last executing test programs: 9m52.79621494s ago: executing program 3 (id=1764): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) io_setup(0x7ff, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) read$FUSE(0xffffffffffffffff, &(0x7f0000001e40)={0x2020}, 0x2020) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r8}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x4b) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x19f981) ioctl$USBDEVFS_CLEAR_HALT(r9, 0xc0105502, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f002}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa, 0xfff3}}}, 0x24}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) socket$inet6_sctp(0xa, 0x5, 0x84) 9m50.745363798s ago: executing program 3 (id=1767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={0x0, 0x4c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x9}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x5) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x80000000000003) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 9m49.215464965s ago: executing program 3 (id=1770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) 9m46.653918566s ago: executing program 3 (id=1776): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) io_setup(0x7ff, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) read$FUSE(0xffffffffffffffff, &(0x7f0000001e40)={0x2020}, 0x2020) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r8}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x4b) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x19f981) ioctl$USBDEVFS_CLEAR_HALT(r9, 0xc0105502, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f002}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa, 0xfff3}}}, 0x24}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) socket$inet6_sctp(0xa, 0x5, 0x84) 9m43.283381736s ago: executing program 32 (id=1753): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 9m42.518916254s ago: executing program 3 (id=1783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='0', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9m38.785682762s ago: executing program 3 (id=1791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x80000) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, 0x0, 0x0) 9m23.573064804s ago: executing program 33 (id=1791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x80000) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, 0x0, 0x0) 6m31.061664301s ago: executing program 5 (id=2080): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = open_tree(0xffffffffffffffff, 0x0, 0x8500) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r7, @ANYRES32=r6], 0x138}}, 0x844) r8 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r8, 0xc2604110, &(0x7f0000000300)={0x1, [[0x1, 0x0, 0x0, 0x9, 0x6, 0xe], [0x4, 0x0, 0x0, 0xfffffffc, 0x40000000, 0x3, 0x0, 0x7], [0x1, 0x0, 0x0, 0x7bf5, 0x0, 0x5dd6, 0x200, 0x9]], '\x00', [{0x4, 0x4000000}, {0x0, 0x1641c}, {}, {0x1, 0x80000000, 0x0, 0x0, 0x1}, {0x0, 0x2000010, 0x0, 0x1}, {0xffff5283, 0xffffffff, 0x1, 0x0, 0x0, 0x1}, {0x2000000}, {}, {}, {}, {0x0, 0x4}, {0x8}], '\x00', 0x1000}) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r9, 0x7c81, 0x0) 6m25.193299856s ago: executing program 5 (id=2091): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x2c00) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000002540)={&(0x7f0000000300)=@ieee802154, 0x80, 0x0}, 0x0, 0x60, 0x1, {0x3}}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc0b45545, &(0x7f0000000040)=0x1000) io_uring_enter(r3, 0x2000, 0xfffffffa, 0x9, 0x0, 0x0) fgetxattr(r2, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1}, 0x5}], 0x1, 0x40010000, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="da8500001500e999000000000000b3c6fb0128a1256a8bfe8b39f0520000fc000000000000000000000000000001ac1e010100"/64, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff000000000000000000000000000000000000000000000000000000000100000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000100"], 0xb8}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 6m23.987861134s ago: executing program 5 (id=2093): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x51}, 0x28) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="23000000010006", 0x7) socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 6m21.661356257s ago: executing program 5 (id=2096): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) io_setup(0x7ff, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) read$FUSE(0xffffffffffffffff, &(0x7f0000001e40)={0x2020}, 0x2020) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x3, 0x0) bind$can_raw(r5, &(0x7f0000000000), 0x10) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x4b) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x19f981) ioctl$USBDEVFS_CLEAR_HALT(r8, 0xc0105502, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f002}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa, 0xfff3}}}, 0x24}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) socket$inet6_sctp(0xa, 0x5, 0x84) 6m20.25253067s ago: executing program 5 (id=2100): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000001c0)={0x7992, 0x4, 0xf0}, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) shutdown(r3, 0x1) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r4, 0x4068aea3, &(0x7f0000000240)={0x80, 0x0, 0x3ff}) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) close(0x3) 6m17.049481343s ago: executing program 5 (id=2107): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0xd8, 0x1403, 0x5, 0x70bd21, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg0\x00'}}]}, 0xd8}}, 0x800) 6m1.747859495s ago: executing program 34 (id=2107): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0xd8, 0x1403, 0x5, 0x70bd21, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg0\x00'}}]}, 0xd8}}, 0x800) 5m28.106487159s ago: executing program 2 (id=2193): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x5, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r3 = syz_open_dev$radio(&(0x7f0000000380), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000002c0)={0x1000000, 0x1, 0x0, 0x0, 0x0, 0x28fc0, 0x9f8c}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000140), 0x400000000000287, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0), 0x0, 0x3ec0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') preadv(r6, &(0x7f0000000440)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8000f, 0xfffffbff) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000702, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x40000, 0x0) fsopen(0x0, 0x0) 5m26.028855597s ago: executing program 2 (id=2196): bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000692000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000068f000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x66ad, 0xc000, 0x1, 0x800000bf}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x17, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000300), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) lstat(0x0, 0x0) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)={[], [{@uid_eq}, {@obj_role={'obj_role', 0x3d, '^(,-!#/'}}, {@uid_eq}]}) r0 = accept$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',', @ANYRES16], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c0007800800064000"], 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) write(r0, &(0x7f0000000300), 0x100) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x4, 0xc8, 0x8, 0x6e4}, {0x4, 0x1, 0x3, 0x35da}, {0x0, 0x4, 0x40}]}, 0x10) 5m25.240007675s ago: executing program 2 (id=2199): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cde701004002000050000000600010005000000080009000200000008000b000000000008000c"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 5m23.680811641s ago: executing program 2 (id=2200): socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffffffffff1d) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) 5m22.068392468s ago: executing program 2 (id=2203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r3 = memfd_create(0x0, 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f00000006c0)="3b000300", 0x4) 5m20.986370063s ago: executing program 2 (id=2204): r0 = syz_open_dev$vcsa(&(0x7f0000002d00), 0xb19, 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYBLOB="010424bd7000fbdbdf252e0000000800", @ANYRES32, @ANYBLOB="0a00340002020202020200000400490008004a00"], 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x0) lseek(r0, 0x7, 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x2000, 0x8, 0x2, 0x7fff, 0x0, [{0x14, 0x4b, 0x6, '\x00', 0x2b}, {0x4d, 0x2, 0x4, '\x00', 0xd8}, {0x7, 0x0, 0x9, '\x00', 0xf}, {0xcf, 0x3, 0xe4, '\x00', 0x9}, {0x4, 0x13, 0xf7, '\x00', 0x25}, {0x9, 0x2, 0x0, '\x00', 0x2e}, {0x1, 0x7, 0x1, '\x00', 0x4}, {0x8, 0x7, 0xb, '\x00', 0x4}, {0x1, 0x0, 0x1, '\x00', 0xb}, {0x7, 0x9, 0x5, '\x00', 0x7}, {0x1, 0x5, 0xd, '\x00', 0x5}, {0xe0, 0xa0, 0x2, '\x00', 0x3a}, {0x0, 0x7, 0x0, '\x00', 0x8}, {0x40, 0xfe, 0x4, '\x00', 0xd6}, {0x8, 0x1, 0x96, '\x00', 0xff}, {0x5e, 0x8, 0x7, '\x00', 0xf8}, {0x5, 0xf6, 0x2, '\x00', 0x1}, {0x7f, 0x1, 0xb, '\x00', 0x5}, {0x4, 0x6, 0x2, '\x00', 0x8}, {0x1, 0x6, 0x92, '\x00', 0x2}, {0x1, 0x20, 0x5}, {0xb, 0x6, 0x8, '\x00', 0x6}, {0x5, 0x4, 0x1, '\x00', 0x5}, {0x8, 0x8, 0x8, '\x00', 0x1}]}}) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000005c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40091}, 0x2000c095) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x54, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0xffffff85}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xfffffc01}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x8}}]}}]}, 0x80}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000000040)={0x0, 0xea60}, 0x10) read(r8, &(0x7f0000000080)=""/5, 0x5) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'dvmrp0\x00', 0x1000}) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, r9, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000340)={0x10004, 0x4, 0x8080000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 5m5.744452074s ago: executing program 35 (id=2204): r0 = syz_open_dev$vcsa(&(0x7f0000002d00), 0xb19, 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYBLOB="010424bd7000fbdbdf252e0000000800", @ANYRES32, @ANYBLOB="0a00340002020202020200000400490008004a00"], 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x0) lseek(r0, 0x7, 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x2000, 0x8, 0x2, 0x7fff, 0x0, [{0x14, 0x4b, 0x6, '\x00', 0x2b}, {0x4d, 0x2, 0x4, '\x00', 0xd8}, {0x7, 0x0, 0x9, '\x00', 0xf}, {0xcf, 0x3, 0xe4, '\x00', 0x9}, {0x4, 0x13, 0xf7, '\x00', 0x25}, {0x9, 0x2, 0x0, '\x00', 0x2e}, {0x1, 0x7, 0x1, '\x00', 0x4}, {0x8, 0x7, 0xb, '\x00', 0x4}, {0x1, 0x0, 0x1, '\x00', 0xb}, {0x7, 0x9, 0x5, '\x00', 0x7}, {0x1, 0x5, 0xd, '\x00', 0x5}, {0xe0, 0xa0, 0x2, '\x00', 0x3a}, {0x0, 0x7, 0x0, '\x00', 0x8}, {0x40, 0xfe, 0x4, '\x00', 0xd6}, {0x8, 0x1, 0x96, '\x00', 0xff}, {0x5e, 0x8, 0x7, '\x00', 0xf8}, {0x5, 0xf6, 0x2, '\x00', 0x1}, {0x7f, 0x1, 0xb, '\x00', 0x5}, {0x4, 0x6, 0x2, '\x00', 0x8}, {0x1, 0x6, 0x92, '\x00', 0x2}, {0x1, 0x20, 0x5}, {0xb, 0x6, 0x8, '\x00', 0x6}, {0x5, 0x4, 0x1, '\x00', 0x5}, {0x8, 0x8, 0x8, '\x00', 0x1}]}}) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000005c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40091}, 0x2000c095) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x54, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0xffffff85}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xfffffc01}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x8}}]}}]}, 0x80}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000000040)={0x0, 0xea60}, 0x10) read(r8, &(0x7f0000000080)=""/5, 0x5) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'dvmrp0\x00', 0x1000}) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, r9, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000340)={0x10004, 0x4, 0x8080000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 4m9.480428109s ago: executing program 0 (id=2312): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x5, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r4 = syz_open_dev$radio(&(0x7f0000000380), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f00000002c0)={0x1000000, 0x1, 0x0, 0x0, 0x0, 0x28fc0, 0x9f8c}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x3ec0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') preadv(r7, &(0x7f0000000440)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8000f, 0xfffffbff) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000702, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x40000, 0x0) fsopen(0x0, 0x0) 4m8.285643376s ago: executing program 0 (id=2314): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_acct\x00') syz_emit_ethernet(0x22, &(0x7f0000000040)={@remote, @empty, @void, {@arp={0x806, @generic={0x4aa2fbe5deb8060a, 0xf6, 0x6, 0x0, 0x4, @random="f1fa947e4d7b", "", @random="728b56b7e264"}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socket$igmp6(0xa, 0x3, 0x2) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x1, 0x5002) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x33) 4m4.768518447s ago: executing program 0 (id=2321): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x1a7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./debug/tracing/trace_pipe\x00', &(0x7f0000000100), 0x2008040, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) pipe2$9p(&(0x7f00000001c0), 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r4], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x1}, 0x0) 4m2.528834019s ago: executing program 0 (id=2326): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000085}, 0x80) r5 = dup3(r3, r4, 0x0) write$P9_RREADDIR(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) 4m0.28830241s ago: executing program 0 (id=2328): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mprotect(&(0x7f00006bb000/0x2000)=nil, 0x2000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r1, 0x6, &(0x7f0000000700)={0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x3210, @broadcast}, 0x80) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x400261f3, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000240)=""/124, &(0x7f00000002c0)=0x7c) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m58.894598622s ago: executing program 0 (id=2330): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) capset(&(0x7f0000000500)={0x20080522}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x80, 0x800) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@sg0, 0xffffffffffffffff, 0x0) 3m42.374931163s ago: executing program 36 (id=2330): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) capset(&(0x7f0000000500)={0x20080522}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x80, 0x800) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@sg0, 0xffffffffffffffff, 0x0) 3m6.882089939s ago: executing program 6 (id=2434): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) io_setup(0x7ff, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) read$FUSE(0xffffffffffffffff, &(0x7f0000001e40)={0x2020}, 0x2020) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r7}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x4b) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x19f981) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f002}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa, 0xfff3}}}, 0x24}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) socket$inet6_sctp(0xa, 0x5, 0x84) 3m5.452346842s ago: executing program 6 (id=2435): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000100)=0x7, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(0x0, 0xb) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000009b80)={0x40000012}) read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0xc, &(0x7f0000000280)=0xfffffffd, 0x4) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 3m3.945670147s ago: executing program 6 (id=2436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c00048018000180080001006c6f67000c00028008000540000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 3m3.582223115s ago: executing program 6 (id=2441): syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) 3m2.835690962s ago: executing program 6 (id=2442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000001c0)="18000000010013", 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000000), 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) socket(0x25, 0x1, 0x9) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x8) accept4(r7, 0x0, 0x0, 0x0) 3m1.553425182s ago: executing program 6 (id=2446): openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8000, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0x91, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400}) syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000400)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) pipe2(&(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$afs(&(0x7f00000004c0)=ANY=[@ANYRES8=r0], &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000080), 0x8000c0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110039fbf9d08110fa010ebd201020301090224000106cf91586c04b30301a7b5df0009210a00050122040e090508d4ff03"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x99, &(0x7f0000000180)=@string={0x99, 0x3, "929c652f6f43ddc50f5d80cf904effee4ff70f3392d3e59bf31d36027e7da093d8dce5b86f97edf600ebc550a79c8fcadd4ce275e5f1c41e2177462c28e3ec6b163ef1bf62cb578f37208e646083ad755300e4aaecd461b1c86c83a22f5a2396236b48798dfe2f2ef83a0998fa2d305e56167f911c31c2a75d0002bc230ea56415f3c082ed762cc4270433a208cd175448c502beff59e4"}}]}) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000100)=0x5, 0x4) 2m46.133230717s ago: executing program 37 (id=2446): openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8000, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0x91, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400}) syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000400)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) pipe2(&(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$afs(&(0x7f00000004c0)=ANY=[@ANYRES8=r0], &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000080), 0x8000c0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110039fbf9d08110fa010ebd201020301090224000106cf91586c04b30301a7b5df0009210a00050122040e090508d4ff03"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x99, &(0x7f0000000180)=@string={0x99, 0x3, "929c652f6f43ddc50f5d80cf904effee4ff70f3392d3e59bf31d36027e7da093d8dce5b86f97edf600ebc550a79c8fcadd4ce275e5f1c41e2177462c28e3ec6b163ef1bf62cb578f37208e646083ad755300e4aaecd461b1c86c83a22f5a2396236b48798dfe2f2ef83a0998fa2d305e56167f911c31c2a75d0002bc230ea56415f3c082ed762cc4270433a208cd175448c502beff59e4"}}]}) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000100)=0x5, 