last executing test programs:

7m51.130669397s ago: executing program 0 (id=10):
socket$nl_route(0x10, 0x3, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
read$FUSE(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4})

7m45.34547025s ago: executing program 0 (id=17):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write(0xffffffffffffffff, &(0x7f0000000040)="1c00", 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r1, &(0x7f0000001b00)={0x2020}, 0x173f)
pipe(&(0x7f0000000040))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000005180)={0x2020}, 0x2020)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20)

7m43.562228354s ago: executing program 0 (id=21):
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001200)=[0xffffffffffffffff], 0x0, 0x10, 0xffffffff}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaab1aaaabb8864"], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x41, 0x107, 0xfffffffe, 0xfffffffb, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008084)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000380)=r1}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/3, 0x2}, 0x20)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0xfff3}}}, 0x24}}, 0x800)

7m40.500135758s ago: executing program 0 (id=26):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket(0x2, 0x80805, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
setns(0xc9, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x120)
truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x10, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000680)=@newtfilter={0xac, 0x2c, 0xd2b, 0x70bd2c, 0x35dfdbfb, {0x0, 0x0, 0x0, r4, {0xffe0}, {0x0, 0xfff1}, {0x7, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xe13c7cb5123b5c20, 0x8}}, @TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x4, 0x101, 0x5, 0x1, 0x0, [{0x2, 0x8514, 0x7, 0x1ff}, {0x401, 0x7, 0x93d, 0x5}, {0x8000, 0x9, 0xffff, 0x8}, {0xb, 0x1, 0x10, 0x3}, {0x2, 0xd, 0xfffffffe, 0xe11d}, {0x0, 0x3, 0x8, 0x5}]}}]}}]}, 0xac}}, 0x24040084)
poll(&(0x7f0000000200)=[{r1, 0x1d06b1002b1f496f}], 0x1, 0xffff)
sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)="d380b0", 0x3}, 0x1, 0x0, 0x0, 0x4081}, 0x24004010)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xbb)

7m37.886411902s ago: executing program 0 (id=29):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000280))
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000540)={0x0, 0x3, 0x2, "f31d"}, 0xa)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10)
bind$tipc(r4, 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)

7m36.315124876s ago: executing program 0 (id=31):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x14)
userfaultfd(0x80001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008800}, 0x0)

7m20.853846616s ago: executing program 32 (id=31):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x14)
userfaultfd(0x80001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008800}, 0x0)

6m17.259225139s ago: executing program 5 (id=156):
openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000180)={0x6, "88705c525cd8a00c97ec37488eccc0391ab6f5000000000000000000001b00"})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r3, 0x0, 0x0)

6m16.217473818s ago: executing program 5 (id=157):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0)
userfaultfd(0x80001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x34, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008800}, 0x0)
open(&(0x7f0000000380)='.\x00', 0xc68230e79ea42a21, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'})
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
epoll_create1(0x80000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)

6m10.329401496s ago: executing program 5 (id=167):
openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000180)={0x6, "88705c525cd8a00c97ec37488eccc0391ab6f5000000000000000000001b00"})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r3, 0x0, 0x0)

6m9.068052795s ago: executing program 5 (id=171):
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
r2 = dup(r1)
write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x32600)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc)
setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x18e)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

6m5.508599123s ago: executing program 5 (id=181):
openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000180)={0x6, "88705c525cd8a00c97ec37488eccc0391ab6f5000000000000000000001b00"})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r3, 0x0, 0x0)

6m1.037053874s ago: executing program 5 (id=186):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write(0xffffffffffffffff, &(0x7f0000000040)="1c00", 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r1, &(0x7f0000001b00)={0x2020}, 0x173f)
pipe(&(0x7f0000000040))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000005180)={0x2020}, 0x2020)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000280)='1', 0x1)

5m45.850996242s ago: executing program 33 (id=186):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write(0xffffffffffffffff, &(0x7f0000000040)="1c00", 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r1, &(0x7f0000001b00)={0x2020}, 0x173f)
pipe(&(0x7f0000000040))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000005180)={0x2020}, 0x2020)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000280)='1', 0x1)

55.248525144s ago: executing program 1 (id=813):
migrate_pages(0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000000280)=0xa)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x6, 0xa2b9, 0x6, 0x7, 0x3, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x4, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0x8, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x80002, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463d, 0x5, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffff", 0x6)
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000001c0)=0x2)
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000200)=0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002090101000000000000000001000001200002001400018008000100ac14141d08"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

53.767144654s ago: executing program 1 (id=819):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d706174683000")
write(r1, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_mode bio 0 0 0', 0x3e)
ioctl(r0, 0xc138fd09, &(0x7f0000001000)="0400000000000000000000007801000038010000010000000000000000000000000000000000000000000000000000006d70617468300000")
ioctl(r0, 0xc138fd06, &(0x7f0000002000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d70617468300000")
write(r1, 0x0, 0x0)
ioctl(r0, 0xc138fd0e, &(0x7f0000003000)="0400000000000000000000005001000038010000000000000000000000000000000000000000000000000000000000006d70617468")
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4)
getsockname$packet(r4, 0x0, &(0x7f00000005c0))
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="01990000419a0400600012800b000100697036746e6c000050000280060010000200000014000300"], 0x80}}, 0x0)
sendto$packet(r3, &(0x7f0000000400)="05d936277c6f", 0x6, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @local}, 0x14)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60038d08001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22ec03a4dae709ec6410d3fb435bf07e0868b35b030000007ef9394b394626ddd40f7bf3a3278ac015ef1c0915866c175c230ecec66abe8921dc7f4b7fe2d0ada516d06da2835538cf54cbbca0bbad6a9275521231353c2c795f5fcf59f16d9b27a919675f868284997b49ed8271a7ec7f70363beb1707a9517fe7b9d523a51b0fab2183cc6c3f46154d1d24ad4c1d657bd70b9db82cd9309030", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c2000090780004020422ec"], 0x0)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvmmsg(r6, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x8020, 0x0)
setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4)
sendmsg$802154_dgram(r6, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}}, 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8)
dup2(r7, r2)

52.502381523s ago: executing program 1 (id=823):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000100)="e80000", 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='p:p1 ./file0:0', 0xe)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$cont(0x7, r3, 0x0, 0x0)
wait4(r3, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

49.927858104s ago: executing program 1 (id=832):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d706174683000")
write(r1, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_mode bio 0 0 0', 0x3e)
ioctl(r0, 0xc138fd09, &(0x7f0000001000)="0400000000000000000000007801000038010000010000000000000000000000000000000000000000000000000000006d70617468300000")
ioctl(r0, 0xc138fd06, &(0x7f0000002000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d706174683000")
write(r1, 0x0, 0x0)
ioctl(r0, 0xc138fd0e, &(0x7f0000003000)="0400000000000000000000005001000038010000000000000000000000000000000000000000000000000000000000006d70617468300000")
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4)
getsockname$packet(r4, 0x0, &(0x7f00000005c0))
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="01990000419a0400600012800b000100697036746e6c000050000280060010000200000014000300"], 0x80}}, 0x0)
sendto$packet(r3, &(0x7f0000000400)="05d936277c6f", 0x6, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @local}, 0x14)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60038d08001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22ec03a4dae709ec6410d3fb435bf07e0868b35b030000007ef9394b394626ddd40f7bf3a3278ac015ef1c0915866c175c230ecec66abe8921dc7f4b7fe2d0ada516d06da2835538cf54cbbca0bbad6a9275521231353c2c795f5fcf59f16d9b27a919675f868284997b49ed8271a7ec7f70363beb1707a9517fe7b9d523a51b0fab2183cc6c3f46154d1d24ad4c1d657bd70b9db82cd9309030", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c2000090780004020422ec"], 0x0)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvmmsg(r6, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x8020, 0x0)
setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4)
sendmsg$802154_dgram(r6, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}}, 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8)
dup2(r7, r2)

49.596798469s ago: executing program 1 (id=834):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000100)="e80000", 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='p:p1 ./file0:0', 0xe)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$cont(0x7, r3, 0x0, 0x0)
wait4(r3, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00')

47.401831431s ago: executing program 1 (id=847):
migrate_pages(0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000000280)=0xa)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x6, 0xa2b9, 0x6, 0x7, 0x3, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x4, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0x8, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x80002, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463d, 0x5, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffff", 0x6)
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000001c0)=0x2)
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000200)=0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002090101000000000000000001000001200002001400018008000100ac14141d080002"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

45.146085368s ago: executing program 3 (id=855):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40480c0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
syz_usbip_server_init(0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
io_setup(0x8, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

44.208025071s ago: executing program 3 (id=861):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)

43.012104417s ago: executing program 3 (id=863):
migrate_pages(0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000000280)=0xa)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x6, 0xa2b9, 0x6, 0x7, 0x3, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x4, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0x8, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x80002, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463d, 0x5, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffff", 0x6)
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000001c0)=0x2)
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002090101000000000000000001000001200002001400018008000100ac14141d080002"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

42.714910041s ago: executing program 3 (id=865):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0x100000)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
dup2(r1, 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/c0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/c0/node/n0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/c0/node/n0/ipv4_address\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='127.0.0.1\n', 0xa)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/c0/node/n0/ipv4_port\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='7777\n', 0x5)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/c0/node/n0/num\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='0\n', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/c0/node/n0/local\x00', 0x1, 0x0)
write(r5, &(0x7f0000000540)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/cluster/c0/heartbeat/r0\x00', 0x1ff)

42.546524529s ago: executing program 3 (id=866):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000100)="e80000", 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='p:p1 ./file0:0', 0xe)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00')

41.324007036s ago: executing program 3 (id=871):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40480c0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
syz_usbip_server_init(0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
io_setup(0x8, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

35.821016353s ago: executing program 2 (id=897):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40480c0)
r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2)
ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usbip_server_init(0x1)
io_setup(0x8, 0x0)

35.067587279s ago: executing program 2 (id=902):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f4c, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x3, 0x6, 0x93, 0xfe, 0x0, 0x5f, 0x2b, 0xd6, 0xa6, 0x2, 0x5, 0x2, 0x3}, {0xfffffff8, 0xfffa, 0x0, 0x0, 0x1, 0xf6, 0xce, 0x8, 0x4, 0xfe, 0x4, 0xa6, 0x800000000000000}, {0x4df, 0x30, 0x8, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000000}], 0xcc78})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x8, 0x8000, 0x40, 0x40000000000, 0x2, 0x2004cb, 0x0, 0xe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000, 0x100000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000080)={0x5})

34.237443528s ago: executing program 2 (id=907):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x28, 0x5, 0x0)
r4 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r4, 0x4)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r3, &(0x7f0000000100), 0x400000000000283, 0x0)

33.33413361s ago: executing program 2 (id=911):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40042, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0xbb7, 0xf, 0x4, 0xb06c}, 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9)

32.437994442s ago: executing program 2 (id=915):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='p:p1 ./file0:0', 0xe)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$cont(0x7, r3, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00')

32.292169399s ago: executing program 34 (id=847):
migrate_pages(0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000000280)=0xa)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x6, 0xa2b9, 0x6, 0x7, 0x3, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x4, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0x8, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x80002, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463d, 0x5, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffff", 0x6)
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000001c0)=0x2)
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000200)=0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002090101000000000000000001000001200002001400018008000100ac14141d080002"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

30.55446029s ago: executing program 2 (id=922):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffbfff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r4, {0xb, 0x8}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x20000080)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r4, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f0000000580)="88db0b9ef1cafdab", 0xa888}, {&(0x7f0000000000)="f8dbb89bfc5f187cca4335143b54aedd2c3332", 0x13}], 0x3}, 0x24004015)

26.244082552s ago: executing program 35 (id=871):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40480c0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
syz_usbip_server_init(0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
io_setup(0x8, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

15.455681307s ago: executing program 36 (id=922):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffbfff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r4, {0xb, 0x8}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x20000080)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r4, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f0000000580)="88db0b9ef1cafdab", 0xa888}, {&(0x7f0000000000)="f8dbb89bfc5f187cca4335143b54aedd2c3332", 0x13}], 0x3}, 0x24004015)

5.418921737s ago: executing program 4 (id=1032):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
ftruncate(r0, 0x100000)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1', 0x1)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='1\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='./file0\n', 0x8)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r5, &(0x7f0000000480)='tcp', 0x3)
r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r6, &(0x7f0000000500)='127.0.0.1', 0x9)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r7, &(0x7f0000000580)='4420', 0x4)
close(r7)
r8 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r8, &(0x7f0000000600)='ipv4', 0x4)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r9, &(0x7f0000000740)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testsubsys,data_digest', 0x46)

4.472695871s ago: executing program 4 (id=1039):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x28, 0x5, 0x0)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r3, 0x4)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r2, &(0x7f0000000100), 0x400000000000283, 0x0)

3.027831169s ago: executing program 6 (id=1047):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f4c, 0x0, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x3, 0x6, 0x93, 0xfe, 0x0, 0x5f, 0x2b, 0xd6, 0xa6, 0x2, 0x5, 0x2, 0x3}, {0xfffffff8, 0xfffa, 0x0, 0x0, 0x1, 0xf6, 0xce, 0x8, 0x4, 0xfe, 0x4, 0xa6, 0x800000000000000}, {0x4df, 0x30, 0x8, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000000}], 0xcc78})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x8, 0x8000, 0x40, 0x40000000000, 0x2, 0x2004cb, 0x0, 0xe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000, 0x100000})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

2.970270831s ago: executing program 7 (id=1048):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
ftruncate(r0, 0x100000)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1', 0x1)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='1\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='./file0\n', 0x8)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r5, &(0x7f0000000480)='tcp', 0x3)
r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r6, &(0x7f0000000500)='127.0.0.1', 0x9)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r7, &(0x7f0000000580)='4420', 0x4)
close(r7)
r8 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r8, &(0x7f0000000600)='ipv4', 0x4)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
write(0xffffffffffffffff, &(0x7f0000000740)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testsubsys,data_digest', 0x46)

2.617189747s ago: executing program 6 (id=1050):
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$setstatus(r0, 0x4, 0x800)
write(r0, &(0x7f0000000000)="38000000240001040100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000040)="38000000240001040200000000000000000000000100000000000200010001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000080)="38000000240001040300000000000000000000000100000000000300020001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f00000000c0)="38000000240001040400000000000000000000000100000000000400030001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000100)="38000000240001040500000000000000000000000100000000000500040001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000140)="38000000240001040600000000000000000000000100000000000600050001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000180)="38000000240001040700000000000000000000000100000000000700060001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f00000001c0)="38000000240001040800000000000000000000000100000000000800070001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000340)="38000000240001040e00000000000000000000000100000000000e000d0001000000000008000100657473000c0002800500010010", 0x35)
write(r0, &(0x7f0000000380)="38000000240001040f00000000000000000000000100000000000f000e0001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f00000003c0)="380000002400010410000000000000000000000001000000000010000f0001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000500)="240000002a0001039900000000000000000000000100"/36, 0x24)
read(r0, &(0x7f0000002000), 0x8000)

2.494292564s ago: executing program 7 (id=1051):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r2 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)

2.34370844s ago: executing program 8 (id=1052):
migrate_pages(0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000000280)=0xa)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x6, 0xa2b9, 0x6, 0x7, 0x3, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x4, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0x8, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x80002, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463d, 0x5, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffff", 0x6)
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000001c0)=0x2)
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000200)=0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2.191019658s ago: executing program 6 (id=1053):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
ftruncate(r0, 0x100000)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1', 0x1)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='1\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='./file0\n', 0x8)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='1\n', 0x2)
close(r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r5, &(0x7f0000000480)='tcp', 0x3)
r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r6, &(0x7f0000000500)='127.0.0.1', 0x9)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r7, &(0x7f0000000580)='4420', 0x4)
close(r7)
r8 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r8, &(0x7f0000000600)='ipv4', 0x4)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r9, &(0x7f0000000740)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testsubsys,data_digest', 0x46)
nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0)

