last executing test programs: 36.578874363s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f00000001c0), 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x12, 0x16, "4d7a9055af55a12ccff19ef6b861868508a20d7e3bd1"}, 0x0, 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xe, 0x41, {0x41, 0x1, "941086d94f27c9b76e878466c2bebca78db397716d3a4ed4bcbeaf9d0b14f19c69d6d8c9742bc16a44e7d9a9059aa01bbabc7e64e7946a5949739206d4ff3f"}}, 0x0}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x101241, 0x65) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) 32.955599874s ago: executing program 0 (id=16): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x1058, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 25.516845589s ago: executing program 0 (id=38): r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x119, 0x32, 0x0, 0x4c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000026c0)=ANY=[@ANYBLOB="02", @ANYRES32=0x0, @ANYBLOB="040004000000000010000400000000002000"], 0x2c, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x90, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_NAT_SRC={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 24.908165782s ago: executing program 32 (id=38): r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x119, 0x32, 0x0, 0x4c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000026c0)=ANY=[@ANYBLOB="02", @ANYRES32=0x0, @ANYBLOB="040004000000000010000400000000002000"], 0x2c, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x90, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_NAT_SRC={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 9.87259489s ago: executing program 3 (id=81): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48) 8.703361331s ago: executing program 4 (id=82): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 8.565719863s ago: executing program 3 (id=83): syz_open_dev$sg(0x0, 0x1, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000b40)={[0x9, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x1, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x2a, 0x14, 0xffff, 0x4, 0x0, 0x8, 0x7], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.129946963s ago: executing program 1 (id=84): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0xf, 0xfffffbff) sendto$inet(r2, 0x0, 0x0, 0x20004014, &(0x7f00000001c0)={0x2, 0x4e23, @private=0xa010101}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000000002, 0x2) mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x0, 0x0) 7.051209296s ago: executing program 4 (id=85): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, 0x0, 0x44081) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) 6.891779243s ago: executing program 2 (id=86): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0x1, 0x2, 0x7fff, 0x6, 0x8, 0xf, 0x2, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x8000, 0x401, 0x9, 0x8, 0x4, 0xf, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x2]}) ioctl$COMEDI_UNLOCK(r1, 0x6406) r2 = syz_open_dev$loop(0x0, 0x2, 0x2001) ioctl$LOOP_CONFIGURE(r2, 0x1265, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$IPVS_CMD_ZERO(r3, 0x0, 0x4080) r4 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) recvmsg$can_bcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}, 0x10150) 6.849616453s ago: executing program 3 (id=87): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 6.506231122s ago: executing program 3 (id=88): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, 0x0, &(0x7f0000000700)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [{0x8, 0x7, 0xee01}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000200)=0x104) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) write$ppp(r1, &(0x7f0000000100)="e0bf", 0x2) 6.09287895s ago: executing program 4 (id=89): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 6.069601287s ago: executing program 2 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) sendfile(r4, r4, 0x0, 0x1000000201005) 4.463985452s ago: executing program 2 (id=91): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f00000005c0)=""/215, 0x26, 0xd7, 0x1}, 0x28) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x2a14b58) sched_setscheduler(0x0, 0x2, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x1, @tid=r0}, &(0x7f0000000300)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x8d, 0xfffffffd, 0xffffffff, 0xe, 0xa0, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x400, 0x81}) readv(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/136, 0x88}], 0x1) read(r1, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xff) 4.265997504s ago: executing program 4 (id=92): syz_open_procfs(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1a000}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 4.121356664s ago: executing program 2 (id=93): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 3.003864979s ago: executing program 1 (id=94): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 2.982526669s ago: executing program 4 (id=95): prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) 2.960999076s ago: executing program 2 (id=96): socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 2.557897297s ago: executing program 1 (id=97): r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/meminfo\x00', 0x0, 0x0) read$hiddev(r1, &(0x7f0000000000)=""/4118, 0x1016) r2 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0', [{0x20, 'Btax'}]}, 0xfffffd81) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) 2.551905522s ago: executing program 4 (id=98): personality(0x87bf5ac905ea0f7f) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x9bb, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000a80)={0x20, 0x14, 