0x4) 13.838287001s ago: executing program 4 (id=2777): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x1a7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) pipe2$9p(&(0x7f00000001c0), 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02", @ANYRES32=r2], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x1}, 0x0) 13.837654021s ago: executing program 7 (id=2778): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x1a7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./debug/tracing/trace_pipe\x00', &(0x7f0000000100), 0x2008040, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYRESHEX=r3]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) pipe2$9p(&(0x7f00000001c0), 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r4], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x1}, 0x0) 12.826935835s ago: executing program 7 (id=2779): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x5, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r4 = syz_open_dev$radio(&(0x7f0000000380), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f00000002c0)={0x1000000, 0x1, 0x0, 0x0, 0x0, 0x28fc0, 0x9f8c}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x3ec0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') preadv(r7, &(0x7f0000000440)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8000f, 0xfffffbff) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000702, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x40000, 0x0) fsopen(0x0, 0x0) 11.227192702s ago: executing program 1 (id=2780): syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700"/16], &(0x7f0000000440)='syzkaller\x00', 0x4}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b705000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000080), &(0x7f0000000100)=r3}, 0x20) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000440)=0x8) r6 = io_uring_setup(0x6957, &(0x7f0000000700)={0x0, 0xc54b, 0x1, 0x20001, 0x2de}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000240)=[{0x0}], 0x1) r7 = io_uring_setup(0x110, 0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x1e, 0x0, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0xb, 0x798, 0x2, 0x10000007, 0x7fffffff, 0x7fff, 0x6, 0x3, 0xc72d, 0x0, 0x7, 0xfffff9f5, 0xc, 0x29, 0x72f0, 0x9, 0x7c, 0x4, 0x3fe, 0x4, 0x488, 0xc, 0x9, 0x1004, 0x80000001, 0xe, 0x0, 0x1, 0x8001, 0x1]}) shutdown(0xffffffffffffffff, 0x1) r9 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r9, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) 10.762849633s ago: executing program 8 (id=2781): socket$nl_netfilter(0x10, 0x3, 0xc) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r0 = userfaultfd(0x801) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x189802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r1, 0xc010644a, &(0x7f0000000340)) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)='super-speed\x00', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) getsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000500)=""/182, &(0x7f00000005c0)=0xb6) 10.613011786s ago: executing program 4 (id=2782): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000280), 0x0) write(r0, &(0x7f00000002c0)='add', 0x3) write(r0, &(0x7f0000000300)='add ', 0x4) write(r0, &(0x7f0000000380)='add 2-', 0x6) 9.828854774s ago: executing program 7 (id=2783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000440)="bad386ddc7180869ab2b83b48ae1", 0xe, 0x24004095, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) 8.832117937s ago: executing program 8 (id=2784): timer_create(0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x1d) r3 = fanotify_init(0xf00, 0x800) fanotify_mark(r3, 0x1, 0x5800182b, r2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv6_getnexthop={0x18, 0x6a, 0x1}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000030000001200000008000300", @ANYRES32=r7, @ANYBLOB="06001200000000000a0006"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 8.763470279s ago: executing program 4 (id=2785): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "1000"}}) 7.694156103s ago: executing program 4 (id=2786): syz_io_uring_setup(0x34b8, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x20080, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x191, @tick=0x3, 0x3, {0x2, 0x2}, 0x7, 0x2, 0x9}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="a8aaaaaaaad3bb80c2000002080600010800"], 0x0) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) accept4$x25(r1, 0x0, 0x0, 0x80800) r4 = syz_open_dev$mtd(&(0x7f0000000100), 0x8, 0x22000) ioctl$MEMERASE(r4, 0x40084d02, 0x0) 7.452828418s ago: executing program 8 (id=2787): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cde701004002000050000000600010005000000080009000200000008000b000000000008000c"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 5.64122452s ago: executing program 7 (id=2788): syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8000, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400}) syz_usb_connect(0x2, 0x36, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x99, &(0x7f0000000180)=@string={0x99, 0x3, "929c652f6f43ddc50f5d80cf904effee4ff70f3392d3e59bf31d36027e7da093d8dce5b86f97edf600ebc550a79c8fcadd4ce275e5f1c41e2177462c28e3ec6b163ef1bf62cb578f37208e646083ad755300e4aaecd461b1c86c83a22f5a2396236b48798dfe2f2ef83a0998fa2d305e56167f911c31c2a75d0002bc230ea56415f3c082ed762cc4270433a208cd175448c502beff59e4"}}]}) 4.933409927s ago: executing program 1 (id=2789): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='bRequestType=\'', 0xe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044028}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff02000000000000000000"], 0xfdef) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000004c0), r4, 0x0, 0x1, 0x4}}, 0x20) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r6, 0x4068aea3, &(0x7f0000000240)={0xa3, 0x0, &(0x7f0000000140)}) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000800)={0x13, 0x10, 0xfa00, {&(0x7f0000000600), r4}}, 0x18) 4.604680704s ago: executing program 9 (id=2790): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x8100, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x600, 0x48c, 0x0, 0x0) preadv2(r1, &(0x7f0000003500)=[{&(0x7f00000002c0)=""/54, 0xfefc}], 0x1, 0x8, 0x80, 0x10) 4.439212908s ago: executing program 4 (id=2791): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/c1\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x181, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/cluster/c1/node/node1/num\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x8010) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x4) write(r2, &(0x7f0000000b00)='0\x00', 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/cluster/c1/node/node1/local\x00', 0x1, 0x0) write(r8, &(0x7f0000001100), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/cluster/c1/heartbeat/r1\x00', 0x1ff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009690342058200510f6b50102030109021b00020000000009043d0000518e3f000904"], 0x0) 3.707509535s ago: executing program 9 (id=2792): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x1a7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) pipe2$9p(&(0x7f00000001c0), 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc020000000000000000", @ANYRES32=r2], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x1}, 0x0) 3.578998558s ago: executing program 9 (id=2793): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x5, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r4 = syz_open_dev$radio(&(0x7f0000000380), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f00000002c0)={0x1000000, 0x1, 0x0, 0x0, 0x0, 0x28fc0, 0x9f8c}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x3ec0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') preadv(r7, &(0x7f0000000440)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8000f, 0xfffffbff) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000702, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x40000, 0x0) fsopen(0x0, 0x0) 3.528671899s ago: executing program 1 (id=2794): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000500)='1\n', 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) getpid() r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc040564a, &(0x7f00000000c0)) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) write(r0, &(0x7f0000001400)='2\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000002400)='./config/nullb/nullb2/zoned\x00', 0x2, 0x0) write(r1, &(0x7f0000000880), 0x0) 2.481638863s ago: executing program 9 (id=2795): socket$nl_netfilter(0x10, 0x3, 0xc) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r0 = userfaultfd(0x801) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x189802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r1, 0xc010644a, &(0x7f0000000340)) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)='super-speed\x00', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) getsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000500)=""/182, &(0x7f00000005c0)=0xb6) 2.378747915s ago: executing program 8 (id=2796): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "1000"}}) 2.114907452s ago: executing program 1 (id=2797): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c40)=0x14) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000cc0)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001ac0)={'erspan0\x00', &(0x7f00000019c0)={'syztnl0\x00', 0x0, 0x7800, 0x7, 0x5, 0xe, {{0x2d, 0x4, 0x3, 0x3, 0xb4, 0x64, 0x0, 0x3, 0x4, 0x0, @local, @local, {[@end, @cipso={0x86, 0x33, 0x1, [{0x2, 0x10, "2e08aa6eb0806bffa8da731a59e7"}, {0x5, 0x10, "cb96423508e7f15bf96ecaf9f2e5"}, {0x7, 0x9, "364de5b4522298"}, {0x1, 0x4, 'X\f'}]}, @cipso={0x86, 0x17, 0x0, [{0x5, 0x11, "7f8b79086e4efce375ac1e2c1538d3"}]}, @lsrr={0x83, 0xf, 0xbc, [@local, @dev={0xac, 0x14, 0x14, 0x16}, @multicast2]}, @cipso={0x86, 0x40, 0x3, [{0x5, 0x12, "22cd099892c9d4f88b31f0fa576f9e49"}, {0x1, 0x11, "a77d2e49f6ff9bb956d6f94c7e9662"}, {0x0, 0x6, "6900d956"}, {0x9335320b647d7ee7, 0xb, "be0596f8a1115c3826"}, {0x6, 0x6, "93db95d4"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmmsg$inet(r3, &(0x7f0000001c00)=[{{&(0x7f0000000a00)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000a40)="f6063f7886509f869a03beeab46d20c4381ec2dcfc38a333088fee500e98ab5403158c13c0461f6f63c30f682013de82e3707a7db0c2bcc76e06a4f2aee96dbc31b5ad17d872f86b6ff8bf9a92b50b4dd67ce5c9b48a200c25a9a163b95650f3b8664bd129d526597e41fe628e1d595d285412aed8a7f5d65fc134783ff9c5dc3302565cf00d4cf7487de0efbd392851fdcaa61af074875934d5aa719a8b1fa85041d54fd83b66e68eff147ea74341a4ff0f1bfdab11065ff8f1ea32007da0e0aa9b7c0e8706a2dc7140d16fa76f24a33d0b", 0xd2}, {&(0x7f0000000b40)="c8f2d8daf8dabf9793b07081381387a14ac4be164c0a4db2daa3153fbc9c886875c06ddaa4c1086b4b66d0c779a4beb375d04911369e5509a4275da3e0c8c799132ac4210202e99f67c04950c9e6825c59a053b962120d1b2d59659ba3453f6dd1a2697e1c8854cb00a388ee5033222f044eff6cc45576a7c79069851f0e6fcc", 0x80}], 0x2, &(0x7f0000000d00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xb4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @rand_addr=0x64010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0xe8, 0x0, 0x7, {[@cipso={0x86, 0x4a, 0x3, [{0x0, 0x6, "9e37292b"}, {0x2, 0x2}, {0x0, 0xc, "b336bf3dd7eea3ff076a"}, {0x2, 0x7, "64e4ee8c80"}, {0x7, 0xe, "a896bfbd2ad727a0b87ba48a"}, {0x1, 0x12, "4da77025b55151d683529c1ab99de996"}, {0x6, 0x9, "e2bce38cc21474"}]}, @generic={0x89, 0x3, "ae"}, @timestamp={0x44, 0x10, 0xdc, 0x0, 0x5, [0x8, 0x7, 0x7]}, @timestamp_prespec={0x44, 0x3c, 0xdf, 0x3, 0xc, [{@private=0xa010100, 0x8}, {@multicast2, 0x200}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010101, 0x1}, {@rand_addr=0x64010100, 0x6}, {@multicast2, 0x4}, {@multicast2, 0x2}]}, @generic={0x7, 0x10, "fe9050a3648b2e7fa374d808290e"}, @timestamp_addr={0x44, 0x2c, 0xaa, 0x1, 0x3, [{@private=0xa010100, 0x4}, {@empty, 0xb}, {@private=0xa010102, 0x5}, {@broadcast, 0x401}, {@multicast2}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x33}, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}], 0x1a0}}, {{&(0x7f0000000ec0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001800)=[{&(0x7f0000000f00)="5d7186622729bf5f51", 0x9}, {&(0x7f0000001140)="4edee5b05383d2a1ec7fd307e753c766d94ea54d3ca40ab477976a1261c1ebdf94c48e26890fd9872e72ea201ac3ed1e34e43efcdabdb2429ad5da18c8bdd1d66f1bae6fa0c9c9937f0c7ff461e1e2285e54e9215c3c67398c32a7ea30a7a28e8e56e80ba02a21f1d18edf0f7c1811f4f56ce7d2632cf4e8a3f9ff220df2f4917dd9c9774a6f6c98813c90f719d28782cbad08716793b11c3ba776b0aa7c9e78d1a5595b4c4a07d302bf674a253ce49459a399a3e5342340dde20e7acdd807d84bc77b7c3afb163d961ecd8cb10130da46", 0xd1}, {&(0x7f0000001240)="ddb92177b527d5eaa4b57e97724c1d519f8614c2e68378859cb47515c431a2672203bbc3ba16c267362ef37bfe80d4c817fb84ddf3bda37de66c0522670d9b10887b238b1c900a356ff35bb7a4839c4cbd615a5b064e1bbcae7c7a89c82ac56cc73e745ecf112eceadddd86145fd9db07221e730f1f4c785a1afd8b03f808e87a6c5a7c25fe417627bf54b895e87ec502014e87fdaacbb8fdd347ccf88047076ac14d1f1912deb8cb0900043584e3065c7093f614cfb53e24f2259a4f386aacbc73831c5a2a65461a3a3dbd2c7c5aba1f8d8584ab0fb12fc51352055f91dfc33b356993a5972e8c6f90625354ed1a2", 0xef}, {&(0x7f0000001340)="99af6e5d868352d50116a21f89fc989f5b23c94038334fde56351b27684781ec85fbee5f496dbc50a7eddcaeacdb03ea524efd8a57bb6a832dc7721a89ff12f5a819ccc09e80c965b9d7f841c7ea4f7aab450c2c48f5992ebcdf0af792356d61f82134a4818cdf55df52641b553cf2f82d2a9dccacf7442040a5c13de1709baac729bc5159d04039", 0x88}, {&(0x7f0000001400)="b007fb21f8830e59b15319291b81278f2530e20a7866934232ecffb6435c24d704d428f42ac95f1644be1d50c8131193172afa86869b00647c4d06509daf3527964a0b23794cda3626141ba020f9c8bfa2f64a9491cbb0d2229ab54286cc3a27b0e707de6011e47d58e542a3f3c3aeabe1299d5dd4486ac8398165df", 0x7c}, {&(0x7f0000001480)="a136a30557e8703ca86e7f937646667eef6b97d36b0437dc5f5a37", 0x1b}, {&(0x7f00000014c0)="6021e32399cfda3308c0a26510f3e95ac97992350af8250abe550d65d57cf74f18876b0cbd6e34353585fcdb3b6b58d13e059e73bd01e665b74263d9b9faf6ca09034943e770ef8ed9ad480a8f25415eed529f826df5c206ba13ae155248acb93505d763a40373566d823f7eb890ff34b4b3ec51791ef7a5d577cbfd2e3a852f3ee8342b35b85d2e0383234d675cf211fa00a77451928a4f85cfad32016c99cb52db3c5984f238fae56a11924afbe428fef532c547bd2c0aa93dcefdacb5cb79d138494e2a9d103c542b95e98516ab8e0f2bc11300071c", 0xd7}, {&(0x7f00000015c0)="9138e7c37720c34cb31c58d6b22fc6d998b4c631f5df4d5269d29c6b0f9649bd38fb50ceb5cfea5a059a375f0c9ccada82b3bbdbf4e2aa27e78ec592a7337eb9bcb56161290aafc2968f69bd4fbf4518c7f52bce821d8466590d37b0f7cde4a4e2835f8d4159e7e024276f56a1418881829b0d09d84d00242bb18a695c748ac80d91774b76e94bc9004b5d70e01555b89d05d0bcccda81a81f6063b6f91b703a43deff82f5b80bacf5b33cc898a3ebe2a314f2c869420e49e0c760a31a56503828a5d947b1d2645f1cfdb0438bb77a229b592a458cda7013181dc91f9d0023a1bc6b628b3499947ba539c1", 0xeb}, {&(0x7f00000016c0)="1802ef2217d6d14ca0605d7931351577cf965e82e83b5a07b2e72f963cf532e526f6304f56388b8a315664de16de5c4d2f2a56e6ba16cfa51474e9b4ddbfe45b717fe44c17f1efaf98aafdfbe4ccf0d84d9cfd1d69fe62c01cd1d7cf96a4f3b917fb11a1f80555edb85ba4c02dc69197290e51495a0bd87d38269dfc138e99670a8c126216d5d4a8d8d74cbbfbdb5bd91de8dbbaec13e0396ee348c481659d65352d2d1d8561a63f62deff0b44837b", 0xaf}, {&(0x7f0000001780)="1e7282c80ce461ecb5dccf97eb2ea16d157f4a575334bea920b3b5222e50e54ebc5c0ee9927245588cc7375032f4039843b7cb1ba59e2403e289f3724a46ca2838eda2d6fec2e04776bd213d760b82631f75fb61bfe94c81cc1e58b80e8c26e4001d", 0x62}], 0xa, &(0x7f00000018c0)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x30}}, {{&(0x7f0000001900)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001980)=[{&(0x7f0000001940)="bcf003dd666eb0e8d04ed942b841bca0e19e3fcd9a463a30710ac98e993f7d9001e26ac0e7e1f82799f5084403e3868234", 0x31}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000000000000100000090000000000000001c000000000000000000000007000000070bfd96dff65871c1c217000000000014000000000000000000000001000000d03effff0000000014000000000000000000000001000000ff070000000000001400000000000000000000000200000001000000000000001100000000000000000000000100000000000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="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"], 0xe8}}], 0x3, 0x111) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.030934423s ago: executing program 9 (id=2798): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) read(r1, &(0x7f0000000000)=""/219, 0xdb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000400)) tkill(r0, 0x7) 1.240639271s ago: executing program 7 (id=2799): syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700"/16], &(0x7f0000000440)='syzkaller\x00', 0x4}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b705000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000080), &(0x7f0000000100)=r3}, 0x20) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000440)=0x8) r6 = io_uring_setup(0x6957, &(0x7f0000000700)={0x0, 0xc54b, 0x1, 0x20001, 0x2de}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000240)=[{0x0}], 0x1) r7 = io_uring_setup(0x110, 0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x1e, 0x0, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0xb, 0x798, 0x2, 0x10000007, 0x7fffffff, 0x7fff, 0x6, 0x3, 0xc72d, 0x0, 0x7, 0xfffff9f5, 0xc, 0x29, 0x72f0, 0x9, 0x7c, 0x4, 0x3fe, 0x4, 0x488, 0xc, 0x9, 0x1004, 0x80000001, 0xe, 0x0, 0x1, 0x8001, 0x1]}) shutdown(0xffffffffffffffff, 0x1) r9 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r9, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) 1.134229514s ago: executing program 8 (id=2800): userfaultfd(0x801) r0 = fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, 0x0, 0x44010) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x10000008) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) recvfrom$inet_nvme(r4, 0x0, 0xfffffffffffffea6, 0x40000002, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000040)={0x3, 0x4}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x189802, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 1.091306835s ago: executing program 1 (id=2801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000004080300000000000000000005000003050003003a000000060002"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10004000) 1.006686087s ago: executing program 9 (id=2802): syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x100) shutdown(r1, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'dummy0\x00', @random="8ed3e46724fa"}) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x3, 0x0, 0x4, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x80000000010}, 0x60) listen(r5, 0x0) accept(r5, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000700)={"92703b5f0ad3acc536bed4be2b35ad99", 0x0, 0x0, {0x8, 0x7}, {0x3, 0x2}, 0x9, [0x7, 0x8a98, 0x7, 0x5, 0x6, 0x3, 0x10, 0x7fffffff, 0x2, 0x2, 0x1000, 0x4, 0x2, 0x3ff, 0x8, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000980)={"2190620bbe63284f9af2567940412bb1", 