1.779037167s ago: executing program 7 (id=1054):
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$setstatus(r0, 0x4, 0x800)
write(r0, &(0x7f0000000000)="38000000240001040100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000040)="38000000240001040200000000000000000000000100000000000200010001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000080)="38000000240001040300000000000000000000000100000000000300020001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f00000000c0)="38000000240001040400000000000000000000000100000000000400030001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000100)="38000000240001040500000000000000000000000100000000000500040001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000140)="38000000240001040600000000000000000000000100000000000600050001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, 0x0, 0x0)
write(r0, &(0x7f00000001c0)="38000000240001040800000000000000000000000100000000000800070001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000340)="38000000240001040e00000000000000000000000100000000000e000d0001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000380)="38000000240001040f00000000000000000000000100000000000f000e0001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f00000003c0)="380000002400010410000000000000000000000001000000000010000f0001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000500)="240000002a0001039900000000000000000000000100"/36, 0x24)
read(r0, &(0x7f0000002000), 0x8000)

1.672481122s ago: executing program 6 (id=1055):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/c0/node/n0/ipv4_address\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='127.0', 0x5)

1.490958731s ago: executing program 6 (id=1056):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000002c0)={0x9d0000, 0x6, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9909de, 0x3, '\x00', @string=&(0x7f0000000080)}})
sched_setscheduler(r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xe, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write(r2, &(0x7f0000000400)='!*:', 0x3)

1.49029536s ago: executing program 4 (id=1057):
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$setstatus(r0, 0x4, 0x800)
write(r0, &(0x7f0000000000)="38000000240001040100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000040)="38000000240001040200000000000000000000000100000000000200010001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000080)="38000000240001040300000000000000000000000100000000000300020001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f00000000c0)="38000000240001040400000000000000000000000100000000000400030001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000100)="38000000240001040500000000000000000000000100000000000500040001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000140)="38000000240001040600000000000000000000000100000000000600050001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000180)="38000000240001040700000000000000000000000100000000000700060001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f00000001c0)="38000000240001040800000000000000000000000100000000000800070001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000340)="38000000240001040e00000000000000000000000100000000000e000d0001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000380), 0x0)
write(r0, &(0x7f00000003c0)="380000002400010410000000000000000000000001000000000010000f0001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000500)="240000002a0001039900000000000000000000000100"/36, 0x24)
read(r0, &(0x7f0000002000), 0x8000)

1.460241282s ago: executing program 8 (id=1058):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/mycluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster/node/node0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/cluster/mycluster/node/node0/ipv4_address\x00', 0x1, 0x0)
write(r0, &(0x7f0000000700)='127.0.0.1\n', 0xa)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/mycluster/node/node0/ipv4_port\x00', 0x1, 0x0)
write(r1, &(0x7f0000000900)='777\n', 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/cluster/mycluster/node/node0/num\x00', 0x1, 0x0)
write(r2, &(0x7f0000000b00)='0\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/cluster/mycluster/node/node0/local\x00', 0x1, 0x0)
write(r3, &(0x7f0000000d00)='1\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./backing_file\x00', 0x42, 0x1ff)
fallocate(r4, 0x0, 0x0, 0x100000)
r5 = syz_open_dev$loop(&(0x7f0000000f00), 0x0, 0x2)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./config/cluster/mycluster/heartbeat/reg0/blocks\x00', 0x1, 0x0)
write(r6, &(0x7f0000001300)='8\n', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/cluster/mycluster/heartbeat/reg0/start_block\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f0000001700)='512\n', 0x4)
r7 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./config/cluster/mycluster/heartbeat/reg0/dev\x00', 0x1, 0x0)
write(r7, &(0x7f0000001900)='100\n', 0x4)

1.431034273s ago: executing program 7 (id=1059):
migrate_pages(0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000000280)=0xa)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x6, 0xa2b9, 0x6, 0x7, 0x3, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x4, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0x8, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x80002, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463d, 0x5, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffff", 0x6)
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000001c0)=0x2)
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002090101000000000000000001000001200002001400018008000100ac14141d080002"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = dup(0xffffffffffffffff)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.251732171s ago: executing program 4 (id=1060):
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$setstatus(r0, 0x4, 0x800)
write(r0, &(0x7f0000000000)="38000000240001040100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000040)="38000000240001040200000000000000000000000100000000000200010001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000080)="38000000240001040300000000000000000000000100000000000300020001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f00000000c0)="38000000240001040400000000000000000000000100000000000400030001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000100)="38000000240001040500000000000000000000000100000000000500040001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000140)="38000000240001040600000000000000000000000100000000000600050001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000180)="38000000240001040700000000000000000000000100000000000700060001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f00000001c0)="38000000240001040800000000000000000000000100000000000800070001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000200)="38000000240001040900000000000000000000000100000000000900080001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000240)="38000000240001040a00000000000000000000000100000000000a00090001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000280)="38000000240001040b00000000000000000000000100000000000b000a0001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f00000002c0)="38000000240001040c00000000000000000000000100000000000c000b0001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000300)="38000000240001040d00000000000000000000000100000000000d000c0001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000340)="38000000240001040e00000000000000000000000100000000000e000d0001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f00000003c0)="380000002400010410000000000000000000000001000000000010000f0001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000500)="240000002a0001039900000000000000000000000100"/36, 0x24)
read(r0, &(0x7f0000002000), 0x8000)

1.093451169s ago: executing program 8 (id=1061):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='md0\x00', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6)
ftruncate(r1, 0x2000000)
pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2)
ioctl$LOOP_SET_FD(r2, 0x4c00, r1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r3, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72)
ioctl(r3, 0x40140921, &(0x7f0000000500)="0000000007000000000000000000000006000000")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-loop0/offset\x00', 0x0, 0x0)
read(r4, &(0x7f0000000900)=""/32, 0x20)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/dev-loop0/size\x00', 0x0, 0x0)
read(r5, &(0x7f0000000920)=""/32, 0x20)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/dev-loop0/slot\x00', 0x0, 0x0)
read(r6, &(0x7f0000000940)=""/32, 0x20)
read(0xffffffffffffffff, &(0x7f0000000960)=""/32, 0x20)

981.347764ms ago: executing program 7 (id=1062):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='md0\x00', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6)
ftruncate(r1, 0x2000000)
pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r2, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72)
ioctl(r2, 0x40140921, &(0x7f0000000500)="0000000007000000000000000000000006000000")
ioctl(r2, 0x400c0930, &(0x7f0000000700)='\x00'/12)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/bitmap/location\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000800)='./read_buf\x00', 0x42, 0x1b6)
read(r3, &(0x7f0000000900)=""/32, 0x20)

899.358958ms ago: executing program 4 (id=1063):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200), 0x0)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='./file0\n', 0x8)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r4, &(0x7f0000000480)='tcp', 0x3)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000500)='127.0.0.1', 0x9)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r6, &(0x7f0000000580)='4420', 0x4)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r7, &(0x7f0000000600)='ipv4', 0x4)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r8, &(0x7f0000000740)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testsubsys,data_digest', 0x46)
nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0)

897.991708ms ago: executing program 9 (id=989):
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$setstatus(r0, 0x4, 0x800)
write(r0, &(0x7f0000000000)="38000000240001040100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010010000000", 0x38)
write(r0, 0x0, 0x0)
write(r0, &(0x7f0000000080)="38000000240001040300000000000000000000000100000000000300020001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f00000000c0)="38000000240001040400000000000000000000000100000000000400030001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000100)="38000000240001040500000000000000000000000100000000000500040001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000140)="38000000240001040600000000000000000000000100000000000600050001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000180)="38000000240001040700000000000000000000000100000000000700060001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f00000001c0)="38000000240001040800000000000000000000000100000000000800070001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000340)="38000000240001040e00000000000000000000000100000000000e000d0001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000380)="38000000240001040f00000000000000000000000100000000000f000e0001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f00000003c0)="380000002400010410000000000000000000000001000000000010000f0001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000500)="240000002a0001039900000000000000000000000100"/36, 0x24)
read(r0, &(0x7f0000002000), 0x8000)

627.872701ms ago: executing program 7 (id=1064):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40480c0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2)
ioctl$LOOP_SET_FD(r2, 0x4c00, r1)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usbip_server_init(0x1)
io_setup(0x8, 0x0)

625.652761ms ago: executing program 9 (id=1065):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/c0/node/n0/ipv4_address\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='127.0', 0x5)

592.222182ms ago: executing program 8 (id=1066):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='devtmpfs\x00', &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='md0\n\x00', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/sync_action\x00', 0x2, 0x0)
read(r1, &(0x7f0000000580)=""/32, 0x20)

554.055724ms ago: executing program 6 (id=1067):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x28, 0x5, 0x0)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r3, 0x4)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r2, &(0x7f0000000100), 0x400000000000283, 0x0)

401.225742ms ago: executing program 9 (id=1068):
syz_usb_connect(0x2, 0x58, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0xffffffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24)
listen(0xffffffffffffffff, 0x1)
sendmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300), 0x1000}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000080)=""/7, 0xffffff4d}], 0x1}, 0x40)

280.002217ms ago: executing program 8 (id=1069):
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$setstatus(r0, 0x4, 0x800)
write(r0, &(0x7f0000000000)="38000000240001040100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000040)="38000000240001040200000000000000000000000100000000000200010001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000080)="38000000240001040300000000000000000000000100000000000300020001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f00000000c0)="38000000240001040400000000000000000000000100000000000400030001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000100)="38000000240001040500000000000000000000000100000000000500040001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000140)="38000000240001040600000000000000000000000100000000000600050001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000180)="38000000240001040700000000000000000000000100000000000700060001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f00000001c0)="38000000240001040800000000000000000000000100000000000800070001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000340)="38000000240001040e00000000000000000000000100000000000e000d0001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000380), 0x0)
write(r0, &(0x7f00000003c0)="380000002400010410000000000000000000000001000000000010000f0001000000000008000100657473000c0002800500010010000000", 0x38)
write(r0, &(0x7f0000000500)="240000002a0001039900000000000000000000000100"/36, 0x24)
read(r0, &(0x7f0000002000), 0x8000)

95.222306ms ago: executing program 4 (id=1070):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ed)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='rd_pages=1024\n', 0xe)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ed)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='0x0525\n', 0x7)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0xa4a5\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ed)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0)
write(r4, &(0x7f0000000280)='0000001\n', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/lun/lun_0\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/acls/naa.5001405000000002\x00', 0x1ed)
symlinkat(&(0x7f0000000580)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/lun/lun_0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/acls/naa.5001405000000002/lun_0/lun_0\x00')
symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/tcm.usb0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000000740)='dummy_udc.0\n', 0xc)

0s ago: executing program 8 (id=1071):
migrate_pages(0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000000280)=0xa)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x6, 0xa2b9, 0x6, 0x7, 0x3, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x4, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0x8, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x80002, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463d, 0x5, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffff", 0x6)
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000001c0)=0x2)
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002090101000000000000000001000001200002001400018008000100ac14141d080002"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = dup(0xffffffffffffffff)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