0xb, "ba575414d488a924d3fd79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 2.241961576s ago: executing program 1 (id=99): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) tkill(r1, 0x7) wait4(r1, 0x0, 0x0, 0x0) ioprio_set$pid(0x1, r1, 0x6000) rmdir(&(0x7f00000005c0)='./cgroup/../file0/file0\x00') r2 = openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) 1.665757361s ago: executing program 1 (id=100): syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/226, 0xe2, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 1.45828784s ago: executing program 1 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/kvm_intel/parameters/dump_invalid_vmcs\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='1\x00', 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f31"}}, @nested_vmlaunch={0x12f, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0x8}}, @nested_vmresume={0x130, 0x18}], 0xb2}) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.345556319s ago: executing program 3 (id=102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f5c0a000) 287.473765ms ago: executing program 3 (id=103): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xa, &(0x7f0000000440)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x6e12, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, 0x0) write$binfmt_script(r6, &(0x7f0000011140)={'#! ', './file1'}, 0xb) 0s ago: executing program 2 (id=104): socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f4b000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00007fd000/0x800000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. [ 80.444731][ T5569] cgroup: Unknown subsys name 'net' [ 80.684767][ T5569] cgroup: Unknown subsys name 'cpuset' [ 80.750718][ T5569] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.585625][ T5569] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.928736][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.958553][ T5590] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.965431][ T5590] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.972127][ T5590] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.979261][ T5592] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.999489][ T5590] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.002466][ T5590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.003129][ T5590] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.006434][ T5590] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.006869][ T5590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.007601][ T5590] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.013031][ T5592] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.013527][ T5583] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.014560][ T5583] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.014974][ T5583] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.279202][ T4898] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.296338][ T4898] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.307486][ T4898] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.319095][ T4898] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.335973][ T4898] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.367259][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.389984][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.410410][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.418251][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.425779][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.056342][ T31] cfg80211: failed to load regulatory.db [ 88.062116][ T59] Bluetooth: hci1: command tx timeout [ 88.062811][ T59] Bluetooth: hci0: command tx timeout [ 88.219782][ T5583] Bluetooth: hci2: command tx timeout [ 88.385036][ T5583] Bluetooth: hci3: command tx timeout [ 88.540755][ T5583] Bluetooth: hci4: command tx timeout [ 88.756360][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.757644][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.757892][ T5581] bridge_slave_0: entered allmulticast mode [ 88.761406][ T5581] bridge_slave_0: entered promiscuous mode [ 88.772827][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.772940][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.773127][ T5584] bridge_slave_0: entered allmulticast mode [ 88.775886][ T5584] bridge_slave_0: entered promiscuous mode [ 88.842719][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.842786][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.842921][ T5581] bridge_slave_1: entered allmulticast mode [ 88.847757][ T5581] bridge_slave_1: entered promiscuous mode [ 88.848661][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.848795][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.848900][ T5584] bridge_slave_1: entered allmulticast mode [ 88.851305][ T5584] bridge_slave_1: entered promiscuous mode [ 88.855567][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.855680][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.855827][ T5582] bridge_slave_0: entered allmulticast mode [ 88.859000][ T5582] bridge_slave_0: entered promiscuous mode [ 88.916860][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.916982][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.917179][ T5591] bridge_slave_0: entered allmulticast mode [ 88.919606][ T5591] bridge_slave_0: entered promiscuous mode [ 88.973679][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.973805][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.973918][ T5582] bridge_slave_1: entered allmulticast mode [ 88.976764][ T5582] bridge_slave_1: entered promiscuous mode [ 88.987715][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.987826][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.987994][ T5591] bridge_slave_1: entered allmulticast mode [ 88.990874][ T5591] bridge_slave_1: entered promiscuous mode [ 89.101186][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.104996][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.153293][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.155291][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.333396][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.333637][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.333822][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.333975][ T5594] bridge_slave_0: entered allmulticast mode [ 89.335629][ T5594] bridge_slave_0: entered promiscuous mode [ 89.339513][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.386751][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.386995][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.387096][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.387197][ T5594] bridge_slave_1: entered allmulticast mode [ 89.388604][ T5594] bridge_slave_1: entered promiscuous mode [ 89.393525][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.485281][ T5581] team0: Port device team_slave_0 added [ 89.488141][ T5584] team0: Port device team_slave_0 added [ 89.536909][ T5581] team0: Port device team_slave_1 added [ 89.538496][ T5584] team0: Port device team_slave_1 added [ 89.552188][ T5582] team0: Port device team_slave_0 added [ 89.556561][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.558859][ T5591] team0: Port device team_slave_0 added [ 89.610796][ T5582] team0: Port device team_slave_1 added [ 89.613222][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.615320][ T5591] team0: Port device team_slave_1 added [ 89.712800][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.712813][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.712834][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.714890][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.714904][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.714927][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.784305][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.784322][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.784345][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.794765][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.794781][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.794805][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.798128][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.798143][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.798166][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.807427][ T5594] team0: Port device team_slave_0 added [ 89.809386][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.809400][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.809424][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.840199][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.840220][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.840259][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.844405][ T5594] team0: Port device team_slave_1 added [ 89.845668][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.845681][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.845704][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.004742][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.004758][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.004782][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.082620][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.082637][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.082662][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.118738][ T5581] hsr_slave_0: entered promiscuous mode [ 90.122315][ T5581] hsr_slave_1: entered promiscuous mode [ 90.134947][ T5584] hsr_slave_0: entered promiscuous mode [ 90.136459][ T5584] hsr_slave_1: entered promiscuous mode [ 90.138490][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 90.138612][ T5584] Cannot create hsr debugfs directory [ 90.141285][ T5583] Bluetooth: hci0: command tx timeout [ 90.141324][ T5583] Bluetooth: hci1: command tx timeout [ 90.224884][ T5582] hsr_slave_0: entered promiscuous mode [ 90.226183][ T5582] hsr_slave_1: entered promiscuous mode [ 90.227037][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 90.227059][ T5582] Cannot create hsr debugfs directory [ 90.299988][ T59] Bluetooth: hci2: command tx timeout [ 90.460053][ T59] Bluetooth: hci3: command tx timeout [ 90.616528][ T5591] hsr_slave_0: entered promiscuous mode [ 90.617292][ T5591] hsr_slave_1: entered promiscuous mode [ 90.617927][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 90.617957][ T5591] Cannot create hsr debugfs directory [ 90.621171][ T59] Bluetooth: hci4: command tx timeout [ 90.794297][ T5594] hsr_slave_0: entered promiscuous mode [ 90.795042][ T5594] hsr_slave_1: entered promiscuous mode [ 90.795546][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 90.795567][ T5594] Cannot create hsr debugfs directory [ 91.479009][ T5584] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.533151][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.552212][ T5584] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.598165][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.603917][ T5584] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.645498][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.672537][ T5584] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.715167][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.851273][ T5582] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.886164][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.903434][ T5582] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.936192][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.947548][ T5582] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.976493][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.004848][ T5582] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.034803][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.224602][ T59] Bluetooth: hci1: command tx timeout [ 92.224642][ T59] Bluetooth: hci0: command tx timeout [ 92.228875][ T5591] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.274035][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.287255][ T5591] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.313669][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.318110][ T5591] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.346524][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.369310][ T5591] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.389890][ T5583] Bluetooth: hci2: command tx timeout [ 92.409132][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.551181][ T5583] Bluetooth: hci3: command tx timeout [ 92.596181][ T5594] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.632803][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.635467][ T5594] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.682911][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.689365][ T5594] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.699820][ T5583] Bluetooth: hci4: command tx timeout [ 92.734569][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.765648][ T5594] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.796747][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.888936][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.941529][ T5581] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.973519][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.985287][ T5581] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.015579][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.022715][ T5581] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.068407][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.081496][ T5581] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.112866][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.168376][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.217250][ T1293] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.217424][ T1293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.248412][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.284523][ T1293] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.284618][ T1293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.367710][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.409006][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.423331][ T529] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.424136][ T529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.517317][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.517489][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.599590][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.644951][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.649498][ T1296] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.649608][ T1296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.747592][ T1296] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.747717][ T1296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.818831][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.929615][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.939415][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.939520][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.003261][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.003381][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.097621][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.242414][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.242622][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.300056][ T5583] Bluetooth: hci0: command tx timeout [ 94.310829][ T5583] Bluetooth: hci1: command tx timeout [ 94.333740][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.333894][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.459858][ T5583] Bluetooth: hci2: command tx timeout [ 94.620100][ T5583] Bluetooth: hci3: command tx timeout [ 94.762383][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.781146][ T5583] Bluetooth: hci4: command tx timeout [ 95.067763][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.225726][ T5584] veth0_vlan: entered promiscuous mode [ 95.351979][ T5584] veth1_vlan: entered promiscuous mode [ 95.459539][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.552442][ T5582] veth0_vlan: entered promiscuous mode [ 95.586144][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.643472][ T5584] veth0_macvtap: entered promiscuous mode [ 95.666218][ T5582] veth1_vlan: entered promiscuous mode [ 95.687388][ T5584] veth1_macvtap: entered promiscuous mode [ 95.796427][ T5591] veth0_vlan: entered promiscuous mode [ 95.845503][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.869629][ T5591] veth1_vlan: entered promiscuous mode [ 95.895888][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.961518][ T5582] veth0_macvtap: entered promiscuous mode [ 95.969097][ T5594] veth0_vlan: entered promiscuous mode [ 95.988747][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.022284][ T5582] veth1_macvtap: entered promiscuous mode [ 96.167478][ T5594] veth1_vlan: entered promiscuous mode [ 96.275289][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.318420][ T5591] veth0_macvtap: entered promiscuous mode [ 96.416302][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.458452][ T5591] veth1_macvtap: entered