0x0, r6, {0xf90, 0x4}, {0x95, 0x40}, 0x5, [0x5, 0x6, 0xe, 0x7, 0xc, 0xc, 0x1, 0x1, 0x2, 0x0, 0x5, 0x6, 0x3, 0xfff, 0x5, 0x445]}) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000040)=""/67) write(0xffffffffffffffff, &(0x7f0000000040)='add syz0 ::1', 0xc) 157.003426ms ago: executing program 4 (id=2803): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x1a7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) pipe2$9p(&(0x7f00000001c0), 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc020000000000000000", @ANYRES32=r2], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x1}, 0x0) 100.055968ms ago: executing program 7 (id=2804): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='bRequestType=\'', 0xe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044028}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff02000000000000000000"], 0xfdef) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000004c0), r4, 0x0, 0x1, 0x4}}, 0x20) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r6, 0x4068aea3, &(0x7f0000000240)={0xa3, 0x0, &(0x7f0000000140)}) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000800)={0x13, 0x10, 0xfa00, {&(0x7f0000000600), r4}}, 0x18) 1.61595ms ago: executing program 1 (id=2805): r0 = dup(0xffffffffffffffff) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)=0x1000000010) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = semget$private(0x0, 0x6, 0x3b1) semop(r1, &(0x7f0000000000), 0x0) semctl$GETZCNT(r1, 0x0, 0xf, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x3f00000000000000) 0s ago: executing program 8 (id=2806): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cde701004002000050000000600010005000000080009000200000008000b000000000008000c"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) kernel console output (not intermixed with test programs): T4961] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1077.175013][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1077.264442][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1077.294458][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1077.339835][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1077.386250][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1079.765224][ T4961] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1079.827124][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1079.933083][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1079.941795][ T4961] (NULL device *): queue 0 connect admin queue failed (-111). [ 1079.983352][ T4961] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1080.029345][ T4961] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1080.037773][T12908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.661944][T10810] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1082.710992][T10810] (NULL device *): queue 0 connect admin queue failed (-111). [ 1083.772020][T10810] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1083.854697][T10810] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1085.912180][ T4330] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1085.970643][ T4330] (NULL device *): queue 0 connect admin queue failed (-111). [ 1086.055644][ T4330] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1086.064897][ T4330] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1086.132772][ T1159] block nbd1: Attempted send on invalid socket [ 1086.138998][ T1159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1086.148960][T13347] befs: (nbd1): unable to read superblock [ 1087.773743][T13347] can0: slcan on ttyS3. [ 1087.942181][T13345] can0 (unregistered): slcan off ttyS3. [ 1088.161988][T12499] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1088.242022][T12499] (NULL device *): queue 0 connect admin queue failed (-111). [ 1088.249771][T12499] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1088.338356][T12499] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1089.112410][ T9091] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1089.128556][ T9091] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1089.146443][ T9091] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1089.162783][ T9091] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1089.181667][ T9091] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1089.191012][ T9091] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1090.394867][T12499] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1091.169831][T13395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1091.177934][T13395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1091.195938][T13395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1091.203929][T13395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1091.272253][T12301] Bluetooth: hci4: command 0x0409 tx timeout [ 1093.352162][T12301] Bluetooth: hci4: command 0x041b tx timeout [ 1093.465129][T12499] (NULL device *): queue 0 connect admin queue failed (-111). [ 1093.554690][T12499] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1093.706469][T12499] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1095.442050][T12301] Bluetooth: hci4: command 0x040f tx timeout [ 1095.516619][T13375] chnl_net:caif_netlink_parms(): no params data found [ 1095.844042][T12499] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1095.898541][T12499] (NULL device *): queue 0 connect admin queue failed (-111). [ 1095.930344][T13375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.988913][T12499] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1095.991126][T13375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.037636][T12499] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1096.118070][T13375] device bridge_slave_0 entered promiscuous mode [ 1097.562015][T12301] Bluetooth: hci4: command 0x0419 tx timeout [ 1097.583963][T13375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.604972][T13375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.691808][T13375] device bridge_slave_1 entered promiscuous mode [ 1098.154936][T13375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.202337][ T5030] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1098.294208][T13375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1098.332433][ T5030] (NULL device *): queue 0 connect admin queue failed (-111). [ 1098.386718][ T5030] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1098.471240][ T5030] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1098.600117][T13449] siw: device registration error -23 [ 1099.606550][T13375] team0: Port device team_slave_0 added [ 1099.714721][T13375] team0: Port device team_slave_1 added [ 1100.552187][T12499] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1100.677518][T13460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2343'. [ 1100.720729][T12499] (NULL device *): queue 0 connect admin queue failed (-111). [ 1100.865027][T12499] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1100.956155][T13375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.963332][T13375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1100.982071][T12499] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1100.989224][ C1] vkms_vblank_simulate: vblank timer overrun [ 1101.017899][T13375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.856830][T13375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.887395][T13375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.093273][T13375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.217578][T13375] device hsr_slave_0 entered promiscuous mode [ 1104.023516][T13375] device hsr_slave_1 entered promiscuous mode [ 1104.045300][T13394] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1104.073485][T13375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1104.081104][T13375] Cannot create hsr debugfs directory [ 1104.088473][T13394] (NULL device *): queue 0 connect admin queue failed (-111). [ 1104.124526][T13394] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1104.142080][T13394] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1105.071107][ T14] usb 1-1: USB disconnect, device number 43 [ 1105.091752][ T14] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1105.109551][ T14] keyspan 1-1:0.133: device disconnected [ 1105.360762][ T4957] device hsr_slave_0 left promiscuous mode [ 1105.380269][ T4957] device hsr_slave_1 left promiscuous mode [ 1105.422444][ T4957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1105.473375][ T4957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1105.536250][ T4957] device bridge_slave_1 left promiscuous mode [ 1105.549061][ T4957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.604623][ T4957] device bridge_slave_0 left promiscuous mode [ 1105.623003][ T4957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.710749][T13504] hub 8-0:1.0: USB hub found [ 1105.716630][T13504] hub 8-0:1.0: 1 port detected [ 1106.236119][T13394] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1106.271666][T13394] (NULL device *): queue 0 connect admin queue failed (-111). [ 1106.354810][T13394] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1106.554239][T13394] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1106.574450][ T27] audit: type=1800 audit(1787744518.298:150): pid=13508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2354" name="zone_nr_conv" dev="configfs" ino=96540 res=0 errno=0 [ 1108.633745][T13394] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1109.253819][T13394] (NULL device *): queue 0 connect admin queue failed (-111). [ 1109.336257][T13394] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1109.375225][ T9091] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1109.393242][ T9091] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1109.405651][ T9091] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1109.420367][ T9091] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1109.435344][ T9091] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1109.447629][ T9091] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1109.570118][T13394] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1110.843781][ T4957] team0 (unregistering): Port device team_slave_1 removed [ 1110.921405][ T4957] team0 (unregistering): Port device team_slave_0 removed [ 1110.987107][ T4957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1111.044417][ T4957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1111.391036][ T4957] bond0 (unregistering): Released all slaves [ 1111.507514][T13519] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2355'. [ 1111.516679][T12301] Bluetooth: hci3: command 0x0409 tx timeout [ 1111.629033][T13527] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1111.636590][T13527] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1111.648972][T13527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1111.840672][ T5028] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1111.889407][ T5028] (NULL device *): queue 0 connect admin queue failed (-111). [ 1111.900810][ T5028] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1111.928371][ T5028] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1113.521242][T13521] chnl_net:caif_netlink_parms(): no params data found [ 1113.592251][T12301] Bluetooth: hci3: command 0x041b tx timeout [ 1113.992542][ T4330] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1114.492003][ T4330] (NULL device *): queue 0 connect admin queue failed (-111). [ 1114.582468][ T4330] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1114.590264][ T4330] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1114.699427][T13375] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1114.815443][T13375] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1114.844145][T13375] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1114.855952][T13567] xt_nfacct: accounting object `syz0' does not exist [ 1114.892236][T13375] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1114.937131][T13521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.974803][T13521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.018323][T13521] device bridge_slave_0 entered promiscuous mode [ 1115.089378][T13521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.120926][T13521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.142075][T13521] device bridge_slave_1 entered promiscuous mode [ 1115.295531][T13521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.345764][T13521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.407721][T13375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.672130][T12301] Bluetooth: hci3: command 0x040f tx timeout [ 1115.834561][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.533120][T13585] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1116.547148][T13585] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1116.562223][T13585] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1116.570362][T13585] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1116.580764][T13585] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1116.588934][T13585] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1116.597691][T13585] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1116.605819][T13585] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1116.614882][T13585] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1116.624356][T13585] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1116.632585][T13585] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1116.640920][T13585] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1116.650363][T13585] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1116.658766][T13585] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1116.682577][T13585] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1116.690758][T13585] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1116.792375][ T5026] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1116.915665][T13585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1117.310663][ T5026] (NULL device *): queue 0 connect admin queue failed (-111). [ 1117.332672][T13588] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2366'. [ 1117.356714][T13521] team0: Port device team_slave_0 added [ 1117.504431][T13521] team0: Port device team_slave_1 added [ 1117.512519][ T5026] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1117.520414][ T5026] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1117.572473][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1117.590743][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1117.645287][T13375] 8021q: adding VLAN 0 to HW filter on device team0 [ 1117.765142][T12301] Bluetooth: hci3: command 0x0419 tx timeout [ 1118.139110][T13600] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2367'. [ 1118.565916][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1118.626329][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1118.662566][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.669783][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1118.693200][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1118.707462][T13521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.715110][T13521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.754499][T13521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.774907][T13521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.801368][T13521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.837042][T13521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1118.871046][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1118.920081][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1118.949967][ T4963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.957222][ T4963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.034256][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1119.049704][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1119.060980][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1119.077027][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1119.118747][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1119.132949][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1119.145168][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1119.168849][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1119.178257][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1119.208762][T13375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1119.234540][T13375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1119.248585][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1119.260602][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1119.286605][T13521] device hsr_slave_0 entered promiscuous mode [ 1119.309918][T13521] device hsr_slave_1 entered promiscuous mode [ 1119.338721][T13521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1119.373860][T13521] Cannot create hsr debugfs directory [ 1119.595334][T13394] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1119.730927][T13394] (NULL device *): queue 0 connect admin queue failed (-111). [ 1119.986569][T13394] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1120.171922][T13394] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1121.442327][T13633] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1121.443450][T13633] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1121.443537][T13633] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1121.443610][T13633] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1121.443694][T13633] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1121.443775][T13633] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1121.443846][T13633] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1121.444777][T13633] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1121.761608][T13633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1121.783869][T13521] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1121.829232][T13521] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1121.958772][T13521] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1121.983464][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1121.990982][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1122.086659][T13521] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1122.099150][T13375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1122.233887][T13394] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1122.273099][T13394] (NULL device *): queue 0 connect admin queue failed (-111). [ 1122.280635][T13394] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1122.282192][ T1182] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1122.357528][T13394] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1122.398331][T13521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1122.423458][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2379'. [ 