sockfd(8)
[  172.674074][ T5011] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  172.682172][ T5011] vhci_hcd vhci_hcd.0: Device attached
[  172.955570][    T7] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[  173.128373][ T5013] vhci_hcd: connection closed
[  173.131041][ T4242] vhci_hcd: stop threads
[  173.815476][ T4242] vhci_hcd: release socket
[  173.874951][ T4242] vhci_hcd: disconnect device
[  175.110270][ T5032] binder: 5023:5032 ioctl c0306201 0 returned -14
[  176.233323][ T5042] loop3: detected capacity change from 0 to 256
[  176.528706][ T5042] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  178.405142][ T5073] atomic_op ffff88805f9d0198 conn xmit_atomic 0000000000000000
[  178.847060][ T5082] binder: 5077:5082 ioctl c0306201 0 returned -14
[  178.858735][ T5082] binder: 5077:5082 ioctl c0306201 0 returned -14
[  178.902949][    T7] vhci_hcd: vhci_device speed not set
[  180.215653][ T5087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'.
[  180.441978][ T5087] bond0: (slave bond_slave_0): Releasing backup interface
[  180.571826][ T5096] device-mapper: ioctl: Empty message received.
[  181.556447][ T5116] loop2: detected capacity change from 0 to 256
[  181.832605][ T5116] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  182.809633][ T5126] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  182.816214][ T5126] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  182.824476][ T5126] vhci_hcd vhci_hcd.0: Device attached
[  183.116253][ T1110] usb 35-1: new low-speed USB device number 4 using vhci_hcd
[  183.701352][ T5127] vhci_hcd: connection reset by peer
[  183.707656][ T4543] vhci_hcd: stop threads
[  183.712253][ T4543] vhci_hcd: release socket
[  183.780733][ T4543] vhci_hcd: disconnect device
[  185.993497][ T5134] zram0: detected capacity change from 0 to 8
[  186.636900][ T5165] binder: 5158:5165 ioctl c0306201 0 returned -14
[  187.688539][ T5169] device-mapper: ioctl: Empty message received.
[  187.899837][ T5174] loop3: detected capacity change from 0 to 4096
[  187.915126][ T5174] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  188.315724][ T1110] vhci_hcd: vhci_device speed not set
[  189.304206][   T26] audit: type=1800 audit(1790104786.235:5): pid=5174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.189" name="file1" dev="loop3" ino=30 res=0 errno=0
[  189.647746][ T5181] device-mapper: ioctl: Empty message received.
[  191.248533][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'.
[  191.275481][ T4230] Bluetooth: hci4: command 0x0406 tx timeout
[  191.350375][ T1110] Bluetooth: hci2: command 0x0406 tx timeout
[  191.365554][ T1110] Bluetooth: hci0: command 0x0406 tx timeout
[  191.376395][ T1110] Bluetooth: hci3: command 0x0406 tx timeout
[  191.898910][ T5197] bond0: (slave bond_slave_0): Releasing backup interface
[  192.005156][ T5201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.195'.
[  192.884509][ T5224] binder: BINDER_SET_CONTEXT_MGR already set
[  192.890622][ T5224] binder: 5218:5224 ioctl 4018620d 200000000040 returned -16
[  192.905539][ T5224] binder: 5218:5224 ioctl c0306201 0 returned -14
[  194.019653][ T5226] zram: Can't change algorithm for initialized device
[  194.107642][ T5230] zram: Cannot change disksize for initialized device
[  194.322204][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  194.328623][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  194.337958][ T5238] ieee802154 phy0 wpan0: encryption failed: -22
[  197.132816][ T5264] loop3: detected capacity change from 0 to 256
[  197.291299][ T5264] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  197.493609][ T5268] binder: BINDER_SET_CONTEXT_MGR already set
[  197.499737][ T5268] binder: 5262:5268 ioctl 4018620d 200000000040 returned -16
[  197.512384][ T5268] binder: 5262:5268 ioctl c0306201 0 returned -14
[  197.524360][ T5268] binder: 5262:5268 ioctl c0306201 0 returned -14
[  203.759029][ T1110] Bluetooth: hci1: command 0x0409 tx timeout
[  204.225457][    T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  204.501278][    T7] usb 3-1: Using ep0 maxpacket: 32
[  205.045401][    T7] usb 3-1: config 0 has an invalid interface number: 20 but max is 0
[  205.085556][    T7] usb 3-1: config 0 has no interface number 0
[  205.092662][ T4242] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.131554][    T7] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  205.161759][    T7] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  205.208969][    T7] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  205.344107][ T5293] chnl_net:caif_netlink_parms(): no params data found
[  205.412729][ T5339] atomic_op ffff888078204998 conn xmit_atomic 0000000000000000
[  205.838783][ T4263] Bluetooth: hci1: command 0x041b tx timeout
[  205.876242][    T7] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  206.234187][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.812998][    T7] usb 3-1: Product: syz
[  206.817617][    T7] usb 3-1: Manufacturer: syz
[  206.822265][    T7] usb 3-1: SerialNumber: syz
[  206.941305][ T4242] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.974741][    T7] usb 3-1: config 0 descriptor??
[  207.006397][    T7] usb 3-1: can't set config #0, error -71
[  207.809734][ T5349] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  207.816313][ T5349] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  207.825035][ T5349] vhci_hcd vhci_hcd.0: Device attached
[  207.838544][ T5350] vhci_hcd: connection closed
[  207.839936][ T3080] vhci_hcd: stop threads
[  207.956794][ T4265] Bluetooth: hci1: command 0x040f tx timeout
[  208.245412][ T3080] vhci_hcd: release socket
[  208.250068][ T3080] vhci_hcd: disconnect device
[  208.256338][    T7] usb 3-1: USB disconnect, device number 2
[  208.771868][ T4242] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.928388][ T5293] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.090483][ T5293] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.283530][ T5293] device bridge_slave_0 entered promiscuous mode
[  210.276064][ T4265] Bluetooth: hci1: command 0x0419 tx timeout
[  210.339535][ T4242] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.195911][ T5293] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.203056][ T5293] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.277090][ T5293] device bridge_slave_1 entered promiscuous mode
[  211.313976][ T5393] atomic_op ffff888075f65998 conn xmit_atomic 0000000000000000
[  211.442247][ T5397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'.
[  211.471416][ T5293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.548915][ T5293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  211.767276][ T5293] team0: Port device team_slave_0 added
[  211.841375][ T5293] team0: Port device team_slave_1 added
[  212.922874][ T5293] batman_adv: batadv0: Adding interface: batadv_slave_0
[  212.965325][ T5293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.203218][ T5293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.780164][ T5293] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.798874][ T5414] ieee802154 phy0 wpan0: encryption failed: -22
[  214.827278][ T5293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.955453][ T5293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.303299][ T5430] binder: 5425:5430 ioctl c0306201 0 returned -14
[  215.649876][ T5431] device-mapper: ioctl: Empty message received.
[  216.339927][ T5293] device hsr_slave_0 entered promiscuous mode
[  216.588725][ T5439] binder: BINDER_SET_CONTEXT_MGR already set
[  216.594775][ T5439] binder: 5433:5439 ioctl 4018620d 200000000040 returned -16
[  216.603243][ T5439] binder: 5433:5439 ioctl c0306201 0 returned -14
[  217.278003][ T5293] device hsr_slave_1 entered promiscuous mode
[  217.555649][ T5293] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  217.563344][ T5293] Cannot create hsr debugfs directory
[  218.394679][ T5473] device-mapper: ioctl: Empty message received.
[  218.533178][ T5477] atomic_op ffff888029c6e198 conn xmit_atomic 0000000000000000
[  218.654404][ T5293] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  219.277903][ T5481] binder: 5474:5481 ioctl c0306201 0 returned -14
[  219.789298][ T5293] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  220.089153][ T5499] binder: 5494:5499 ioctl c0306201 0 returned -14
[  221.173018][ T5293] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  221.325154][ T5293] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  221.462135][ T5497] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  221.468730][ T5497] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  221.485670][ T5502] vhci_hcd: connection closed
[  221.487855][ T5497] vhci_hcd vhci_hcd.0: Device attached
[  221.515995][  T154] vhci_hcd: stop threads
[  221.520325][  T154] vhci_hcd: release socket
[  221.524784][  T154] vhci_hcd: disconnect device
[  221.764736][ T5293] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.655528][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  222.716762][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  222.777546][ T5293] 8021q: adding VLAN 0 to HW filter on device team0
[  222.809119][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  224.231179][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  224.316233][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.323355][ T4299] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.340959][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  224.407080][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  224.447416][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  224.475801][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.483022][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.722275][ T5293] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  224.733554][ T5293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  224.750147][ T5533] binder: 5531:5533 ioctl c0306201 200000000680 returned -14
[  226.835561][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  226.896368][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  226.995907][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  227.022862][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  227.052982][ T5546] device-mapper: ioctl: Empty message received.
[  227.074769][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  227.113306][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  227.142229][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  227.178119][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  227.216872][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  227.253345][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  227.493221][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  227.511441][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  227.593876][ T5556] atomic_op ffff888022a0a998 conn xmit_atomic 0000000000000000
[  228.622719][ T5568] binder: 5567:5568 ioctl c0306201 200000000680 returned -14
[  228.739971][ T5569] atomic_op ffff88807bb81198 conn xmit_atomic 0000000000000000
[  228.956320][ T4242] device hsr_slave_0 left promiscuous mode
[  229.350578][ T4242] device hsr_slave_1 left promiscuous mode
[  229.364036][ T4242] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.688289][ T4242] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.752865][ T4242] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.800607][ T4242] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.810875][ T4242] device bridge_slave_1 left promiscuous mode
[  229.844308][ T4242] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.934354][ T5589] binder: 5586:5589 ioctl c0306201 200000000680 returned -14
[  229.960213][ T4242] device bridge_slave_0 left promiscuous mode
[  230.015519][ T4242] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.511647][ T4242] device veth1_macvtap left promiscuous mode
[  231.527523][ T4242] device veth0_macvtap left promiscuous mode
[  231.569185][ T5587] device-mapper: ioctl: Empty message received.
[  231.576460][ T4242] device veth1_vlan left promiscuous mode
[  231.582338][ T4242] device veth0_vlan left promiscuous mode
[  234.790452][ T5607] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  234.797030][ T5607] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  234.805582][ T5607] vhci_hcd vhci_hcd.0: Device attached
[  234.813261][ T5608] vhci_hcd: connection closed
[  234.815025][ T4299] vhci_hcd: stop threads
[  234.909761][ T4299] vhci_hcd: release socket
[  234.993560][ T4299] vhci_hcd: disconnect device
[  235.389288][ T5618] ieee802154 phy0 wpan0: encryption failed: -22
[  236.386676][ T4242] team0 (unregistering): Port device team_slave_1 removed
[  236.428244][ T5621] device-mapper: ioctl: Empty message received.
[  236.444402][ T4242] team0 (unregistering): Port device team_slave_0 removed
[  236.472091][ T5625] ieee802154 phy0 wpan0: encryption failed: -22
[  236.733363][ T4242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  237.353409][ T4242] bond0 (unregistering): Released all slaves
[  237.367415][ T5629] zram: Can't change algorithm for initialized device
[  237.378398][ T5629] zram: Cannot change disksize for initialized device
[  237.455554][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  237.463242][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  237.499638][ T5293] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.858589][ T4265] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  238.665482][ T4265] usb 4-1: Using ep0 maxpacket: 32
[  240.535355][ T4265] usb 4-1: device descriptor read/all, error -71
[  241.906009][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  242.728073][ T5682] capability: warning: `syz.3.283' uses deprecated v2 capabilities in a way that may be insecure
[  242.998855][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  243.387857][ T5692] atomic_op ffff888140fcc198 conn xmit_atomic 0000000000000000
[  244.385151][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  244.395921][ T5698] binder: 5696:5698 ioctl c0306201 200000000680 returned -14
[  245.838908][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  245.940480][ T5293] device veth0_vlan entered promiscuous mode
[  246.002691][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  246.086171][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  246.118573][ T5293] device veth1_vlan entered promiscuous mode
[  246.824165][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  247.548538][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  247.560219][ T5293] device veth0_macvtap entered promiscuous mode
[  247.589879][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  247.607465][ T5293] device veth1_macvtap entered promiscuous mode
[  247.792988][ T5293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.795464][ T5733] vivid-001: kernel_thread() failed
[  248.869921][ T5293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.905369][ T5293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.917111][ T5736] ieee802154 phy0 wpan0: encryption failed: -22
[  248.954533][ T5293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.005477][ T5293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.105442][ T5293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.142689][ T5293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.240225][ T5293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.302420][ T5746] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  249.309038][ T5746] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  249.321072][ T5746] vhci_hcd vhci_hcd.0: Device attached
[  249.545667][ T5293] batman_adv: batadv0: Interface activated: batadv_slave_0
[  249.595467][ T4230] usb 39-1: new low-speed USB device number 4 using vhci_hcd
[  249.715669][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  249.806757][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  249.822667][ T4265] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  250.017142][ T5293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  250.174646][ T5293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.842882][ T5293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  250.853541][ T5293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.920049][ T5747] vhci_hcd: connection reset by peer
[  250.937010][ T4377] vhci_hcd: stop threads
[  250.941319][ T4377] vhci_hcd: release socket
[  250.942632][ T5293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.125361][ T4265] usb 3-1: Using ep0 maxpacket: 32
[  251.635450][ T4377] vhci_hcd: disconnect device
[  251.640571][ T5293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.661137][ T5293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.684085][ T5293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.719025][ T5293] batman_adv: batadv0: Interface activated: batadv_slave_1
[  251.738397][ T5293] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.756175][ T5293] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.765712][ T4265] usb 3-1: config 0 has an invalid interface number: 20 but max is 0
[  251.773835][ T4265] usb 3-1: config 0 has no interface number 0
[  251.820883][ T5293] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.830688][ T5293] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.844098][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  251.885456][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  251.908837][ T4265] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  251.963453][ T4265] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  252.007473][ T4265] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  252.028352][ T5757] zram: Can't change algorithm for initialized device
[  252.084081][ T5757] zram: Cannot change disksize for initialized device
[  252.205454][ T4265] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  252.225078][ T4265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.245475][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.253347][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.302922][ T4265] usb 3-1: Product: syz
[  252.336948][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  252.345492][ T4265] usb 3-1: config 0 descriptor??
[  252.375754][ T4265] usb 3-1: can't set config #0, error -71
[  252.395528][ T4265] usb 3-1: USB disconnect, device number 3
[  252.436377][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.451536][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.640777][ T5771] loop2: detected capacity change from 0 to 4096
[  252.666014][ T5764] device-mapper: ioctl: Empty message received.
[  252.823186][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  252.886922][ T5771] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  253.490271][   T26] audit: type=1800 audit(1790104850.425:6): pid=5768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.300" name="file1" dev="loop2" ino=30 res=0 errno=0
[  254.805393][ T4230] vhci_hcd: vhci_device speed not set
[  255.683803][ T5792] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  255.757438][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  255.763925][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  256.258651][ T5801] zram: Can't change algorithm for initialized device
[  257.716482][ T5820] zram: Can't change algorithm for initialized device
[  257.760576][ T5820] zram: Cannot change disksize for initialized device
[  258.698142][ T5811] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5815] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5811]
[  258.971584][ T5818] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  258.978166][ T5818] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  258.985902][ T5818] vhci_hcd vhci_hcd.0: Device attached
[  259.001152][ T5829] vhci_hcd: connection closed
[  259.072028][ T4297] vhci_hcd: stop threads
[  259.081852][ T4297] vhci_hcd: release socket
[  259.089006][ T4297] vhci_hcd: disconnect device
[  261.177403][ T5854] device-mapper: ioctl: Empty message received.
[  262.765360][ T4230] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  263.125569][ T4230] usb 2-1: Using ep0 maxpacket: 32