promiscuous mode [ 96.652746][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.661945][ T5594] veth0_macvtap: entered promiscuous mode [ 96.754128][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.757403][ T5594] veth1_macvtap: entered promiscuous mode [ 96.823194][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.823217][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.066832][ T5581] veth0_vlan: entered promiscuous mode [ 97.071808][ T1296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.071836][ T1296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.196994][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.240235][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.240254][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.290483][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.294833][ T5581] veth1_vlan: entered promiscuous mode [ 97.605220][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.605235][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.787250][ T1296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.787269][ T1296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.147986][ T36] audit: type=1326 audit(1786033773.578:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5779 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de672e0d9 code=0x7ffc0000 [ 98.205217][ T5581] veth0_macvtap: entered promiscuous mode [ 98.229276][ T36] audit: type=1326 audit(1786033773.588:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5779 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de672e0d9 code=0x7ffc0000 [ 98.264583][ T36] audit: type=1326 audit(1786033773.708:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5779 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de672e0d9 code=0x7ffc0000 [ 98.279738][ T36] audit: type=1326 audit(1786033773.708:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5779 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de672e0d9 code=0x7ffc0000 [ 98.279800][ T36] audit: type=1326 audit(1786033773.708:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5779 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9de672e0d9 code=0x7ffc0000 [ 98.348946][ T36] audit: type=1326 audit(1786033773.758:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5779 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de672e0d9 code=0x7ffc0000 [ 98.349005][ T36] audit: type=1326 audit(1786033773.758:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5779 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9de672de42 code=0x7ffc0000 [ 98.349037][ T36] audit: type=1326 audit(1786033773.778:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5779 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9de672ded7 code=0x7ffc0000 [ 98.349066][ T36] audit: type=1326 audit(1786033773.788:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5779 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9de66eadd1 code=0x7ffc0000 [ 98.349095][ T36] audit: type=1326 audit(1786033773.788:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5779 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f9de672eec9 code=0x7ffc0000 [ 98.508275][ T5581] veth1_macvtap: entered promiscuous mode [ 98.742480][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.742500][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.838695][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.838716][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.956093][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.094357][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.189767][ T529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.189789][ T529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.867153][ T5793] binder: BINDER_SET_CONTEXT_MGR already set [ 99.867168][ T5793] binder: 5789:5793 ioctl 4018620d 200000000300 returned -16 [ 100.437580][ T1293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.437600][ T1293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.478766][ T151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.662291][ T1215] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.972554][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.093706][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.093735][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.110255][ T1215] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.111662][ T1215] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.111713][ T1215] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.111746][ T1215] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.111806][ T1215] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.111836][ T1215] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.111869][ T1215] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.111900][ T1215] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.111931][ T1215] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.346711][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.376977][ T5691] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 101.440728][ T1215] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.528623][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.535412][ T1310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.551131][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.552086][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.552517][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.554023][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.698437][ T5691] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 101.698468][ T5691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.812562][ T10] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 