1122.487649][T13394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1122.500586][T13394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1122.525866][T13521] 8021q: adding VLAN 0 to HW filter on device team0 [ 1122.535172][ T1182] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1122.551430][ T1182] usb 9-1: config 0 has no interface number 0 [ 1122.576411][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1122.585168][ T1182] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.604220][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1122.612436][ T1182] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.612483][ T1182] usb 9-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1122.612508][ T1182] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.620511][ T1182] usb 9-1: config 0 descriptor?? [ 1122.718197][T12499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.725426][T12499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1122.755397][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1122.804303][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1122.832699][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1122.842781][ T5026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.849921][ T5026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1122.909308][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1122.935124][T13394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1123.035352][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1123.063087][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1123.078734][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1123.108358][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1123.118571][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1123.119590][ T1182] prodikeys 0003:041E:2801.0005: item fetching failed at offset 5/7 [ 1123.131960][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1123.162453][ T1182] prodikeys 0003:041E:2801.0005: hid parse failed [ 1123.189713][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1123.193019][ T1182] prodikeys: probe of 0003:041E:2801.0005 failed with error -22 [ 1123.222036][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1123.246530][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1123.269161][T13521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1123.280938][T13667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2382'. [ 1123.356630][ T1182] usb 9-1: USB disconnect, device number 2 [ 1123.655910][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1123.679603][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1123.728678][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1123.760126][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1123.792491][T13375] device veth0_vlan entered promiscuous mode [ 1123.813186][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1123.827031][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1123.870528][T13375] device veth1_vlan entered promiscuous mode [ 1124.002442][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1124.032372][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1124.062272][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1124.100654][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1124.260972][T13375] device veth0_macvtap entered promiscuous mode [ 1124.285047][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1124.387772][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1124.390868][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1124.428256][T13375] device veth1_macvtap entered promiscuous mode [ 1124.460136][ T5030] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1124.626047][ T5030] (NULL device *): queue 0 connect admin queue failed (-111). [ 1124.686926][T13694] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1124.695388][T13694] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1124.740369][T13694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1124.793223][T13394] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1124.832783][ T14] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1124.870242][T13521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1124.871617][ T5030] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1124.895717][T13375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.906510][ T5030] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1124.933408][T13375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.975500][T13375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1125.022104][ T14] usb 7-1: Using ep0 maxpacket: 8 [ 1125.044940][ T14] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1125.062905][T13375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.079909][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.081503][T13375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1125.106371][T13375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.119275][ T14] usb 7-1: Product: syz [ 1125.133488][T13375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1125.146598][ T14] usb 7-1: Manufacturer: syz [ 1125.151471][ T14] usb 7-1: SerialNumber: syz [ 1125.153526][T13394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1125.167127][T13394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1125.170826][ T14] usb 7-1: config 0 descriptor?? [ 1125.186263][T13375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.204835][T13375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.231974][T13375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.252242][T13375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.272179][T13375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.287777][T13375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.300221][T13375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1125.311283][T13375] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.320138][T13375] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.329533][T13375] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.338975][T13375] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.363163][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1125.393513][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1125.407872][ T14] dvb_usb_rtl28xxu 7-1:0.0: chip type detection failed -71 [ 1125.422462][ T14] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 1125.448990][ T14] usb 7-1: USB disconnect, device number 14 [ 1125.611322][T12499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.628821][T12499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.658677][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1125.720178][ T5026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.748349][ T5026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.766770][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1126.101768][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1126.156905][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1126.196389][T13521] device veth0_vlan entered promiscuous mode [ 1126.223694][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1126.257771][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1126.311261][T13521] device veth1_vlan entered promiscuous mode [ 1126.335711][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2390'. [ 1126.371357][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1126.386078][ T1159] block nbd6: Attempted send on invalid socket [ 1126.392801][ T1159] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1126.403343][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1126.412157][T13728] befs: (nbd6): unable to read superblock [ 1126.549320][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1126.602808][T13728] can0: slcan on ttyS3. [ 1126.705031][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1126.717852][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1126.726987][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1126.740911][T13521] device veth0_macvtap entered promiscuous mode [ 1126.781794][T13521] device veth1_macvtap entered promiscuous mode [ 1126.814054][T13521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.875356][T13521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.937282][T13521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.949122][T13521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.969341][T13521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.989696][T13521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.999936][T13521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1127.011764][T13521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.025181][T13521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1127.032886][ T5030] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1127.052560][T13521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1127.063592][T13521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.074424][T13521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1127.085305][T13521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.111771][ T5030] (NULL device *): queue 0 connect admin queue failed (-111). [ 1127.137452][T13521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1127.147987][ T5030] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1127.158899][ T5030] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1127.252841][T13521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.278730][T13521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1127.303054][T13521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.341057][T13521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1127.359714][T13521] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.386114][T13521] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.401550][T13521] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.415433][T13521] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.426830][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1127.462458][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1127.481339][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1127.505367][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1127.522249][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1127.589820][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1127.712394][T13726] can0 (unregistered): slcan off ttyS3. [ 1128.362379][T13748] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1128.417149][T13748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1129.229418][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.255496][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.315660][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1129.592792][T13394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.608383][T13394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.718686][T13190] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1129.960606][ T5030] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1130.068357][ T5030] (NULL device *): queue 0 connect admin queue failed (-111). [ 1130.106463][ T5030] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1130.152309][ T5030] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1130.337372][T13777] netlink: 'syz.9.2348': attribute type 3 has an invalid length. [ 1130.345453][T13777] netlink: 'syz.9.2348': attribute type 3 has an invalid length. [ 1130.852207][ T4425] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1132.124563][ T4425] usb 7-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=8b.8e [ 1132.163313][ T4425] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.233449][T13394] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1132.299783][ T4425] usb 7-1: Product: syz [ 1132.339285][ T4425] usb 7-1: Manufacturer: syz [ 1132.340491][T13394] (NULL device *): queue 0 connect admin queue failed (-111). [ 1132.371286][ T4425] usb 7-1: SerialNumber: syz [ 1132.387804][T13394] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1132.418681][T13394] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1132.552549][ T4317] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1132.744178][ T4317] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1132.765312][ T4317] usb 9-1: not running at top speed; connect to a high speed hub [ 1132.793526][ T4317] usb 9-1: config 6 has an invalid descriptor of length 108, skipping remainder of the config [ 1132.822544][ T4317] usb 9-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 1132.858645][ T4317] usb 9-1: string descriptor 0 read error: -22 [ 1132.874188][ T4317] usb 9-1: New USB device found, idVendor=0f11, idProduct=10a0, bcdDevice=d2.eb [ 1132.895411][ T4317] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.972173][T13812] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2414'. [ 1133.154811][ T9554] usb 9-1: USB disconnect, device number 3 [ 1133.283348][ T4425] gspca_main: touptek-2.14.0 probing 0547:6801 [ 1133.330461][ T4425] usb 7-1: USB disconnect, device number 15 [ 1133.844656][T13828] netlink: 'syz.7.2417': attribute type 3 has an invalid length. [ 1133.852883][T13828] netlink: 'syz.7.2417': attribute type 3 has an invalid length. [ 1135.316577][ T4330] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1135.434738][ T4330] (NULL device *): queue 0 connect admin queue failed (-111). [ 1135.443133][ T4330] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1135.451050][ T4330] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1135.511603][T13846] can0: slcan on ttyS3. [ 1136.852372][T13836] can0 (unregistered): slcan off ttyS3. [ 1138.142123][T13868] sctp: failed to load transform for md5: -2 [ 1138.265641][T12499] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1138.532077][T12499] (NULL device *): queue 0 connect admin queue failed (-111). [ 1138.539625][T12499] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1138.594213][T12499] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1138.852785][T13884] netlink: 'syz.6.2432': attribute type 3 has an invalid length. [ 1138.860681][T13884] netlink: 'syz.6.2432': attribute type 3 has an invalid length. [ 1140.637299][ T5026] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1140.679396][T13895] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2434'. [ 1140.731664][ T5026] (NULL device *): queue 0 connect admin queue failed (-111). [ 1140.762114][ T5026] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1140.816127][ T5026] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1142.468677][T13911] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2426'. [ 1142.707346][ T27] audit: type=1800 audit(1787744554.428:151): pid=13916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2438" name="ifname" dev="configfs" ino=98064 res=0 errno=0 [ 1142.952129][ T4963] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1143.142276][ T4963] (NULL device *): queue 0 connect admin queue failed (-111). [ 1143.150425][ T4963] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1143.159360][ T4963] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1143.592529][ T27] audit: type=1800 audit(1787744555.318:152): pid=13921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2437" name="idProduct" dev="configfs" ino=98105 res=0 errno=0 [ 1144.812116][T13943] sctp: failed to load transform for md5: -2 [ 1145.202497][T13190] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1145.624188][T13190] (NULL device *): queue 0 connect admin queue failed (-111). [ 1145.941104][T13190] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1146.769761][T13190] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1146.787723][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2445'. [ 1147.382348][T13961] 0x000000000006-0x000000020000 : "" [ 1147.552158][T13961] ftl_cs: FTL header corrupt! [ 1148.188659][T13969] netlink: 112 bytes leftover after parsing attributes in process `syz.9.2449'. [ 1149.538715][T12301] Bluetooth: hci0: command 0x0406 tx timeout [ 1149.570857][T13974] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1149.580517][T13974] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1149.588118][T13974] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1149.595560][T13974] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1149.603194][T13974] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1149.610686][T13974] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1149.618344][T13974] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1149.627672][T13974] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1149.654302][ T5026] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1149.669296][ T5026] (NULL device *): queue 0 connect admin queue failed (-111). [ 1149.690598][ T5026] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1149.725985][T13974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1149.812806][ T5026] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1151.668310][ T27] audit: type=1800 audit(1787744563.388:153): pid=13994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2455" name="idProduct" dev="configfs" ino=98213 res=0 errno=0 [ 1151.832975][T12499] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1151.881308][T12499] (NULL device *): queue 0 connect admin queue failed (-111). [ 1151.952593][T12499] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1151.961629][T12499] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1152.015235][T13190] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.366779][T13190] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.765294][T14022] kAFS: unparsable volume name [ 1153.082074][T13027] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 1153.141458][T13190] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.303867][T13027] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1153.333319][T13027] usb 7-1: not running at top speed; connect to a high speed hub [ 1153.362023][T13027] usb 7-1: config 6 has an invalid descriptor of length 108, skipping remainder of the config [ 1153.380439][T13027] usb 7-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 1153.447537][T13027] usb 7-1: string descriptor 0 read error: -22 [ 1153.468632][T13027] usb 7-1: New USB device found, idVendor=0f11, idProduct=10a0, bcdDevice=d2.eb [ 1153.500880][T13027] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.072150][ T5028] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1154.590932][ T5028] (NULL device *): queue 0 connect admin queue failed (-111). [ 1154.619022][ T5028] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1154.661955][ T5028] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1154.731129][T13190] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.858150][T14032] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1154.865772][T14032] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1154.877267][T14032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1156.717728][ T5030] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1156.789774][ T5030] (NULL device *): queue 0 connect admin queue failed (-111). [ 1156.839233][T14052] device dummy0 entered promiscuous mode [ 1156.873465][ T5030] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1156.895038][ T5030] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1159.278198][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2461'. [ 1159.300316][T12499] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1159.381250][T12499] (NULL device *): queue 0 connect admin queue failed (-111). [ 1159.518249][T12499] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1159.686112][T12499] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1160.711941][T11568] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1161.772093][T14091] sctp: failed to load transform for md5: -2 [ 1161.915522][ T5030] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1162.120487][ T5030] (NULL device *): queue 0 connect admin queue failed (-111). [ 1162.160463][ T5030] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1162.871711][T11568] usb 8-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=8b.8e [ 1162.949177][T11568] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.056151][T11568] usb 8-1: Product: syz [ 1163.060535][T11568] usb 8-1: Manufacturer: syz [ 1163.065255][T11568] usb 8-1: SerialNumber: syz [ 1163.089478][T14105] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1163.119577][T14105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1163.307113][ T5030] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1163.521263][T11568] gspca_main: touptek-2.14.0 probing 0547:6801 [ 1163.562620][T11568] usb 8-1: USB disconnect, device number 2 [ 1164.083838][ T53] block nbd8: Attempted send on invalid socket [ 1164.090464][ T53] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1164.100886][T14120] befs: (nbd8): unable to read superblock [ 1164.440924][T14118] can0: slcan on ttyS3. [ 1164.474411][T12301] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1164.588444][T12301] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1164.599568][T12301] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1164.608535][T12301] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1164.619318][T12301] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1164.628906][T12301] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1164.681940][T14115] can0 (unregistered): slcan off ttyS3. [ 1164.980819][T14131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2480'. [ 1165.446042][ T5030] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1165.506739][ T5030] (NULL device *): queue 0 connect admin queue failed (-111). [ 1165.516202][ T5030] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1165.524989][ T5030] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1166.735118][T12301] Bluetooth: hci5: command 0x0409 tx timeout [ 1166.794509][ T4425] usb 7-1: USB disconnect, device number 16 [ 1167.490674][T13190] device hsr_slave_0 left promiscuous mode [ 1167.544336][T13190] device hsr_slave_1 left promiscuous mode [ 1167.562305][T13190] device bridge_slave_1 left promiscuous mode [ 1167.568593][T13190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.592611][ T31] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1167.660814][ T31] (NULL device *): queue 0 connect admin queue failed (-111). [ 1167.770810][T13190] device bridge_slave_0 left promiscuous mode [ 1167.780011][T13190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.813343][ T31] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1168.456091][ T31] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1168.641967][T13190] device veth1_macvtap left promiscuous mode [ 1168.648290][T13190] device veth0_macvtap left promiscuous mode [ 1168.660419][T13190] device veth1_vlan left promiscuous mode [ 1168.668873][T13190] device veth0_vlan left promiscuous mode [ 1168.792166][ T9091] Bluetooth: hci5: command 0x041b tx timeout [ 1169.442663][ T53] block nbd1: Attempted send on invalid socket [ 1169.448963][ T53] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1169.460997][T14189] befs: (nbd1): unable to read superblock [ 1169.603156][T13190] bond4 (unregistering): (slave veth9): Releasing active interface [ 1169.825757][T13190] bond4 (unregistering): Released all slaves [ 1170.248487][T14189] slcan: can't register candev [ 1170.258258][T14189] Falling back ldisc for ttyS3. [ 1170.482251][ T31] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1170.507289][T13190] bond3 (unregistering): (slave veth7): Releasing active interface [ 1170.551391][ T31] (NULL device *): queue 0 connect admin queue failed (-111). [ 1170.615135][ T31] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1170.635990][T13190] bond3 (unregistering): Released all slaves [ 1170.669869][ T31] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1170.872574][T12301] Bluetooth: hci5: command 0x040f tx timeout [ 1171.048038][T13190] bond2 (unregistering): (slave veth5): Releasing active interface [ 1171.124469][T13190] bond2 (unregistering): Released all slaves [ 1171.187609][T13190] bond1 (unregistering): (slave veth3): Releasing active interface [ 1171.234828][T13190] bond1 (unregistering): Released all slaves [ 1172.812559][ T8311] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1172.825199][ T8311] (NULL device *): queue 0 connect admin queue failed (-111). [ 1172.861400][ T8311] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1172.870410][ T8311] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1172.957172][T12301] Bluetooth: hci5: command 0x0419 tx timeout [ 1173.164042][T13190] team0 (unregistering): Port device team_slave_1 removed [ 1173.277646][T13190] team0 (unregistering): Port device team_slave_0 removed [ 1173.369837][T13190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.467897][T13190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.478973][ T9554] infiniband syz5: ib_query_port failed (-19) [ 1174.369732][T13190] bond0 (unregistering): Released all slaves [ 1174.952255][ T8311] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1175.032992][ T8311] (NULL device *): queue 0 connect admin queue failed (-111). [ 1175.076389][ T8311] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1175.143035][ T4425] bond0 speed is unknown, defaulting to 1000 [ 1175.152646][T14196] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2497'. [ 1175.176271][ T8311] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1176.967014][T14215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2502'. [ 1177.263896][ T4320] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1177.274434][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.395906][T13394] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1177.445082][T13394] (NULL device *): queue 0 connect admin queue failed (-111). [ 1177.462035][ T4320] usb 10-1: Using ep0 maxpacket: 8 [ 1177.481131][T14126] chnl_net:caif_netlink_parms(): no params data found [ 1177.481512][ T4320] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1177.528715][T13394] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1177.563701][ T4320] usb 10-1: config 4 interface 0 has no altsetting 0 [ 1177.567210][T13394] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1178.800842][ T4320] usb 10-1: string descriptor 0 read error: -22 [ 1178.808633][ T4320] usb 10-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1178.980769][ T4320] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1179.076168][ T4320] usb 10-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1179.108509][ T4320] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1179.111776][T14126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.135722][ T4320] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1179.138180][T14126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.152358][ T4320] usb 10-1: media controller created [ 1179.166901][T14126] device bridge_slave_0 entered promiscuous mode [ 1179.190099][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1179.232132][T14126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.264139][T14126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.278733][T14126] device bridge_slave_1 entered promiscuous mode [ 1179.332547][T14255] 9pnet_fd: Insufficient options for proto=fd [ 1180.128652][T14126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1180.146515][T14126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.322236][ T4320] zl10353_read_register: readreg error (reg=127, ret==0) [ 1180.359808][T14126] team0: Port device team_slave_0 added [ 1180.377898][T14126] team0: Port device team_slave_1 added [ 1180.415363][ T27] audit: type=1800 audit(1787744592.138:154): pid=14259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2511" name="idVendor" dev="configfs" ino=99578 res=0 errno=0 [ 1180.426210][T14126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.456564][T14126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1180.509764][ T27] audit: type=1800 audit(1787744592.168:155): pid=14259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2511" name="idProduct" dev="configfs" ino=99579 res=0 errno=0 [ 1180.542095][T14126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.567367][ T27] audit: type=1800 audit(1787744592.168:156): pid=14259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2511" name="max_speed" dev="configfs" ino=99580 res=0 errno=0 [ 1180.591204][ T27] audit: type=1800 audit(1787744592.178:157): pid=14259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2511" name="UDC" dev="configfs" ino=99581 res=0 errno=0 [ 1180.619361][ T4320] usb 10-1: USB disconnect, device number 2 [ 1180.627723][T14126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.640977][T14126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1180.717844][T14126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.915568][T14126] device hsr_slave_0 entered promiscuous mode [ 1180.933054][T14126] device hsr_slave_1 entered promiscuous mode [ 1180.952281][T12499] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1180.966092][T14126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1180.974001][T12499] (NULL device *): queue 0 connect admin queue failed (-111). [ 1180.992060][T14126] Cannot create hsr debugfs directory [ 1181.018155][T12499] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1181.057898][T12499] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1183.514944][ T47] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1183.925081][T13190] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.060468][ T47] (NULL device *): queue 0 connect admin queue failed (-111). [ 1184.246633][ T47] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1184.430898][ T47] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1184.791692][T14288] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2515'. [ 1186.291571][T13190] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.478055][T13190] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.640663][T12499] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1186.659483][T14314] 9pnet_fd: Insufficient options for proto=fd [ 1186.815456][T12499] (NULL device *): queue 0 connect admin queue failed (-111). [ 1186.990697][T12499] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1187.129287][T12499] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1187.253152][T13190] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.658116][ T27] audit: type=1326 audit(1787744599.378:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14317 comm="syz.9.2523" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f404499e0d9 code=0x0 [ 1188.224403][T14316] binder: 14315:14316 ioctl 4018620d 0 returned -22 [ 1189.273016][T12499] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1189.313967][T12499] (NULL device *): queue 0 connect admin queue failed (-111). [ 1189.337010][T12499] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1189.372063][T12499] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1191.322966][ T27] audit: type=1800 audit(1787744603.048:159): pid=14353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2528" name="idVendor" dev="configfs" ino=100415 res=0 errno=0 [ 1191.483290][ T8460] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1191.550294][ T27] audit: type=1800 audit(1787744603.068:160): pid=14353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2528" name="idProduct" dev="configfs" ino=100416 res=0 errno=0 [ 1191.560458][ T8460] (NULL device *): queue 0 connect admin queue failed (-111). [ 1191.608571][ T8460] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1191.648942][ T8460] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1191.668881][ T27] audit: type=1800 audit(1787744603.078:161): pid=14353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2528" name="max_speed" dev="configfs" ino=100417 res=0 errno=0 [ 1191.720135][T14360] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1191.721966][ T27] audit: type=1800 audit(1787744603.168:162): pid=14353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2528" name="UDC" dev="configfs" ino=100418 res=0 errno=0 [ 1191.748990][T14360] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1191.761490][T14360] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1192.038402][T14360] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1192.055905][T14360] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1192.078531][T14360] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1192.097427][T14360] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1193.451948][T14377] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1194.006100][ T8311] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1194.060311][ T8311] (NULL device *): queue 0 connect admin queue failed (-111). [ 1194.098454][ T8311] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1194.213339][ T8311] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1194.447094][T14392] 9pnet_fd: Insufficient options for proto=fd [ 1195.319384][T14382] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2531'. [ 1195.845951][T14397] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 1196.232087][ T8460] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1196.268738][ T8460] (NULL device *): queue 0 connect admin queue failed (-111). [ 1196.324329][ T8460] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1196.371066][ T8460] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1197.569094][T14428] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2541'. [ 1197.630710][T14126] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1197.659003][T14126] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1197.674304][T14126] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1197.768040][T14126] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1197.828387][ T53] block nbd7: Attempted send on invalid socket [ 1197.844651][ T53] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1197.860280][T14434] befs: (nbd7): unable to read superblock [ 1198.154085][T14434] can0: slcan on ttyS3. [ 1198.180930][T14440] device dummy0 entered promiscuous mode [ 1199.198404][ T5026] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1199.249909][ T5026] (NULL device *): queue 0 connect admin queue failed (-111). [ 1199.291566][ T5026] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1199.304036][ T5026] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1201.196987][T14451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2545'. [ 1201.232658][T14433] can0 (unregistered): slcan off ttyS3. [ 1201.399235][T13190] device hsr_slave_0 left promiscuous mode [ 1201.423804][T13190] device hsr_slave_1 left promiscuous mode [ 1201.463008][T13190] device bridge_slave_1 left promiscuous mode [ 1201.489888][T13190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.557993][T13190] device bridge_slave_0 left promiscuous mode [ 1201.580547][T13190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.792148][ T5026] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1203.153996][ T5026] (NULL device *): queue 0 connect admin queue failed (-111). [ 1203.248288][ T5026] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1203.288447][T13190] device veth1_macvtap left promiscuous mode [ 1203.322327][T13190] device veth0_macvtap left promiscuous mode [ 1203.374492][ T5026] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1203.418893][T13190] device veth1_vlan left promiscuous mode [ 1203.507388][T13190] device veth0_vlan left promiscuous mode [ 1203.955142][T14474] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2552'. [ 1204.772157][T13190] team0 (unregistering): Port device team_slave_1 removed [ 1204.839286][T13190] team0 (unregistering): Port device team_slave_0 removed [ 1204.899295][T13190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1204.968535][T13190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1205.358288][T13190] bond0 (unregistering): Released all slaves [ 1205.469321][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2550'. [ 1205.495722][T14477] netlink: 'syz.8.2547': attribute type 3 has an invalid length. [ 1205.503651][T14477] netlink: 'syz.8.2547': attribute type 3 has an invalid length. [ 1205.521901][ T4963] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1205.545291][T14126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1205.631671][ T4963] (NULL device *): queue 0 connect admin queue failed (-111). [ 1205.634251][T14126] 8021q: adding VLAN 0 to HW filter on device team0 [ 1205.686521][ T4963] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1205.717551][ T4963] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1205.756823][T14455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1205.784882][T14455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1206.832591][T14485] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1207.192881][T14485] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1207.980189][ T5024] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1207.995004][ T5024] (NULL device *): queue 0 connect admin queue failed (-111). [ 1208.008808][T14485] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1208.052418][ T5024] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1208.060212][ T5024] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1208.068409][T14485] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1208.093331][T14485] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1208.129581][T14485] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1208.150749][T14485] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1208.191479][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1208.233248][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1208.258348][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.265571][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1209.154745][T14503] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1209.452122][T14503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1209.708958][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1209.829444][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1210.023501][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1210.099765][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.107001][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.132205][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1210.141218][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1210.152097][ T4963] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1210.200189][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1210.213188][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1210.233078][ T4963] (NULL device *): queue 0 connect admin queue failed (-111). [ 1210.241251][ T4963] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1210.253317][ T4963] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1210.278164][T14516] netlink: 'syz.8.2563': attribute type 3 has an invalid length. [ 1210.286241][T14516] netlink: 'syz.8.2563': attribute type 3 has an invalid length. [ 1210.296149][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1210.354955][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1210.374015][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1210.415371][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1210.425763][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1210.434921][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1210.444058][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1210.469625][T14126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1210.525659][T14522] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2564'. [ 1210.804916][T14530] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2565'. [ 1211.716528][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2560'. [ 1213.006733][ T5024] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1213.150358][ T5024] (NULL device *): queue 0 connect admin queue failed (-111). [ 1213.220736][ T5024] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1213.269558][ T5024] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1213.281221][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1213.341379][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1214.937325][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1214.946101][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1214.954241][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1214.963012][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1214.970870][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1215.000619][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1215.008935][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1215.017272][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1215.024867][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1215.032759][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1215.040273][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1215.047880][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1215.055535][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1215.063332][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1215.071385][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1215.079201][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1215.087109][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1215.101745][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1215.109635][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1215.121605][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1215.129308][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1215.137955][T14561] device dummy0 left promiscuous mode [ 1215.160784][T14561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1215.222346][ T9091] Bluetooth: hci4: command 0x0406 tx timeout [ 1215.267414][T14126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1215.299573][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1215.312742][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1215.353134][ T31] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1215.395570][ T31] (NULL device *): queue 0 connect admin queue failed (-111). [ 1215.412341][ T31] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1216.105123][ T31] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1216.241879][ T4353] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1216.452422][ T4353] usb 8-1: not running at top speed; connect to a high speed hub [ 1216.483376][ T4353] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.522190][ T4353] usb 8-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1216.531294][ T4353] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.582780][ T4353] usb 8-1: Found UVC 1.00 device (046d:0825) [ 1216.721936][ T4320] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1216.914373][ T4320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.945290][ T4320] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1216.978244][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.013566][ T4320] usb 2-1: config 0 descriptor?? [ 1218.597549][ T5024] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1218.602748][ T4317] usb 2-1: USB disconnect, device number 39 [ 1218.663073][ T5024] (NULL device *): queue 0 connect admin queue failed (-111). [ 1218.678619][ T5024] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1218.702953][ T4353] uvcvideo 8-1:1.1: Failed to set UVC probe control : -71 (exp. 26). [ 1218.882769][T14599] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2578'. [ 1219.559149][ T4353] uvcvideo 8-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 1219.568384][ T4353] uvcvideo 8-1:1.1: Failed to initialize the device (-5). [ 1219.582292][ T4353] usb 8-1: USB disconnect, device number 3 [ 1219.605671][ T5024] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1221.671967][T13190] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1221.747349][T13190] (NULL device *): queue 0 connect admin queue failed (-111). [ 1221.776981][T13190] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1221.879450][T13190] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1223.277241][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1223.281181][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1223.281349][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1223.281482][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1223.281589][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1223.281701][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1223.281944][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1223.283623][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1223.394342][T14622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1224.005385][ T5030] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1224.027239][ T5030] (NULL device *): queue 0 connect admin queue failed (-111). [ 1224.035307][ T5030] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1224.044103][ T5030] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1224.233829][ T9091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1224.262438][ T9091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1224.272852][ T9091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1224.291176][ T9091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1224.331135][ T9091] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1224.338705][ T9091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1226.950840][T12301] Bluetooth: hci2: command 0x0409 tx timeout [ 1226.969133][ T4971] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1227.061425][ T4971] (NULL device *): queue 0 connect admin queue failed (-111). [ 1227.171927][ T4971] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1227.179907][ T4971] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1228.322701][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2591'. [ 1229.042130][ T9091] Bluetooth: hci2: command 0x041b tx timeout [ 1229.928844][ T5018] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1229.937031][T14637] chnl_net:caif_netlink_parms(): no params data found [ 1229.957881][ T5018] (NULL device *): queue 0 connect admin queue failed (-111). [ 1229.979747][ T5018] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1230.772178][ T5018] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1231.112096][ T9091] Bluetooth: hci2: command 0x040f tx timeout [ 1232.705182][T14637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.746089][T14637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.789497][T14637] device bridge_slave_0 entered promiscuous mode [ 1232.796176][ T8460] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1232.833307][T14637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.840533][ T8460] (NULL device *): queue 0 connect admin queue failed (-111). [ 1232.868759][ T8460] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1232.890107][T14637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.943182][T14637] device bridge_slave_1 entered promiscuous mode [ 1232.958691][ T8460] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1233.202107][ T9091] Bluetooth: hci2: command 0x0419 tx timeout [ 1234.715866][ T1159] block nbd1: Attempted send on invalid socket [ 1234.722310][ T1159] I/O error, dev nbd1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1234.732286][T14733] qnx4: unable to read the superblock [ 1235.103357][ T4971] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1235.681909][T12301] Bluetooth: hci3: command 0x0406 tx timeout [ 1235.933624][ T4971] (NULL device *): queue 0 connect admin queue failed (-111). [ 1235.941166][ T4971] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1236.001129][ T4971] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1236.778050][T14637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.024456][T14637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.851668][T14637] team0: Port device team_slave_0 added [ 1237.859947][T14637] team0: Port device team_slave_1 added [ 1237.996254][T14637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1238.135851][T14637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1238.248445][T14763] tmpfs: Unknown parameter 'quota' [ 1238.714200][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.730860][T14637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1238.792417][ T4971] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1238.933438][ T4971] (NULL device *): queue 0 connect admin queue failed (-111). [ 1239.048843][ T4971] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1239.056741][ T4971] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1239.132636][ T1159] block nbd8: Attempted send on invalid socket [ 1239.138996][ T1159] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1239.153351][T14765] befs: (nbd8): unable to read superblock [ 1239.163012][T14637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.190447][T14637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1239.366666][T14637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.439060][ T31] device hsr_slave_0 left promiscuous mode [ 1239.496446][ T31] device hsr_slave_1 left promiscuous mode [ 1239.522213][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1239.533503][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1239.592924][ T31] device bridge_slave_1 left promiscuous mode [ 1239.605671][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.682530][ T31] device bridge_slave_0 left promiscuous mode [ 1239.689997][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.111965][ T5018] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1241.279199][ T5018] (NULL device *): queue 0 connect admin queue failed (-111). [ 1241.451407][ T5018] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1241.545107][ T5018] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1242.118296][ T31] team0 (unregistering): Port device team_slave_1 removed [ 1242.182764][ T31] team0 (unregistering): Port device team_slave_0 removed [ 1242.259792][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1242.398196][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1243.087148][ T31] bond0 (unregistering): Released all slaves [ 1243.252242][T14777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2605'. [ 1243.672026][ T5024] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1243.684973][ T27] audit: type=1800 audit(1787744655.398:163): pid=14808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2619" name="idProduct" dev="configfs" ino=101151 res=0 errno=0 [ 1244.013837][T14637] device hsr_slave_0 entered promiscuous mode [ 1244.027540][ T5024] (NULL device *): queue 0 connect admin queue failed (-111). [ 1244.051294][ T5024] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1244.060543][ T5024] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1244.069039][T14637] device hsr_slave_1 entered promiscuous mode [ 1244.918343][T14833] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1246.151925][ T8311] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1246.226859][ T8311] (NULL device *): queue 0 connect admin queue failed (-111). [ 1246.336180][ T8311] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1246.378527][ T8311] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1247.208904][T14866] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2630'. [ 1248.058015][T14637] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1248.120058][T14637] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1248.169423][T14637] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1248.208240][T14637] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1248.410640][T14637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1248.439665][T14637] 8021q: adding VLAN 0 to HW filter on device team0 [ 1248.468721][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1248.480610][ T8311] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1248.495665][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1248.511580][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1248.526929][ T8311] (NULL device *): queue 0 connect admin queue failed (-111). [ 1248.539966][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1248.559718][ T8311] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1248.589165][ T4963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.595876][ T8311] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1248.596316][ T4963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1248.620613][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1248.673968][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1248.683731][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1248.693783][ T4963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.700965][ T4963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.051875][T14890] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1249.755345][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1249.767964][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1249.802847][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1249.849721][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1249.871740][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1249.882953][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1249.898517][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1249.942828][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1249.951285][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1250.059172][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1250.078278][ T53] block nbd1: Attempted send on invalid socket [ 1250.084931][ T53] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1250.103607][T14897] befs: (nbd1): unable to read superblock [ 1250.916909][T14455] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1250.931972][T14455] (NULL device *): queue 0 connect admin queue failed (-111). [ 1250.939596][T14455] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1250.967748][T14455] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1250.981072][T14637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1251.164168][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1252.002064][ T4317] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1252.070208][T14938] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2647'. [ 1252.106491][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1252.117191][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1252.164425][T14637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1252.188254][ T4317] usb 2-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=8b.8e [ 1252.210016][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.343488][ T4317] usb 2-1: Product: syz [ 1252.352547][ T4317] usb 2-1: Manufacturer: syz [ 1252.382473][ T4317] usb 2-1: SerialNumber: syz [ 1253.201651][T14455] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1253.258492][T14455] (NULL device *): queue 0 connect admin queue failed (-111). [ 1253.291908][T14455] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1253.345947][T14455] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1253.536538][T14962] device dummy0 entered promiscuous mode [ 1255.440624][ T8460] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1255.681950][ T8460] (NULL device *): queue 0 connect admin queue failed (-111). [ 1255.756411][ T8460] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1255.768937][ T4317] gspca_main: touptek-2.14.0 probing 0547:6801 [ 1255.862041][ T4317] usb 2-1: USB disconnect, device number 40 [ 1255.868868][ T8460] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1256.410296][ T27] audit: type=1800 audit(1787744668.128:164): pid=14990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2658" name="idVendor" dev="configfs" ino=102474 res=0 errno=0 [ 1257.185102][ T27] audit: type=1800 audit(1787744668.158:165): pid=14990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2658" name="idProduct" dev="configfs" ino=102475 res=0 errno=0 [ 1257.322221][T14997] IPVS: set_ctl: invalid protocol: 60 172.20.20.27:20002 [ 1257.371424][ T27] audit: type=1800 audit(1787744668.158:166): pid=14990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2658" name="max_speed" dev="configfs" ino=102476 