[  263.198117][ T5867] atomic_op ffff8880264bd998 conn xmit_atomic 0000000000000000
[  264.285548][ T4230] usb 2-1: unable to read config index 0 descriptor/all
[  264.292688][ T4230] usb 2-1: can't read configurations, error -71
[  266.407536][ T5882] loop4: detected capacity change from 0 to 256
[  266.557206][ T5882] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  271.245415][ T5923] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  271.252199][ T5923] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  271.259826][ T5923] vhci_hcd vhci_hcd.0: Device attached
[  271.555591][   T21] usb 39-1: new low-speed USB device number 5 using vhci_hcd
[  273.017718][ T5927] vhci_hcd: connection reset by peer
[  273.023401][ T4299] vhci_hcd: stop threads
[  273.028762][ T4299] vhci_hcd: release socket
[  273.065463][ T4299] vhci_hcd: disconnect device
[  275.063734][ T5963] loop4: detected capacity change from 0 to 4096
[  276.526174][ T5963] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  276.735451][   T21] vhci_hcd: vhci_device speed not set
[  276.996761][ T5967] ieee802154 phy0 wpan0: encryption failed: -22
[  277.269257][ T5964] vivid-001: kernel_thread() failed
[  280.073232][ T5971] device-mapper: ioctl: Empty message received.
[  280.117306][ T5983] binder: 5982:5983 ioctl c0306201 200000000680 returned -14
[  282.580704][ T6000] ieee802154 phy0 wpan0: encryption failed: -22
[  282.815728][ T5998] vivid-001: kernel_thread() failed
[  283.306075][ T6005] binder: 6003:6005 ioctl c0306201 200000000680 returned -14
[  287.095501][ T6030] loop3: detected capacity change from 0 to 4096
[  287.143260][ T6030] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  287.215543][   T26] audit: type=1800 audit(1790104884.145:7): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.353" name="file1" dev="loop3" ino=30 res=0 errno=0
[  288.089945][ T6041] atomic_op ffff888022d31998 conn xmit_atomic 0000000000000000
[  290.752113][ T6056] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  290.758693][ T6056] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  290.774908][ T6056] vhci_hcd vhci_hcd.0: Device attached
[  290.787205][ T6059] vhci_hcd: connection closed
[  290.798968][  T144] vhci_hcd: stop threads
[  290.851497][  T144] vhci_hcd: release socket
[  290.856758][  T144] vhci_hcd: disconnect device
[  291.290809][ T6072] atomic_op ffff8880227d3198 conn xmit_atomic 0000000000000000
[  292.942703][ T6084] device-mapper: ioctl: Empty message received.
[  299.160300][ T6111] zram: Can't change algorithm for initialized device
[  300.115585][   T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  300.146002][ T6136] atomic_op ffff888022f80998 conn xmit_atomic 0000000000000000
[  300.596738][   T21] usb 3-1: Using ep0 maxpacket: 32
[  300.975874][   T21] usb 3-1: config 0 has an invalid interface number: 20 but max is 0
[  301.020225][   T21] usb 3-1: config 0 has no interface number 0
[  301.043484][ T6144] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  301.050082][ T6144] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  301.057977][ T6144] vhci_hcd vhci_hcd.0: Device attached
[  301.143395][   T21] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  301.508736][   T21] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  301.902849][ T6145] vhci_hcd: connection closed
[  301.904043][ T4299] vhci_hcd: stop threads
[  302.426397][ T4299] vhci_hcd: release socket
[  302.431221][ T4299] vhci_hcd: disconnect device
[  302.495328][   T21] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  302.665667][   T21] usb 3-1: string descriptor 0 read error: -71
[  302.672091][   T21] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  302.850215][ T4174] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  302.858235][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.868287][   T21] usb 3-1: config 0 descriptor??
[  302.896646][ T6152] loop4: detected capacity change from 0 to 4096
[  304.120512][   T21] usb 3-1: can't set config #0, error -71
[  304.130062][   T21] usb 3-1: USB disconnect, device number 4
[  304.388780][ T4174] usb 2-1: device not accepting address 5, error -71
[  305.279906][ T6176] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  305.286477][ T6176] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  305.294125][ T6176] vhci_hcd vhci_hcd.0: Device attached
[  305.635442][ T4265] usb 35-1: new low-speed USB device number 5 using vhci_hcd
[  306.269247][ T6180] vhci_hcd: connection reset by peer
[  306.274974][ T4302] vhci_hcd: stop threads
[  306.282174][ T4302] vhci_hcd: release socket
[  306.517598][ T4302] vhci_hcd: disconnect device
[  306.817945][ T6196] atomic_op ffff888070a1d198 conn xmit_atomic 0000000000000000
[  310.113375][ T6220] loop3: detected capacity change from 0 to 4096
[  311.055365][ T4265] vhci_hcd: vhci_device speed not set
[  311.403363][ T6220] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  312.120012][   T26] audit: type=1800 audit(1790104909.055:8): pid=6220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.390" name="file1" dev="loop3" ino=30 res=0 errno=0
[  314.144709][ T6249] loop6: detected capacity change from 0 to 256
[  315.970772][ T6249] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  316.214514][ T6262] device-mapper: ioctl: Empty message received.
[  316.292323][ T6267] device-mapper: ioctl: Empty message received.
[  316.346694][ T6271] zram: Can't change algorithm for initialized device
[  317.354569][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  317.385567][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  319.565291][ T4668] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  322.397017][ T6328] loop1: detected capacity change from 0 to 256
[  322.483451][ T6328] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  322.531002][ T6331] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  322.537587][ T6331] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  322.556055][ T6331] vhci_hcd vhci_hcd.0: Device attached
[  322.588225][ T6333] vhci_hcd: connection closed
[  322.588487][ T4297] vhci_hcd: stop threads
[  322.618077][ T4297] vhci_hcd: release socket
[  322.640689][ T4297] vhci_hcd: disconnect device
[  324.115408][ T4265] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  324.393217][ T6368] ieee802154 phy0 wpan0: encryption failed: -22
[  324.400325][ T1108] Bluetooth: hci1: command 0x0406 tx timeout
[  324.415424][ T4265] usb 7-1: Using ep0 maxpacket: 32
[  324.595452][ T4265] usb 7-1: config 0 has an invalid interface number: 20 but max is 0
[  325.559894][ T4265] usb 7-1: config 0 has no interface number 0
[  325.566142][ T4265] usb 7-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  325.577048][ T4265] usb 7-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  325.593127][ T4265] usb 7-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  325.875716][ T4265] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  326.510044][ T4265] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.555328][ T4265] usb 7-1: Product: syz
[  326.587451][ T4265] usb 7-1: Manufacturer: syz
[  326.645278][ T4265] usb 7-1: SerialNumber: syz
[  328.566272][ T4265] usb 7-1: config 0 descriptor??
[  329.622497][ T4265] usb 7-1: can't set config #0, error -71
[  329.679850][ T4265] usb 7-1: USB disconnect, device number 2
[  329.795055][ T6405] binder: 6404:6405 ioctl c0306201 200000000680 returned -14
[  331.322585][ T6412] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  331.329142][ T6412] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  331.361022][ T6412] vhci_hcd vhci_hcd.0: Device attached
[  331.430561][ T6414] vhci_hcd: connection closed
[  331.432469][    T9] vhci_hcd: stop threads
[  331.453747][    T9] vhci_hcd: release socket
[  331.513575][    T9] vhci_hcd: disconnect device
[  331.576667][ T4233] vhci_hcd: vhci_device speed not set
[  331.635382][ T4265] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  332.254030][ T4265] usb 7-1: Using ep0 maxpacket: 32
[  332.675697][ T4265] usb 7-1: config 0 has an invalid interface number: 20 but max is 0
[  332.765396][ T4265] usb 7-1: config 0 has no interface number 0
[  332.860519][ T4265] usb 7-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  332.907486][ T6437] ieee802154 phy0 wpan0: encryption failed: -22
[  333.763508][ T4265] usb 7-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  333.839706][ T4265] usb 7-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  333.864577][ T6441] zram: Can't change algorithm for initialized device
[  333.873736][ T6441] zram: Cannot change disksize for initialized device
[  334.065734][ T4265] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  334.095652][ T4265] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.129933][ T4265] usb 7-1: Product: syz
[  334.151633][ T4265] usb 7-1: Manufacturer: syz
[  334.162771][ T4265] usb 7-1: SerialNumber: syz
[  334.182802][ T4265] usb 7-1: config 0 descriptor??
[  334.207112][ T6411] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  334.265562][ T4265] usb 7-1: can't set config #0, error -71
[  334.297300][ T4265] usb 7-1: USB disconnect, device number 3
[  334.655378][ T4233] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  334.915445][ T4233] usb 3-1: Using ep0 maxpacket: 32
[  335.045916][ T4233] usb 3-1: config 0 has an invalid interface number: 20 but max is 0
[  335.081537][ T4233] usb 3-1: config 0 has no interface number 0
[  335.163796][ T4233] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  335.273889][ T4233] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  335.340830][ T4233] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  335.561293][ T4233] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  335.594790][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.328292][ T4233] usb 3-1: Product: syz
[  336.430192][ T4233] usb 3-1: Manufacturer: syz
[  337.217624][ T4233] usb 3-1: SerialNumber: syz
[  337.236497][ T4233] usb 3-1: config 0 descriptor??
[  337.257659][ T6450] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  337.275497][ T4233] usb 3-1: can't set config #0, error -71
[  337.290476][ T4233] usb 3-1: USB disconnect, device number 5
[  337.475246][ T6487] ieee802154 phy0 wpan0: encryption failed: -22
[  338.525712][ T6493] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  338.532304][ T6493] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  338.613466][ T6493] vhci_hcd vhci_hcd.0: Device attached
[  339.437368][ T4229] usb 37-1: new low-speed USB device number 4 using vhci_hcd
[  340.626252][ T6496] vhci_hcd: connection closed
[  340.633707][  T154] vhci_hcd: stop threads
[  340.948732][  T154] vhci_hcd: release socket
[  341.025140][  T154] vhci_hcd: disconnect device
[  341.048209][ T6503] syz.1.448 (6503) used greatest stack depth: 20432 bytes left
[  341.193003][ T6494] kvm [6491]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[  344.192363][ T6529] device-mapper: ioctl: Empty message received.
[  345.915394][ T4229] vhci_hcd: vhci_device speed not set
[  346.808663][ T6549] ieee802154 phy0 wpan0: encryption failed: -22
[  346.862968][ T6546] device-mapper: ioctl: Empty message received.
[  347.055311][   T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  347.266537][ T6560] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  347.273123][ T6560] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  347.395309][   T13] usb 4-1: Using ep0 maxpacket: 8
[  347.462062][ T6560] vhci_hcd vhci_hcd.0: Device attached
[  347.634636][ T6562] vhci_hcd: connection closed
[  347.635896][ T4545] vhci_hcd: stop threads
[  347.696580][   T13] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  347.713170][ T4545] vhci_hcd: release socket
[  347.725466][ T4229] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  347.778182][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.815710][ T4545] vhci_hcd: disconnect device
[  348.148108][   T13] usb 4-1: Product: syz
[  349.871750][   T13] usb 4-1: Manufacturer: syz
[  349.879045][   T13] usb 4-1: SerialNumber: syz
[  350.043797][   T13] usb 4-1: config 0 descriptor??
[  350.082206][ T6574] zram: Can't change algorithm for initialized device
[  350.091442][ T6574] zram: Cannot change disksize for initialized device
[  350.300626][   T13] usb 4-1: can't set config #0, error -71
[  351.089871][   T13] usb 4-1: USB disconnect, device number 5
[  351.246621][ T6591] ieee802154 phy0 wpan0: encryption failed: -22
[  352.935387][ T4229] vhci_hcd: vhci_device speed not set
[  353.310668][ T4174] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  354.675421][ T4174] usb 2-1: Using ep0 maxpacket: 32
[  354.796751][ T6613] syz.2.474 (6613) used greatest stack depth: 18768 bytes left
[  354.876197][ T4174] usb 2-1: config 0 has an invalid interface number: 20 but max is 0
[  354.886058][ T4174] usb 2-1: config 0 has no interface number 0
[  354.928977][ T4174] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  355.165236][ T4174] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  355.177003][ T4174] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  355.795779][ T6617] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  355.802368][ T6617] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  355.875387][ T4174] usb 2-1: string descriptor 0 read error: -71
[  355.881745][ T4174] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  355.895805][ T6617] vhci_hcd vhci_hcd.0: Device attached
[  355.895815][ T6625] vhci_hcd: connection closed
[  355.901711][ T4298] vhci_hcd: stop threads
[  355.911192][ T4298] vhci_hcd: release socket
[  355.925270][ T4298] vhci_hcd: disconnect device
[  355.961863][ T4174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.996608][ T4174] usb 2-1: config 0 descriptor??
[  356.046271][ T4174] usb 2-1: can't set config #0, error -71
[  356.095619][ T4174] usb 2-1: USB disconnect, device number 7
[  357.085296][ T1110] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  357.405260][ T1110] usb 3-1: Using ep0 maxpacket: 32
[  357.518287][ T6647] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  357.524955][ T6647] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  357.545469][ T1110] usb 3-1: config 0 has an invalid interface number: 20 but max is 0
[  357.565569][ T1110] usb 3-1: config 0 has no interface number 0
[  357.571741][ T1110] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  357.582746][ T1110] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  357.593525][ T1110] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  357.603620][ T6657] vhci_hcd: connection closed
[  357.619796][ T6647] vhci_hcd vhci_hcd.0: Device attached
[  357.653529][ T4301] vhci_hcd: stop threads
[  357.658233][ T4301] vhci_hcd: release socket
[  357.683363][ T4301] vhci_hcd: disconnect device
[  357.755519][ T1110] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  357.801760][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.823380][ T1110] usb 3-1: Product: syz
[  357.828629][ T1110] usb 3-1: Manufacturer: syz
[  357.834608][ T1110] usb 3-1: SerialNumber: syz
[  357.862003][ T1110] usb 3-1: config 0 descriptor??
[  357.877917][ T6676] netlink: 12 bytes leftover after parsing attributes in process `syz.6.488'.
[  357.888540][ T6637] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  357.905508][ T6676] netlink: 104 bytes leftover after parsing attributes in process `syz.6.488'.
[  357.920495][ T6676] netlink: 48 bytes leftover after parsing attributes in process `syz.6.488'.
[  358.637779][ T1110] usb-storage 3-1:0.20: USB Mass Storage device detected
[  359.187828][ T1110] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  359.382489][ T1110] scsi host1: usb-storage 3-1:0.20
[  359.527811][ T1110] usb 3-1: USB disconnect, device number 6
[  359.725374][ T4227] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  359.750145][ T6705] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  359.756739][ T6705] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  360.467248][ T6705] vhci_hcd vhci_hcd.0: Device attached
[  360.667688][ T6709] vhci_hcd: connection closed
[  360.670232][ T4377] vhci_hcd: stop threads
[  360.695503][ T4377] vhci_hcd: release socket
[  361.139550][ T6724] binder: BINDER_SET_CONTEXT_MGR already set
[  361.145633][ T6724] binder: 6716:6724 ioctl 4018620d 200000000040 returned -16
[  361.154056][ T6724] binder: 6716:6724 ioctl c0306201 0 returned -14
[  361.161468][ T6724] binder: 6716:6724 ioctl c0306201 0 returned -14
[  361.895553][ T4227] usb 4-1: Using ep0 maxpacket: 32
[  362.263490][ T1108] usb 35-1: new low-speed USB device number 6 using vhci_hcd
[  362.392017][ T4377] vhci_hcd: disconnect device
[  362.665575][ T4227] usb 4-1: unable to read config index 0 descriptor/start: -71
[  362.673369][ T4227] usb 4-1: can't read configurations, error -71
[  364.814234][ T6747] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  364.820836][ T6747] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  365.121945][ T6748] vhci_hcd: connection closed
[  365.122642][ T6747] vhci_hcd vhci_hcd.0: Device attached
[  365.146470][ T4299] vhci_hcd: stop threads
[  365.196861][ T4299] vhci_hcd: release socket
[  365.253467][ T4299] vhci_hcd: disconnect device
[  365.455923][ T6761] binder: 6741:6761 ioctl c0306201 0 returned -14
[  365.482438][ T6751] device-mapper: ioctl: Empty message received.
[  366.706552][ T6779] netlink: 16 bytes leftover after parsing attributes in process `syz.4.512'.
[  367.485358][ T1108] vhci_hcd: vhci_device speed not set
[  369.141922][ T6783] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  369.148521][ T6783] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  369.175459][ T6783] vhci_hcd vhci_hcd.0: Device attached
[  369.255565][ T6786] vhci_hcd: connection closed
[  369.255992][ T3080] vhci_hcd: stop threads
[  369.265024][ T3080] vhci_hcd: release socket
[  370.234193][ T4227] usb 41-1: new low-speed USB device number 3 using vhci_hcd
[  370.266874][ T3080] vhci_hcd: disconnect device
[  371.026207][ T6813] device-mapper: table: 248:0: zero-length target
[  371.074512][ T6813] device-mapper: ioctl: error adding target to table
[  371.112737][ T6816] device-mapper: ioctl: Empty message received.
[  371.798985][ T6826] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[  371.805572][ T6826] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  371.890662][ T6826] vhci_hcd vhci_hcd.0: Device attached
[  371.986749][ T6827] vhci_hcd: connection closed
[  371.987156][  T144] vhci_hcd: stop threads
[  372.009045][  T144] vhci_hcd: release socket
[  372.052478][  T144] vhci_hcd: disconnect device
[  372.085311][ T1110] vhci_hcd: vhci_device speed not set
[  373.531211][ T6857] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  374.294841][ T6866] loop4: detected capacity change from 0 to 256
[  374.384920][ T6866] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  375.155362][ T6879] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  375.162105][ T6879] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  375.196735][ T6879] vhci_hcd vhci_hcd.0: Device attached
[  375.233707][ T6881] vhci_hcd: connection closed
[  375.235979][  T144] vhci_hcd: stop threads
[  375.363629][  T144] vhci_hcd: release socket
[  375.369058][ T4227] vhci_hcd: vhci_device speed not set
[  375.440099][  T144] vhci_hcd: disconnect device
[  375.505270][ T1110] usb 45-1: new low-speed USB device number 3 using vhci_hcd
[  377.364488][ T6907] binder: BINDER_SET_CONTEXT_MGR already set
[  377.370602][ T6907] binder: 6900:6907 ioctl 4018620d 200000000040 returned -16
[  377.379121][ T6907] binder: 6900:6907 ioctl c0306201 0 returned -14
[  377.386629][ T6907] binder: 6900:6907 ioctl c0306201 0 returned -14
[  378.651430][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  378.658158][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  380.062974][ T6930] binder: 6922:6930 ioctl c0306201 0 returned -14
[  380.092041][ T6931] loop6: detected capacity change from 0 to 256
[  380.895373][ T1110] vhci_hcd: vhci_device speed not set
[  380.927017][ T6931] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  383.656607][ T6953] netlink: 104 bytes leftover after parsing attributes in process `syz.3.544'.
