller created [ 207.027658][ C1] net_ratelimit: 38 callbacks suppressed [ 207.149396][ T6982] dvb-usb: bulk message failed: -22 (2/0) [ 207.326850][ T788] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, be:fe:c8:ee:53:c5 [ 207.420233][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.447123][ T5815] dvb-usb: bulk message failed: -22 (6/0) [ 207.453989][ T5815] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 207.470449][ T5815] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 207.494655][ T5815] dvb-usb: schedule remote query interval to 150 msecs. [ 207.501699][ T5815] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 207.660895][ T5815] dvb-usb: bulk message failed: -22 (1/0) [ 207.673102][ T5815] dvb-usb: error while querying for an remote control event. [ 207.847701][ T5815] dvb-usb: bulk message failed: -22 (1/0) [ 207.856331][ T5815] dvb-usb: error while querying for an remote control event. [ 208.017727][ T5815] dvb-usb: bulk message failed: -22 (1/0) [ 208.024944][ T5815] dvb-usb: error while querying for an remote control event. [ 208.197666][ T5815] dvb-usb: bulk message failed: -22 (1/0) [ 208.206594][ T5815] dvb-usb: error while querying for an remote control event. [ 208.367765][ T5815] dvb-usb: bulk message failed: -22 (1/0) [ 208.376023][ T5815] dvb-usb: error while querying for an remote control event. [ 208.474599][ T788] usb 4-1: USB disconnect, device number 3 [ 208.576077][ T788] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 210.384232][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.395263][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.405694][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.416134][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.426167][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.433959][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.467665][ C1] net_ratelimit: 46 callbacks suppressed [ 212.724977][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.734045][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.744055][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.755791][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.766050][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.774404][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.146755][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.156628][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.165557][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.176369][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.186116][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.193980][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.642715][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.653140][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.663773][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.674545][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.677651][ C1] net_ratelimit: 39 callbacks suppressed [ 217.694870][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.704969][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=145 state=3 status=67 (errno 9: Bad file descriptor) [ 218.383211][ T6729] syz_tun (unregistering): left promiscuous mode [ 218.541961][ T5776] syz_tun (unregistering): left allmulticast mode [ 218.764560][ T1074] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.931419][ T1074] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.033041][ T1074] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.125930][ T1074] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.353772][ T59] infiniband syz2: set down [ 219.362662][ T5814] wg1 speed is unknown, defaulting to 1000 [ 219.418521][ T1074] ip6gretap0 (unregistering): left promiscuous mode [ 219.455489][ T5814] wg1 speed is unknown, defaulting to 1000 [ 220.566837][ T1074] hsr_slave_0: left promiscuous mode [ 220.576659][ T1074] hsr_slave_1: left promiscuous mode [ 220.620583][ T1074] veth1_macvtap: left promiscuous mode [ 220.626134][ T1074] veth0_macvtap: left promiscuous mode [ 220.633783][ T1074] veth1_vlan: left promiscuous mode [ 220.639622][ T1074] veth0_vlan: left promiscuous mode [ 220.769330][ T1074] infiniband syz2: set down [ 221.901771][ T1099] smc: removing ib device syz2 [ 222.484095][ T1074] bond0 (unregistering): Released all slaves [ 222.816525][ T9] wg1 speed is unknown, defaulting to 1000 [ 222.867837][ C1] net_ratelimit: 33 callbacks suppressed [ 223.272638][ T1074] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.375584][ T1074] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.453795][ T1074] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.524230][ T1074] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.714601][ T1074] tipc: Left network mode [ 224.439029][ T1074] dvmrp6 (unregistering): left allmulticast mode [ 224.605073][ T1074] veth5: left allmulticast mode [ 224.610365][ T1074] veth5: left promiscuous mode [ 224.615343][ T1074] bridge1: port 3(veth5) entered disabled state [ 224.626387][ T1074] veth0_to_bond: left allmulticast mode [ 224.632395][ T1074] veth0_to_bond: left promiscuous mode [ 224.639244][ T1074] bridge1: port 2(veth0_to_bond) entered disabled state [ 224.649863][ T1074] veth3: left allmulticast mode [ 224.654816][ T1074] veth3: left promiscuous mode [ 224.659813][ T1074] bridge1: port 1(veth3) entered disabled state [ 224.679347][ T1074] hsr_slave_0: left promiscuous mode [ 224.685694][ T1074] hsr_slave_1: left promiscuous mode [ 224.692228][ T1074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.700211][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.710185][ T1074] bridge_slave_1: left allmulticast mode [ 224.715849][ T1074] bridge_slave_1: left promiscuous mode [ 224.721814][ T1074] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.734771][ T1074] bridge_slave_0: left allmulticast mode [ 224.742083][ T1074] bridge_slave_0: left promiscuous mode [ 224.748833][ T1074] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.785264][ T1074] veth1_macvtap: left promiscuous mode [ 224.791265][ T1074] veth0_macvtap: left promiscuous mode [ 224.796945][ T1074] veth1_vlan: left promiscuous mode [ 224.802428][ T1074] veth0_vlan: left promiscuous mode [ 225.756624][ T1074] team0 (unregistering): Port device team_slave_1 removed [ 225.813281][ T1074] team0 (unregistering): Port device team_slave_0 removed [ 225.876314][ T1074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.942219][ T1074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.462074][ T1074] bond0 (unregistering): Released all slaves [ 226.828937][ T1074] IPVS: stop unused estimator thread 0...