last executing test programs: 5m19.042291468s ago: executing program 0 (id=24): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[], 0x50) syz_emit_ethernet(0x76, &(0x7f0000001e00)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000001480)=0x50078, 0x4) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001fc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000021c0)={{}, r2, 0x4, @inherit={0x68, &(0x7f00000031c0)=ANY=[]}, @name="b3d994e424f9c77f6473a4ae80377ec45e7444341b6f51eba3cc2ae0d6aae3b799a846545ccdce55bb3edfe041d8b447ada974c6e46861ba7baa9f8db27bf15b8c2c8404ebae1e394363f088701512684e4822e638ecf3b61d4bfda71c7049e98f3edc162056d5aaafc57a9982cc7318274d3c6fec5cef4274845d57cc3be5427414597f0bed64ae1fc73a4b5d4276aff2643b10ab8df380634c1d9e9a1ca58ff331a00c91bc901911f023687b370fcd4cf0ef45597da5dd13191cbb730f263c9c7991e4aedf0c8c1e35fd9cd32af3c61a6ad683ed84748a5a1450a292edc4d34602ff4834102054f81c7f9686d9ab3df829b0de2dbd4c616552b6439ceb539c328e14a2902568a710ed220db93925ceaee9455cc489883295b04e767ede571a88ee6ae52df85caf8dc7831d2449613937ea78649194fb28123999977442bf496a296ac04a43f76e9bb9952084ec472dc8d2ab160a4ac93c38011b43e96a83376cca2caca8c81d6a8ef1270bd1b6b8cec8cfea4be2907048964a3dc75f7a8d8c70b6845b665fffc173c4750ad164aec2576575822f700723c15063de6001315764df921805f7f16bf533438f022261e2c4be133e37dcd1c84bd0f0a71682535df4429d3db6645e8387ebbd67218de662a6bec07d599cd2076103c60de96cd5fd771aead7e420e7219cf2b9a1b3ec7bdcd35e79b858ecf68c9eac8a5e912ad1695e9e4108379fc3449a2e9979d14f3710ce9600495c4386476745bcd62c5d1056396be5839d9166c41448b69b58266d8cbd7dcd9497e8279c7c477202ad0b2554b67048598303107071fb8cbcd6d167056cc86edb83185aa8c7e93d0c3ff05dfb065cb6cf0fd2ca2eafddb09c7a682fe1acb0ff481bfab3c037b8d1feb5b46d51760f244719b1e52c87752b7fa014c13b35e57c68c3c7197b6c12512886c3bf3beedb6a61304daa4a86b1d9d3f373697f9f87c5ca05f9ae0eb6f3da5fff4c0bf121a1d533940c87808dc56a7373899a7baa30b18999a6a7d308e5428aa207cf5a76003dcb6abd4af1ce9b4e23505f1cc862b32a9564d8a14b6db99053bd597b6e0e736a0a75e906077cc1150696a0f71e5a4ee49a86dd7dd75db7ea0c88f78bd389607bae2869cfa47c64e2900020232bc110eed307111bc1d865eb49881dfab48fbdc502a5b83c20b8fbdef9db59481e7d674e7517d06476c2273f29a8296e9994806bff01ecc06b96eaf7f64565be0be44bb97a5898045fdffe532e7ad282b7cf17962c4078aa4088bad5f64716eda43cef73b5dc14d9f766210c9fc25f5d2c64a0a5c6acbb36b4340133d514cdf0870d99f275acfa8ae34ba1f4c23d77aad64acb336e9222643cffdefeab16b81ad4c00cecb7c305551dcacb8dcaed01160a312f8c18e999671a977eef14ee51c926c0ec836d3c71e00c42327aaf2481b680a7f4cc308d5644977eb04993751f3c402d21b1a2e746b251d86d692b88e9feeb61f88b9afee56104c31b1e0b996e5a32924addd44bfb7031a74272cbfdd61e9b46abe8d3f3ef32b8b391069e3604facd1208751eee9b44dacc435a6f23adc3a7bcbe708614db14ffa45ba01078e03a3d2f94cac742873427b053c0245356bbf877cacf560cbf5c19a8969aac54e85f40359dab2d1568142688fabc83026d6ba3158448f7b8ed844af3f2dee3712965c9f5d27c29de0764fe9e720d72c672c8f6e4c4680147762939c0fb3d6f2b6d58578649144f6846e29bf4d1ddb45f830991e3e4530569a931dd93f64a2ddeaf3d4bf0ad9850e00214d32de9a676d8ae8db7022a4db3bae7bc67bd1b056e228e0156076dbfd1293b65fb8a581048df81105de2025546af6ec6401742e0ddb52364a91c13812540a6b969ea06a5c11268c8d033d015479295ed3fcdf666c22b199e804e70414dac953b9f7244e5c4f8b27308407c13eb08f5a3c19ce249f1101acc1df5a159f66492b272b68e68280803b4c49dab43f331122cb08b93e3c14477817c09659dd6682781357e94df22ca4e9ceefdfb9f51e65188cd2266f398dc4a8ce90b63f960c71d634672321c870ddfc2f94a60d27d159e72fae9966853d7847ead429e3fc19a4cd60838142ab842ae25286e1c7654c713866b56c9c824cb4c2746805799301a42a197ffa0960c8c3bdca1ec9573450b16b749d560bebb43c8369a51f4a0f9ae45ca0809b2de43e5cd644b223bdb51f38e7864d989042600fa56d069cfba184c058c910ba40ccedfcb2e96d9a82b6abfa7c150e7da1b9413db8e89bdb63d52b972a12f7147a68a44e19946741aa1cfa3f02cb950bbd85ae334f2a029f21ffa31bb477c2e060ed1db0f062d15813b58dcc596768dd59a01976236460e7a7f8eeea243d4f3fe5ee0986213c728f13991c69ae035c785321527c41caff7731a8eed2a2c55107dd616469ff248a87bea0e3bdb1d07a213429467471cf28e1428140549c6234daababca9937df57811f44b81f6657f9ed2c07fa1a1ee5ac51a4a8bbddc390f65134cca9237f03dcac94e521d9e8d948add830735f205d27368be524c701456bbe2d3852d0cbf1a5ebaf6e770d77e8a04472209b03d25eb95368a4497d6296c36b63e63aa0a8c39b4bdd523c27de21f8855d1ea7d1c171e4371f90b6dd37bee398e50f342a09391b40a6af83975da5f4b77b5c9194537a1b334eccb0a08ebb7126103b7dbf392d5a37e39ce69f8fb5ebe0ee3c4f440b8234097a67cfe952e807c3396ac6a6032691724c11123dbe210ca59c189f936e26238693ee626013a5279ac492bc79acd5d2b0a5e228390ecc937596ee63112bde7e901724ea0ee4ed3960b3c4b981b0cb99dd107592731fa51b6316bfe342b0f865b15e85d73022ce4137df58acd3e90ec55646b31dd46a95b7559ab29151e20fca0c32a167080e5ffc7a66590e7f8ec503246e6d3f1be6afeec2436aa0aacba02b99d7b903446e0b79f2eff64b8d66593080c8b51581e417f36ffdb09b0d2500d914eedef666415e2bf1e625e265abd04b3b7b60421241d504ff84993bb783ae4855404193d037de31129bb9b977e9159dd8f85e059826dc541168804b232c3fba45e9785d3f58a0603cbddc28f22d691cc6b026523bfe6165a97c8a988f9e9ef2054767a84c50b535870e4056b937d577dda38e2d652bb8b0d51062c5fba3bf74f4a0590ddca0c1acf462b49f5383fd368255a4f133664dba8310cd3adce621a341c5ff6fc6a05ed501411036147f3377895a7aff75337f36a46931c4feaed875f6ff3595b0a9bb9d84b70f1c80867c9778bd265f28d8888120a3bccd803ea7a645b5beb1cb7e2b8a8a6e0e03d87a13214aee9fc879ac57f895fada106a6302bad5398482d912da79283ca6d41a00f1bd6e0a10b8df3f8a0bf432698502c2c316d72090374367bd833227e77a07a93999e7b3c74f0bc8e812a33326cd8bc6a268f67d41db682efa47c7f79320f3e6c78b979815a03b615125cd4b65bdfa7401903c5776f399fae20a5aa8a0a491b8a9dfa8a4daff05f2456cb0d39fe4ba235308b69a543ebc20acdec1109e220f18fdf7689196e88d829cb29b20a2089ae5b7f6a0fa158e442b7e00f3fdd7733e038793ef52e83d2de7bd047119e0b3a44aa2ca1b77bcdb132a5b19fb3715ab71c471992be9277e947d3d3134732a10485ef51cbead9725440611f934f55d3e8e4bd874c6cb5821c160998e914a5140c4d0efd48fc0b5cffb37ed8fd7eea7be0979386901984758fd7eda3003eacdf8c629db0de00f6118c72f3c04725d40d903d7c5f775345fbc2df3567fd6acd88235a7d4c371a0c70bad1732daf2a98ea423e4f73321ab82c3cf80226a357892a055f4bfdc7a769e7be1998d530be32dcb59cacf4d0b9ca999457f0fd19ee3e468384000ff2fea38bb26e42367f86a9d07dddfc12c01149ffc658884be37416bb14e3ed333d0d0eec6412df2c9606759a425f3f28eb6d75c518cb581278d7e866701dd058cdb470b348dd32d3402c16099fb79b2706da9952206cbdb303a6e0d114f3139664974e7042f662a2193e9028da435858762539eca9b81c0a50a02202a14afff1a4ab62b1ed210459adfb17065cff858692efac02af36a6e81e909b3965ce1ef3f68372e07f2b90c5ef703074e7f32b143bb166e99f14fb06ca82f1ad107ab7e1bbd23f62b3a498dd0edd4a0b0fc58d91fa2016930a8050fc8c5dcb9e91726afdc6ca63e6be6aa094a96dc5cacb147a22de68b2f6dbb7b9581856568309e1ce1966dabd3fd0103023209766dfc1171e9e8b2e73944741ef6c69b2f2818de7038c7a952f0082b6fc04ca5da725f9815ca7adbf6811a279243b014d615442837942ed62ddaf65c6ebfebd02e23282fabacae31b6461126d34fde17a2b62acd5e82790ac1e84152a3aa9c50c8900c3a4d289207d06d7496bc28c54245e1ad736c3c368177e1d2e60982b492e1755e3dac33de7d22e358f68f14c6b4b07524b072c273d0ebd5d3555e8469c90eb5356ace7b1b188fa5c2852fea40d221234fad744f7fe1423ba2900338e552056d991ce01034d70555b79bd3c81f1b3f256591ec3d58d067d164789594d7b77d8ac3525f9fa174b40f2bdab0da0d3564d522c68c45923d47a3f69ce77017ded63e7c08541456dacd67f1e05772d8eee1f893a3e6355b9989e2e66bb6e9f96029d34c0dd5a36a633c16bf884dc9f5c5387ad85457e234e16a7262a3b4e55fa342917f1ee784afcb8fc720655c404ecfc4966b7820aadc986a617cf54a3b4848a4ba83fa9e8a938daabe4dd9d761d1edbc89de4b0d810972e6a6aea28985992cabea17a175eaf30dedd96e88773110332948773b33291f257867712c23b32798155a70ae62e3301d760ddc9f209ebec7c61004669434c4900f93c538af518e39d4aec775230bb1c3701cc73450b842e7722f82491bfa5afb022427d7e17e97c09ba4f56dea455c53a092c4cee7278dd17b03d7a5418ef7d8a2bc01d4e70fd1103ca3545587cff0a89bd195364d441846e9a74617866fc18ac0f8a23b7e2860ad8f92f4fc7cf5e76cf2ca9aeb6b8fbfc62a02fa72ada21010a1980d69819850d221e52c100675c8c010d82dde49367ab51b733f9bf07df24b9f7cc823779e59c52db0a7dd52196db3d1bed58bfc10d67760cd8904335623e68da2d9ad9a2407bc600c21e405886d0ff400de40f6499a6f41e0025f3594c110d8d425dd4853014e56416822e7d15ac57b999e547bf1dada4e4027cf30ebfdf1f5c7508049ccef8757d24a419f363c94fd842a815174a3d42b822223b1598d39a552f2d0c7054b246cd05d2e7cea678dee5b2aa6fcb8235845c05568305e26383973e8235340e08c96b06e96206c97878e653121cf37d1f2437c50c8a4f7b142e44e71a87f32962da482c42637cb46d6d0889476038d43afd2f524d129d5d65f3e6733208033372d50ed654a025f26c41fcd72be339ecdb5a744aba865a8a310640775154e611550f3878b83a05748cfb3916d1f96407d3bbdc1549e12bda2e7a6b81a8c65f570f04abcdb5eb79dc9500d3d3b27779fe94037386079d64a79c77256b4833645fcdd00c0fee9e3d56040e7f949722d9722c5d4b1c998ddb479c526e88ee88fb43a8f94d24ab649d479a8b0439127e21baa9c11361d57c2a8a9233bac26b406ea914fbe4323981ea4676b0313eb7a01d73"}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x20) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x24044080) sendmsg$key(0xffffffffffffffff, &(0x7f00000017c0)={0x3, 0x0, &(0x7f0000001800)={&(0x7f0000001840)={0x2, 0x6, 0x0, 0x2, 0x2, 0x0, 0x0, 0x40000}, 0x10}, 0x1, 0x7}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c0007", @ANYRESOCT=r0], 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 5m3.942636588s ago: executing program 32 (id=24): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[], 0x50) syz_emit_ethernet(0x76, &(0x7f0000001e00)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000001480)=0x50078, 0x4) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001fc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000021c0)={{}, r2, 0x4, @inherit={0x68, &(0x7f00000031c0)=ANY=[]}, @name="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"}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x20) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x24044080) sendmsg$key(0xffffffffffffffff, &(0x7f00000017c0)={0x3, 0x0, &(0x7f0000001800)={&(0x7f0000001840)={0x2, 0x6, 0x0, 0x2, 0x2, 0x0, 0x0, 0x40000}, 0x10}, 0x1, 0x7}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c0007", @ANYRESOCT=r0], 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2m35.707992735s ago: executing program 33 (id=216): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000840)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000940)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000009c0)='1', 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 2m19.686940008s ago: executing program 34 (id=232): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000840)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000009c0)='1', 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 2m7.191580294s ago: executing program 1 (id=256): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x38) syz_open_dev$swradio(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000001900)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$video(&(0x7f000001aa00), 0xb, 0x883c1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2m5.679842237s ago: executing program 1 (id=257): socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000300)='GPL\x00', 0x2, 0xba, &(0x7f00000003c0)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000540)=0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(r2, &(0x7f00000005c0)='task\x00') ioctl$KVM_CREATE_VM(r5, 0xae01, 0x16) connect$unix(r3, &(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000740), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000800)=0x2) recvmmsg(r3, &(0x7f0000000840), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000880)=ANY=[], 0xa99, &(0x7f00000008c0)='GPL\x00') r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000900)=[{{&(0x7f0000000980)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000a00)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000a40)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000b00)}}], 0x2, 0x0) mount(0x0, &(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0), 0x0, &(0x7f0000000f00)={[], [], 0x2f}) r7 = openat$binderfs_log(0xffffff9c, &(0x7f0000000f40)='./binderfs/binder_logs/state\x00', 0x0, 0x0) open_tree(r7, &(0x7f0000001dc0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x81100) openat$procfs(0xffffffffffffff9c, &(0x7f0000002dc0)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0x1, 0x1c, &(0x7f0000002ec0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000002fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m4.097611198s ago: executing program 1 (id=259): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1a0001) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x20002, 0x80) ioctl(r4, 0x40104d04, &(0x7f0000000180)="9c81") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') 2m2.98328626s ago: executing program 1 (id=260): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) syz_emit_ethernet(0x0, 0x0, 0x0) write$FUSE_LSEEK(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001a00)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001a40)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000001a80)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000001ac0), 0x0, 0x0) read$msr(r3, &(0x7f0000001b00)=""/102392, 0x18ff8) fcntl$getown(r2, 0x9) r4 = syz_usb_connect(0x3, 0x50, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000405205105500000102000109023e00010100803209040000040806620007050102"], 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_ep_read(r4, 0x1, 0x39, &(0x7f0000000500)=""/57) mount(&(0x7f00000002c0)=@filename='mtd0\x00', 0x0, 0x0, 0x82880a, 0x0) open(0x0, 0x4827e, 0x20) 1m58.598081595s ago: executing program 1 (id=263): socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000300)='GPL\x00', 0x2, 0xba, &(0x7f00000003c0)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(r2, &(0x7f00000005c0)='task\x00') ioctl$KVM_CREATE_VM(r5, 0xae01, 0x16) connect$unix(r3, &(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000740), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000800)=0x2) recvmmsg(r3, &(0x7f0000000840), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000880)=ANY=[], 0xa99, &(0x7f00000008c0)='GPL\x00') r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000900)=[{{&(0x7f0000000980)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000a00)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000a40)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000b00)}}], 0x2, 0x0) mount(0x0, &(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0), 0x0, &(0x7f0000000f00)={[], [], 0x2f}) r7 = openat$binderfs_log(0xffffff9c, &(0x7f0000000f40)='./binderfs/binder_logs/state\x00', 0x0, 0x0) open_tree(r7, &(0x7f0000001dc0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x81100) openat$procfs(0xffffffffffffff9c, &(0x7f0000002dc0)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0x1, 0x1c, &(0x7f0000002ec0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000002fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m57.158155061s ago: executing program 1 (id=265): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000840)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='tcp ', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000009c0)='1', 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 1m55.09385039s ago: executing program 35 (id=254): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000840)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000940), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000009c0)='1', 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 1m50.083437727s ago: executing program 36 (id=258): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000840)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000009c0)='1', 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 1m45.847563887s ago: executing program 6 (id=273): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0xaae, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r2, 0xc004ae0a, &(0x7f0000000180)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$tun(0xffffffffffffff9c, 0x0, 0xa0800, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x300000a, 0x5d032, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000780)='numa_maps\x00') read$FUSE(r3, &(0x7f0000000880)={0x2020}, 0x2020) 1m42.212534635s ago: executing program 6 (id=275): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x20002, 0x80) ioctl(r4, 0x40104d04, &(0x7f0000000180)="9c81") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') 1m41.794140607s ago: executing program 37 (id=265): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000840)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='tcp ', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000009c0)='1', 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 1m40.117726607s ago: executing program 6 (id=277): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYBLOB="010000"], 0x38}}, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000880), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000008c0), 0x2, 0x141102) writev(r2, &(0x7f0000000900)=[{&(0x7f0000000940)="94", 0xf000}, {0x0}], 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000b00)=0x200) write$dsp(r3, &(0x7f0000000b40)="5cba91a4", 0xffffffd9) 1m34.991953806s ago: executing program 6 (id=280): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYBLOB="01000000"], 0x38}}, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000880), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000008c0), 0x2, 0x141102) writev(r2, &(0x7f0000000900)=[{&(0x7f0000000940)="94", 0xf000}, {0x0}], 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000b00)=0x200) write$dsp(r3, &(0x7f0000000b40)="5cba91a4", 0xffffffd9) 1m30.696906081s ago: executing program 6 (id=285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000102050000000000000000000a0000003c0002802c00018014000300200174e500000000000000000000000214000400fe8000000000000000000000000000bb0c00028005"], 0x50}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x30}}, 0x4000100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaa1d931fc0b864aaaaaaaaaaaa00080045000070000040000001907864010100ac1414aa0b009078032f00004500000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300acec7f855a98c3eb00620bf1ec8c050c3f7d95411a5702e21cfd3ff5880905fa168a220000"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700), 0x48103, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000740), 0x2, 0x141102) writev(r2, &(0x7f0000000780)=[{&(0x7f00000007c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)}, 0x20004040) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001400), 0x4) symlinkat(&(0x7f0000001440)='.