[  384.597926][ T6958] vivid-001: kernel_thread() failed
[  384.631310][ T6948] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  384.637917][ T6948] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  385.591412][ T6948] vhci_hcd vhci_hcd.0: Device attached
[  385.707098][ T6955] vhci_hcd: connection closed
[  385.708633][ T4543] vhci_hcd: stop threads
[  385.726684][ T4543] vhci_hcd: release socket
[  385.853203][ T4543] vhci_hcd: disconnect device
[  385.907978][ T6971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.549'.
[  385.917136][ T4174] usb 37-1: new low-speed USB device number 5 using vhci_hcd
[  385.934832][ T4174] usb 37-1: enqueue for inactive port 0
[  386.035343][ T4174] vhci_hcd: vhci_device speed not set
[  388.560496][ T6989] loop2: detected capacity change from 0 to 256
[  389.740697][ T6989] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  391.670150][ T7013] netlink: 104 bytes leftover after parsing attributes in process `syz.4.557'.
[  395.056791][ T7033] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  395.063363][ T7033] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  395.105360][ T7033] vhci_hcd vhci_hcd.0: Device attached
[  395.155540][ T4668] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  395.188063][ T7038] vhci_hcd: connection closed
[  395.232409][ T3080] vhci_hcd: stop threads
[  395.272738][ T3080] vhci_hcd: release socket
[  395.296302][ T3080] vhci_hcd: disconnect device
[  395.345425][ T1110] vhci_hcd: vhci_device speed not set
[  395.395355][ T4668] usb 3-1: Using ep0 maxpacket: 32
[  395.407631][ T7055] loop6: detected capacity change from 0 to 256
[  395.485651][ T7055] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  395.655689][ T4668] usb 3-1: unable to read config index 0 descriptor/all
[  395.671991][ T4668] usb 3-1: can't read configurations, error -71
[  396.449527][ T7063] netlink: 104 bytes leftover after parsing attributes in process `syz.3.568'.
[  404.264436][ T7106] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  404.271023][ T7106] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  404.338838][ T7106] vhci_hcd vhci_hcd.0: Device attached
[  404.345345][ T7111] vhci_hcd: connection closed
[  404.346639][ T4298] vhci_hcd: stop threads
[  404.378897][ T4298] vhci_hcd: release socket
[  404.383391][ T4298] vhci_hcd: disconnect device
[  408.985299][ T7157] binder: BINDER_SET_CONTEXT_MGR already set
[  408.991503][ T7157] binder: 7153:7157 ioctl 4018620d 200000000040 returned -16
[  409.006003][ T7157] binder: 7153:7157 ioctl c0306201 0 returned -14
[  409.017622][ T7157] binder: 7153:7157 ioctl c0306201 0 returned -14
[  409.028926][ T7157] binder: 7153:7157 ioctl c0306201 0 returned -14
[  410.119422][ T7161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.589'.
[  411.288662][ T7171] atomic_op ffff888018de6198 conn xmit_atomic 0000000000000000
[  412.126246][ T7174] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  412.133054][ T7174] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  412.171377][ T7174] vhci_hcd vhci_hcd.0: Device attached
[  413.208958][ T7177] vhci_hcd: connection closed
[  413.219818][ T3080] vhci_hcd: stop threads
[  413.240232][ T3080] vhci_hcd: release socket
[  413.260655][ T3080] vhci_hcd: disconnect device
[  413.403880][   T13] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  413.411957][ T1110] usb 37-1: new low-speed USB device number 6 using vhci_hcd
[  413.419523][ T1110] usb 37-1: enqueue for inactive port 0
[  413.587446][ T7197] binder: 7192:7197 ioctl 4018620d 0 returned -22
[  413.599048][ T7197] binder: 7192:7197 ioctl c0306201 0 returned -14
[  413.612356][ T7197] binder: 7192:7197 ioctl c0306201 0 returned -14
[  414.477714][ T1110] vhci_hcd: vhci_device speed not set
[  416.245517][   T13] usb 7-1: device not accepting address 4, error -71
[  416.612714][ T7212] device-mapper: table: 248:0: zero-length target
[  416.655381][ T7212] device-mapper: ioctl: error adding target to table
[  416.767737][ T7212] device-mapper: ioctl: Empty message received.
[  416.957305][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.605'.
[  420.389277][ T7243] atomic_op ffff8880277d2998 conn xmit_atomic 0000000000000000
[  422.626184][ T7253] binder: BINDER_SET_CONTEXT_MGR already set
[  422.632621][ T7253] binder: 7246:7253 ioctl 4018620d 200000000040 returned -16
[  422.641333][ T7253] binder: 7246:7253 ioctl c0306201 0 returned -14
[  422.648790][ T7253] binder: 7246:7253 ioctl c0306201 0 returned -14
[  423.521976][ T7257] device-mapper: table: 248:0: zero-length target
[  423.558034][ T7257] device-mapper: ioctl: error adding target to table
[  423.589999][ T7250] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  423.596562][ T7250] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  423.605676][ T7250] vhci_hcd vhci_hcd.0: Device attached
[  423.634289][ T7258] vhci_hcd: connection closed
[  423.635563][ T4242] vhci_hcd: stop threads
[  423.652486][ T7257] device-mapper: ioctl: Empty message received.
[  423.684524][ T4242] vhci_hcd: release socket
[  423.689820][ T4242] vhci_hcd: disconnect device
[  424.497760][ T7283] binder: BINDER_SET_CONTEXT_MGR already set
[  424.503869][ T7283] binder: 7278:7283 ioctl 4018620d 200000000040 returned -16
[  424.516733][ T7283] binder: 7278:7283 ioctl c0306201 0 returned -14
[  424.529004][ T7283] binder: 7278:7283 ioctl c0306201 0 returned -14
[  425.819200][ T7293] atomic_op ffff888022514998 conn xmit_atomic 0000000000000000
[  428.270440][ T7302] device-mapper: ioctl: Empty message received.
[  428.657360][ T7305] device-mapper: table: 248:0: zero-length target
[  428.695471][ T7305] device-mapper: ioctl: error adding target to table
[  428.703096][ T7305] device-mapper: ioctl: Empty message received.
[  429.426744][ T7317] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  429.433296][ T7317] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  429.448759][ T7317] vhci_hcd vhci_hcd.0: Device attached
[  429.738735][ T7324] vhci_hcd: connection closed
[  429.770520][  T144] vhci_hcd: stop threads
[  429.785544][   T13] usb 39-1: new low-speed USB device number 6 using vhci_hcd
[  429.802469][  T144] vhci_hcd: release socket
[  429.807192][  T144] vhci_hcd: disconnect device
[  430.119479][ T7332] binder: BINDER_SET_CONTEXT_MGR already set
[  430.125589][ T7332] binder: 7329:7332 ioctl 4018620d 200000000040 returned -16
[  430.134016][ T7332] binder: 7329:7332 ioctl c0306201 0 returned -14
[  430.141608][ T7332] binder: 7329:7332 ioctl c0306201 0 returned -14
[  431.666061][ T7348] device-mapper: table: 248:0: zero-length target
[  431.672550][ T7348] device-mapper: ioctl: error adding target to table
[  431.700717][ T7348] device-mapper: ioctl: Empty message received.
[  433.455348][ T7367] binder: BINDER_SET_CONTEXT_MGR already set
[  433.461534][ T7367] binder: 7361:7367 ioctl 4018620d 200000000040 returned -16
[  433.475178][ T7367] binder: 7361:7367 ioctl c0306201 0 returned -14
[  433.488204][ T7367] binder: 7361:7367 ioctl c0306201 0 returned -14
[  435.735278][   T13] vhci_hcd: vhci_device speed not set
[  437.966938][ T7387] device-mapper: table: 248:0: zero-length target
[  438.278944][ T7387] device-mapper: ioctl: error adding target to table
[  438.287444][ T7387] device-mapper: ioctl: Empty message received.
[  441.008756][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  441.015200][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  443.049944][ T7429] loop2: detected capacity change from 0 to 256
[  443.066553][ T7427] device-mapper: table: 248:0: zero-length target
[  443.128031][ T7435] device-mapper: ioctl: Empty message received.
[  443.142467][ T7429] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  443.192783][ T7427] device-mapper: ioctl: error adding target to table
[  447.605662][ T7445] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7463] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7445]
[  447.981454][ T7473] device syzkaller0 entered promiscuous mode
[  451.379991][ T7487] device-mapper: ioctl: Empty message received.
[  451.435463][ T7488] loop3: detected capacity change from 0 to 256
[  451.452324][ T7482] device-mapper: table: 248:0: multipat: unknown target type
[  451.496499][ T7488] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  451.508256][ T7482] device-mapper: ioctl: error adding target to table
[  454.921909][ T7517] binder: BINDER_SET_CONTEXT_MGR already set
[  454.928200][ T7517] binder: 7509:7517 ioctl 4018620d 200000000040 returned -16
[  454.936766][ T7517] binder: 7509:7517 ioctl c0306201 0 returned -14
[  454.944250][ T7517] binder: 7509:7517 ioctl c0306201 0 returned -14
[  454.951511][ T7517] binder: 7509:7517 ioctl c0306201 0 returned -14
[  455.145976][ T7518] device-mapper: table: 248:0: zero-length target
[  455.737661][ T7518] device-mapper: ioctl: error adding target to table
[  457.246272][ T7539] device-mapper: ioctl: Empty message received.
[  457.274734][ T7536] device-mapper: table: 248:0: multipat: unknown target type
[  457.509831][ T7536] device-mapper: ioctl: error adding target to table
[  457.697665][ T7542] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  457.704252][ T7542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  457.827113][ T7542] vhci_hcd vhci_hcd.0: Device attached
[  457.847771][ T7544] vhci_hcd: connection closed
[  457.849628][ T4298] vhci_hcd: stop threads
[  457.880084][ T4298] vhci_hcd: release socket
[  457.905316][ T4298] vhci_hcd: disconnect device
[  458.317118][ T7555] binder: BINDER_SET_CONTEXT_MGR already set
[  458.323256][ T7555] binder: 7549:7555 ioctl 4018620d 200000000040 returned -16
[  458.337267][ T7555] binder: 7549:7555 ioctl c0306201 0 returned -14
[  458.350838][ T7555] binder: 7549:7555 ioctl c0306201 0 returned -14
[  459.870885][ T7577] loop1: detected capacity change from 0 to 256
[  459.909295][ T7577] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  461.028410][    C0] ODEBUG: Out of memory. ODEBUG disabled
[  461.216697][ T7595] device-mapper: ioctl: Empty message received.
[  462.102144][ T7591] device-mapper: table: 248:0: multipat: unknown target type
[  462.120506][ T7591] device-mapper: ioctl: error adding target to table
[  462.333443][ T7602] zram: Can't change algorithm for initialized device
[  462.342151][ T7604] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  462.349058][ T7604] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  462.373240][ T7602] zram: Cannot change disksize for initialized device
[  462.495266][ T4227] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  463.192958][ T7604] vhci_hcd vhci_hcd.0: Device attached
[  463.259535][ T7608] vhci_hcd: connection closed
[  463.628155][ T4543] vhci_hcd: stop threads
[  463.805203][ T4227] usb 4-1: Using ep0 maxpacket: 32
[  463.915704][ T1108] usb 37-1: new low-speed USB device number 7 using vhci_hcd
[  463.970857][ T4543] vhci_hcd: release socket
[  464.001220][ T4543] vhci_hcd: disconnect device
[  464.065407][ T4227] usb 4-1: config 0 has an invalid interface number: 20 but max is 0
[  464.085477][ T4227] usb 4-1: config 0 has no interface number 0
[  464.091872][ T4227] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  464.373170][ T4227] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  464.385583][ T4227] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  464.565505][ T4227] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  464.578965][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.618617][ T4227] usb 4-1: Product: syz
[  464.628381][ T4227] usb 4-1: Manufacturer: syz
[  464.638616][ T4227] usb 4-1: SerialNumber: syz
[  465.679335][ T4227] usb 4-1: config 0 descriptor??
[  466.039719][ T4227] usb 4-1: can't set config #0, error -71
[  466.086714][ T4227] usb 4-1: USB disconnect, device number 8
[  466.132078][ T7643] device-mapper: table: 248:0: multipath: invalid number of hardware handler args
[  466.167239][ T7643] device-mapper: ioctl: error adding target to table
[  466.203466][ T7643] device-mapper: ioctl: Empty message received.
[  466.213635][ T7649] device-mapper: table: 248:0: multipath: invalid number of hardware handler args
[  467.078166][ T7649] device-mapper: ioctl: error adding target to table
[  467.086935][ T7649] device-mapper: ioctl: Empty message received.
[  467.181512][ T7660] device-mapper: table: 248:0: multipath: invalid initial priority group number
[  467.195338][ T7660] device-mapper: ioctl: error adding target to table
[  467.204323][ T7660] device-mapper: ioctl: Empty message received.
[  467.312486][ T7667] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  467.319182][ T7667] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  467.645524][ T4227] usb 35-1: new low-speed USB device number 8 using vhci_hcd
[  469.115288][ T1108] vhci_hcd: vhci_device speed not set
[  470.026539][ T7667] vhci_hcd vhci_hcd.0: Device attached
[  470.077092][ T7672] vhci_hcd: connection reset by peer
[  470.221858][ T4302] vhci_hcd: stop threads
[  470.227232][ T4302] vhci_hcd: release socket
[  470.236566][ T4302] vhci_hcd: disconnect device
[  472.234913][ T7713] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  472.284606][ T7717] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  472.291644][ T7717] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  472.365489][ T7717] vhci_hcd vhci_hcd.0: Device attached
[  472.461759][ T7718] vhci_hcd: connection closed
[  472.462066][  T144] vhci_hcd: stop threads
[  472.481774][  T144] vhci_hcd: release socket
[  472.501380][  T144] vhci_hcd: disconnect device
[  472.577401][ T1108] vhci_hcd: vhci_device speed not set
[  472.924160][ T7736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.734'.
[  475.115625][ T4227] vhci_hcd: vhci_device speed not set
[  476.414935][ T7765] device-mapper: table: 248:0: multipath: invalid number of feature args
[  476.445269][ T7765] device-mapper: ioctl: error adding target to table
[  476.546420][ T7768] device-mapper: ioctl: Empty message received.
[  476.655890][ T7774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.758'.
[  476.666294][ T7774] netlink: 104 bytes leftover after parsing attributes in process `syz.3.758'.
[  478.755475][ T4229] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  479.145344][ T4229] usb 4-1: Using ep0 maxpacket: 32
[  479.265780][ T4229] usb 4-1: config 0 has an invalid interface number: 20 but max is 0
[  479.303154][ T4229] usb 4-1: config 0 has no interface number 0
[  479.378573][ T4229] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  479.498044][ T4229] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  479.560414][ T7803] device-mapper: ioctl: Empty message received.
[  479.570909][ T4229] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  479.795628][ T4229] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  479.835887][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.909576][ T4229] usb 4-1: Product: syz
[  479.958002][ T4229] usb 4-1: Manufacturer: syz
[  479.975253][ T4229] usb 4-1: SerialNumber: syz
[  480.057912][ T4229] usb 4-1: config 0 descriptor??
[  480.089106][ T4229] usb 4-1: can't set config #0, error -71
[  480.186062][ T4229] usb 4-1: USB disconnect, device number 9
[  482.051875][ T7815] netlink: 104 bytes leftover after parsing attributes in process `syz.2.769'.
[  482.094977][ T7817] device-mapper: table: 248:0: multipath: invalid number of feature args
[  482.151528][ T7817] device-mapper: ioctl: error adding target to table
[  482.187717][ T7817] device-mapper: ioctl: Empty message received.
[  483.908072][ T7845] device syzkaller0 entered promiscuous mode
[  485.203226][ T7849] device-mapper: ioctl: Empty message received.
[  485.714193][ T7857] device-mapper: table: 248:0: multipath: invalid number of hardware handler args
[  485.797472][ T7863] device syzkaller0 entered promiscuous mode
[  485.804214][ T7857] device-mapper: ioctl: error adding target to table
[  485.805507][ T7864] device-mapper: ioctl: Empty message received.
[  486.348641][ T7866] device-mapper: ioctl: Empty message received.
[  488.429477][ T7886] device-mapper: ioctl: Empty message received.
[  489.791062][ T7906] device-mapper: table: 248:0: multipath: invalid number of feature args
[  489.827186][ T7906] device-mapper: ioctl: error adding target to table
[  489.871244][ T7914] device-mapper: ioctl: Empty message received.
[  489.882837][ T7911] device syzkaller0 entered promiscuous mode
[  490.038582][ T7919] device-mapper: ioctl: Empty message received.
[  491.714123][ T7949] device-mapper: table: 248:0: multipath: invalid number of feature args
[  491.764773][ T7949] device-mapper: ioctl: error adding target to table
[  491.765833][ T7950] device-mapper: ioctl: Empty message received.
[  491.934296][ T7953] zram: Can't change algorithm for initialized device
[  491.987507][ T7953] zram: Cannot change disksize for initialized device
[  494.435334][ T4263] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  495.508748][ T7999] device-mapper: table: 248:0: multipath: invalid number of feature args
[  495.535994][ T7999] device-mapper: ioctl: error adding target to table
[  495.544141][ T7999] device-mapper: ioctl: Empty message received.
[  495.735245][ T4263] usb 4-1: config 0 has no interfaces?
[  495.854906][ T8006] device-mapper: ioctl: Empty message received.
[  495.895575][ T4263] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  495.932025][ T4263] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  495.942216][ T4263] usb 4-1: Product: syz
[  495.956310][ T4263] usb 4-1: Manufacturer: syz
[  495.973284][ T4263] usb 4-1: SerialNumber: syz
[  496.012059][ T4263] usb 4-1: config 0 descriptor??
[  496.444447][   T26] audit: type=1800 audit(1790105093.375:9): pid=7984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.821" name="ipv4_address" dev="configfs" ino=48282 res=0 errno=0
[  496.497922][ T4227] usb 4-1: USB disconnect, device number 10
[  496.552494][   T26] audit: type=1800 audit(1790105093.405:10): pid=7984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.821" name="ipv4_port" dev="configfs" ino=48283 res=0 errno=0
[  496.604096][   T26] audit: type=1800 audit(1790105093.415:11): pid=7984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.821" name="num" dev="configfs" ino=48284 res=0 errno=0
[  496.655660][   T26] audit: type=1800 audit(1790105093.425:12): pid=7984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.821" name="local" dev="configfs" ino=48285 res=0 errno=0
[  497.030336][ T8021] device-mapper: ioctl: Empty message received.
[  497.283017][ T8026] device-mapper: ioctl: Empty message received.
[  497.379185][ T8030] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(14)
[  497.575569][ T8036] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  497.600652][ T8036] device syzkaller0 entered promiscuous mode
[  497.736399][ T8039] device-mapper: ioctl: Empty message received.
[  498.911737][ T8050] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  498.952883][ T8050] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  499.125592][ T8057] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  499.209823][ T8059] FAULT_INJECTION: forcing a failure.
[  499.209823][ T8059] name failslab, interval 1, probability 0, space 0, times 1
[  499.230152][ T8059] CPU: 1 PID: 8059 Comm: syz.3.844 Not tainted syzkaller #0
[  499.237519][ T8059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  499.247885][ T8059] Call Trace:
[  499.251392][ T8059]  <TASK>
[  499.254464][ T8059]  dump_stack_lvl+0x188/0x250
[  499.259342][ T8059]  ? show_regs_print_info+0x20/0x20
[  499.264594][ T8059]  ? load_image+0x410/0x410
[  499.269184][ T8059]  should_fail+0x383/0x4b0
[  499.273788][ T8059]  should_failslab+0x5/0x20
[  499.278461][ T8059]  slab_pre_alloc_hook+0x51/0xc0
[  499.283545][ T8059]  kmem_cache_alloc_node+0x47/0x2c0
[  499.288844][ T8059]  ? __alloc_skb+0xf4/0x750
[  499.293546][ T8059]  __alloc_skb+0xf4/0x750
[  499.297940][ T8059]  _sctp_make_chunk+0x5b/0x430
[  499.302839][ T8059]  sctp_make_init+0x54f/0x2880
[  499.307723][ T8059]  ? default_post_xol_op+0x8a/0x480