101.812592][ T10] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 101.812612][ T10] usb 3-1: Product: syz [ 101.812625][ T10] usb 3-1: SerialNumber: syz [ 101.814312][ T5805] Bluetooth: ISO socket layer initialized [ 102.068704][ T10] usb 3-1: config 0 descriptor?? [ 102.213098][ T5691] usb 1-1: config 0 descriptor?? [ 102.357398][ T5691] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 102.678754][ T5691] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 102.678800][ T5691] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 102.771463][ T1215] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.800221][ T10] hso 3-1:0.0: Failed to find BULK eps [ 103.008608][ T10] usb 3-1: USB disconnect, device number 2 [ 103.091209][ T5810] ======================================================= [ 103.091209][ T5810] WARNING: The mand mount option has been deprecated and [ 103.091209][ T5810] and is ignored by this kernel. Remove the mand [ 103.091209][ T5810] option from the mount to silence this warning. [ 103.091209][ T5810] ======================================================= [ 103.091395][ T5810] 9p: Bad value for 'rfdno' [ 103.311790][ T5707] usb 1-1: USB disconnect, device number 2 [ 103.722027][ T5820] Zero length message leads to an empty skb [ 110.489837][ T997] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.319864][ T997] usb 5-1: Using ep0 maxpacket: 16 [ 111.343143][ T997] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 111.343174][ T997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.343194][ T997] usb 5-1: Product: syz [ 111.343208][ T997] usb 5-1: Manufacturer: syz [ 111.343222][ T997] usb 5-1: SerialNumber: syz [ 113.039559][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.121423][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.125915][ T997] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 113.125976][ T997] usb 5-1: MIDIStreaming interface descriptor not found [ 113.128346][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.157547][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.182671][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.574383][ T1299] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.329884][ T5692] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 114.578286][ T5692] usb 2-1: unable to get BOS descriptor or descriptor too short [ 114.580069][ T5692] usb 2-1: config 1 has an invalid interface number: 4 but max is 0 [ 114.580093][ T5692] usb 2-1: config 1 has no interface number 0 [ 114.580171][ T5692] usb 2-1: config 1 interface 4 has no altsetting 0 [ 114.613086][ T5692] usb 2-1: string descriptor 0 read error: -22 [ 114.613216][ T5692] usb 2-1: New USB device found, idVendor=33f8, idProduct=0104, bcdDevice=19.4f [ 114.613239][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.754025][ T997] usb 5-1: USB disconnect, device number 2 [ 114.971221][ T1299] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.184304][ T5692] usb 2-1: USB disconnect, device number 2 [ 115.420984][ T59] Bluetooth: hci4: command tx timeout [ 115.775356][ T1299] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.896601][ T5935] netlink: 48 bytes leftover after parsing attributes in process `syz.2.47'. [ 116.363614][ T5948] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.500430][ T5950] udevd[5950]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.499801][ T59] Bluetooth: hci4: command tx timeout [ 118.086800][ T1299] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.504002][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.584877][ T59] Bluetooth: hci4: command tx timeout [ 119.661445][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 119.666929][ T31] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 119.666958][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.666976][ T31] usb 3-1: Product: syz [ 119.666991][ T31] usb 3-1: Manufacturer: syz [ 119.667005][ T31] usb 3-1: SerialNumber: syz [ 119.756048][ T31] usb 3-1: config 0 descriptor?? [ 119.783155][ T31] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 120.646235][ T31] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 120.718033][ T31] usb 3-1: USB disconnect, device number 3 [ 121.671759][ T59] Bluetooth: hci4: command tx timeout [ 122.341963][ T6005] syz.2.66 uses obsolete (PF_INET,SOCK_PACKET) [ 122.487542][ T6005] device-mapper: ioctl: Invalid ioctl structure: name my, dev f800 [ 123.014624][ T6019] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 123.015018][ T6019] CIFS: Attempting to mount //127.0.0.1/share [ 123.222926][ T6019] CIFS: VFS: Error connecting to socket. Aborting operation. [ 123.223094][ T6019] CIFS: VFS: cifs_mount failed w/return code = -4 [ 123.327966][ T1299] bridge_slave_1: left allmulticast mode [ 123.328109][ T1299] bridge_slave_1: left promiscuous mode [ 123.354017][ T1299] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.490442][ T43] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 123.683195][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 123.685686][ T43] usb 3-1: not running at top speed; connect to a high speed hub [ 123.705554][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.705580][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.725124][ T43] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 123.806483][ T43] usb 3-1: string descriptor 0 read error: -22 [ 123.806608][ T43] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 123.806631][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.135255][ T1299] bridge_slave_0: left allmulticast mode [ 124.135288][ T1299] bridge_slave_0: left promiscuous mode [ 124.288257][ T1299] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.432239][ T43] usb 3-1: 0:1 : does not