\x00', 0xffffffffffffff9c, &(0x7f0000001480)='./file1\x00') mkdir(&(0x7f0000000280)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x8, &(0x7f00000015c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$security_capability(0x0, &(0x7f0000001640), 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000001680)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000016c0)='./file0/file2\x00', 0x1000) sendmsg$inet(r4, &(0x7f0000001700)={&(0x7f0000001740)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000001780)={r4, r3}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000017c0)={r4}) syz_usb_connect(0x0, 0x32, &(0x7f0000001800)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) 1m26.37193241s ago: executing program 6 (id=287): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000840)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000009c0), 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 1m23.135326788s ago: executing program 9 (id=271): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x1000000000000007}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 1m22.22228617s ago: executing program 9 (id=298): socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000300)='GPL\x00', 0x2, 0xba, &(0x7f00000003c0)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(r2, &(0x7f00000005c0)='task\x00') ioctl$KVM_CREATE_VM(r5, 0xae01, 0x16) connect$unix(r3, &(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000740), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000800)=0x2) recvmmsg(r3, &(0x7f0000000840), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000880)=ANY=[], 0xa99, &(0x7f00000008c0)='GPL\x00') r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000900)=[{{&(0x7f0000000980)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000a00)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000a40)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000b00)}}], 0x2, 0x0) mount(0x0, &(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0), 0x0, &(0x7f0000000f00)={[], [], 0x2f}) r7 = openat$binderfs_log(0xffffff9c, &(0x7f0000000f40)='./binderfs/binder_logs/state\x00', 0x0, 0x0) open_tree(r7, &(0x7f0000001dc0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x81100) openat$procfs(0xffffffffffffff9c, &(0x7f0000002dc0)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0x1, 0x1c, &(0x7f0000002ec0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000002fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m21.916308471s ago: executing program 7 (id=300): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x138}, {&(0x7f0000000a00)="ab29d92826349952eb8f7a2a74f53504000000df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186", 0x8d}, {&(0x7f0000002200)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9", 0x1b}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1m21.043527659s ago: executing program 7 (id=301): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1a0001) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x20002, 0x80) ioctl(r5, 0x40104d04, &(0x7f0000000180)="9c81") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') 1m17.568355072s ago: executing program 7 (id=305): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/trace_marker\x00', 0x1, 0x1a) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x5) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000001c0)={0x0, 0x800, 0x9, 0xcffe, 0xe, "0062ba7d8200000016001b000200f705096604"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x18}, 0xa) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read(r0, &(0x7f00000011c0)=""/16384, 0x4000) 1m17.27979597s ago: executing program 9 (id=306): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x40, &(0x7f0000000100)=ANY=[], 0x4, 0xf82, &(0x7f0000000280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000001300)='./config\x00', &(0x7f0000001340)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 1m16.821355577s ago: executing program 9 (id=307): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYBLOB="01000000"], 0x38}}, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000880), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000008c0), 0x2, 0x141102) writev(r2, &(0x7f0000000900)=[{&(0x7f0000000940)="94", 0xf000}, {0x0}], 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000b00)=0x200) write$dsp(r3, &(0x7f0000000b40)="5cba91a4", 0xffffffd9) 1m16.784370191s ago: executing program 0 (id=276): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYBLOB="01000000"], 0x38}}, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000880), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000008c0), 0x2, 0x141102) writev(r2, &(0x7f0000000900)=[{&(0x7f0000000940)="94", 0xf000}, {0x0}], 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000b00)=0x200) write$dsp(r3, &(0x7f0000000b40)="5cba91a4", 0xffffffd9) 1m16.459645544s ago: executing program 7 (id=308): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x20002, 0x80) ioctl(r4, 0x40104d04, &(0x7f0000000180)="9c81") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') 1m14.288463784s ago: executing program 9 (id=310): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000002740)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) openat$dir(0xffffffffffffff9c, &(0x7f0000002780)='./file0\x00', 0x8880, 0x85) syz_ublk_setup_io_uring(0x20, &(0x7f00000027c0)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000002840), &(0x7f0000002880), &(0x7f00000028c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000002900)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002980)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000029c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000002a00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 1m13.263983218s ago: executing program 0 (id=311): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) syz_emit_ethernet(0x0, 0x0, 0x0) write$FUSE_LSEEK(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001a00)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001a40)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000001a80)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000001ac0), 0x0, 0x0) read$msr(r3, &(0x7f0000001b00)=""/102392, 0x18ff8) fcntl$getown(r2, 0x9) r4 = syz_usb_connect(0x3, 0x50, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000405205105500000102000109023e00010100803209040000040806620007050102"], 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_ep_read(r4, 0x1, 0x39, &(0x7f0000000500)=""/57) mount(&(0x7f00000002c0)=@filename='mtd0\x00', 0x0, 0x0, 0x82880a, 0x0) open(0x0, 0x4827e, 0x20) 1m12.494302425s ago: executing program 9 (id=313): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000840)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/threads\x00', 0x2, 0x0) write(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 1m12.000466816s ago: executing program 7 (id=314): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000900)=ANY=[], 0x31f4}], 0x1}, 0x14008010) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24054054, &(0x7f0000000140)={0xa, 0x4e1e, 0x0, @remote, 0x6}, 0x1e) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x14a40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000380)={0x3, {{0x2, 0x4e20, @multicast1}}}, 0x88) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000080)={0x4, [0x3, 0x2, 0x7, 0x5]}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102010100000000000000000a00"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1m10.586745979s ago: executing program 38 (id=287): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000840)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000009c0), 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 1m10.437214814s ago: executing program 7 (id=316): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000840)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000009c0), 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 1m9.218177847s ago: executing program 0 (id=317): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYBLOB], 0x38}}, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000880), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000008c0), 0x2, 0x141102) writev(r2, &(0x7f0000000900)=[{&(0x7f0000000940)="94", 0xf000}, {0x0}], 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000b00)=0x200) write$dsp(r3, &(0x7f0000000b40)="5cba91a4", 0xffffffd9) 1m5.027499762s ago: executing program 0 (id=320): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380100001000010000000000000000007f002001000000000000000000000000fe8000000000000000000000000000aa000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d232000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000100000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000034000100004032f909ac1414bbac1414aa000004d2"], 0x0) 1m4.766290918s ago: executing program 0 (id=321): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000840)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='tcp ', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000009c0)='1', 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 56.832571392s ago: executing program 39 (id=313): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000840)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/threads\x00', 0x2, 0x0) write(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 54.988061089s ago: executing program 40 (id=316): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000840)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000009c0), 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 49.668403398s ago: executing program 41 (id=321): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000840)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='tcp ', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000009c0)='1', 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 30.113762469s ago: executing program 5 (id=418): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x40, &(0x7f0000000100)=ANY=[], 0x4, 0xf82, &(0x7f0000000280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000001300)='./config\x00', &(0x7f0000001340)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0) write(r0, &(0x7f0000001400)="dd18", 0x2) 29.744196576s ago: executing program 5 (id=422): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000d"], 0x38}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x17}}) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000880), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000008c0), 0x2, 0x141102) writev(r3, &(0x7f0000000900)=[{&(0x7f0000000940)="94", 0xf000}, {0x0}], 0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000b00)=0x200) write$dsp(r4, &(0x7f0000000b40)="5cba91a4", 0xffffffd9) 25.66043735s ago: executing program 5 (id=434): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0xa, 0x3, 0x3a) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000002740)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) syz_ublk_setup_io_uring(0x20, &(0x7f00000027c0)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000002840), &(0x7f0000002880), &(0x7f00000028c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000002900)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002980)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000029c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000002a00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 23.826037846s ago: executing program 5 (id=436): openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611930000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 22.942510906s ago: executing program 5 (id=438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0, 0x31f4}], 0x1}, 0x14008010) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24054054, &(0x7f0000000140)={0xa, 0x4e1e, 0x0, @remote, 0x6}, 0x1e) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x14a40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000380)={0x3, {{0x2, 0x4e20, @multicast1}}}, 0x88) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22.60235268s ago: executing program 5 (id=442): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000840)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000009c0), 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 14.524206578s ago: executing program 8 (id=462): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380100001000010000000000000000007f002001000000000000000000000000fe8000000000000000000000000000aa00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d232000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000100000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003400"], 0x0) 14.284418123s ago: executing program 8 (id=467): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x20002, 0x80) ioctl(r4, 0x40104d04, &(0x7f0000000180)="9c81") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') 9.97366554s ago: executing program 4 (id=473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000102050000000000000000000a0000003c0002802c00018014000300200174e500000000000000000000000214000400fe8000000000000000000000000000bb0c00028005"], 0x50}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x30}}, 0x4000100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaa1d931fc0b864aaaaaaaaaaaa00080045000070000040000001907864010100ac1414aa0b009078032f00004500000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300acec7f855a98c3eb00620bf1ec8c050c3f7d95411a5702e21cfd3ff5880905fa168a220000"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700), 0x48103, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000740), 0x2, 0x141102) writev(r2, &(0x7f0000000780)=[{&(0x7f00000007c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)}, 0x20004040) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001400)={r6}, 0x4) symlinkat(&(0x7f0000001440)='.\x00', 0xffffffffffffff9c, &(0x7f0000001480)='./file1\x00') mkdir(&(0x7f0000000280)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x8, &(0x7f00000015c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$security_capability(0x0, &(0x7f0000001640), 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000001680)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000016c0)='./file0/file2\x00', 0x1000) sendmsg$inet(r5, &(0x7f0000001700)={&(0x7f0000001740)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000001780)={r5, r4}) syz_usb_connect(0x0, 0x32, &(0x7f0000001800)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) 9.761303651s ago: executing program 2 (id=474): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a80)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000b00)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000b80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x204}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdf0b, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 6.886351062s ago: executing program 42 (id=442): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000840)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000009c0), 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 6.616258649s ago: executing program 2 (id=477): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380100001000010000000000000000007f002001000000000000000000000000fe8000000000000000000000000000aa00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d232000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000100000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003400"], 0x0) 6.278909234s ago: executing program 2 (id=478): openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x8942) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611930000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 6.249344446s ago: executing program 3 (id=479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0, 0x31f4}], 0x1}, 0x14008010) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24054054, &(0x7f0000000140)={0xa, 0x4e1e, 0x0, @remote, 0x6}, 0x1e) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x14a40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000380)={0x3, {{0x2, 0x4e20, @multicast1}}}, 0x88) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.181668704s ago: executing program 4 (id=480): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1a0001) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x20002, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') 5.978417984s ago: executing program 2 (id=481): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0xa, 0x3, 0x3a) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000002740)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) syz_ublk_setup_io_uring(0x20, &(0x7f00000027c0)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, &(0x7f0000002880), &(0x7f00000028c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000002900)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002980)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000029c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000002a00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 5.905027681s ago: executing program 3 (id=482): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket(0x28, 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffff1f}, {}, {}, [], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x290, 0x290, 0x328, 0x98, 0x98, 0x420, 0x420, 0x420, 0x420, 0x420, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xfffb, 0xfff8}}}, {{@ip={@multicast2, @rand_addr=0x64010102, 0xff, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x16, 0x2, 0x4}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr=0x64010100, 0x0, 0x0, 'tunl0\x00', 'vlan0\x00', {}, {0xff}, 0x32, 0x2, 0x57}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x62, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x40, 0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x4, 0x1, 0x3, 0x7, 0x2], 0x3, 0x6}, {0x4, [0x0, 0x0, 0x0, 0x2, 0x0, 0x6], 0x4, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x48, 0x0, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}]}, 0x48}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) 5.064338317s ago: executing program 4 (id=483): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000d"], 0x38}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x17}}) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000880), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000008c0), 0x2, 0x141102) writev(r3, &(0x7f0000000900)=[{&(0x7f0000000940)="94", 0xf000}, {0x0}], 0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000b00)=0x200) write$dsp(r4, &(0x7f0000000b40)="5cba91a4", 0xffffffd9) 4.73487858s ago: executing program 8 (id=484): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000019840)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000440)=""/102392, 0x18ff8) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) 4.512166393s ago: executing program 2 (id=485): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/trace_marker\x00', 0x1, 0x1a) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x5) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000001c0)={0x0, 0x800, 0x9, 0xcffe, 0xe, "0062ba7d8200000016001b000200f705096604"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x18}, 0xa) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read(r0, &(0x7f00000011c0)=""/16384, 0x4000) 3.027746743s ago: executing program 4 (id=486): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a80)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000b00)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000b80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x204}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdf0b, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.95208578s ago: executing program 8 (id=487): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380100001000010000000000000000007f002001000000000000000000000000fe8000000000000000000000000000aa00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d232000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000100000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000034000100004032f909ac1414"], 0x0) 2.896277886s ago: executing program 4 (id=488): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dd4603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa89f69c47a63133708cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa84fcd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfde5f05af35a4ddd340cfecd7ec935f4ce7d3e", 0xea}, {&(0x7f0000000a00)="ab29d92826349952eb8f7a2a74f53504000000df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188902c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f8753816730559058dcec151c64a358f9f940f8d633a54bceb8b1", 0x109}, {&(0x7f0000002200)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd", 0x19}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.787049237s ago: executing program 4 (id=489): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x20002, 0x80) ioctl(r4, 0x40104d04, &(0x7f0000000180)="9c81") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') 2.726208343s ago: executing program 3 (id=490): openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x8942) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611930000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 2.520119495s ago: executing program 3 (id=491): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0, 0x31f4}], 0x1}, 0x14008010) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24054054, &(0x7f0000000140)={0xa, 0x4e1e, 0x0, @remote, 0x6}, 0x1e) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x14a40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000380)={0x3, {{0x2, 