[  499.313065][ T8059]  ? sctp_addto_chunk+0x220/0x220
[  499.318264][ T8059]  sctp_sf_do_prm_asoc+0xcb/0x3e0
[  499.323356][ T8059]  sctp_do_sm+0x245/0x56a0
[  499.327829][ T8059]  ? stack_trace_snprint+0xe0/0xe0
[  499.333067][ T8059]  ? __lock_acquire+0x7b50/0x7b50
[  499.338248][ T8059]  ? sctp_generate_t3_rtx_event+0x340/0x340
[  499.344199][ T8059]  ? sctp_stream_init_ext+0x53/0x160
[  499.349649][ T8059]  ? sctp_sendmsg_to_asoc+0x177c/0x1e10
[  499.355256][ T8059]  ? sctp_sendmsg+0x1b87/0x2940
[  499.360164][ T8059]  ? ____sys_sendmsg+0x5be/0x8f0
[  499.365311][ T8059]  ? ___sys_sendmsg+0x236/0x2e0
[  499.370374][ T8059]  ? __sk_mem_raise_allocated+0x6e2/0x11b0
[  499.376248][ T8059]  sctp_primitive_ASSOCIATE+0x91/0xc0
[  499.381724][ T8059]  sctp_sendmsg_to_asoc+0x14f4/0x1e10
[  499.387603][ T8059]  ? memcpy+0x3c/0x60
[  499.391723][ T8059]  ? sctp_sendmsg_check_sflags+0x2d0/0x2d0
[  499.397803][ T8059]  ? __sctp_connect+0xd80/0xd80
[  499.402705][ T8059]  ? __local_bh_enable_ip+0x136/0x1c0
[  499.408214][ T8059]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  499.413907][ T8059]  ? security_sctp_bind_connect+0x85/0xb0
[  499.419756][ T8059]  sctp_sendmsg+0x1b87/0x2940
[  499.424503][ T8059]  ? sctp_getsockopt+0x8a0/0x8a0
[  499.429670][ T8059]  ? aa_af_perm+0x340/0x340
[  499.434352][ T8059]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  499.440901][ T8059]  ? aa_sock_msg_perm+0x94/0x150
[  499.445893][ T8059]  ? sock_rps_record_flow+0x17/0x3b0
[  499.451265][ T8059]  ? inet_sendmsg+0xca/0x2a0
[  499.455918][ T8059]  ? inet_send_prepare+0x250/0x250
[  499.461086][ T8059]  ____sys_sendmsg+0x5be/0x8f0
[  499.465908][ T8059]  ? __sys_sendmsg_sock+0x30/0x30
[  499.470983][ T8059]  ? import_iovec+0x6f/0xa0
[  499.475562][ T8059]  ___sys_sendmsg+0x236/0x2e0
[  499.480290][ T8059]  ? __sys_sendmsg+0x290/0x290
[  499.485143][ T8059]  __sys_sendmmsg+0x2ba/0x500
[  499.489871][ T8059]  ? __ia32_sys_sendmsg+0x80/0x80
[  499.495002][ T8059]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  499.501033][ T8059]  ? lock_chain_count+0x20/0x20
[  499.505952][ T8059]  __x64_sys_sendmmsg+0x9c/0xb0
[  499.510860][ T8059]  do_syscall_64+0x4c/0xa0
[  499.515358][ T8059]  ? clear_bhb_loop+0x30/0x80
[  499.520181][ T8059]  ? clear_bhb_loop+0x30/0x80
[  499.524991][ T8059]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  499.531158][ T8059] RIP: 0033:0x7fcb549ee159
[  499.535776][ T8059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  499.555513][ T8059] RSP: 002b:00007fcb52c46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  499.563980][ T8059] RAX: ffffffffffffffda RBX: 00007fcb54c75fa0 RCX: 00007fcb549ee159
[  499.571999][ T8059] RDX: 0000000000000001 RSI: 0000200000000a40 RDI: 0000000000000008
[  499.580021][ T8059] RBP: 00007fcb54a8506b R08: 0000000000000000 R09: 0000000000000000
[  499.588770][ T8059] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000000
[  499.596854][ T8059] R13: 00007fcb54c76038 R14: 00007fcb54c75fa0 R15: 00007ffec893cac8
[  499.604898][ T8059]  </TASK>
[  499.687136][ T8063] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  499.867481][ T8069] device syzkaller0 entered promiscuous mode
[  500.134415][ T8072] device-mapper: ioctl: Empty message received.
[  500.644837][ T8082] device-mapper: ioctl: Empty message received.
[  501.739000][ T8091] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  501.748757][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  501.755082][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  501.986962][ T8096] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  501.995226][ T8096] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  502.025500][ T8093] device-mapper: ioctl: Empty message received.
[  502.036812][ T8096] vhci_hcd vhci_hcd.0: Device attached
[  502.075438][ T8098] vhci_hcd: connection closed
[  502.075751][ T4377] vhci_hcd: stop threads
[  502.097250][ T4377] vhci_hcd: release socket
[  502.101880][ T4377] vhci_hcd: disconnect device
[  502.235900][ T8104] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  502.771660][ T8111] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[  503.012956][ T8117] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  503.334028][ T8117] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  503.698912][ T8117] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  503.708640][ T8117] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns
[  503.717258][ T8117] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns
[  503.726318][ T8117] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  503.734827][ T8117] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns
[  503.746200][ T8117] pit: kvm: requested 155047 ns i8254 timer period limited to 200000 ns
[  503.756966][ T8117] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns
[  504.364355][ T8132] loop0: detected capacity change from 0 to 2048
[  505.012088][ T8126] ip_tables: iptables: counters copy to user failed while replacing table
[  506.017918][ T8154] device-mapper: ioctl: Empty message received.
[  506.868319][ T8168] device-mapper: ioctl: Empty message received.
[  506.886537][ T8173] FAULT_INJECTION: forcing a failure.
[  506.886537][ T8173] name failslab, interval 1, probability 0, space 0, times 0
[  506.935225][ T8173] CPU: 1 PID: 8173 Comm: syz.2.878 Not tainted syzkaller #0
[  506.942593][ T8173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  506.952867][ T8173] Call Trace:
[  506.956269][ T8173]  <TASK>
[  506.959254][ T8173]  dump_stack_lvl+0x188/0x250
[  506.964080][ T8173]  ? show_regs_print_info+0x20/0x20
[  506.969388][ T8173]  ? load_image+0x410/0x410
[  506.974052][ T8173]  ? __might_sleep+0xf0/0xf0
[  506.978779][ T8173]  ? __lock_acquire+0x7b50/0x7b50
[  506.983974][ T8173]  should_fail+0x383/0x4b0
[  506.988452][ T8173]  should_failslab+0x5/0x20
[  506.993007][ T8173]  slab_pre_alloc_hook+0x51/0xc0
[  506.998003][ T8173]  kmem_cache_alloc_trace+0x47/0x290
[  507.003346][ T8173]  ? sctp_transport_new+0x7c/0x5b0
[  507.008523][ T8173]  sctp_transport_new+0x7c/0x5b0
[  507.013607][ T8173]  sctp_assoc_add_peer+0x2ab/0x1680
[  507.018865][ T8173]  sctp_connect_new_asoc+0x31f/0x6a0
[  507.024199][ T8173]  ? __sctp_connect+0xd80/0xd80
[  507.029093][ T8173]  ? __local_bh_enable_ip+0x136/0x1c0
[  507.034568][ T8173]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  507.040182][ T8173]  ? security_sctp_bind_connect+0x85/0xb0
[  507.045960][ T8173]  sctp_sendmsg+0x15e1/0x2940
[  507.050710][ T8173]  ? sctp_getsockopt+0x8a0/0x8a0
[  507.055707][ T8173]  ? aa_af_perm+0x340/0x340
[  507.060271][ T8173]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  507.066743][ T8173]  ? aa_sock_msg_perm+0x94/0x150
[  507.071734][ T8173]  ? sock_rps_record_flow+0x17/0x3b0
[  507.077076][ T8173]  ? inet_sendmsg+0xca/0x2a0
[  507.081718][ T8173]  ? inet_send_prepare+0x250/0x250
[  507.086881][ T8173]  ____sys_sendmsg+0x5be/0x8f0
[  507.091707][ T8173]  ? __sys_sendmsg_sock+0x30/0x30
[  507.096793][ T8173]  ? import_iovec+0x6f/0xa0
[  507.101352][ T8173]  ___sys_sendmsg+0x236/0x2e0
[  507.106200][ T8173]  ? __sys_sendmsg+0x290/0x290
[  507.111171][ T8173]  __sys_sendmmsg+0x2ba/0x500
[  507.116102][ T8173]  ? __ia32_sys_sendmsg+0x80/0x80
[  507.121236][ T8173]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  507.128527][ T8173]  ? lock_chain_count+0x20/0x20
[  507.133536][ T8173]  __x64_sys_sendmmsg+0x9c/0xb0
[  507.138920][ T8173]  do_syscall_64+0x4c/0xa0
[  507.143402][ T8173]  ? clear_bhb_loop+0x30/0x80
[  507.148131][ T8173]  ? clear_bhb_loop+0x30/0x80
[  507.152939][ T8173]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  507.159087][ T8173] RIP: 0033:0x7f34c93ef159
[  507.163665][ T8173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  507.183532][ T8173] RSP: 002b:00007f34c7647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  507.192019][ T8173] RAX: ffffffffffffffda RBX: 00007f34c9676fa0 RCX: 00007f34c93ef159
[  507.200056][ T8173] RDX: 0000000000000001 RSI: 0000200000000a40 RDI: 0000000000000008
[  507.208110][ T8173] RBP: 00007f34c948606b R08: 0000000000000000 R09: 0000000000000000
[  507.216128][ T8173] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000000
[  507.224139][ T8173] R13: 00007f34c9677038 R14: 00007f34c9676fa0 R15: 00007ffff78dc158
[  507.232172][ T8173]  </TASK>
[  507.402447][ T8185] netlink: 'syz.6.881': attribute type 21 has an invalid length.
[  507.416136][ T8185] netlink: 'syz.6.881': attribute type 2 has an invalid length.
[  507.443052][ T8185] netlink: 'syz.6.881': attribute type 21 has an invalid length.
[  508.889534][ T8195] device-mapper: ioctl: Empty message received.
[  509.758983][ T8216] create_pit_timer: 31 callbacks suppressed
[  509.759001][ T8216] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[  511.297719][ T8238] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  511.304288][ T8238] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  511.333288][ T8238] vhci_hcd vhci_hcd.0: Device attached
[  511.364614][ T8239] vhci_hcd: connection closed
[  511.364998][ T4302] vhci_hcd: stop threads
[  511.392790][ T4302] vhci_hcd: release socket
[  511.408832][ T4302] vhci_hcd: disconnect device
[  511.742191][ T8247] md: array md0 already has disks!
[  511.885892][ T8249] device-mapper: ioctl: Empty message received.
[  511.906161][ T8251] md/raid1:md0: active with 1 out of 1 mirrors
[  511.946629][ T8251] md0: detected capacity change from 0 to 2048
[  512.182474][ T8256] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[  512.234444][ T8259] device-mapper: ioctl: Empty message received.
[  512.271287][ T8256] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  512.312729][ T8256] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  512.324172][ T8256] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  512.380995][ T8256] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns
[  512.391354][ T8256] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns
[  512.420116][ T8256] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  512.476383][ T8256] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns
[  512.507672][ T8256] pit: kvm: requested 155047 ns i8254 timer period limited to 200000 ns
[  513.939600][ T8299] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  513.946304][ T8299] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  513.981117][ T8299] vhci_hcd vhci_hcd.0: Device attached
[  514.001346][ T8300] vhci_hcd: connection closed
[  514.001595][ T4302] vhci_hcd: stop threads
[  514.019375][ T4302] vhci_hcd: release socket
[  514.034738][ T4302] vhci_hcd: disconnect device
[  515.019382][ T8313] create_pit_timer: 32 callbacks suppressed
[  515.019399][ T8313] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[  515.100532][ T8313] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  515.135519][ T8313] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  515.155471][ T8313] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  515.224993][ T8313] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns
[  515.295589][ T8313] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns
[  515.338648][ T8313] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  515.393460][ T8313] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns
[  515.459957][ T8313] pit: kvm: requested 155047 ns i8254 timer period limited to 200000 ns
[  515.482439][ T8313] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns
[  515.785734][ T8317] chnl_net:caif_netlink_parms(): no params data found
[  515.989842][ T8317] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.020105][ T8328] device-mapper: ioctl: Empty message received.
[  516.047937][ T8317] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.092241][ T8317] device bridge_slave_0 entered promiscuous mode
[  516.145692][ T8317] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.161245][ T8317] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.211343][ T8317] device bridge_slave_1 entered promiscuous mode
[  516.304781][ T8317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  516.323925][ T8317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  516.589008][ T8317] team0: Port device team_slave_0 added
[  516.641274][ T8317] team0: Port device team_slave_1 added
[  516.771205][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_0
[  516.803707][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  516.923231][ T8317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  516.967418][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_1
[  517.001750][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  517.460446][ T1108] Bluetooth: hci0: command 0x0409 tx timeout
[  517.468715][ T8317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  517.518744][ T8317] device hsr_slave_0 entered promiscuous mode
[  517.536367][ T8317] device hsr_slave_1 entered promiscuous mode
[  517.551966][ T8317] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  517.599010][ T8317] Cannot create hsr debugfs directory
[  518.154933][ T8317] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  518.213920][ T8317] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  518.240880][ T8317] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  518.287209][ T8317] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  518.606103][ T8317] 8021q: adding VLAN 0 to HW filter on device bond0
[  518.652084][ T8317] 8021q: adding VLAN 0 to HW filter on device team0
[  518.678769][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  518.695934][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  518.715981][ T8361] device-mapper: ioctl: Empty message received.
[  518.724210][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  518.744065][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  518.759459][ T4545] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.766691][ T4545] bridge0: port 1(bridge_slave_0) entered forwarding state
[  518.786234][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  518.795855][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  518.805051][ T4545] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.812267][ T4545] bridge0: port 2(bridge_slave_1) entered forwarding state
[  518.824612][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  518.846205][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  518.854929][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  518.868611][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  518.881324][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  518.891039][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  518.901178][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  518.923340][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  518.944424][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  518.964792][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  518.998158][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  519.023492][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  519.062362][ T8317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  519.348210][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  519.362714][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  519.388095][ T8317] 8021q: adding VLAN 0 to HW filter on device batadv0
[  519.519369][ T1108] Bluetooth: hci0: command 0x041b tx timeout
[  519.878971][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  519.894844][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  519.958954][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  519.977602][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  520.026625][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  520.052997][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  520.074943][ T8317] device veth0_vlan entered promiscuous mode
[  520.146840][ T8317] device veth1_vlan entered promiscuous mode
[  520.260136][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  520.269345][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  520.303225][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  520.341406][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  520.364324][ T8317] device veth0_macvtap entered promiscuous mode
[  520.394446][ T8317] device veth1_macvtap entered promiscuous mode
[  520.483079][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.525259][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.565148][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.598562][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.635450][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.665171][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.675055][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.719055][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.755161][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.815151][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.870269][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_0
[  520.897306][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  520.922271][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  520.951150][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  521.108029][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  521.128506][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  521.250545][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.326198][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  521.370403][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.410907][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  521.457674][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.494559][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  521.551721][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.562418][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  521.574366][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.589852][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_1
[  521.597588][ T4227] Bluetooth: hci0: command 0x040f tx timeout
[  521.658883][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  521.679027][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  521.846403][ T8317] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  521.893266][ T8317] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  521.912729][ T8410] md: couldn't update array info. -22
[  521.919501][ T8410] md: could not open device unknown-block(7,0).
[  521.932863][ T8317] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  521.941892][ T8410] md: md_import_device returned -16
[  521.953927][ T8317] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  522.142158][ T4543] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.237456][ T4543] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.349559][ T4543] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.383728][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.404021][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.443675][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  522.475483][ T4543] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.550088][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.605149][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.613604][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  522.721969][ T8404] chnl_net:caif_netlink_parms(): no params data found
[  522.872413][   T26] audit: type=1800 audit(1790105119.815:13): pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.944" name="attr_allow_any_host" dev="configfs" ino=51346 res=0 errno=0
[  522.934713][   T26] audit: type=1800 audit(1790105119.835:14): pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.944" name="addr_traddr" dev="configfs" ino=51353 res=0 errno=0
[  522.966618][ T8421] nvmet_tcp: address family 255 not supported
[  523.145708][   T26] audit: type=1800 audit(1790105119.845:15): pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.944" name="addr_trsvcid" dev="configfs" ino=51354 res=0 errno=0
[  523.240320][ T8404] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.295238][ T8404] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.324279][   T26] audit: type=1800 audit(1790105119.865:16): pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.944" name="addr_adrfam" dev="configfs" ino=51355 res=0 errno=0