exist [ 124.432264][ T43] usb 3-1: 0:2 : does not exist [ 125.740588][ T1299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.822202][ T1299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.843408][ T1299] bond0 (unregistering): Released all slaves [ 126.846762][ T43] usb 3-1: USB disconnect, device number 4 [ 130.172316][ T997] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.305898][ T5244] 8021q: adding VLAN 0 to HW filter on device eth1 [ 130.352894][ T997] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.352921][ T997] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 130.352962][ T997] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.355428][ T997] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.355456][ T997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.355474][ T997] usb 2-1: Product: syz [ 130.355488][ T997] usb 2-1: Manufacturer: syz [ 130.355501][ T997] usb 2-1: SerialNumber: syz [ 130.517906][ T997] cdc_mbim 2-1:1.0: skipping garbage [ 130.517931][ T997] cdc_mbim 2-1:1.0: CDC Union missing and no IAD found [ 130.524807][ T997] cdc_mbim 2-1:1.0: bind() failure [ 133.166171][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.167379][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.169043][ T5910] bridge_slave_0: entered allmulticast mode [ 133.174356][ T5910] bridge_slave_0: entered promiscuous mode [ 133.225555][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.322675][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.021860][ T5699] usb 2-1: USB disconnect, device number 3 [ 134.497112][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.497224][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.497440][ T5910] bridge_slave_1: entered allmulticast mode [ 134.544340][ T5910] bridge_slave_1: entered promiscuous mode [ 134.709870][ T5721] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 134.911757][ T5721] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.911812][ T5721] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 134.911834][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.056512][ T5910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.311257][ T5721] as10x_usb: device has been detected [ 135.312577][ T5721] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 135.364793][ T1299] hsr_slave_0: left promiscuous mode [ 135.458808][ T6154] binder: 6153:6154 ioctl c0306201 200000000080 returned -14 [ 135.472313][ T6154] binder: 6153:6154 ioctl c0306201 2000000003c0 returned -14 [ 135.472547][ T1299] hsr_slave_1: left promiscuous mode [ 135.543223][ T1299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.543331][ T1299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.693897][ T1299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.693924][ T1299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.711674][ T5721] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 136.938381][ T6170] INFO: trying to register non-static key. [ 136.938394][ T6170] The code is fine but needs lockdep annotation, or maybe [ 136.938401][ T6170] you didn't initialize this object before use? [ 136.938407][ T6170] turning off the locking correctness validator. [ 136.938431][ T6170] CPU: 0 UID: 0 PID: 6170 Comm: syz.4.98 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 136.938457][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.938475][ T6170] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 136.938482][ T6170] [ 136.938489][ T6170] dump_stack_lvl+0xe8/0x150 [ 136.938529][ T6170] assign_lock_key+0x133/0x150 [ 136.938553][ T6170] register_lock_class+0xcc/0x2e0 [ 136.938584][ T6170] __lock_acquire+0xab/0x2ce0 [ 136.938600][ T6170] ? check_path+0x21/0x40 [ 136.938619][ T6170] ? check_noncircular+0xda/0x150 [ 136.938639][ T6170] ? add_lock_to_list+0xc7/0x100 [ 136.938660][ T6170] ? lockdep_unlock+0x5d/0xd0 [ 136.938686][ T6170] ? __lock_acquire+0x13e8/0x2ce0 [ 136.938706][ T6170] ? as102_stream_ctrl+0x27/0xc0 [ 136.938724][ T6170] lock_acquire+0x106/0x350 [ 136.938740][ T6170] ? as102_stream_ctrl+0x27/0xc0 [ 136.938759][ T6170] ? as102_stream_ctrl+0x27/0xc0 [ 136.938779][ T6170] ? as102_stream_ctrl+0x27/0xc0 [ 136.938797][ T6170] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 136.938827][ T6170] ? as102_stream_ctrl+0x27/0xc0 [ 136.938848][ T6170] as102_stream_ctrl+0x27/0xc0 [ 136.938868][ T6170] dvb_frontend_open+0x7eb/0x1410 [ 136.938889][ T6170] ? down_read+0x156/0x200 [ 136.938914][ T6170] ? dvb_device_open+0x76/0x350 [ 136.938933][ T6170] ? __pfx_dvb_frontend_open+0x10/0x10 [ 136.938953][ T6170] dvb_device_open+0x258/0x350 [ 136.938977][ T6170] chrdev_open+0x4dc/0x600 [ 136.939003][ T6170] ? __pfx_chrdev_open+0x10/0x10 [ 136.939029][ T6170] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 136.939055][ T6170] ? __pfx_chrdev_open+0x10/0x10 [ 136.939090][ T6170] do_dentry_open+0x849/0x1420 [ 136.939124][ T6170] vfs_open+0x3b/0x350 [ 136.939152][ T6170] ? path_openat+0x2e49/0x3850 [ 136.939177][ T6170] path_openat+0x2e60/0x3850 [ 136.939202][ T6170] ? kmem_cache_alloc_noprof+0x355/0x650 [ 136.939232][ T6170] ? __x64_sys_openat+0x138/0x170 [ 136.939261][ T6170] ? do_syscall_64+0x174/0x580 [ 136.939281][ T6170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.939310][ T6170] do_file_open+0x23e/0x4a0 [ 136.939331][ T6170] ? lockdep_hardirqs_on+0x7a/0x110 [ 136.939352][ T6170] ? __pfx_do_file_open+0x10/0x10 [ 136.939383][ T6170] ? alloc_fd+0x654/0x6d0 [ 136.939416][ T6170] do_sys_openat2+0x115/0x200 [ 136.939447][ T6170] ? __pfx_do_sys_openat2+0x10/0x10 [ 136.939481][ T6170] __x64_sys_openat+0x138/0x170 [ 136.939513][ T6170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.939533][ T6170] do_syscall_64+0x174/0x580 [ 136.939553][ T6170] ? trace_irq_disable+0x3b/0x140 [ 136.939581][ T6170] ? clear_bhb_loop+0x40/0x90 [ 136.939603][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.939625][ T6170] RIP: 0033:0x7efc4601e90e [ 136.939653][ T6170] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 136.939668][ T6170] RSP: 002b:00007efc43a2db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 136.939698][ T6170] RAX: ffffffffffffffda RBX: 00007efc43a2e6c0 RCX: 00007efc4601e90e [ 136.939712][ T6170] RDX: 0000000000000802 RSI: 00007efc43a2dc00 RDI: ffffffffffffff9c [ 136.939725][ T6170] RBP: 00007efc43a2dc00 R08: 0000000000000000 R09: 0000000000000000 [ 136.939737][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 136.939748][ T6170] R13: 00007efc462e63f8 R14: 00007efc462e6360 R15: 00007ffe9719b208 [ 136.939768][ T6170] [ 136.984819][ T5721] as10x_usb: error during firmware upload part1 [ 136.986757][ T5721] Registered device Abilis Systems DVB-Titan [ 137.012013][ T1299] veth1_macvtap: left promiscuous mode [ 137.012072][ T1299] veth0_macvtap: left promiscuous mode [ 137.012200][ T1299] veth1_vlan: left promiscuous mode [ 137.012285][ T1299] veth0_vlan: left promiscuous mode [ 137.361753][ T997] usb 5-1: USB disconnect, device number 3 [ 137.393933][ T997] Unregistered device Abilis Systems DVB-Titan [ 137.397720][ T997] as10x_usb: device has been disconnected [ 137.860189][ T1299] team0 (unregistering): Port device team_slave_1 removed [ 137.910707][ T1299] team0 (unregistering): Port device team_slave_0 removed [ 138.052927][ T5910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.100614][ T6168] netlink: 28 bytes leftover after parsing attributes in process `syz.3.103'. [ 138.861208][ T5244] 8021q: adding VLAN 0 to HW filter on device eth2 [ 139.666443][ T5244] 8021q: adding VLAN 0 to HW filter on device eth3 [ 139.943049][ T5244] 8021q: adding VLAN 0 to HW filter on device eth4 [ 140.171324][ T1299] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.451966][ T1299] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.671600][ T1299] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.920821][ T1299] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.321201][ T1299] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.371293][ T5244] 8021q: adding VLAN 0 to HW filter on device eth5 [ 141.610907][ T1299] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.652031][ T5244] 8021q: adding VLAN 0 to HW filter on device eth6 [ 141.871234][ T1299] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.911607][ T5244] 8021q: adding VLAN 0 to HW filter on device eth7 [ 142.151292][ T1299] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.191073][ T5244] 8021q: adding VLAN 0 to HW filter on device eth8 [ 142.631226][ T1299] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.670981][ T5244] 8021q: adding VLAN 0 to HW filter on device eth9 [ 142.911122][ T1299] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.960791][ T5244] 8021q: adding VLAN 0 to HW filter on device eth10 [ 143.181800][ T1299] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.230844][ T5244] 8021q: adding VLAN 0 to HW filter on device eth11 [ 143.471145][ T1299] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.539148][ T5244] 8021q: adding VLAN 0 to HW filter on device eth12 [ 143.941261][ T1299] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.988304][ T5244] 8021q: adding VLAN 0 to HW filter on device eth13 [ 144.221541][ T1299] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.261036][ T5244] 8021q: adding VLAN 0 to HW filter on device eth14 [ 144.501814][ T1299] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.551087][ T5244] 8021q: adding VLAN 0 to HW filter on device eth15 [ 144.791039][ T1299] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.841874][ T5244] 8021q: adding VLAN 0 to HW filter on device eth16 [ 145.210110][ T1299] bridge_slave_1: left allmulticast mode [ 145.210135][ T1299] bridge_slave_1: left promiscuous mode [ 145.210289][ T1299] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.361551][ T1299] bridge_slave_0: left allmulticast mode [ 145.361570][ T1299] bridge_slave_0: left promiscuous mode [ 145.361667][ T1299] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.580312][ T1299] bridge_slave_1: left allmulticast mode [ 145.580339][ T1299] bridge_slave_1: left promiscuous mode [ 145.580477][ T1299] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.680259][ T1299] bridge_slave_0: left allmulticast mode [ 145.680277][ T1299] bridge_slave_0: left promiscuous mode [ 145.680381][ T1299] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.900105][ T1299] bridge_slave_1: left allmulticast mode [ 145.900126][ T1299] bridge_slave_1: left promiscuous mode [ 145.900233][ T1299] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.980193][ T1299] bridge_slave_0: left allmulticast mode [ 145.980273][ T1299] bridge_slave_0: left promiscuous mode [ 145.980480][ T1299] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.180766][ T1299] bridge_slave_1: left allmulticast mode [ 146.180792][ T1299] bridge_slave_1: left promiscuous mode [ 146.180937][ T1299] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.280435][ T1299] bridge_slave_0: left allmulticast mode [ 146.280530][ T1299] bridge_slave_0: left promiscuous mode [ 146.280685][ T1299] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.490147][ T1299] bridge_slave_1: left allmulticast mode [ 146.490175][ T1299] bridge_slave_1: left promiscuous mode [ 146.490319][ T1299] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.610453][ T1299] bridge_slave_0: left allmulticast mode [ 146.610481][ T1299] bridge_slave_0: left promiscuous mode [ 146.610614][ T1299] bridge0: port 1(bridge_slave_0) entered disabled state