0x4e20, @multicast1}}}, 0x88) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.436428333s ago: executing program 2 (id=492): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) write$FUSE_LSEEK(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001a00)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001a40)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000001a80)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000001ac0), 0x0, 0x0) read$msr(r3, &(0x7f0000001b00)=""/102392, 0x18ff8) fcntl$getown(r2, 0x9) r4 = syz_usb_connect(0x3, 0x50, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000405205105500000102000109023e00010100803209040000040806620007050102"], 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_ep_read(r4, 0x1, 0x39, &(0x7f0000000500)=""/57) mount(&(0x7f00000002c0)=@filename='mtd0\x00', 0x0, 0x0, 0x82880a, 0x0) open(0x0, 0x4827e, 0x20) 2.116005305s ago: executing program 3 (id=493): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1a0001) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x20002, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') 1.012326357s ago: executing program 8 (id=494): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0xa, 0x3, 0x3a) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000002740)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) syz_ublk_setup_io_uring(0x20, &(0x7f00000027c0)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, &(0x7f0000002880), &(0x7f00000028c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000002900)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002980)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000029c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000002a00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 795.583439ms ago: executing program 3 (id=495): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000d"], 0x38}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x17}}) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000880), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000008c0), 0x2, 0x141102) writev(r3, &(0x7f0000000900)=[{&(0x7f0000000940)="94", 0xf000}, {0x0}], 0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000b00)=0x200) write$dsp(r4, &(0x7f0000000b40)="5cba91a4", 0xffffffd9) 0s ago: executing program 8 (id=496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000102050000000000000000000a0000003c0002802c00018014000300200174e500000000000000000000000214000400fe8000000000000000000000000000bb0c00028005"], 0x50}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000000008010800e2ffffff0000000a0000030900010073797a05000000213a0000000000da0ad84400000000000000b9247bd61093cdd83c105303653f68c9929ff1116dd8a79725e60066346e99d7862da5bdca116643f04183ac51024d290b7628d35cb9ea52ae4ee96cd56af3fd3af6a9d11208fa0d3bae430dfa7bbf19d825e25b2ff4d09996dccfeafeae336d62594e0165784d0721f44c1a801eb121a751e1505f237040cfde12be3684ea7eb161efc4c4c0d46c3b0cd93e6768bc93d9e6e87eb9e46fb08cef6b17ebede03549ed91ef24b5763d3a3cd95a0e741a125e383217605bd6d1ab65c0be1807324359747e53b10afda7d91f4ec2653e6301542af3f367ad4a7b048263cd76ffddf3411bf4fe1507108041c3763f0e74dc0bdba2867e42decee68c6d02ca2f19d605"], 0x30}}, 0x4000100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaa1d931fc0b864aaaaaaaaaaaa00080045000070000040000001907864010100ac1414aa0b009078032f00004500000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300acec7f855a98c3eb00620bf1ec8c050c3f7d95411a5702e21cfd3ff5880905fa168a220000"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700), 0x48103, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000740), 0x2, 0x141102) writev(r2, &(0x7f0000000780)=[{&(0x7f00000007c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001400)={r4}, 0x4) symlinkat(&(0x7f0000001440)='.\x00', 0xffffffffffffff9c, &(0x7f0000001480)='./file1\x00') mkdir(&(0x7f0000000280)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x8, &(0x7f00000015c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$security_capability(0x0, &(0x7f0000001640), 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000001680)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000016c0)='./file0/file2\x00', 0x1000) sendmsg$inet(r3, &(0x7f0000001700)={&(0x7f0000001740)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000001780)={r3}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000017c0)={r3}) syz_usb_connect(0x0, 0x32, &(0x7f0000001800)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) kernel console output (not intermixed with test programs): [ 269.206088][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.234901][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.255172][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.367760][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.756815][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.801166][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.815553][ T14] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 271.159953][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.336902][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.440703][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.551393][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.677285][ T5484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.687158][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.740836][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 271.804091][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.917327][ T5484] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.032876][ T5484] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.114322][ T5484] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.156428][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.171755][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.191674][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.232182][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.243567][ T50] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 272.255911][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.323142][ T5484] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.441241][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 272.451157][ T14] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 272.461041][ T14] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 272.476608][ T14] usb 5-1: string descriptor 0 read error: -71 [ 272.488935][ T14] usb 5-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 272.509615][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 272.542211][ T14] usb 5-1: can't set config #1, error -71 [ 272.564822][ T14] usb 5-1: USB disconnect, device number 4 [ 272.570976][ T5625] rxe_eth0 speed is unknown, defaulting to 1000 [ 272.717097][ T4566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.740660][ T4566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.782552][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 272.815319][ T4531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.831507][ T4531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.892412][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 274.335573][ T4296] Bluetooth: hci6: command 0x0409 tx timeout [ 276.415512][ T4296] Bluetooth: hci6: command 0x041b tx timeout [ 277.395664][ T14] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 278.495715][ T4296] Bluetooth: hci6: command 0x040f tx timeout [ 279.976310][ T5625] chnl_net:caif_netlink_parms(): no params data found [ 280.575836][ T4296] Bluetooth: hci6: command 0x0419 tx timeout [ 282.072939][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.120473][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.586999][ T5625] device bridge_slave_0 entered promiscuous mode [ 282.646058][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.663738][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.704442][ T5625] device bridge_slave_1 entered promiscuous mode [ 282.780943][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.896047][ T14] usb 7-1: device descriptor read/all, error -110 [ 282.903181][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.012160][ T5625] team0: Port device team_slave_0 added [ 283.038400][ T5625] team0: Port device team_slave_1 added [ 283.065598][ T14] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 283.150023][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.296472][ T5680] Invalid ELF header magic: != ELF [ 284.575674][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.602990][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.641627][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.675353][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.867249][ T26] audit: type=1800 audit(1794181005.883:9): pid=5689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.259" name="no_out_endpoint" dev="configfs" ino=39805 res=0 errno=0 [ 286.174401][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.316462][ T5625] device hsr_slave_0 entered promiscuous mode [ 286.340934][ T5625] device hsr_slave_1 entered promiscuous mode [ 286.375553][ T132] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 286.384326][ T5625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.393696][ T5625] Cannot create hsr debugfs directory [ 286.567219][ T132] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.588621][ T132] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 286.621419][ T132] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 286.646633][ T132] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 286.709014][ T132] usb 2-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 286.763302][ T132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 286.787084][ T5625] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 286.794803][ T132] usb 2-1: Product: syz [ 286.800057][ T132] usb 2-1: Manufacturer: syz [ 286.820740][ T5625] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 286.846455][ T5625] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 286.859272][ T5625] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 288.882028][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.044221][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.080055][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.162536][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.274472][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.316988][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.401102][ T4455] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.408293][ T4455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.550315][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.641141][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.687060][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.743607][ T4455] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.750817][ T4455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.870877][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.949414][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.989665][ T5242] usb 2-1: USB disconnect, device number 12 [ 290.020194][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.098206][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.148437][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 290.316548][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.555668][ T5720] Invalid ELF header magic: != ELF [ 291.488706][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 291.498844][ T5719] netlink: 16 bytes leftover after parsing attributes in process `syz.6.264'. [ 291.506204][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.545633][ T5625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.580556][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 291.975624][ T4495] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 292.974763][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 293.086225][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.138692][ T4495] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.174645][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.196795][ T4495] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 293.294088][ T4495] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 293.447060][ T4495] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 293.623273][ T4495] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 293.762209][ T4495] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.184217][ T4495] usb 7-1: USB disconnect, device number 4 [ 294.516363][ T5741] netlink: 16 bytes leftover after parsing attributes in process `syz.6.268'. [ 294.672671][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 294.684453][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 294.697388][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 294.715796][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 294.726791][ T50] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 294.737025][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 294.906069][ T14] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 295.020984][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.063897][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.160084][ T14] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.262252][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.274110][ T14] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 295.323800][ T5742] rxe_eth0 speed is unknown, defaulting to 1000 [ 295.363895][ T14] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 295.471042][ T14] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.611445][ T14] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 295.711421][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.816899][ T4296] Bluetooth: hci7: command 0x0409 tx timeout [ 297.557361][ T14] usb 7-1: USB disconnect, device number 5 [ 297.781414][ T5742] chnl_net:caif_netlink_parms(): no params data found [ 297.886373][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.893628][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.901963][ T5742] device bridge_slave_0 entered promiscuous mode [ 297.919453][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.927598][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.935349][ T5742] device bridge_slave_1 entered promiscuous mode [ 297.947345][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 297.960432][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 297.987887][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.002010][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.040374][ T5742] team0: Port device team_slave_0 added [ 298.049252][ T5742] team0: Port device team_slave_1 added [ 298.069499][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 298.078128][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.098041][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.106737][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.124523][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.132545][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.159300][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.170711][ T5625] device veth0_vlan entered promiscuous mode [ 298.179316][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.189949][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.221600][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.262310][ T5625] device veth1_vlan entered promiscuous mode [ 298.274356][ T5742] device hsr_slave_0 entered promiscuous mode [ 298.284388][ T5742] device hsr_slave_1 entered promiscuous mode [ 298.291384][ T5742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.299199][ T5742] Cannot create hsr debugfs directory [ 298.389172][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 298.397823][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 298.408120][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 298.418164][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 298.435717][ T5625] device veth0_macvtap entered promiscuous mode [ 298.470601][ T5625] device veth1_macvtap entered promiscuous mode [ 298.515321][ T5625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.540003][ T5625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.551700][ T5625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.563035][ T5625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.573820][ T5625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.597536][ T5625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.693954][ T5625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.725041][ T5625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.767126][ T5625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.777757][ T5625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.787752][ T5625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.798623][ T5625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.811560][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.826216][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 298.845567][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 298.853916][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 298.895670][ T4296] Bluetooth: hci7: command 0x041b tx timeout [ 298.915057][ T5771] Invalid ELF header magic: != ELF [ 299.000470][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.075093][ T5625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.163800][ T5625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.254433][ T5625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.342051][ T5625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.555732][ T5625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.595534][ T5625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.630687][ T5625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.664252][ T5774] netlink: 16 bytes leftover after parsing attributes in process `syz.6.272'. [ 299.665434][ T5625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.683218][ T5625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.693715][ T5625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.719490][ T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 299.720302][ T5625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.738432][ T5625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.760276][ T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 299.768745][ T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 299.777281][ T4293] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 299.784863][ T4293] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 299.794737][ T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 299.840517][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.881127][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 299.897783][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 300.043646][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 300.116530][ T7] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 300.331295][ T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.367950][ T7] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 300.452012][ T5625] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.512388][ T7] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 300.561402][ T5625] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.629923][ T7] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.683897][ T5625] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.769367][ T5625] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.792300][ T7] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 300.868355][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.902118][ T5742] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 300.976476][ T4296] Bluetooth: hci7: command 0x040f tx timeout [ 301.152413][ T5742] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 301.402219][ T5742] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 301.574643][ T5742] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 301.856363][ T4296] Bluetooth: hci8: command 0x0409 tx timeout [ 302.439255][ T4566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.516969][ T4566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.676174][ T5786] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 302.735591][ T7] usb 7-1: USB disconnect, device number 6 [ 302.819986][ T5786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.835707][ T5786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.865012][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 303.025937][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.055590][ T4296] Bluetooth: hci7: command 0x0419 tx timeout [ 303.322811][ T5731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.380506][ T5731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.505231][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.719449][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.774450][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.945861][ T4296] Bluetooth: hci8: command 0x041b tx timeout [ 303.965678][ T4493] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.972819][ T4493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.178643][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 304.252398][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.374045][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.473495][ T4493] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.480664][ T4493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.713721][ T5786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 304.782110][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 304.928727][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.156523][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 305.217878][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 305.318296][ T5795] loop7: detected capacity change from 0 to 4096 [ 305.458933][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 305.829822][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 305.860838][ T5798] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 305.915028][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.015482][ T4296] Bluetooth: hci8: command 0x040f tx timeout [ 306.124323][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.195199][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.338901][ T5625] NILFS (loop7): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 306.352056][ T5742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.417041][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.455491][ T5625] NILFS error (device loop7): nilfs_bmap_truncate: broken bmap (inode number=12) [ 306.478508][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.507719][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.518199][ T5625] Remounting filesystem read-only [ 306.523252][ T5625] NILFS (loop7): error -5 truncating bmap (ino=12) [ 306.576930][ T5625] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 306.646525][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.785534][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.857804][ T5775] device bridge_slave_0 entered promiscuous mode [ 306.916290][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.941900][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.960824][ T5812] Invalid ELF header magic: != ELF [ 306.977121][ T5775] device bridge_slave_1 entered promiscuous mode [ 307.091774][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.138838][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.281752][ T5775] team0: Port device team_slave_0 added [ 307.316427][ T5775] team0: Port device team_slave_1 added [ 307.408682][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.428896][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.541348][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.588162][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.595139][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.628021][ T26] audit: type=1800 audit(1794181028.643:10): pid=5824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.275" name="no_out_endpoint" dev="configfs" ino=40524 res=0 errno=0 [ 307.792198][ T50] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 307.802407][ T50] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 307.811816][ T50] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 307.821299][ T50] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 307.829361][ T50] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 307.838748][ T50] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 307.883616][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.999804][ T5775] device hsr_slave_0 entered promiscuous mode [ 308.014172][ T5775] device hsr_slave_1 entered promiscuous mode [ 308.036223][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.053586][ T5775] Cannot create hsr debugfs directory [ 308.105542][ T4296] Bluetooth: hci8: command 0x0419 tx timeout [ 308.111929][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.129964][ T5731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 308.140911][ T5731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 308.190373][ T5825] rxe_eth0 speed is unknown, defaulting to 1000 [ 308.617226][ T5775] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 308.647416][ T5775] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 308.682312][ T5775] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 308.819846][ T5775] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 309.855921][ T4296] Bluetooth: hci9: command 0x0409 tx timeout [ 310.691814][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.985129][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 311.030658][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 311.161850][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.364744][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 311.451867][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 311.571459][ T4443] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.578822][ T4443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.880733][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 311.936110][ T4296] Bluetooth: hci9: command 0x041b tx timeout [ 311.993040][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.096289][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.168057][ T4443] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.175176][ T4443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.290324][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 312.394309][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 312.877694][ T5731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 312.929684][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 312.948105][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.957358][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 312.968623][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 312.987388][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.075214][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.104458][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.305186][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 313.342379][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 313.601847][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.614791][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.628977][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.641060][ T5775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.653086][ T5742] device veth0_vlan entered promiscuous mode [ 313.714551][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 313.729818][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 313.803485][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 314.015578][ T4296] Bluetooth: hci9: command 0x040f tx timeout [ 315.113042][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.200535][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.223495][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.289323][ T5825] device bridge_slave_0 entered promiscuous mode [ 315.418748][ T5742] device veth1_vlan entered promiscuous mode [ 315.520745][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.567879][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.677679][ T5825] device bridge_slave_1 entered promiscuous mode [ 316.095462][ T4296] Bluetooth: hci9: command 0x0419 tx timeout [ 316.982684][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.991065][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.086876][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 317.095841][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 317.134711][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.166998][ T5742] device veth0_macvtap entered promiscuous mode [ 317.197140][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.230871][ T5742] device veth1_macvtap entered promiscuous mode [ 317.298954][ T5825] team0: Port device team_slave_0 added [ 317.308110][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.337950][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.348034][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.358896][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.370766][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.391718][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.412011][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.432837][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.453091][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.473946][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.486733][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.492489][ T5883] loop7: detected capacity change from 0 to 4096 [ 317.497793][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.515225][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.533450][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.557146][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.577353][ T5885] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 317.582183][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.614015][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.625173][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.636342][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.646677][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.675474][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.691527][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.705254][ T5625] NILFS (loop7): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 317.715046][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.725480][ T5625] NILFS error (device loop7): nilfs_bmap_truncate: broken bmap (inode number=12) [ 317.737185][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.741845][ T5625] Remounting filesystem read-only [ 317.749037][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.763489][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.774314][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.789528][ T5625] NILFS (loop7): error -5 truncating bmap (ino=12) [ 317.800062][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.822272][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.845935][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.846027][ T5625] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 317.876300][ T5825] team0: Port device team_slave_1 added [ 317.883082][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 317.926213][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 317.968315][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 317.984300][ T5889] netlink: 16 bytes leftover after parsing attributes in process `syz.6.285'. [ 317.991236][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 318.029466][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 318.057942][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 318.284642][ T5742] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.333938][ T5742] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.424682][ T5742] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.445769][ T4361] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 318.507027][ T5742] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.657945][ T4361] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.722526][ T4361] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 319.599208][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 319.714638][ T4361] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 320.208752][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.264239][ T4361] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.299681][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.316131][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.342200][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.395178][ T4361] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 320.438326][ T4361] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.580586][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.827895][ T132] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 321.170150][ T132] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.193292][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.241816][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.268219][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.301597][ T132] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 321.377187][ T132] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 321.447091][ T132] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 321.487768][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.586432][ T132] usb 8-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 321.605100][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.612209][ T4361] usb 7-1: USB disconnect, device number 7 [ 321.661395][ T132] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 321.694919][ T132] usb 8-1: Product: syz [ 321.715006][ T132] usb 8-1: Manufacturer: syz [ 321.848086][ T5825] device hsr_slave_0 entered promiscuous mode [ 321.867177][ T5825] device hsr_slave_1 entered promiscuous mode [ 321.886384][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.893998][ T5825] Cannot create hsr debugfs directory [ 321.913057][ T4422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.929688][ T4422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.966173][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 322.095665][ T4420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.103563][ T4420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.154730][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 322.551103][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 322.571790][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 322.722476][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 322.744313][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 322.910881][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 322.922324][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 322.943007][ T5775] device veth0_vlan entered promiscuous mode [ 323.072650][ T5775] device veth1_vlan entered promiscuous mode [ 323.148842][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 323.161222][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 323.183286][ T5775] device veth0_macvtap entered promiscuous mode [ 323.223769][ T5775] device veth1_macvtap entered promiscuous mode [ 323.270257][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.294724][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.317720][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.339371][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.356724][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.381105][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.395530][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.411158][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.435487][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.453829][ T4359] usb 8-1: USB disconnect, device number 2 [ 323.481498][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.492169][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.503359][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.514359][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.525638][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.539699][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.555968][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.585094][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.602361][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 323.627919][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 323.667315][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 323.698905][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 323.729906][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.753843][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.773000][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.803211][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.824141][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.845214][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.866185][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.884621][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.905847][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.927961][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.938850][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.949537][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.959922][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.973794][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.985807][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.002558][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.014095][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.028282][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 324.047723][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 324.069732][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 324.103712][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 324.141590][ T5775] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.155623][ T5775] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.164356][ T5775] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.195687][ T5775] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.212139][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 324.238886][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 325.239236][ T4420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.265819][ T4420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.280143][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 325.333433][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.351877][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.364906][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.373746][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 325.404003][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.418598][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.444691][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.463328][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 325.473367][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.482560][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.489746][ T5797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.511796][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 325.520579][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.530288][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.550237][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.557510][ T5797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.584462][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 325.608140][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 325.629039][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 325.651506][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 325.671570][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 325.702243][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 325.723329][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 325.742560][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 325.766920][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.801091][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 325.814405][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.837260][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 326.150477][ T5990] loop8: detected capacity change from 0 to 4096 [ 326.248359][ T5994] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 326.299690][ T5742] NILFS (loop8): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 326.343681][ T5742] NILFS error (device loop8): nilfs_bmap_truncate: broken bmap (inode number=12) [ 326.396856][ T5742] Remounting filesystem read-only [ 326.419676][ T5742] NILFS (loop8): error -5 truncating bmap (ino=12) [ 326.432053][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 326.451153][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.463484][ T5742] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer [ 326.491136][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.709569][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 326.738201][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 326.977585][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 327.029837][ T6011] Invalid ELF header magic: != ELF [ 327.055040][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 327.190589][ T5825] device veth0_vlan entered promiscuous mode [ 327.335128][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 327.410817][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 329.186421][ T5825] device veth1_vlan entered promiscuous mode [ 329.836542][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 329.891034][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 329.956299][ T5825] device veth0_macvtap entered promiscuous mode [ 329.978258][ T5825] device veth1_macvtap entered promiscuous mode [ 330.035242][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.089875][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.115456][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.165509][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.215638][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.255605][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.278242][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.309250][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.355508][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.395428][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.405284][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.485567][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.505436][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.525442][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.542413][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.579966][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.625454][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.655773][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.688796][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.747003][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 330.777759][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 330.836567][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 330.861548][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.882365][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.908852][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.937059][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.957179][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.985518][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.025125][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.065590][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.105440][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.129247][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.152538][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.175088][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.198548][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.215262][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.239746][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.264471][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.281458][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.305341][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.327842][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.340310][ T5731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 331.349844][ T5731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 331.368601][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.378235][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.387975][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.400345][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.517300][ T6043] loop9: detected capacity change from 0 to 4096 [ 331.536085][ T5731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.549427][ T5731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.584088][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 331.596005][ T6049] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 331.628589][ T26] audit: type=1800 audit(1794181052.643:11): pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.306" name="subclass" dev="configfs" ino=43407 res=0 errno=0 [ 331.649449][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.662415][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.704356][ T5731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 331.730790][ T5775] NILFS (loop9): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 331.765494][ T5775] NILFS error (device loop9): nilfs_bmap_truncate: broken bmap (inode number=12) [ 331.780708][ T5775] Remounting filesystem read-only [ 331.794333][ T5775] NILFS (loop9): error -5 truncating bmap (ino=12) [ 331.845685][ T5775] NILFS (loop9): disposed unprocessed dirty file(s) when detaching log writer [ 336.246893][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz.8.312'. [ 336.725509][ T4403] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 337.095840][ T4567] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 337.308410][ T4567] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.367734][ T4567] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 337.473242][ T4567] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 337.564114][ T4567] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.717331][ T4567] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 337.832324][ T4567] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.311521][ T4403] usb 1-1: device descriptor read/all, error -71 [ 341.002879][ T4567] usb 9-1: USB disconnect, device number 2 [ 342.651803][ T4293] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 342.760897][ T4293] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 342.770306][ T4293] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 342.779144][ T4293] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 342.787427][ T4293] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 342.794873][ T4293] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 342.861422][ T6110] rxe_eth0 speed is unknown, defaulting to 1000 [ 343.005967][ T6118] Invalid ELF header magic: != ELF [ 343.406431][ T6110] chnl_net:caif_netlink_parms(): no params data found [ 343.640806][ T6110] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.675657][ T6110] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.712993][ T6110] device bridge_slave_0 entered promiscuous mode [ 343.719907][ T6130] netlink: 72 bytes leftover after parsing attributes in process `syz.0.320'. [ 343.747992][ T6110] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.765318][ T6110] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.797457][ T6110] device bridge_slave_1 entered promiscuous mode [ 343.876394][ T6110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.918205][ T6110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.967828][ T6110] team0: Port device team_slave_0 added [ 343.989152][ T6110] team0: Port device team_slave_1 added [ 344.021534][ T6110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.035540][ T6110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.089979][ T6110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.119384][ T6110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.137002][ T6110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.168489][ T6110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.250806][ T6110] device hsr_slave_0 entered promiscuous mode [ 344.267371][ T6110] device hsr_slave_1 entered promiscuous mode [ 344.282003][ T6110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.301456][ T6110] Cannot create hsr debugfs directory [ 344.578751][ T6110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.699340][ T6110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.817858][ T4293] Bluetooth: hci10: command 0x0409 tx timeout [ 344.835927][ T6110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.940310][ T6110] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.319277][ T6110] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 345.478308][ T6110] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 345.596713][ T6110] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 345.718258][ T6110] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 346.010346][ T6110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.046326][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 346.054301][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 346.077077][ T6110] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.103682][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 346.113493][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 346.122240][ T4422] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.129412][ T4422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.151643][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 346.160114][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 346.172630][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 346.182436][ T4422] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.189612][ T4422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.200273][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 346.220275][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 346.230428][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 346.251585][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 346.266215][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 346.280700][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 346.299814][ T6110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 346.310410][ T6110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.335588][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 346.349419][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 346.358474][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 346.369996][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 346.379064][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 346.393578][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 346.677596][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 346.685120][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 346.701774][ T6110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.758733][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 346.774878][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 346.797953][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 346.810163][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 346.832775][ T6110] device veth0_vlan entered promiscuous mode [ 346.843428][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 346.862834][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 346.888016][ T6110] device veth1_vlan entered promiscuous mode [ 346.895840][ T50] Bluetooth: hci10: command 0x041b tx timeout [ 346.940506][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 346.952534][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 346.977396][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 346.997352][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 347.018192][ T6110] device veth0_macvtap entered promiscuous mode [ 347.039745][ T6110] device veth1_macvtap entered promiscuous mode [ 347.076465][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.095062][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.110995][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.133617][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.153312][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.178079][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.197511][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.218402][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.235865][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.246480][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.256466][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.267069][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.281160][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.291689][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.303205][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.315832][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.325715][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.336266][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.346388][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.356889][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.374513][ T6110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.390586][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 347.405140][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 347.420087][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 347.429562][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 347.444250][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.465705][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.477235][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.487722][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.497611][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.508246][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.519492][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.531627][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.565453][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.580595][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.590602][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.601109][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.610960][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.621779][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.632942][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.645185][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.656340][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.666935][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.676910][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.690443][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.723947][ T6110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.755922][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 347.765308][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.790833][ T6110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.806136][ T6110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.814879][ T6110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.847820][ T6110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.981590][ T4421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.004390][ T4421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.030224][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 348.067861][ T4560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.091777][ T6210] netlink: 72 bytes leftover after parsing attributes in process `syz.8.330'. [ 348.096190][ T4560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.122077][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 348.359331][ T6217] loop8: detected capacity change from 0 to 4096 [ 348.459717][ T6221] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 348.486393][ T26] audit: type=1800 audit(1794181069.503:12): pid=6217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.331" name="subclass" dev="configfs" ino=44647 res=0 errno=0 [ 348.506560][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.518635][ T5742] NILFS (loop8): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 348.554808][ T5742] NILFS error (device loop8): nilfs_bmap_truncate: broken bmap (inode number=12) [ 348.570613][ T5742] Remounting filesystem read-only [ 348.593836][ T5742] NILFS (loop8): error -5 truncating bmap (ino=12) [ 348.621205][ T5742] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer [ 348.996674][ T50] Bluetooth: hci10: command 0x040f tx timeout [ 350.771763][ T6260] netlink: 72 bytes leftover after parsing attributes in process `syz.2.341'. [ 351.055624][ T50] Bluetooth: hci10: command 0x0419 tx timeout [ 351.991828][ T6298] loop8: detected capacity change from 0 to 4096 [ 352.069800][ T6300] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 352.111866][ T26] audit: type=1800 audit(1794181073.123:13): pid=6298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.346" name="subclass" dev="configfs" ino=43760 res=0 errno=0 [ 352.225881][ T5742] NILFS (loop8): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 352.235152][ T5742] NILFS error (device loop8): nilfs_bmap_truncate: broken bmap (inode number=12) [ 352.255707][ T4293] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 352.266001][ T4293] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 352.274554][ T4293] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 352.283322][ T4293] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 352.293071][ T4293] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 352.301776][ T5742] Remounting filesystem read-only [ 352.307881][ T5742] NILFS (loop8): error -5 truncating bmap (ino=12) [ 352.307904][ T4293] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 352.367457][ T5742] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer [ 352.457309][ T6302] rxe_eth0 speed is unknown, defaulting to 1000 [ 353.830757][ T6302] chnl_net:caif_netlink_parms(): no params data found [ 353.988276][ T6302] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.995472][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.003781][ T6302] device bridge_slave_0 entered promiscuous mode [ 354.013331][ T6302] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.020725][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.030534][ T6302] device bridge_slave_1 entered promiscuous mode [ 354.056473][ T6302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.068937][ T6302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.099688][ T6302] team0: Port device team_slave_0 added [ 354.107825][ T6302] team0: Port device team_slave_1 added [ 354.135718][ T6302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.142717][ T6302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.235676][ T6302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.263300][ T6302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.281319][ T6302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.382515][ T6302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.394054][ T50] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 354.403773][ T50] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 354.412495][ T50] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 354.422743][ T50] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 354.429843][ T4296] Bluetooth: hci11: command 0x0409 tx timeout [ 354.442144][ T4281] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 354.451706][ T4281] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 354.572234][ T6342] rxe_eth0 speed is unknown, defaulting to 1000 [ 354.598895][ T6302] device hsr_slave_0 entered promiscuous mode [ 354.627800][ T6302] device hsr_slave_1 entered promiscuous mode [ 354.658658][ T6302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.695569][ T6302] Cannot create hsr debugfs directory [ 354.915705][ T26] audit: type=1800 audit(1794181075.893:14): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.354" name="no_out_endpoint" dev="configfs" ino=43879 res=0 errno=0 [ 354.936560][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.616646][ T4293] Bluetooth: hci5: command 0x0406 tx timeout [ 355.908251][ T6302] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.496270][ T4296] Bluetooth: hci12: command 0x0409 tx timeout [ 356.505830][ T4296] Bluetooth: hci11: command 0x041b tx timeout [ 356.512962][ T6302] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.527540][ T6342] chnl_net:caif_netlink_parms(): no params data found [ 356.698815][ T6302] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.757611][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.785277][ T6342] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.802296][ T6342] device bridge_slave_0 entered promiscuous mode [ 356.875772][ T6302] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.915799][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.923358][ T6342] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.947795][ T6342] device bridge_slave_1 entered promiscuous mode [ 357.002983][ T6342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.058991][ T6342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.139302][ T6342] team0: Port device team_slave_0 added [ 357.177154][ T6342] team0: Port device team_slave_1 added [ 357.180350][ T6390] loop8: detected capacity change from 0 to 4096 [ 357.243018][ T6395] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 357.260938][ T6342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.269916][ T26] audit: type=1800 audit(1794181078.283:15): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.361" name="subclass" dev="configfs" ino=45168 res=0 errno=0 [ 357.299496][ T6342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.325416][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.355027][ T5742] NILFS (loop8): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 357.375048][ T6342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.375517][ T5742] NILFS error (device loop8): nilfs_bmap_truncate: broken bmap (inode number=12) [ 357.414941][ T5742] Remounting filesystem read-only [ 357.427681][ T6342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.433914][ T5742] NILFS (loop8): error -5 truncating bmap (ino=12) [ 357.456799][ T6342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.526162][ T5742] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer [ 357.563303][ T6342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.582761][ T6302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 357.627328][ T6302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 357.668371][ T6302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 357.678739][ T6302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 357.703807][ T6342] device hsr_slave_0 entered promiscuous mode [ 357.756928][ T6342] device hsr_slave_1 entered promiscuous mode [ 357.770602][ T6342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.803836][ T6342] Cannot create hsr debugfs directory [ 358.088057][ T6302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.131998][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 358.738667][ T4296] Bluetooth: hci11: command 0x040f tx timeout [ 358.740053][ T4293] Bluetooth: hci12: command 0x041b tx timeout [ 358.760121][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 358.780293][ T6302] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.813650][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 358.837253][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 358.856413][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.863542][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.881705][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 358.890266][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 358.916914][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 358.957455][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.964595][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.998905][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 359.101494][ T6342] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.154248][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 359.167109][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 359.187875][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 359.220480][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 359.237302][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 359.256411][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 359.288630][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 359.309042][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 359.322365][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 359.334064][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 359.376206][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 359.436607][ T6342] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.573646][ T6342] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.620914][ T4296] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 359.631558][ T4296] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 359.639667][ T4296] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 359.656367][ T4281] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 359.668260][ T4281] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 359.681074][ T4281] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 359.749921][ T6342] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.812389][ T6434] rxe_eth0 speed is unknown, defaulting to 1000 [ 360.054301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 360.076031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 360.109554][ T6302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.141970][ T6342] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 360.188094][ T6342] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 360.210553][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 360.228670][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 360.268644][ T6342] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 360.311799][ T6342] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 360.351035][ T6302] device veth0_vlan entered promiscuous mode [ 360.369844][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 360.381974][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 360.417086][ T6302] device veth1_vlan entered promiscuous mode [ 360.456567][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 360.465210][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 360.486161][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 360.619826][ T6455] loop8: detected capacity change from 0 to 4096 [ 360.641322][ T6302] device veth0_macvtap entered promiscuous mode [ 360.708239][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 360.729337][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 360.774612][ T6461] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 360.781979][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 360.804218][ T26] audit: type=1800 audit(1794181081.813:16): pid=6455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.373" name="subclass" dev="configfs" ino=45455 res=0 errno=0 [ 360.830025][ T4293] Bluetooth: hci12: command 0x040f tx timeout [ 360.836274][ T4293] Bluetooth: hci11: command 0x0419 tx timeout [ 360.865018][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 360.896177][ T5742] NILFS (loop8): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 360.920770][ T6302] device veth1_macvtap entered promiscuous mode [ 360.946851][ T5742] NILFS error (device loop8): nilfs_bmap_truncate: broken bmap (inode number=12) [ 360.962015][ T6434] chnl_net:caif_netlink_parms(): no params data found [ 361.006593][ T5742] Remounting filesystem read-only [ 361.011673][ T5742] NILFS (loop8): error -5 truncating bmap (ino=12) [ 361.087493][ T5742] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer [ 361.099022][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.138931][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.158425][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.187729][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.222614][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.245570][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.275563][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.305696][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.335708][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.375836][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.401679][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.698089][ T4281] Bluetooth: hci13: command 0x0409 tx timeout [ 361.756847][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.933392][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.096695][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.139352][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.174596][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.245577][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.265425][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.283320][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.294044][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.304157][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.316613][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.356458][ T6302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.369179][ T6342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.410410][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 362.425745][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 362.447523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 362.483507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 362.500683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 362.514484][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.526469][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.536662][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.547907][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.560081][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.570954][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.581068][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.591864][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.602022][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.612706][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.623188][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.635373][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.645705][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.656589][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.683298][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.695941][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.695962][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.695978][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.695993][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.696004][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.696019][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.696040][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.697509][ T6302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.499224][ T4281] Bluetooth: hci12: command 0x0419 tx timeout [ 363.566954][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 363.596108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 363.618487][ T6302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.633601][ T6302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.642498][ T6302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.655652][ T6302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.678356][ T6342] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.706056][ T6434] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.713402][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.722780][ T6434] device bridge_slave_0 entered promiscuous mode [ 363.750695][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 363.763260][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 363.773176][ T4385] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.775638][ T4293] Bluetooth: hci13: command 0x041b tx timeout [ 363.780303][ T4385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.811635][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 363.836855][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.844073][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.863282][ T6434] device bridge_slave_1 entered promiscuous mode [ 363.885246][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 363.897206][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 363.907199][ T4692] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.914291][ T4692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.922901][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 364.000610][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 364.016726][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 364.055908][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 364.086592][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 364.118209][ T6434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.168278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 364.197011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 364.238638][ T6434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.258766][ T6514] loop2: detected capacity change from 0 to 4096 [ 364.287236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 364.321632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 364.323677][ T6518] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 364.354044][ T26] audit: type=1800 audit(1794181085.363:17): pid=6514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.382" name="subclass" dev="configfs" ino=45678 res=0 errno=0 [ 364.406290][ T4531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.434893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 364.454853][ T4531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.458161][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 364.488054][ T6110] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 364.529374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 364.557999][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 364.576101][ T6110] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=12) [ 364.591056][ T6434] team0: Port device team_slave_0 added [ 364.597794][ T6110] Remounting filesystem read-only [ 364.602850][ T6110] NILFS (loop2): error -5 truncating bmap (ino=12) [ 364.641809][ T6434] team0: Port device team_slave_1 added [ 364.662614][ T4692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.679757][ T6110] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 364.695621][ T4692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.743772][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 364.786795][ T6434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.793771][ T6434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.819693][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.905632][ T6434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.988023][ T6434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.995010][ T6434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.020942][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.105564][ T6434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.204805][ T6434] device hsr_slave_0 entered promiscuous mode [ 365.256652][ T6434] device hsr_slave_1 entered promiscuous mode [ 365.286027][ T6434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.322421][ T6434] Cannot create hsr debugfs directory [ 366.099681][ T4281] Bluetooth: hci13: command 0x040f tx timeout [ 366.190953][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 366.211120][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 366.290842][ T6342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.555322][ T6434] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.686775][ T6434] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.806005][ T6434] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.907109][ T6434] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.055311][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 367.093741][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 367.171244][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 367.186908][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 367.206196][ T6342] device veth0_vlan entered promiscuous mode [ 367.242563][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 367.256356][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 367.289064][ T6342] device veth1_vlan entered promiscuous mode [ 367.310415][ T6434] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 367.344735][ T6434] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 367.362767][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 367.386529][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 367.407861][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 367.432412][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 367.456672][ T6434] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 367.478658][ T6434] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 367.499426][ T6342] device veth0_macvtap entered promiscuous mode [ 367.526405][ T6577] loop8: detected capacity change from 0 to 4096 [ 367.565980][ T6342] device veth1_macvtap entered promiscuous mode [ 367.598438][ T6585] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 367.664030][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.674747][ T26] audit: type=1800 audit(1794181088.673:18): pid=6577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.394" name="subclass" dev="configfs" ino=45929 res=0 errno=0 [ 367.696994][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.707066][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.717690][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.728397][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.739267][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.750746][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.772304][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.785615][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.806359][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.823278][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.827295][ T5742] NILFS (loop8): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 367.846300][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.858710][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.869500][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.890279][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.893857][ T5742] NILFS