[  523.330300][ T8404] device bridge_slave_0 entered promiscuous mode
[  523.576498][ T8404] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.595419][ T1108] Bluetooth: hci5: command 0x0409 tx timeout
[  523.620351][   T26] audit: type=1800 audit(1790105119.885:17): pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.944" name="addr_trtype" dev="configfs" ino=51356 res=0 errno=0
[  523.641389][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.649910][ T8404] device bridge_slave_1 entered promiscuous mode
[  523.675471][ T4227] Bluetooth: hci0: command 0x0419 tx timeout
[  523.735208][   T26] audit: type=1800 audit(1790105120.655:18): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.947" name="attr_allow_any_host" dev="configfs" ino=50953 res=0 errno=0
[  523.801157][ T8404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  523.823558][ T8442] nvmet_tcp: address family 255 not supported
[  523.896386][   T26] audit: type=1800 audit(1790105120.705:19): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.947" name="addr_traddr" dev="configfs" ino=50954 res=0 errno=0
[  523.934171][   T26] audit: type=1800 audit(1790105120.735:20): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.947" name="addr_trsvcid" dev="configfs" ino=50956 res=0 errno=0
[  523.972256][ T8404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  523.999398][ T8448] nvmet: adding nsid 1 to subsystem testsubsys
[  524.004625][   T26] audit: type=1800 audit(1790105120.735:21): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.947" name="addr_trtype" dev="configfs" ino=50957 res=0 errno=0
[  524.394131][ T8404] team0: Port device team_slave_0 added
[  524.437854][ T8448] nvme nvme0: failed to connect socket: -111
[  524.472436][ T8404] team0: Port device team_slave_1 added
[  524.802430][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_0
[  524.843224][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  524.973990][ T8404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  525.053553][ T8471] nvmet: disable ns before setting buffered_io value.
[  525.081987][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_1
[  525.097817][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  525.155306][ T8471] nvmet_tcp: enabling port 1 (127.0.0.1:4420)
[  525.161964][ T8475] nvmet: disable ns before setting buffered_io value.
[  525.192245][ T8475] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  525.245490][ T8404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  525.261237][ T8475] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  525.316097][ T8475] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  525.394636][  T150] nvmet: creating controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:d32719d5-fec6-4cce-ab98-3da2850538a4.
[  525.465518][ T8471] nvme nvme0: creating 2 I/O queues.
[  525.496255][ T8471] nvme nvme0: mapped 2/0/0 default/read/poll queues.
[  525.541481][ T8471] nvme nvme0: new ctrl: NQN "testsubsys", addr 127.0.0.1:4420
[  525.666582][ T8404] device hsr_slave_0 entered promiscuous mode
[  525.685309][ T1108] Bluetooth: hci5: command 0x041b tx timeout
[  525.705518][ T8404] device hsr_slave_1 entered promiscuous mode
[  525.726304][ T8404] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  525.756276][ T8404] Cannot create hsr debugfs directory
[  526.225788][ T8505] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  526.332792][ T8507] md: couldn't update array info. -22
[  526.860925][ T8521] md: couldn't update array info. -22
[  526.878197][ T8521] md: could not open device unknown-block(1,0).
[  526.885060][ T8521] md: md_import_device returned -16
[  526.906782][ T4543] device hsr_slave_0 left promiscuous mode
[  526.939274][ T4543] device hsr_slave_1 left promiscuous mode
[  526.959485][ T4543] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  526.979627][ T8526] nvmet: disable ns before setting buffered_io value.
[  526.996478][ T4543] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.013092][ T8526] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  527.033716][ T8526] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  527.055363][ T4543] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  527.071652][ T4543] batman_adv: batadv0: Removing interface: batadv_slave_1
[  527.071687][ T8526] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  527.096673][ T4543] device bridge_slave_1 left promiscuous mode
[  527.118135][ T8529] md: couldn't update array info. -22
[  527.127025][ T4543] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.148551][ T8529] md: could not open device unknown-block(1,0).
[  527.168891][ T4543] device bridge_slave_0 left promiscuous mode
[  527.184426][ T8529] md: md_import_device returned -16
[  527.196503][ T4543] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.244753][ T4543] device veth1_macvtap left promiscuous mode
[  527.258107][ T4543] device veth0_macvtap left promiscuous mode
[  527.273769][ T4543] device veth1_vlan left promiscuous mode
[  527.297211][ T4543] device veth0_vlan left promiscuous mode
[  527.765283][ T1108] Bluetooth: hci5: command 0x040f tx timeout
[  527.845789][ T8550] nvmet: disable ns before setting buffered_io value.
[  527.893073][ T8550] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  527.938911][ T8550] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  527.978863][ T8550] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  528.317121][ T4543] team0 (unregistering): Port device team_slave_1 removed
[  528.353957][ T4543] team0 (unregistering): Port device team_slave_0 removed
[  528.388958][ T4543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  528.642418][ T4543] bond0 (unregistering): Released all slaves
[  529.041399][ T8404] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  529.120550][ T8404] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  529.156290][ T8404] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  529.238451][ T8404] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  529.276940][ T8568] nvmet: disable ns before setting buffered_io value.
[  529.328999][ T8568] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  529.416870][ T8568] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  529.535027][ T8575] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  529.607526][ T8404] 8021q: adding VLAN 0 to HW filter on device bond0
[  529.688003][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  529.718609][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  529.798108][ T8404] 8021q: adding VLAN 0 to HW filter on device team0
[  529.845388][ T4227] Bluetooth: hci5: command 0x0419 tx timeout
[  529.898160][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  529.944601][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  529.995500][  T304] bridge0: port 1(bridge_slave_0) entered blocking state
[  530.002685][  T304] bridge0: port 1(bridge_slave_0) entered forwarding state
[  530.074121][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  530.118919][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  530.202080][  T304] bridge0: port 2(bridge_slave_1) entered blocking state
[  530.209400][  T304] bridge0: port 2(bridge_slave_1) entered forwarding state
[  530.267708][ T8600] md: couldn't update array info. -22
[  530.302638][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  530.311069][ T8600] md: could not open device unknown-block(1,0).
[  530.374264][ T8600] md: md_import_device returned -16
[  530.394227][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  530.430107][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  530.514635][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  530.539277][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  530.559033][ T8604] gr_udc Fixed MDIO bus.0: invalid resource
[  530.586204][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  530.603222][ T8604] gr_udc: probe of Fixed MDIO bus.0 failed with error -22
[  530.645071][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  530.704814][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  530.728999][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  530.767814][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  530.803040][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  530.828040][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  530.846557][ T8613] nvmet: disable ns before setting buffered_io value.
[  530.896235][ T8404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  530.907260][ T8613] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  530.931039][ T8613] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  530.992639][ T8613] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  531.034514][ T8613] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  531.630145][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  531.663688][ T8633] gr_udc Fixed MDIO bus.0: invalid resource
[  531.667291][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  531.708342][ T8633] gr_udc: probe of Fixed MDIO bus.0 failed with error -22
[  531.754233][ T8404] 8021q: adding VLAN 0 to HW filter on device batadv0
[  532.629084][ T8653] nvmet: disable ns before setting buffered_io value.
[  532.644602][ T8653] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  532.668699][ T8653] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  532.684447][ T8653] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  532.726538][ T8653] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  532.925044][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  532.956430][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  533.092930][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  533.146203][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  533.183965][ T8404] device veth0_vlan entered promiscuous mode
[  533.242616][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  533.295910][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  533.351408][ T8404] device veth1_vlan entered promiscuous mode
[  533.451449][ T8677] nvmet: disable ns before setting buffered_io value.
[  533.489960][ T8677] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  533.494540][ T8651] chnl_net:caif_netlink_parms(): no params data found
[  533.534441][ T8677] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  533.592491][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  533.604233][ T8677] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  533.620946][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  533.646095][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  533.660461][ T8680] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  533.687162][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  533.717101][ T8404] device veth0_macvtap entered promiscuous mode
[  533.777538][ T8404] device veth1_macvtap entered promiscuous mode
[  533.903017][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  533.968886][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.980156][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  534.001920][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.022580][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  534.043882][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.127503][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  534.185337][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.246016][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  534.303859][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.377195][ T8404] batman_adv: batadv0: Interface activated: batadv_slave_0
[  534.628212][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  534.637551][ T4174] Bluetooth: hci3: command 0x0409 tx timeout
[  534.702208][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  534.801823][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  534.855437][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.935942][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  534.987264][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.029223][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  535.086623][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.116986][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  535.156897][ T8707] nvmet: disable ns before setting buffered_io value.
[  535.175247][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.198625][ T8707] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  535.208014][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  535.236409][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.257398][ T8707] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  535.280537][ T8404] batman_adv: batadv0: Interface activated: batadv_slave_1
[  535.300598][ T8651] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.310599][ T8651] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.337155][ T8707] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  535.351560][ T8651] device bridge_slave_0 entered promiscuous mode
[  535.379957][ T8708] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  535.396236][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  535.416208][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  535.439587][ T8404] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  535.460445][ T8404] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  535.496110][ T8404] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  535.508013][ T8404] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  535.528093][ T8651] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.536785][ T8651] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.559084][ T8651] device bridge_slave_1 entered promiscuous mode
[  535.708864][ T8651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  535.794124][ T8651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  535.941203][ T8651] team0: Port device team_slave_0 added
[  535.987044][ T8651] team0: Port device team_slave_1 added
[  535.997967][ T4545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.025129][ T8716] md: couldn't update array info. -22
[  536.030703][ T4545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  536.039517][ T8716] md: could not open device unknown-block(1,0).
[  536.084702][ T8716] md: md_import_device returned -16
[  536.090718][ T4545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.090742][ T4545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  536.121458][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  536.145304][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  536.204756][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  536.233120][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  536.306909][ T8722] nvmet: disable ns before setting buffered_io value.
[  536.361496][ T8722] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  536.371429][ T8651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  536.398029][ T8722] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  536.412751][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  536.430961][ T8722] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  536.446184][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  536.492813][ T8722] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  536.502765][ T8726] md: couldn't update array info. -22
[  536.516735][ T8726] md: could not open device unknown-block(7,0).
[  536.547599][ T8651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  536.566858][ T8726] md: md_import_device returned -16
[  536.715777][ T1110] Bluetooth: hci3: command 0x041b tx timeout
[  536.729247][ T8651] device hsr_slave_0 entered promiscuous mode
[  536.779119][ T8739] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  536.862680][ T8651] device hsr_slave_1 entered promiscuous mode
[  536.908098][ T8651] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  537.078123][ T8651] Cannot create hsr debugfs directory
[  537.258724][ T8754] bonding: bond1 is being created...
[  537.286413][ T4543] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.307772][ T8756] nvmet: disable ns before setting buffered_io value.
[  537.328921][ T8756] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  537.382862][ T8756] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  537.475593][ T8756] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  537.556714][   T26] audit: type=1800 audit(1790105134.495:22): pid=8765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1010" name="addr_traddr" dev="configfs" ino=52082 res=0 errno=0
[  537.567792][ T8756] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  537.580575][ T8765] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  537.609064][ T4543] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.640185][   T26] audit: type=1800 audit(1790105134.575:23): pid=8767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1010" name="addr_trsvcid" dev="configfs" ino=52084 res=0 errno=0
[  537.669776][ T8765] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  537.690353][ T8757] 8021q: adding VLAN 0 to HW filter on device bond1
[  537.711208][ T8765] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  537.721616][   T26] audit: type=1800 audit(1790105134.645:24): pid=8765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1010" name="addr_adrfam" dev="configfs" ino=53063 res=0 errno=0
[  537.754892][ T8765] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  537.778018][ T4543] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.790832][   T26] audit: type=1800 audit(1790105134.685:25): pid=8765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1010" name="addr_trtype" dev="configfs" ino=52072 res=0 errno=0
[  537.927284][ T4543] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.025248][ T8776] bonding: bond1 is being created...
[  538.130818][ T8780] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  538.353015][ T8776] 8021q: adding VLAN 0 to HW filter on device bond1
[  538.424528][ T8651] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  538.520575][ T8651] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  538.539801][ T8651] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  538.603188][ T8651] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  538.639596][ T8790] md: couldn't update array info. -22
[  538.680679][ T8790] md: could not open device unknown-block(1,0).
[  538.736085][ T8790] md: md_import_device returned -16
[  538.800828][ T4263] Bluetooth: hci3: command 0x040f tx timeout
[  538.884742][ T8796] nvmet: disable ns before setting buffered_io value.
[  538.908538][ T8796] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  538.946661][ T8796] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  538.998248][ T8796] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  539.036602][ T8651] 8021q: adding VLAN 0 to HW filter on device bond0
[  539.049721][ T8796] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  539.093599][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  539.126007][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  539.151248][ T8651] 8021q: adding VLAN 0 to HW filter on device team0
[  539.234182][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  539.292982][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  539.312538][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state
[  539.319858][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state
[  539.337519][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  539.352248][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  539.392204][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state
[  539.399819][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state
[  539.439025][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  539.461267][ T8812] nvmet: disable ns before setting buffered_io value.