res=0 errno=0 [ 1257.927847][ T27] audit: type=1800 audit(1787744668.158:167): pid=14990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2658" name="UDC" dev="configfs" ino=102477 res=0 errno=0 [ 1257.992079][T14455] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1258.221929][T14455] (NULL device *): queue 0 connect admin queue failed (-111). [ 1258.261496][T14637] device veth0_vlan entered promiscuous mode [ 1258.329199][T14455] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1258.363660][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1258.397503][T14455] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1258.412986][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1258.424736][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1258.474003][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1258.510668][T14637] device veth1_vlan entered promiscuous mode [ 1258.542022][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1258.560004][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1258.637664][T14455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1258.663259][T14455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1258.717530][T14637] device veth0_macvtap entered promiscuous mode [ 1258.728869][T14637] device veth1_macvtap entered promiscuous mode [ 1258.761961][ T4353] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1258.792371][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1258.862024][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.891981][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1258.922783][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.977922][ T4353] usb 9-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=8b.8e [ 1258.997532][ T4353] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.063892][ T4353] usb 9-1: Product: syz [ 1259.091058][ T4353] usb 9-1: Manufacturer: syz [ 1259.094507][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1259.107070][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.117202][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1259.128548][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.131869][ T4353] usb 9-1: SerialNumber: syz [ 1259.138581][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1259.707482][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.720737][T14637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1259.753415][T14455] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1259.766708][T14455] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1259.775735][T14455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1259.785659][T14455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1259.829282][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1259.912321][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.931380][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1259.965939][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.988684][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1260.021346][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.055609][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1260.085068][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.104769][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1260.120599][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.148263][ T4353] gspca_main: touptek-2.14.0 probing 0547:6801 [ 1260.167369][T14637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1260.177023][ T4353] usb 9-1: USB disconnect, device number 4 [ 1260.198677][ T8460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1260.252912][ T8460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1260.276192][T14637] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.295889][T14637] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.341884][T14637] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.359985][T14637] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.516747][ T8460] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1261.295222][ T8460] (NULL device *): queue 0 connect admin queue failed (-111). [ 1261.305263][ T8460] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1261.314131][ T8460] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1261.384885][T15047] netlink: 'syz.9.2672': attribute type 3 has an invalid length. [ 1261.392770][T15047] netlink: 'syz.9.2672': attribute type 3 has an invalid length. [ 1261.611948][ T8460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.636188][ T8460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.705481][ T8460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1261.734685][ T8460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.981643][ T8460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.041071][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1262.745043][T15074] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 1264.152141][T13190] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1264.242374][T13190] (NULL device *): queue 0 connect admin queue failed (-111). [ 1264.290068][T13190] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1264.350718][T13190] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1264.441480][T15093] netlink: 'syz.9.2686': attribute type 3 has an invalid length. [ 1264.449395][T15093] netlink: 'syz.9.2686': attribute type 3 has an invalid length. [ 1265.016566][ T9091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1265.028204][ T9091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1265.057852][ T9091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1265.080766][ T9091] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1265.094233][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1265.112978][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1265.390243][ T5028] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.307755][T15127] input: syz1 as /devices/virtual/input/input30 [ 1266.413481][T15129] MTD: Couldn't look up '': -22 [ 1267.042177][ T5028] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.272853][T14455] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1267.274011][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 1267.342069][T14455] (NULL device *): queue 0 connect admin queue failed (-111). [ 1267.351823][T14455] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1267.362064][T14455] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1267.659608][ T5028] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.163574][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 1270.181102][T14472] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1270.215507][T15141] netlink: 'syz.9.2697': attribute type 3 has an invalid length. [ 1270.223992][T15141] netlink: 'syz.9.2697': attribute type 3 has an invalid length. [ 1270.258364][T14472] (NULL device *): queue 0 connect admin queue failed (-111). [ 1270.359424][T14472] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1270.374664][ T53] block nbd4: Attempted send on invalid socket [ 1270.381153][ T53] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1270.396193][T15149] befs: (nbd4): unable to read superblock [ 1270.425591][T14472] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1270.644183][ T5028] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.716262][T15149] can0: slcan on ttyS3. [ 1270.792390][T15148] can0 (unregistered): slcan off ttyS3. [ 1271.064168][T15102] chnl_net:caif_netlink_parms(): no params data found [ 1271.206579][T15173] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2704'. [ 1272.232106][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 1273.131343][ T8460] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1273.144043][ T8460] (NULL device *): queue 0 connect admin queue failed (-111). [ 1273.151707][ T8460] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1273.160160][ T8460] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1273.421209][T15102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.512103][T15102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.523324][T15102] device bridge_slave_0 entered promiscuous mode [ 1273.830920][T15102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.910069][T15205] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1273.969428][T15102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.255731][T15102] device bridge_slave_1 entered promiscuous mode [ 1274.314416][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 1274.637303][ T27] audit: type=1800 audit(1787744686.358:168): pid=15210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2712" name="zone_nr_conv" dev="configfs" ino=102880 res=0 errno=0 [ 1274.950484][T15102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1275.192911][ T47] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1275.329785][ T47] (NULL device *): queue 0 connect admin queue failed (-111). [ 1275.459919][ T47] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1275.487551][T15102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1275.535596][ T47] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1276.057772][T15102] team0: Port device team_slave_0 added [ 1277.593311][ T31] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1278.591684][T15102] team0: Port device team_slave_1 added [ 1278.595111][ T31] (NULL device *): queue 0 connect admin queue failed (-111). [ 1278.605302][ T31] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1278.613674][ T31] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1278.856005][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2715'. [ 1280.610670][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2717'. [ 1280.632175][ T4963] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1280.652541][ T4963] (NULL device *): queue 0 connect admin queue failed (-111). [ 1280.661443][T15237] netlink: 'syz.9.2710': attribute type 3 has an invalid length. [ 1280.669453][T15237] netlink: 'syz.9.2710': attribute type 3 has an invalid length. [ 1280.732005][ T4963] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1280.747496][T15102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1280.800936][ T4963] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1280.808282][T15102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1280.835522][ T4317] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1280.871585][T15102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1282.017647][T15102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1282.024791][T15102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1282.051899][T15102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1282.586865][T15102] device hsr_slave_0 entered promiscuous mode [ 1282.641273][T15102] device hsr_slave_1 entered promiscuous mode [ 1282.669449][T15102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1282.700582][T15102] Cannot create hsr debugfs directory [ 1282.882080][ T4961] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1282.922106][ T4961] (NULL device *): queue 0 connect admin queue failed (-111). [ 1283.064658][T15261] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1283.491825][ T4961] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1283.530321][ T4961] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1283.560305][T15257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1283.569094][T15257] device dummy0 left promiscuous mode [ 1284.181981][T15257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1284.362179][ T4317] usb 8-1: device not accepting address 4, error -71 [ 1284.617908][ T4320] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1284.752380][ T4317] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1284.871956][ T4320] usb 9-1: Using ep0 maxpacket: 32 [ 1284.975676][ T4317] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1285.034861][ T4317] usb 8-1: not running at top speed; connect to a high speed hub [ 1285.068739][ T4317] usb 8-1: config 6 has an invalid descriptor of length 108, skipping remainder of the config [ 1285.096024][ T4317] usb 8-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 1285.134077][ T4317] usb 8-1: string descriptor 0 read error: -22 [ 1285.140981][ T4317] usb 8-1: New USB device found, idVendor=0f11, idProduct=10a0, bcdDevice=d2.eb [ 1285.151412][ T4317] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.672054][ T4330] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1285.692455][ T4330] (NULL device *): queue 0 connect admin queue failed (-111). [ 1285.718725][ T4330] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1285.734997][ T4330] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1285.748366][ T5028] device hsr_slave_0 left promiscuous mode [ 1285.769372][ T5028] device hsr_slave_1 left promiscuous mode [ 1285.795900][ T5028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1285.815791][ T5028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.826600][ T5028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1285.835495][ T5028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.835730][ T4320] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1285.860489][ T5028] device bridge_slave_1 left promiscuous mode [ 1285.867419][ T5028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.881919][ T4320] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1285.891088][ T4320] usb 9-1: can't read configurations, error -71 [ 1285.906236][ T5028] device bridge_slave_0 left promiscuous mode [ 1285.919689][ T5028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.026997][ T5028] device veth1_macvtap left promiscuous mode [ 1286.048885][ T5028] device veth0_macvtap left promiscuous mode [ 1286.058564][ T5028] device veth1_vlan left promiscuous mode [ 1286.142942][ T5028] device veth0_vlan left promiscuous mode [ 1286.856453][ T14] usb 8-1: USB disconnect, device number 5 [ 1287.752107][ T47] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1287.902731][ T47] (NULL device *): queue 0 connect admin queue failed (-111). [ 1287.910440][ T47] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1287.931080][ T47] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1289.170505][ T27] audit: type=1800 audit(1787744700.888:169): pid=15315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2729" name="idProduct" dev="configfs" ino=103033 res=0 errno=0 [ 1289.601022][ T5028] bond6 (unregistering): (slave veth11): Releasing active interface [ 1289.634603][ T5028] bond6 (unregistering): Released all slaves [ 1289.723476][ T5028] bond5 (unregistering): (slave veth9): Releasing active interface [ 1289.750022][ T5028] bond5 (unregistering): Released all slaves [ 1289.837707][ T5028] bond4 (unregistering): (slave veth7): Releasing active interface [ 1289.867920][ T5028] bond4 (unregistering): Released all slaves [ 1289.940829][ T5028] bond3 (unregistering): (slave veth5): Releasing active interface [ 1289.959615][ T5028] bond3 (unregistering): Released all slaves [ 1290.005391][ T8311] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1290.038931][ T8311] (NULL device *): queue 0 connect admin queue failed (-111). [ 1290.066615][ T5028] bond2 (unregistering): (slave veth3): Releasing active interface [ 1290.076898][ T8311] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1290.099440][ T8311] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1290.101431][ T53] block nbd8: Attempted send on invalid socket [ 1290.113295][ T53] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1290.123426][T15331] befs: (nbd8): unable to read superblock [ 1290.130706][ T5028] bond2 (unregistering): Released all slaves [ 1290.145555][ T5028] bond1 (unregistering): Released all slaves [ 1290.930659][T15331] slcan: can't register candev [ 1290.935828][T15331] Falling back ldisc for ttyS3. [ 1291.215594][ T5028] team0 (unregistering): Port device team_slave_1 removed [ 1291.272499][ T5028] team0 (unregistering): Port device team_slave_0 removed [ 1291.368763][ T5028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1291.479517][ T5028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1291.771881][T15347] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1292.241147][ T5028] bond0 (unregistering): Released all slaves [ 1292.350896][ T31] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1292.364169][ T31] (NULL device *): queue 0 connect admin queue failed (-111). [ 1292.371678][ T31] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1292.380505][ T31] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1294.287395][T15313] netlink: 'syz.4.2730': attribute type 3 has an invalid length. [ 1294.297747][T15313] netlink: 'syz.4.2730': attribute type 3 has an invalid length. [ 1294.310205][T15312] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2728'. [ 1294.395428][T10810] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1294.399542][T15352] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1294.450890][T10810] (NULL device *): queue 0 connect admin queue failed (-111). [ 1294.471982][T15352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1294.593699][T10810] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1294.601492][T10810] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1295.254159][T15102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1295.442188][ T4322] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 1295.653446][T15102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1295.698506][T15102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1295.743282][T15102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1295.942691][T15102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.965442][ T4322] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1295.982547][ T4322] usb 5-1: not running at top speed; connect to a high speed hub [ 1296.001092][T15102] 8021q: adding VLAN 0 to HW filter on device team0 [ 1296.026753][ T4322] usb 5-1: config 6 has an invalid descriptor of length 108, skipping remainder of the config [ 1296.040612][ T4322] usb 5-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 1296.057174][ T4322] usb 5-1: string descriptor 0 read error: -22 [ 1296.071570][ T4322] usb 5-1: New USB device found, idVendor=0f11, idProduct=10a0, bcdDevice=d2.eb [ 1296.071611][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1296.104457][ T4322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.152709][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1296.265872][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1296.286844][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1296.301305][ T8311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.308672][ T8311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1296.350378][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1296.360468][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1296.370498][ T8311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.377859][ T8311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.387128][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1296.397859][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1296.421937][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1296.445784][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1296.511407][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1296.583868][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1296.701415][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1296.713129][ T5024] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1296.748772][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1296.792698][ T5024] (NULL device *): queue 0 connect admin queue failed (-111). [ 1296.800494][ T5024] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1296.838667][T15392] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1296.902645][T15393] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2744'. [ 1297.449314][ T5024] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1297.500939][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1297.532488][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1297.905828][T15102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1298.005743][T14247] usb 5-1: USB disconnect, device number 44 [ 1298.363390][T15402] netlink: 'syz.7.2745': attribute type 3 has an invalid length. [ 1298.371392][T15402] netlink: 'syz.7.2745': attribute type 3 has an invalid length. [ 1298.380258][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1298.417762][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1298.650261][T15416] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2747'. [ 1299.767663][T14814] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1299.784654][T15418] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1299.795928][T14814] (NULL device *): queue 0 connect admin queue failed (-111). [ 1299.804568][T14814] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1299.814857][T14814] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1299.850983][T15418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1300.154585][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.813944][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2752'. [ 1301.844502][ T4957] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1301.965621][ T4957] (NULL device *): queue 0 connect admin queue failed (-111). [ 1302.011889][ T4957] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1302.037348][ T4957] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1302.428616][ T9554] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1303.072163][ T9554] usb 5-1: Using ep0 maxpacket: 8 [ 1303.089419][ T9554] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1303.587543][ T9554] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.754673][ T9554] usb 5-1: Product: syz [ 1303.765575][ T9554] usb 5-1: Manufacturer: syz [ 1303.775849][ T9554] usb 5-1: SerialNumber: syz [ 1303.790073][ T9554] usb 5-1: config 0 descriptor?? [ 1303.811920][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1303.820305][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1303.857398][T15102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1303.932378][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1303.952834][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1304.072280][T14814] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1304.095871][ T9554] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1304.141910][T14814] (NULL device *): queue 0 connect admin queue failed (-111). [ 1304.171309][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1304.175706][T14814] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1304.187355][T14814] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1304.852328][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1304.946756][T15102] device veth0_vlan entered promiscuous mode [ 1305.079430][T15477] file system registered [ 1305.095337][T15471] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1305.372990][T15471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1305.499296][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1305.510873][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1305.523380][T15102] device veth1_vlan entered promiscuous mode [ 1305.549475][T15480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.581725][T15480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.649860][T10810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1306.317571][ T4961] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1306.733990][T10810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1307.052676][ T4961] (NULL device *): queue 0 connect admin queue failed (-111). [ 1307.075845][T15102] device veth0_macvtap entered promiscuous mode [ 1307.095005][ T4961] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1307.100754][T15102] device veth1_macvtap entered promiscuous mode [ 1307.141182][T15102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1307.160918][T15102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.196186][ T9554] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 1307.230080][ T4961] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1307.251489][T15102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1307.291576][T15102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.306880][T15102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1307.320012][T15102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.339055][T15102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1307.351871][T15102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.365960][T15102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1307.379038][T15102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.420726][ T4322] usb 5-1: USB disconnect, device number 45 [ 1307.469144][T15498] 9pnet_fd: Insufficient options for proto=fd [ 1307.552519][T15102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1307.612186][T14637] ffs_data_put(): freeing [ 1307.740292][ T8460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1307.849752][ T8460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1308.062048][T15102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.163161][T15102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.177698][T15102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.188433][T15102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.198346][T15102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.208959][T15102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.218912][T15102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.229486][T15102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.232123][T15501] 0xfffffffff400001c-0x000000020000 : "" [ 1308.239988][T15102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.256098][T15102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.267454][T15102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1308.280969][T15102] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.289891][T15102] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.309085][T15102] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.323811][T15102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.355256][ T8460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1308.380153][ T8460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1308.408103][T15501] mtd: partition "" is out of reach -- disabled [ 1308.448847][T15501] ftl_cs: FTL header not found. [ 1309.362390][ T47] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1309.408139][ T47] (NULL device *): queue 0 connect admin queue failed (-111). [ 1309.416254][ T47] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1309.424466][ T47] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1309.540551][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.572882][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.644685][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1311.206759][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.234208][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.300679][T10810] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1312.395298][ T8460] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1312.550440][ T8460] (NULL device *): queue 0 connect admin queue failed (-111). [ 1312.617919][ T8460] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1312.709669][ T8460] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1312.851526][T15545] 9pnet_fd: Insufficient options for proto=fd [ 1314.484379][T15547] sctp: failed to load transform for md5: -2 [ 1314.993142][ T47] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1315.655162][ T47] (NULL device *): queue 0 connect admin queue failed (-111). [ 1315.731921][ T47] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1315.739751][ T47] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1316.759117][ T27] audit: type=1800 audit(1787744728.478:170): pid=15569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2781" name="idVendor" dev="configfs" ino=104163 res=0 errno=0 [ 1317.086397][ T27] audit: type=1800 audit(1787744728.508:171): pid=15569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2781" name="idProduct" dev="configfs" ino=104164 res=0 errno=0 [ 1317.566944][ T27] audit: type=1800 audit(1787744728.508:172): pid=15569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2781" name="max_speed" dev="configfs" ino=104165 res=0 errno=0 [ 1317.697537][ T27] audit: type=1800 audit(1787744728.508:173): pid=15569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2781" name="UDC" dev="configfs" ino=104166 res=0 errno=0 [ 1318.712414][ T8460] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1318.776651][ T8460] (NULL device *): queue 0 connect admin queue failed (-111). [ 1318.817263][ T8460] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1318.882070][ T8460] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1321.113113][ T4957] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1321.687562][ T4957] (NULL device *): queue 0 connect admin queue failed (-111). [ 1321.695599][ T4957] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1321.703905][ T4957] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1322.811465][T15611] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2791'. [ 1323.319323][ T27] audit: type=1800 audit(1787744735.038:174): pid=15622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2794" name="zone_nr_conv" dev="configfs" ino=104740 res=0 errno=0 [ 1323.363021][ T9554] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1323.662441][ T9554] usb 5-1: Using ep0 maxpacket: 32 [ 1323.679796][ T9554] usb 5-1: config 0 has an invalid interface number: 61 but max is 1 [ 1324.002693][ T9554] usb 5-1: config 0 has no interface number 1 [ 1324.022388][ T31] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1324.228550][ T31] (NULL device *): queue 0 connect admin queue failed (-111). [ 1324.261124][ T9554] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1324.275141][ T9554] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.283552][ T31] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1324.293082][ T9554] usb 5-1: Product: syz [ 1324.301917][ T9554] usb 5-1: Manufacturer: syz [ 1324.309634][ T9554] usb 5-1: SerialNumber: syz [ 1324.321797][ T9554] usb 5-1: config 0 descriptor?? [ 1324.329505][ T31] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1324.606112][ T9554] viperboard 5-1:0.61: version 0.00 found at bus 005 address 046 [ 1325.281468][ T9554] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 1325.372840][ T9554] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 1325.514483][ T9554] viperboard 5-1:0.0: version 0.00 found at bus 005 address 046 [ 1326.375294][ T9554] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 1326.403545][ T8311] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1326.442367][ T8311] (NULL device *): queue 0 connect admin queue failed (-111). [ 1326.450182][ T8311] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1326.465166][ T8311] nvme nvme0: NVME-FC{0}: Max reconnect attempts (300) reached. [ 1326.499442][ T8311] nvme nvme0: Removing ctrl: NQN "n" [ 1326.501817][ T9554] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5 [ 1326.569620][ T8311] ------------[ cut here ]------------ [ 1326.575600][ T8311] WARNING: CPU: 1 PID: 8311 at block/blk-mq.c:4133 blk_mq_release+0x104/0x2c0 [ 1326.584860][ T8311] Modules linked in: [ 1326.588881][ T8311] CPU: 1 PID: 8311 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1326.596632][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1326.606950][ T8311] Workqueue: nvme-delete-wq nvme_delete_ctrl_work [ 1326.613665][ T8311] RIP: 0010:blk_mq_release+0x104/0x2c0 [ 1326.617676][ T9554] usb 5-1: USB disconnect, device number 46 [ 1326.619261][ T8311] Code: 89 df 4c 89 fe 48 c7 c2 ff ff ff ff b9 08 00 00 00 e8 10 92 27 06 48 85 c0 74 13 49 89 c4 e8 43 67 85 fd eb af e8 3c 67 85 fd <0f> 0b eb d1 e8 33 67 85 fd eb 05 e8 2c 67 85 fd 48 8b 44 24 18 4c [ 1326.645122][ T8311] RSP: 0018:ffffc900044079a0 EFLAGS: 00010293 [ 1326.651361][ T8311] RAX: ffffffff83fcca54 RBX: ffff888027356cc8 RCX: ffff8880245c8000 [ 1326.659546][ T8311] RDX: 0000000000000000 RSI: ffffffff8a8c29a0 RDI: ffffffff8adf6120 [ 1326.667660][ T8311] RBP: ffffc90004407a68 R08: ffffffff8e2110ef R09: 1ffffffff1c4221d [ 1326.675794][ T8311] R10: dffffc0000000000 R11: fffffbfff1c4221e R12: ffff888073a4daa8 [ 1326.683873][ T8311] R13: dffffc0000000000 R14: 1ffff92000880f3c R15: ffffc90004407a00 [ 1326.692375][ T8311] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1326.701396][ T8311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1326.708093][ T8311] CR2: 00007fa386331a10 CR3: 00000000a785d000 CR4: 00000000003506e0 [ 1326.716189][ T8311] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1326.724365][ T8311] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1326.732427][ T8311] Call Trace: [ 1326.735818][ T8311] [ 1326.738818][ T8311] ? slab_free_freelist_hook+0x133/0x1b0 [ 1326.744536][ T8311] ? blk_mq_free_map_and_rqs+0xe0/0xe0 [ 1326.750049][ T8311] ? blk_release_queue+0xde/0x1e0 [ 1326.755261][ T8311] ? rcu_is_watching+0x11/0xa0 [ 1326.760168][ T8311] blk_release_queue+0x12a/0x1e0 [ 1326.765186][ T8311] kobject_put+0x217/0x450 [ 1326.769675][ T8311] nvme_free_ctrl+0xc2/0x510 [ 1326.774336][ T8311] ? nvme_failfast_work+0xd0/0xd0 [ 1326.779452][ T8311] ? device_release+0x62/0x1c0 [ 1326.784430][ T8311] ? rcu_is_watching+0x11/0xa0 [ 1326.789256][ T8311] ? nvme_failfast_work+0xd0/0xd0 [ 1326.794391][ T8311] device_release+0x92/0x1c0 [ 1326.799038][ T8311] kobject_put+0x217/0x450 [ 1326.803510][ T8311] ? process_one_work+0x7b4/0x1160 [ 1326.808800][ T8311] process_one_work+0x8ab/0x1160 [ 1326.813812][ T8311] ? worker_detach_from_pool+0x240/0x240 [ 1326.819524][ T8311] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1326.824636][ T8311] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1326.830306][ T8311] ? wq_worker_running+0x97/0x190 [ 1326.835537][ T8311] worker_thread+0xaf5/0x12a0 [ 1326.840858][ T8311] kthread+0x29d/0x330 [ 1326.845070][ T8311] ? worker_clr_flags+0x1a0/0x1a0 [ 1326.850191][ T8311] ? kthread_blkcg+0xd0/0xd0 [ 1326.854850][ T8311] ret_from_fork+0x1f/0x30 [ 1326.859363][ T8311] [ 1326.862457][ T8311] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1326.869725][ T8311] CPU: 1 PID: 8311 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1326.877429][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1326.887493][ T8311] Workqueue: nvme-delete-wq nvme_delete_ctrl_work [ 1326.893925][ T8311] Call Trace: [ 1326.897354][ T8311] [ 1326.900311][ T8311] dump_stack_lvl+0x188/0x24e [ 1326.904999][ T8311] ? memcpy+0x3c/0x60 [ 1326.909087][ T8311] ? show_regs_print_info+0x12/0x12 [ 1326.914293][ T8311] ? load_image+0x410/0x410 [ 1326.918814][ T8311] panic+0x2d3/0x710 [ 1326.922704][ T8311] ? bpf_jit_dump+0xd0/0xd0 [ 1326.927240][ T8311] ? ret_from_fork+0x1f/0x30 [ 1326.931827][ T8311] __warn+0x2f8/0x4f0 [ 1326.935792][ T8311] ? blk_mq_release+0x104/0x2c0 [ 1326.940629][ T8311] ? blk_mq_release+0x104/0x2c0 [ 1326.945486][ T8311] report_bug+0x2ba/0x4f0 [ 1326.949919][ T8311] ? blk_mq_release+0x104/0x2c0 [ 1326.954791][ T8311] handle_bug+0x3a/0x70 [ 1326.958941][ T8311] exc_invalid_op+0x16/0x40 [ 1326.963437][ T8311] asm_exc_invalid_op+0x16/0x20 [ 1326.968294][ T8311] RIP: 0010:blk_mq_release+0x104/0x2c0 [ 1326.973763][ T8311] Code: 89 df 4c 89 fe 48 c7 c2 ff ff ff ff b9 08 00 00 00 e8 10 92 27 06 48 85 c0 74 13 49 89 c4 e8 43 67 85 fd eb af e8 3c 67 85 fd <0f> 0b eb d1 e8 33 67 85 fd eb 05 e8 2c 67 85 fd 48 8b 44 24 18 4c [ 1326.993362][ T8311] RSP: 0018:ffffc900044079a0 EFLAGS: 00010293 [ 1326.999433][ T8311] RAX: ffffffff83fcca54 RBX: ffff888027356cc8 RCX: ffff8880245c8000 [ 1327.007402][ T8311] RDX: 0000000000000000 RSI: ffffffff8a8c29a0 RDI: ffffffff8adf6120 [ 1327.015382][ T8311] RBP: ffffc90004407a68 R08: ffffffff8e2110ef R09: 1ffffffff1c4221d [ 1327.023357][ T8311] R10: dffffc0000000000 R11: fffffbfff1c4221e R12: ffff888073a4daa8 [ 1327.031334][ T8311] R13: dffffc0000000000 R14: 1ffff92000880f3c R15: ffffc90004407a00 [ 1327.039310][ T8311] ? blk_mq_release+0x104/0x2c0 [ 1327.044182][ T8311] ? slab_free_freelist_hook+0x133/0x1b0 [ 1327.049809][ T8311] ? blk_mq_free_map_and_rqs+0xe0/0xe0 [ 1327.055348][ T8311] ? blk_release_queue+0xde/0x1e0 [ 1327.060364][ T8311] ? rcu_is_watching+0x11/0xa0 [ 1327.065127][ T8311] blk_release_queue+0x12a/0x1e0 [ 1327.070059][ T8311] kobject_put+0x217/0x450 [ 1327.074854][ T8311] nvme_free_ctrl+0xc2/0x510 [ 1327.079446][ T8311] ? nvme_failfast_work+0xd0/0xd0 [ 1327.084468][ T8311] ? device_release+0x62/0x1c0 [ 1327.089225][ T8311] ? rcu_is_watching+0x11/0xa0 [ 1327.094000][ T8311] ? nvme_failfast_work+0xd0/0xd0 [ 1327.099024][ T8311] device_release+0x92/0x1c0 [ 1327.103626][ T8311] kobject_put+0x217/0x450 [ 1327.108033][ T8311] ? process_one_work+0x7b4/0x1160 [ 1327.113161][ T8311] process_one_work+0x8ab/0x1160 [ 1327.118101][ T8311] ? worker_detach_from_pool+0x240/0x240 [ 1327.123750][ T8311] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1327.128763][ T8311] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1327.134314][ T8311] ? wq_worker_running+0x97/0x190 [ 1327.139332][ T8311] worker_thread+0xaf5/0x12a0 [ 1327.144010][ T8311] kthread+0x29d/0x330 [ 1327.148080][ T8311] ? worker_clr_flags+0x1a0/0x1a0 [ 1327.153093][ T8311] ? kthread_blkcg+0xd0/0xd0 [ 1327.157672][ T8311] ret_from_fork+0x1f/0x30 [ 1327.162087][ T8311] [ 1327.165387][ T8311] Kernel Offset: disabled [ 1327.169783][ T8311] Rebooting in 86400 seconds..