error (device loop8): nilfs_bmap_truncate: broken bmap (inode number=12) [ 367.915469][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.935715][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.939492][ T5742] Remounting filesystem read-only [ 367.967058][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.971714][ T5742] NILFS (loop8): error -5 truncating bmap (ino=12) [ 367.992470][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.013066][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.033183][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.053937][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.085474][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.105487][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.124906][ T5742] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer [ 368.126873][ T6342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.179309][ T4281] Bluetooth: hci13: command 0x0419 tx timeout [ 368.221148][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 368.244586][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 368.307676][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 368.332356][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 368.422020][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.460493][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.630877][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.795208][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.282646][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.398083][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.529701][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.649397][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.767910][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.894191][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.035547][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.164294][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.265291][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.363067][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.471200][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.590104][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.684471][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.787043][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.879216][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.980139][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.070127][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.171848][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.279740][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.371411][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.387456][ T6342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.422007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 371.471144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 371.611398][ T6342] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.685539][ T6342] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.741052][ T6342] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.807683][ T6342] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.418486][ T6434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.512522][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 372.536447][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 372.562820][ T6434] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.590572][ T4371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.612734][ T4371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.617706][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 372.636299][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 372.652902][ T4566] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.661448][ T4566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.692459][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 372.706657][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 372.721419][ T4566] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.728607][ T4566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.739758][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 372.775128][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 372.783488][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 372.793841][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 372.804916][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 372.823431][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 372.874417][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 372.886940][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 372.900668][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 372.911212][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 372.913738][ T6629] loop3: detected capacity change from 0 to 4096 [ 372.920605][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 372.934531][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 372.945038][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 372.960731][ T6434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 372.984046][ T4443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.000876][ T4443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.020762][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 373.068397][ T6631] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 373.108136][ T26] audit: type=1800 audit(1794181094.123:19): pid=6629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.407" name="subclass" dev="configfs" ino=48293 res=0 errno=0 [ 373.158529][ T6302] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 373.180619][ T6302] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12) [ 373.207009][ T6302] Remounting filesystem read-only [ 373.212083][ T6302] NILFS (loop3): error -5 truncating bmap (ino=12) [ 373.241407][ T6302] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 377.121575][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 377.130476][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 377.147705][ T6434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.420305][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.427228][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.598834][ T6676] loop5: detected capacity change from 0 to 4096 [ 378.688810][ T26] audit: type=1800 audit(1794181099.703:20): pid=6676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.418" name="subclass" dev="configfs" ino=47577 res=0 errno=0 [ 378.710963][ T6680] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 378.802697][ T6342] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 379.162089][ T6342] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=12) [ 379.586529][ T6342] Remounting filesystem read-only [ 379.591765][ T6342] NILFS (loop5): error -5 truncating bmap (ino=12) [ 379.658050][ T6342] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 379.707551][ T5848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.728406][ T5848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.783561][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 379.820520][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 379.860730][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 379.876100][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 379.946817][ T6434] device veth0_vlan entered promiscuous mode [ 380.414375][ T6434] device veth1_vlan entered promiscuous mode [ 380.500297][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 380.515370][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 380.528733][ T6709] netlink: 16 bytes leftover after parsing attributes in process `syz.3.430'. [ 380.533536][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 380.636511][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.768888][ T6434] device veth0_macvtap entered promiscuous mode [ 380.877594][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 380.996071][ T6434] device veth1_macvtap entered promiscuous mode [ 381.006150][ T5242] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 381.228519][ T5242] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.292999][ T5242] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 381.319227][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.410888][ T5242] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 381.440703][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.499165][ T5242] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.520899][ T6714] netlink: 16 bytes leftover after parsing attributes in process `syz.8.432'. [ 381.539758][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.863197][ T5242] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 381.920391][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.375011][ T5242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.389396][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.541182][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.713610][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.834836][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.995036][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.156388][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.300928][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.435022][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.558438][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.678492][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.845621][ T5242] usb 4-1: USB disconnect, device number 7 [ 383.853273][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.885522][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.895950][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.906493][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.916774][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.930612][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.940949][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.951572][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.961493][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.972041][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.993643][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.004287][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.430335][ T6434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.527041][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.581573][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.635764][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.755452][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.800154][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.818421][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.829047][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.860089][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.870295][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.882203][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.892179][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.912629][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.922623][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.933219][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.943244][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.991547][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.035708][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.132197][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.142232][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.230048][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.275844][ T132] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 385.304467][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.317722][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.414960][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.485567][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.499243][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.527738][ T132] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.545522][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.556061][ T132] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 385.574435][ T6434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.586059][ T132] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 385.599748][ T6434] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.615602][ T132] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 385.637654][ T6434] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.660478][ T6434] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.680307][ T132] usb 3-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 385.715494][ T132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 385.723534][ T132] usb 3-1: Product: syz [ 385.727991][ T6434] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.749834][ T5731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 385.756018][ T132] usb 3-1: Manufacturer: syz [ 385.767622][ T5731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 385.797367][ T5731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 385.841783][ T5731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 385.991461][ T5731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.017503][ T5731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.051266][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 386.113474][ T4461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.122538][ T4461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.131269][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 387.306275][ T26] audit: type=1800 audit(1794181107.683:21): pid=6756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.369" name="no_out_endpoint" dev="configfs" ino=48801 res=0 errno=0 [ 388.510982][ T5242] usb 3-1: USB disconnect, device number 3 [ 388.597756][ T26] audit: type=1800 audit(1794181109.613:22): pid=6773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.445" name="no_out_endpoint" dev="configfs" ino=47916 res=0 errno=0 [ 391.433745][ T26] audit: type=1800 audit(1794181111.773:23): pid=6803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.456" name="no_out_endpoint" dev="configfs" ino=48875 res=0 errno=0 [ 392.015968][ T4362] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 392.216893][ T4362] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.285121][ T4362] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 392.556995][ T4362] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 392.851267][ T4362] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 392.962811][ T4362] usb 3-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 393.020091][ T4362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 393.045497][ T4362] usb 3-1: Product: syz [ 393.070066][ T4362] usb 3-1: Manufacturer: syz [ 394.070148][ T5242] usb 3-1: USB disconnect, device number 4 [ 394.533965][ T26] audit: type=1800 audit(1794181115.543:24): pid=6837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.467" name="no_out_endpoint" dev="configfs" ino=49172 res=0 errno=0 [ 396.055667][ T4293] Bluetooth: hci6: command 0x0406 tx timeout [ 396.971737][ T6852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.472'. [ 397.355948][ T6104] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 398.637579][ T6104] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.705040][ T6104] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 398.804059][ T6104] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 398.923556][ T6104] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.069814][ T6104] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 399.160770][ T6104] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.005678][ T132] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 401.115581][ T6104] usb 4-1: USB disconnect, device number 8 [ 401.317737][ T132] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.420918][ T132] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 401.574067][ T132] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 401.767263][ T132] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 401.988352][ T132] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 402.158996][ T132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.397008][ T132] usb 5-1: USB disconnect, device number 5 [ 404.487283][ T4281] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 405.047074][ T4281] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 405.057814][ T4281] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 405.068360][ T4281] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 405.078057][ T4281] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 405.201095][ T4281] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 405.623651][ T6893] rxe_eth0 speed is unknown, defaulting to 1000 [ 406.119084][ T26] audit: type=1800 audit(1794181127.133:25): pid=6908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.489" name="no_out_endpoint" dev="configfs" ino=49324 res=0 errno=0 [ 406.186101][ T6893] chnl_net:caif_netlink_parms(): no params data found [ 406.925160][ T6893] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.963359][ T6893] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.001325][ T2170] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 407.009158][ T6893] device bridge_slave_0 entered promiscuous mode [ 407.024137][ T6893] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.057059][ T6893] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.089931][ T6893] device bridge_slave_1 entered promiscuous mode [ 407.758545][ T4293] Bluetooth: hci14: command 0x0409 tx timeout [ 407.848361][ T6893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.017508][ T6893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.675482][ T6893] team0: Port device team_slave_0 added [ 408.705954][ T6893] team0: Port device team_slave_1 added [ 408.726474][ T6935] netlink: 16 bytes leftover after parsing attributes in process `syz.8.496'. [ 409.775895][ T28] INFO: task syz.3.232:5477 blocked for more than 143 seconds. [ 409.783626][ T28] Not tainted syzkaller #0 [ 409.855816][ T4293] Bluetooth: hci14: command 0x041b tx timeout [ 410.492014][ T2170] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 410.500042][ T2170] usb 3-1: can't read configurations, error -71 [ 410.523822][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.543580][ T28] task:syz.3.232 state:D stack:27056 pid:5477 ppid:4287 flags:0x00004004 [ 410.554891][ T28] Call Trace: [ 410.558455][ T28] [ 410.562357][ T28] __schedule+0x1089/0x4140 [ 410.567371][ T28] ? release_firmware_map_entry+0x187/0x187 [ 410.573437][ T28] ? __mutex_trylock_common+0x86/0x260 [ 410.579237][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 410.585840][ T28] schedule+0xb9/0x180 [ 410.590449][ T28] schedule_preempt_disabled+0xf/0x20 [ 410.596297][ T28] __mutex_lock+0x562/0xb40 [ 410.601052][ T28] ? __mutex_lock+0x3ba/0xb40 [ 410.725558][ T28] ? write_ports+0xb3/0xb80 [ 410.730250][ T28] ? mutex_lock_nested+0x10/0x10 [ 410.735215][ T28] write_ports+0xb3/0xb80 [ 410.739693][ T28] ? write_versions+0xbb0/0xbb0 [ 410.744679][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 410.749787][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 410.754844][ T28] ? __might_fault+0xc2/0x120 [ 410.760877][ T28] ? __might_fault+0xa6/0x120 [ 410.765600][ T28] ? _copy_from_user+0x10b/0x170 [ 410.770719][ T28] ? simple_transaction_get+0x119/0x140 [ 410.776403][ T28] nfsctl_transaction_write+0x105/0x150 [ 410.781965][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 410.939762][ T28] vfs_write+0x2dc/0x9a0 [ 410.944168][ T28] ? file_end_write+0x250/0x250 [ 410.968033][ T28] ? __fget_files+0x28/0x460 [ 410.972999][ T28] ? __fget_files+0x3fc/0x460 [ 410.978292][ T28] ? __fdget_pos+0x2ae/0x360 [ 410.983073][ T28] ? ksys_write+0x70/0x260 [ 410.987724][ T28] ksys_write+0x14d/0x260 [ 410.992229][ T28] ? __ia32_sys_read+0x80/0x80 [ 410.997251][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 411.002685][ T28] do_syscall_64+0x4c/0xa0 [ 411.007351][ T28] ? clear_bhb_loop+0x60/0xb0 [ 411.012258][ T28] ? clear_bhb_loop+0x60/0xb0 [ 411.020566][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.037926][ T28] RIP: 0033:0x7f08ac19fb19 [ 411.042573][ T28] RSP: 002b:00007f08ad038028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 411.051247][ T28] RAX: ffffffffffffffda RBX: 00007f08ac425fa0 RCX: 00007f08ac19fb19 [ 411.061103][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 411.071163][ T28] RBP: 00007f08ac237b70 R08: 0000000000000000 R09: 0000000000000000 [ 411.079546][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.087736][ T28] R13: 00007f08ac426038 R14: 00007f08ac425fa0 R15: 00007fffa92f5b68 [ 411.095896][ T28] [ 411.099064][ T28] INFO: task syz.3.232:5478 blocked for more than 144 seconds. [ 411.108396][ T6893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.115354][ T6893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.115535][ T28] Not tainted syzkaller #0 [ 411.146553][ T6893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.159194][ T6893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.168122][ T6893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.194347][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.203173][ T28] task:syz.3.232 state:D stack:27056 pid:5478 ppid:4287 flags:0x00004004 [ 411.212503][ T6893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.223126][ T28] Call Trace: [ 411.226529][ T28] [ 411.229480][ T28] __schedule+0x1089/0x4140 [ 411.234032][ T28] ? release_firmware_map_entry+0x187/0x187 [ 411.250309][ T28] ? __mutex_trylock_common+0x86/0x260 [ 411.255972][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 411.262164][ T28] schedule+0xb9/0x180 [ 411.283310][ T28] schedule_preempt_disabled+0xf/0x20 [ 411.288918][ T28] __mutex_lock+0x562/0xb40 [ 411.293445][ T28] ? __mutex_lock+0x3ba/0xb40 [ 411.298696][ T28] ? nfsd_svc+0x61/0xab0 [ 411.302977][ T28] ? mutex_lock_nested+0x10/0x10 [ 411.310230][ T28] ? net_generic+0x1e/0x240 [ 411.314760][ T28] ? net_generic+0x1e/0x240 [ 411.315544][ T6716] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 411.319357][ T28] nfsd_svc+0x61/0xab0 [ 411.339139][ T28] ? qword_get+0x5a5/0x640 [ 411.343672][ T28] write_threads+0x2ea/0x350 [ 411.362990][ T28] ? write_unlock_fs+0x1f0/0x1f0 [ 411.376718][ T28] ? __might_fault+0xc2/0x120 [ 411.387004][ T28] ? _copy_from_user+0x10b/0x170 [ 411.397554][ T28] ? simple_transaction_get+0x119/0x140 [ 411.408929][ T28] nfsctl_transaction_write+0x105/0x150 [ 411.414988][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 411.426980][ T28] vfs_write+0x2dc/0x9a0 [ 411.431375][ T28] ? file_end_write+0x250/0x250 [ 411.438761][ T28] ? __fget_files+0x28/0x460 [ 411.443459][ T28] ? __fget_files+0x3fc/0x460 [ 411.448226][ T28] ? __fdget_pos+0x2ae/0x360 [ 411.452835][ T28] ? ksys_write+0x70/0x260 [ 411.457623][ T28] ksys_write+0x14d/0x260 [ 411.461981][ T28] ? __ia32_sys_read+0x80/0x80 [ 411.466805][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 411.472089][ T28] do_syscall_64+0x4c/0xa0 [ 411.480363][ T28] ? clear_bhb_loop+0x60/0xb0 [ 411.485090][ T28] ? clear_bhb_loop+0x60/0xb0 [ 411.490204][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.496301][ T28] RIP: 0033:0x7f08ac19fb19 [ 411.500726][ T28] RSP: 002b:00007f08ad017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 411.509227][ T28] RAX: ffffffffffffffda RBX: 00007f08ac426090 RCX: 00007f08ac19fb19 [ 411.517499][ T28] RDX: 0000000000000001 RSI: 00002000000009c0 RDI: 0000000000000004 [ 411.525623][ T28] RBP: 00007f08ac237b70 R08: 0000000000000000 R09: 0000000000000000 [ 411.536691][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.537293][ T6716] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.544692][ T28] R13: 00007f08ac426128 R14: 00007f08ac426090 R15: 00007fffa92f5b68 [ 411.544725][ T28] [ 411.573265][ T6893] device hsr_slave_0 entered promiscuous mode [ 411.582801][ T6716] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 411.593072][ T6716] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 411.603717][ T6716] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.605814][ T28] [ 411.605814][ T28] Showing all locks held in the system: [ 411.617198][ T6716] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 411.633828][ T6716] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.646056][ T6893] device hsr_slave_1 entered promiscuous mode [ 411.656897][ T6893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.664471][ T6893] Cannot create hsr debugfs directory [ 411.669994][ T28] 1 lock held by rcu_tasks_kthre/12: [ 411.675282][ T28] #0: ffffffff8db2e3f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xce0 [ 411.699422][ T28] 1 lock held by rcu_tasks_trace/13: [ 411.704734][ T28] #0: ffffffff8db2ec30 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xce0 [ 411.735133][ T28] 1 lock held by khungtaskd/28: [ 411.747553][ T28] #0: ffffffff8db2daa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 411.764554][ T28] 2 locks held by getty/4035: [ 411.769334][ T28] #0: ffff88814ce6f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 411.779334][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x430/0x1400 [ 411.806834][ T28] 2 locks held by kworker/u4:15/4531: [ 411.812313][ T28] 3 locks held by syz.2.216/5379: [ 411.817657][ T28] #0: ffff88803029a368 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 411.827038][ T28] #1: ffff888028ffe460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 411.836213][ T28] #2: ffffffff8ddcd208 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x61/0xab0 [ 411.844800][ T28] 3 locks held by syz.3.232/5477: [ 411.850139][ T28] #0: ffff8880187f4868 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 411.862108][ T28] #1: ffff88807ab56460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 411.873622][ T28] #2: ffffffff8ddcd208 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80 [ 411.886765][ T28] 3 locks held by syz.3.232/5478: [ 411.891921][ T28] #0: ffff8880187f54e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 411.902297][ T28] #1: ffff88807ab56460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 411.911690][ T28] #2: ffffffff8ddcd208 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x61/0xab0 [ 411.920821][ T28] 3 locks held by syz.5.254/5658: [ 411.926279][ T28] #0: ffff888078dea5e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 411.935970][ T28] #1: ffff88807ab56460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 411.945052][ T28] #2: ffffffff8ddcd208 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80 [ 411.945535][ T4293] Bluetooth: hci14: command 0x040f tx timeout [ 411.954223][ T28] 3 locks held by syz.5.254/5660: [ 411.966387][ T28] #0: ffff88807717c868 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 411.975964][ T28] #1: ffff88807ab56460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 411.989641][ T28] #2: ffffffff8ddcd208 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x61/0xab0 [ 411.998694][ T28] 3 locks held by syz.4.258/5688: [ 412.003856][ T28] #0: ffff888036c7b268 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 412.013447][ T28] #1: ffff88807ab56460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 412.023387][ T28] #2: ffffffff8ddcd208 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80 [ 412.033196][ T28] 3 locks held by syz.1.265/5723: [ 412.038511][ T28] #0: ffff88807b4414e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 412.048049][ T28] #1: ffff88807ab56460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 412.057367][ T28] #2: ffffffff8ddcd208 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80 [ 412.066443][ T28] 3 locks held by syz.1.265/5724: [ 412.071584][ T28] #0: ffff88807b440868 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 412.082273][ T28] #1: ffff88807ab56460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 412.094070][ T28] #2: ffffffff8ddcd208 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x61/0xab0 [ 412.103725][ T28] 3 locks held by syz.6.287/5915: [ 412.109523][ T28] #0: ffff88801eba94e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 412.119107][ T28] #1: ffff88807ab56460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 412.132470][ T28] #2: ffffffff8ddcd208 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80 [ 412.141739][ T28] 3 locks held by syz.6.287/5919: [ 412.149138][ T28] #0: ffff888072f825e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 412.159167][ T28] #1: ffff88807ab56460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 412.168456][ T28] #2: ffffffff8ddcd208 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nrthreads+0x48/0xe0 [ 412.177826][ T28] 3 locks held by syz.9.313/6083: [ 412.182875][ T28] #0: ffff8880315185e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 412.205441][ T28] #1: ffff88807ab56460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 412.217056][ T28] #2: ffffffff8ddcd208 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80 [ 412.226245][ T28] 3 locks held by syz.9.313/6085: [ 412.231289][ T28] #0: ffff88807c4da868 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 412.241547][ T28] #1: ffff88807ab56460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 412.251586][ T28] #2: ffffffff8ddcd208 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nrthreads+0x48/0xe0 [ 412.260977][ T28] 3 locks held by kworker/u4:27/6080: [ 412.266556][ T28] 3 locks held by syz.7.316/6095: [ 412.271610][ T28] #0: ffff888028cf65e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 412.281149][ T28] #1: ffff88807ab56460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 412.290243][ T28] #2: ffffffff8ddcd208 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80 [ 412.306926][ T28] 3 locks held by syz.7.316/6096: [ 412.311990][ T28] #0: ffff888029ffad68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 412.321569][ T28] #1: ffff88807ab56460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 412.330672][ T28] #2: ffffffff8ddcd208 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nrthreads+0x48/0xe0 [ 412.341298][ T28] 3 locks held by syz.0.321/6134: [ 412.346448][ T28] #0: ffff88807c6eb4e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 412.355804][ T28] #1: ffff88807ab56460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 412.367374][ T28] #2: ffffffff8ddcd208 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80 [ 412.376286][ T28] 3 locks held by syz.0.321/6138: [ 412.381326][ T28] #0: ffff8880213ceae8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 412.390665][ T28] #1: ffff88807ab56460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 412.402799][ T28] #2: ffffffff8ddcd208 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x61/0xab0 [ 412.411494][ T28] 5 locks held by kworker/1:12/6716: [ 412.417719][ T28] #0: ffff888143ecad38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 412.428958][ T28] #1: ffffc900060f7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 412.440425][ T28] #2: ffff888146be9190 (&dev->mutex){....}-{3:3}, at: hub_event+0x178/0x5200 [ 412.449555][ T28] #3: ffff88801fbf1190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 412.458969][ T28] #4: ffff88801fbf0118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 412.470062][ T28] 3 locks held by syz.5.442/6744: [ 412.475114][ T28] #0: ffff88807bf560e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 412.501647][ T28] #1: ffff88807ab56460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 412.517686][ T28] #2: ffffffff8ddcd208 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80 [ 412.526901][ T28] 3 locks held by syz.5.442/6746: [ 412.532090][ T28] #0: ffff88807bf57268 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 412.541516][ T28] #1: ffff88807ab56460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 412.550591][ T28] #2: ffffffff8ddcd208 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nrthreads+0x48/0xe0 [ 412.559693][ T28] 5 locks held by syz-executor/6893: [ 412.564989][ T28] #0: ffff88807e20e460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 412.573991][ T28] #1: ffff888091cc3088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1d8/0x520 [ 412.584256][ T28] #2: ffff888145f1c918 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x520 [ 412.594629][ T28] #3: ffffffff8e65f788 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd3/0x370 [ 412.606946][ T28] #4: ffff888055d330e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb1/0x7c0 [ 412.617614][ T28] 4 locks held by udevd/6938: [ 412.622305][ T28] #0: ffff888092054e80 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0x9d/0xc50 [ 412.631256][ T28] #1: ffff88801af4ec88 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x59/0x410 [ 412.640797][ T28] #2: ffff888029466918 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0xae/0x410 [ 412.650343][ T28] #3: ffff88801fbf0118 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16e/0x320 [ 412.659861][ T28] [ 412.662207][ T28] ============================================= [ 412.662207][ T28] [ 412.670741][ T28] NMI backtrace for cpu 0 [ 412.675089][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 412.682297][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 412.692354][ T28] Call Trace: [ 412.695651][ T28] [ 412.698589][ T28] dump_stack_lvl+0x188/0x24e [ 412.703287][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 412.708743][ T28] ? show_regs_print_info+0x12/0x12 [ 412.714045][ T28] ? load_image+0x410/0x410 [ 412.718550][ T28] ? vprintk_emit+0x59f/0x6a0 [ 412.723239][ T28] ? printk_sprint+0x460/0x460 [ 412.728014][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 412.732999][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 412.739169][ T28] ? _printk+0xda/0x130 [ 412.743342][ T28] ? load_image+0x410/0x410 [ 412.747865][ T28] ? load_image+0x410/0x410 [ 412.752375][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 412.758441][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 412.764589][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 412.770593][ T28] watchdog+0xf0e/0xf50 [ 412.774836][ T28] ? watchdog+0x1ed/0xf50 [ 412.779212][ T28] kthread+0x29d/0x330 [ 412.783337][ T28] ? hungtask_pm_notify+0x40/0x40 [ 412.788365][ T28] ? kthread_blkcg+0xd0/0xd0 [ 412.792950][ T28] ret_from_fork+0x1f/0x30 [ 412.797452][ T28] [ 412.801932][ T28] Sending NMI from CPU 0 to CPUs 1: [ 412.808975][ C1] NMI backtrace for cpu 1 [ 412.808986][ C1] CPU: 1 PID: 6893 Comm: syz-executor Not tainted syzkaller #0 [ 412.809000][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 412.809009][ C1] RIP: 0010:__bfs+0x37f/0x560 [ 412.809033][ C1] Code: 51 10 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 3b 48 89 df e8 13 f8 6e 00 eb 31 48 8d 7b 30 48 89 f8 48 c1 e8 03 42 80 3c 20 00 <74> 05 e8 7a f8 6e 00 4c 89 6b 30 48 89 d8 48 c1 e8 03 42 80 3c 20 [ 412.809112][ C1] RSP: 0018:ffffc9000c72f348 EFLAGS: 00000046 [ 412.809126][ C1] RAX: 1ffffffff28af75e RBX: ffffffff9457bac0 RCX: 00000000000000fe [ 412.809137][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9457baf0 [ 412.809146][ C1] RBP: ffffffff914ef720 R08: ffffffff91b6232f R09: 1ffffffff236c465 [ 412.809157][ C1] R10: dffffc0000000000 R11: fffffbfff236c466 R12: dffffc0000000000 [ 412.809168][ C1] R13: ffffffff944a1780 R14: 0000000000023100 R15: ffffffff93bad028 [ 412.809179][ C1] FS: 000055558f3e2500(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 412.809191][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.809201][ C1] CR2: 00007fdbc71ed200 CR3: 0000000091a8d000 CR4: 00000000003506e0 [ 412.809214][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 412.809222][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 412.809231][ C1] Call Trace: [ 412.809235][ C1] [ 412.809242][ C1] ? check_path+0x40/0x40 [ 412.809264][ C1] check_path+0x21/0x40 [ 412.809283][ C1] check_noncircular+0x186/0x400 [ 412.809306][ C1] ? print_deadlock_bug+0x5d0/0x5d0 [ 412.809325][ C1] ? lockdep_lock+0xf1/0x1f0 [ 412.809345][ C1] ? _find_first_zero_bit+0xd2/0x100 [ 412.809365][ C1] __lock_acquire+0x3a03/0x7ea0 [ 412.809399][ C1] ? verify_lock_unused+0x140/0x140 [ 412.809421][ C1] ? verify_lock_unused+0x140/0x140 [ 412.809439][ C1] ? lock_chain_count+0x20/0x20 [ 412.809458][ C1] ? verify_lock_unused+0x140/0x140 [ 412.809478][ C1] lock_acquire+0x1bc/0x4a0 [ 412.809497][ C1] ? nsim_drv_remove+0x54/0x170 [ 412.809517][ C1] ? __might_sleep+0xd0/0xd0 [ 412.809562][ C1] ? read_lock_is_recursive+0x10/0x10 [ 412.809586][ C1] __mutex_lock+0x12d/0xb40 [ 412.809600][ C1] ? nsim_drv_remove+0x54/0x170 [ 412.809618][ C1] ? nsim_drv_remove+0x54/0x170 [ 412.809635][ C1] ? nsim_drv_remove+0x4c/0x170 [ 412.809651][ C1] ? mutex_lock_nested+0x10/0x10 [ 412.809664][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 412.809682][ C1] ? xa_clear_mark+0x14a/0x190 [ 412.809702][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 412.809717][ C1] nsim_drv_remove+0x54/0x170 [ 412.809734][ C1] ? nsim_bus_probe+0x20/0x20 [ 412.809752][ C1] device_release_driver_internal+0x47d/0x7c0 [ 412.809769][ C1] bus_remove_device+0x2dd/0x400 [ 412.809790][ C1] device_del+0x63f/0xa80 [ 412.809809][ C1] ? kill_device+0x160/0x160 [ 412.809828][ C1] device_unregister+0x1c/0xc0 [ 412.809845][ C1] del_device_store+0x2b2/0x370 [ 412.809865][ C1] ? del_port_store+0x160/0x160 [ 412.809885][ C1] ? sysfs_kf_write+0x183/0x2a0 [ 412.809906][ C1] ? sysfs_kf_read+0x350/0x350 [ 412.809923][ C1] kernfs_fop_write_iter+0x3a0/0x520 [ 412.809943][ C1] vfs_write+0x482/0x9a0 [ 412.809958][ C1] ? file_end_write+0x250/0x250 [ 412.809973][ C1] ? do_sys_openat2+0x20a/0x4f0 [ 412.810017][ C1] ? __fdget_pos+0x2b5/0x360 [ 412.810039][ C1] ksys_write+0x14d/0x260 [ 412.810052][ C1] ? __ia32_sys_read+0x80/0x80 [ 412.810066][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 412.810082][ C1] do_syscall_64+0x4c/0xa0 [ 412.810102][ C1] ? clear_bhb_loop+0x60/0xb0 [ 412.810120][ C1] ? clear_bhb_loop+0x60/0xb0 [ 412.810140][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.810158][ C1] RIP: 0033:0x7fc08db6034e [ 412.810171][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 412.810182][ C1] RSP: 002b:00007ffcebf7dab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 412.810197][ C1] RAX: ffffffffffffffda RBX: 000055558f3e2500 RCX: 00007fc08db6034e [ 412.810207][ C1] RDX: 0000000000000001 RSI: 00007ffcebf7db40 RDI: 0000000000000005 [ 412.810216][ C1] RBP: 00007fc08dc38447 R08: 0000000000000000 R09: 0000000000000000 [ 412.810225][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.810233][ C1] R13: 00007ffcebf7db40 R14: 00007ffcebf7e380 R15: 0000000000000003 [ 412.810248][ C1] [ 412.812559][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 413.254560][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 413.261750][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 413.271793][ T28] Call Trace: [ 413.275060][ T28] [ 413.277984][ T28] dump_stack_lvl+0x188/0x24e [ 413.282664][ T28] ? memcpy+0x3c/0x60 [ 413.286705][ T28] ? show_regs_print_info+0x12/0x12 [ 413.291894][ T28] ? load_image+0x410/0x410 [ 413.296400][ T28] panic+0x2d3/0x710 [ 413.300284][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 413.305914][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 413.310405][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 413.316002][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 413.322150][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 413.328297][ T28] watchdog+0xf4d/0xf50 [ 413.332462][ T28] ? watchdog+0x1ed/0xf50 [ 413.336785][ T28] kthread+0x29d/0x330 [ 413.340837][ T28] ? hungtask_pm_notify+0x40/0x40 [ 413.345860][ T28] ? kthread_blkcg+0xd0/0xd0 [ 413.350436][ T28] ret_from_fork+0x1f/0x30 [ 413.354859][ T28] [ 413.358112][ T28] Kernel Offset: disabled [ 413.362429][ T28] Rebooting in 86400 seconds..