[  539.513738][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  539.545848][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  539.553959][ T8812] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  539.594072][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  539.604739][ T8812] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  539.779295][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  539.796469][ T8818] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  539.817448][ T8812] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  539.874553][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  539.895694][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  539.930723][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  539.959909][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  539.988153][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  540.054705][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  540.074683][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  540.084100][ T8822] create_pit_timer: 30 callbacks suppressed
[  540.084116][ T8822] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[  540.105761][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  540.138513][ T8826] md: couldn't update array info. -22
[  540.172071][ T8826] md: could not open device unknown-block(1,0).
[  540.244129][ T8826] md: md_import_device returned -16
[  540.277092][ T8830] bonding: bond1 is being created...
[  540.300836][ T4543] device hsr_slave_0 left promiscuous mode
[  540.336205][ T4543] device hsr_slave_1 left promiscuous mode
[  540.375599][   T26] audit: type=1800 audit(1790105137.315:26): pid=8833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1026" name="addr_traddr" dev="configfs" ino=53557 res=0 errno=0
[  540.398066][ T8833] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  540.428920][ T4543] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  540.436699][   T26] audit: type=1800 audit(1790105137.365:27): pid=8833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1026" name="addr_trsvcid" dev="configfs" ino=53558 res=0 errno=0
[  540.471310][ T8833] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  540.506932][ T8833] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  540.514991][ T4543] batman_adv: batadv0: Removing interface: batadv_slave_0
[  540.535849][   T26] audit: type=1800 audit(1790105137.445:28): pid=8833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1026" name="addr_adrfam" dev="configfs" ino=53563 res=0 errno=0
[  540.559884][ T4543] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  540.575406][ T4543] batman_adv: batadv0: Removing interface: batadv_slave_1
[  540.584563][ T8833] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  540.596239][ T4543] device bridge_slave_1 left promiscuous mode
[  540.604269][ T4543] bridge0: port 2(bridge_slave_1) entered disabled state
[  540.637265][   T26] audit: type=1800 audit(1790105137.505:29): pid=8840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1026" name="addr_trtype" dev="configfs" ino=54341 res=0 errno=0
[  540.676061][ T4543] device bridge_slave_0 left promiscuous mode
[  540.682792][ T4543] bridge0: port 1(bridge_slave_0) entered disabled state
[  540.723359][ T4543] device veth1_macvtap left promiscuous mode
[  540.745211][ T4543] device veth0_macvtap left promiscuous mode
[  540.751972][ T4543] device veth1_vlan left promiscuous mode
[  540.763701][ T4543] device veth0_vlan left promiscuous mode
[  540.830522][ T8846] md: couldn't update array info. -22
[  540.873805][ T8846] md: could not open device unknown-block(7,0).
[  540.884374][ T4265] Bluetooth: hci3: command 0x0419 tx timeout
[  540.894654][ T8846] md: md_import_device returned -16
[  541.349247][ T4543] team0 (unregistering): Port device team_slave_1 removed
[  541.368226][ T4543] team0 (unregistering): Port device team_slave_0 removed
[  541.384189][ T4543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  541.472036][ T4543] bond0 (unregistering): Released all slaves
[  541.552188][ T8830] bonding: bond1 already exists
[  541.734660][ T8864] nvmet: disable ns before setting buffered_io value.
[  541.773561][ T8864] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  541.878417][ T8864] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  542.024057][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  542.034706][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  542.142295][ T8864] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  542.240037][ T8651] 8021q: adding VLAN 0 to HW filter on device batadv0
[  542.247114][ T8873] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  542.461882][ T8886] md: couldn't update array info. -22
[  542.486022][ T8886] md: could not open device unknown-block(1,0).
[  542.533752][ T8886] md: md_import_device returned -16
[  542.628535][ T8890] nvmet: disable ns before setting buffered_io value.
[  542.691321][ T8890] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  542.772610][ T8890] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  542.813043][ T8900] md: couldn't update array info. -22
[  542.829765][ T8900] md: could not open device unknown-block(1,0).
[  542.843890][ T8890] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  542.885935][ T8900] md: md_import_device returned -16
[  542.904615][ T8901] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  543.287528][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  543.316047][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  543.415792][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  543.434446][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  543.478289][ T8651] device veth0_vlan entered promiscuous mode
[  543.505958][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  543.515970][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  543.571914][ T8651] device veth1_vlan entered promiscuous mode
[  544.002084][ T8927] bond1: option mode: unable to set because the bond device has slaves
[  544.112524][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  544.141713][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  544.161353][ T8939] nvmet: disable ns before setting buffered_io value.
[  544.163225][ T8936] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[  544.177252][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  544.205774][ T8939] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  544.216711][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  544.235282][ T8942] nvmet: disable ns before setting buffered_io value.
[  544.239027][ T8939] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  544.258159][ T8651] device veth0_macvtap entered promiscuous mode
[  544.305734][ T8651] device veth1_macvtap entered promiscuous mode
[  544.308836][ T8939] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  544.321851][ T8942] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  544.333232][ T8942] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  544.350013][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  544.368909][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  544.415778][ T8942] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  544.431339][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  544.453149][ T8939] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  544.465051][ T8942] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  544.474407][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  544.496581][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  544.535199][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  544.565168][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  544.585160][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  544.614371][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  544.665222][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  544.694048][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  544.714246][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  544.773677][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_0
[  544.795362][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  544.824728][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  544.858224][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  544.883652][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  544.925200][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  544.998695][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.009288][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.021529][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.031917][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.045381][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.057227][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.071507][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.119445][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_1
[  545.154057][ T8651] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  545.219601][ T8651] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  545.310935][ T8651] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  545.355576][ T8651] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  545.425574][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  545.462205][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  545.776685][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  545.826285][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  545.841917][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  545.913318][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  545.937184][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  545.980316][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  546.099642][ T9000] md: couldn't update array info. -22
[  546.135962][ T9000] md: could not open device unknown-block(7,0).
[  546.142307][ T9000] md: md_import_device returned -16
[  546.216623][ T9003] md: couldn't update array info. -22
[  546.222286][ T9009] md: could not open device unknown-block(7,0).
[  546.246066][ T9009] md: md_import_device returned -16
[  546.269830][ T9005] nvmet: disable ns before setting buffered_io value.
[  546.343982][ T9005] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  546.455472][ T9005] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  546.515923][ T9013] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  546.588820][ T9005] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  546.598358][ T9017] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4)
[  546.604940][ T9017] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  546.657916][ T9017] vhci_hcd vhci_hcd.0: Device attached
[  546.666260][ T9024] vhci_hcd: connection closed
[  546.680171][ T4242] vhci_hcd: stop threads
[  546.755849][ T4242] vhci_hcd: release socket
[  546.762092][ T4242] vhci_hcd: disconnect device
[  547.191015][ T9039] 
[  547.193413][ T9039] ======================================================
[  547.200457][ T9039] WARNING: possible circular locking dependency detected
[  547.207672][ T9039] syzkaller #0 Not tainted
[  547.212701][ T9039] ------------------------------------------------------
[  547.220038][ T9039] syz.4.1070/9039 is trying to acquire lock:
[  547.226571][ T9039] ffffffff8cf20cc8 (tpg_instances_lock){+.+.}-{3:3}, at: tcm_alloc+0x1d/0x2c0
[  547.236278][ T9039] 
[  547.236278][ T9039] but task is already holding lock:
[  547.243940][ T9039] ffff88807bd83310 (&gi->lock){+.+.}-{3:3}, at: config_usb_cfg_link+0x55/0x250
[  547.253199][ T9039] 
[  547.253199][ T9039] which lock already depends on the new lock.
[  547.253199][ T9039] 
[  547.263726][ T9039] 
[  547.263726][ T9039] the existing dependency chain (in reverse order) is:
[  547.272773][ T9039] 
[  547.272773][ T9039] -> #2 (&gi->lock){+.+.}-{3:3}:
[  547.279961][ T9039]        __mutex_lock_common+0x1e5/0x2400
[  547.285739][ T9039]        mutex_lock_nested+0x17/0x20
[  547.291298][ T9039]        config_usb_cfg_link+0x55/0x250
[  547.296896][ T9039]        configfs_symlink+0x5a4/0x13b0
[  547.302484][ T9039]        vfs_symlink+0x245/0x3d0
[  547.307524][ T9039]        do_symlinkat+0x1ab/0x6b0
[  547.312596][ T9039]        __x64_sys_symlinkat+0x95/0xa0
[  547.318115][ T9039]        do_syscall_64+0x4c/0xa0
[  547.323097][ T9039]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  547.329568][ T9039] 
[  547.329568][ T9039] -> #1 (&sb->s_type->i_mutex_key#21){++++}-{3:3}:
[  547.338392][ T9039]        down_write+0x38/0x60
[  547.343115][ T9039]        configfs_depend_item_unlocked+0x14f/0x430
[  547.349655][ T9039]        usbg_make_tpg+0x1dd/0x550
[  547.354810][ T9039]        target_fabric_make_tpg+0xa0/0x6d0
[  547.360753][ T9039]        configfs_mkdir+0x511/0x9e0
[  547.365970][ T9039]        vfs_mkdir+0x386/0x570
[  547.370750][ T9039]        do_mkdirat+0x1dd/0x5c0
[  547.375622][ T9039]        __x64_sys_mkdirat+0x85/0x90
[  547.381108][ T9039]        do_syscall_64+0x4c/0xa0
[  547.386064][ T9039]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  547.392494][ T9039] 
[  547.392494][ T9039] -> #0 (tpg_instances_lock){+.+.}-{3:3}:
[  547.400438][ T9039]        __lock_acquire+0x2c66/0x7b50
[  547.405837][ T9039]        lock_acquire+0x19e/0x400
[  547.410887][ T9039]        __mutex_lock_common+0x1e5/0x2400
[  547.416637][ T9039]        mutex_lock_nested+0x17/0x20
[  547.422032][ T9039]        tcm_alloc+0x1d/0x2c0
[  547.426730][ T9039]        usb_get_function+0x59/0xa0
[  547.432138][ T9039]        config_usb_cfg_link+0x144/0x250
[  547.437875][ T9039]        configfs_symlink+0x5a4/0x13b0
[  547.443444][ T9039]        vfs_symlink+0x245/0x3d0
[  547.448409][ T9039]        do_symlinkat+0x1ab/0x6b0
[  547.453481][ T9039]        __x64_sys_symlinkat+0x95/0xa0
[  547.459045][ T9039]        do_syscall_64+0x4c/0xa0
[  547.464031][ T9039]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  547.470474][ T9039] 
[  547.470474][ T9039] other info that might help us debug this:
[  547.470474][ T9039] 
[  547.481040][ T9039] Chain exists of:
[  547.481040][ T9039]   tpg_instances_lock --> &sb->s_type->i_mutex_key#21 --> &gi->lock
[  547.481040][ T9039] 
[  547.495077][ T9039]  Possible unsafe locking scenario:
[  547.495077][ T9039] 
[  547.502572][ T9039]        CPU0                    CPU1
[  547.507953][ T9039]        ----                    ----
[  547.513339][ T9039]   lock(&gi->lock);
[  547.517266][ T9039]                                lock(&sb->s_type->i_mutex_key#21);
[  547.525268][ T9039]                                lock(&gi->lock);
[  547.532310][ T9039]   lock(tpg_instances_lock);
[  547.537007][ T9039] 
[  547.537007][ T9039]  *** DEADLOCK ***
[  547.537007][ T9039] 
[  547.545506][ T9039] 3 locks held by syz.4.1070/9039:
[  547.550627][ T9039]  #0: ffff888146af8460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  547.559981][ T9039]  #1: ffff888075360b70 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: configfs_symlink+0x47b/0x13b0
[  547.570885][ T9039]  #2: ffff88807bd83310 (&gi->lock){+.+.}-{3:3}, at: config_usb_cfg_link+0x55/0x250
[  547.580401][ T9039] 
[  547.580401][ T9039] stack backtrace:
[  547.586338][ T9039] CPU: 0 PID: 9039 Comm: syz.4.1070 Not tainted syzkaller #0
[  547.593761][ T9039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  547.603891][ T9039] Call Trace:
[  547.607194][ T9039]  <TASK>
[  547.610261][ T9039]  dump_stack_lvl+0x188/0x250
[  547.614969][ T9039]  ? load_image+0x410/0x410
[  547.619519][ T9039]  ? show_regs_print_info+0x20/0x20
[  547.625020][ T9039]  ? print_circular_bug+0x12b/0x1a0
[  547.631465][ T9039]  check_noncircular+0x296/0x330
[  547.636772][ T9039]  ? add_chain_block+0x9b0/0x9b0
[  547.641738][ T9039]  ? lockdep_lock+0xf1/0x1f0
[  547.646524][ T9039]  ? mark_lock+0x94/0x320
[  547.650894][ T9039]  ? _find_first_zero_bit+0xd1/0xf0
[  547.656564][ T9039]  __lock_acquire+0x2c66/0x7b50
[  547.662014][ T9039]  ? stack_trace_save+0xf0/0xf0
[  547.667790][ T9039]  ? verify_lock_unused+0x140/0x140
[  547.673258][ T9039]  ? verify_lock_unused+0x140/0x140
[  547.678721][ T9039]  ? kmem_cache_free+0x8f/0x210
[  547.683612][ T9039]  ? stack_trace_save+0xa6/0xf0
[  547.688865][ T9039]  lock_acquire+0x19e/0x400
[  547.693435][ T9039]  ? tcm_alloc+0x1d/0x2c0
[  547.697887][ T9039]  ? __might_sleep+0xf0/0xf0
[  547.702526][ T9039]  ? read_lock_is_recursive+0x10/0x10
[  547.708531][ T9039]  ? __mutex_trylock_common+0x15c/0x260
[  547.714105][ T9039]  __mutex_lock_common+0x1e5/0x2400
[  547.719698][ T9039]  ? tcm_alloc+0x1d/0x2c0
[  547.724051][ T9039]  ? __mutex_lock_common+0x435/0x2400
[  547.729668][ T9039]  ? lock_chain_count+0x20/0x20
[  547.734799][ T9039]  ? tcm_alloc+0x1d/0x2c0
[  547.739172][ T9039]  ? mutex_lock_io_nested+0x60/0x60
[  547.744432][ T9039]  ? mutex_lock_io_nested+0x60/0x60
[  547.749861][ T9039]  mutex_lock_nested+0x17/0x20
[  547.754695][ T9039]  tcm_alloc+0x1d/0x2c0
[  547.758968][ T9039]  usb_get_function+0x59/0xa0
[  547.763665][ T9039]  config_usb_cfg_link+0x144/0x250
[  547.768794][ T9039]  configfs_symlink+0x5a4/0x13b0
[  547.773774][ T9039]  ? end_current_label_crit_section+0x14b/0x170
[  547.780216][ T9039]  ? common_perm+0x15d/0x1b0
[  547.784840][ T9039]  ? from_kgid+0x14f/0x6a0
[  547.789362][ T9039]  ? apparmor_path_symlink+0x1ac/0x230
[  547.794871][ T9039]  ? lookup_one_qstr_excl+0x11c/0x240
[  547.800285][ T9039]  ? detach_groups+0x370/0x370
[  547.805078][ T9039]  ? inode_permission+0xef/0x480
[  547.810037][ T9039]  ? bpf_lsm_inode_symlink+0x5/0x10
[  547.815251][ T9039]  ? security_inode_symlink+0xb2/0x100
[  547.820809][ T9039]  vfs_symlink+0x245/0x3d0
[  547.825255][ T9039]  do_symlinkat+0x1ab/0x6b0
[  547.829830][ T9039]  ? strncpy_from_user+0x1f4/0x350
[  547.834993][ T9039]  ? vfs_symlink+0x3d0/0x3d0
[  547.839608][ T9039]  __x64_sys_symlinkat+0x95/0xa0
[  547.844591][ T9039]  do_syscall_64+0x4c/0xa0
[  547.849025][ T9039]  ? clear_bhb_loop+0x30/0x80
[  547.853736][ T9039]  ? clear_bhb_loop+0x30/0x80
[  547.858455][ T9039]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  547.864700][ T9039] RIP: 0033:0x7f4903f55159
[  547.869243][ T9039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  547.888970][ T9039] RSP: 002b:00007f49021ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[  547.897429][ T9039] RAX: ffffffffffffffda RBX: 00007f49041dcfa0 RCX: 00007f4903f55159
[  547.905432][ T9039] RDX: 0000200000000640 RSI: ffffffffffffff9c RDI: 0000200000000600
[  547.913428][ T9039] RBP: 00007f4903fec06b R08: 0000000000000000 R09: 0000000000000000
[  547.921419][ T9039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  547.929411][ T9039] R13: 00007f49041dd038 R14: 00007f49041dcfa0 R15: 00007ffdca1f58c8
[  547.937669][ T9039]  </TASK>
[  548.220238][ T4543] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.281584][ T4543] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.362260][ T4543] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.429405][ T4543] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.214558][ T4543] device hsr_slave_0 left promiscuous mode
[  549.222409][ T4543] device hsr_slave_1 left promiscuous mode
[  549.231713][ T4543] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  549.239468][ T4543] batman_adv: batadv0: Removing interface: batadv_slave_0
[  549.250832][ T4543] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  549.258482][ T4543] batman_adv: batadv0: Removing interface: batadv_slave_1
[  549.266222][ T4543] device bridge_slave_1 left promiscuous mode
[  549.272558][ T4543] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.280979][ T4543] device bridge_slave_0 left promiscuous mode
[  549.287416][ T4543] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.297478][ T4543] device veth1_macvtap left promiscuous mode
[  549.303548][ T4543] device veth0_macvtap left promiscuous mode
[  549.309685][ T4543] device veth1_vlan left promiscuous mode
[  549.315794][ T4543] device veth0_vlan left promiscuous mode
[  549.426001][ T4543] team0 (unregistering): Port device team_slave_1 removed
[  549.439300][ T4543] team0 (unregistering): Port device team_slave_0 removed
[  549.451880][ T4543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  549.464970][ T4543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  549.518967][ T4543] bond0 (unregistering): Released all slaves