last executing test programs: 1m8.052336595s ago: executing program 2 (id=791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0x21, 0x2, 0xa) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x5, 0x0, [{0xb1b, 0x0, 0x1000}, {0x772, 0x0, 0x6d51}, {0xa7a, 0x0, 0x2}, {0x3ff, 0x0, 0x6}, {0xa4f, 0x0, 0x12b3}]}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) fchown(r4, 0x0, 0x0) 1m5.673190862s ago: executing program 2 (id=799): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xd6, &(0x7f00000004c0)=""/214, 0x0, 0x1, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES16=r2, @ANYRES64=r1], 0x50) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m1.854470804s ago: executing program 2 (id=804): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0xd}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 58.366782646s ago: executing program 2 (id=809): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0x21, 0x2, 0xa) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x5, 0x0, [{0xb1b, 0x0, 0x1000}, {0x772, 0x0, 0x6d51}, {0xa7a, 0x0, 0x2}, {0x3ff, 0x0, 0x6}, {0xa4f, 0x0, 0x12b3}]}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) fcntl$dupfd(r5, 0x406, r5) fchown(r4, 0x0, 0x0) 54.715437913s ago: executing program 2 (id=816): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 53.88099624s ago: executing program 2 (id=818): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() r4 = getpgrp(r3) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000f80)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r9, 0x0, '\x00', 0x0, r0, 0x0, 0x5}, 0x50) 38.460851556s ago: executing program 32 (id=818): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() r4 = getpgrp(r3) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000f80)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r9, 0x0, '\x00', 0x0, r0, 0x0, 0x5}, 0x50) 20.203099471s ago: executing program 3 (id=870): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="5001000000000000030000000097ac00040000000000000003000000001000000080020000000000030000000000000009000000010001000600000000000000090000000000000002000000000000000b00000000000000e800000000000000feffffffffffffff0600000001000000060000000080060000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="018000000000008000000000010000000000000001000000000000000100000094015432000000000000000003000000000000000300000000000000ff07000000000000feffffffffffff7fff0f0000ff0700000300000000000000090000000000000003000000000000000200000000000000050000000000000002000000000000000200000006000000070000000010000000000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0100000003000000000000000000000000000000070000000000000001"], 0x0, 0x0, 0x0}) getdents64(r5, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 20.049211317s ago: executing program 3 (id=872): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x40200, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRES16=r5, @ANYBLOB="31031d000000000000000900000008000300", @ANYRES32=r6, @ANYBLOB], 0x24}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000034c0)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="8281bebcff5f01dede408f498cb0410afc5d1efa712c8078f7a9920a2a5564f3dd3e01049dbffc45310f848b754befe69738a117b4a591625dfd05c6f462cc2bfd1606b7d09e84da2260cc0b034955ff720ea7894bbbacbfa05dc195887bdc50a4a076aa829a436116a9633bc353cad12fbccddc4c269412c46e3361aa5733eae8498d070e4223ba07c014efeffeecbfae8844bb261a7ea441ef", 0x9a}, {&(0x7f0000000400)="dd659e76bc9ca318381d2d8b71a70d2ea515e997332ac35744a897942266007ab9b6ed11e07d4281fb5c02177718e8171d534aaf2517a3f8c439c9e9997c4d7473e8bd77239eee0cbe3829289e8f49c51681600f7a9911a4f4cf2c801ef83a1081451499bf48e1fd9fca9c9440eafe7d839a8c930a53521d14637e507c64f7495fa7c656099dcb31f3054e3b7af4a673ae46d410bfdae227ebdc1c28d2a58c32f31393ac45cca15f487f95ca21dd9d4af80067ec06ecde5c34b79b28", 0xbc}, {&(0x7f00000004c0)="ab7aacfc09653342df451fddd22977a08fd9c8a8e25d754e6875af4629e4", 0x1e}, {&(0x7f0000000500)="d28add5b8e15ac6d5a9aef1a6024d989233ec8c56ec6f86711b6b3217347e599e8a5dc9cc29aaff745e58b68b20e93000d1b7b97adee9ffacf13116725dd9eac41df5c37fda7914055ba9c8edfc2248b755522c912d95cbe", 0x58}], 0x4, &(0x7f00000005c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000000}, {0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="f1184923ad178dd368e0d464", 0xc}, {&(0x7f0000002140)="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", 0x1000}, {&(0x7f0000003140)="85c76f60c1f222e37e0f63d2b5337bcbf5c3643acd8ab0115cd36bb9773259d2df9ac5c35ba4ccdcc7ffab2d48dc3eeea6aadd3014e18ecf1152e4404d38f89b5ddadedd63c627feb3b3ad65473f527b5aa06b33661cd727701b1dc205532f983e2030b6cc3bdcee8217532980ebbb67b2eeff2406279d21afdf6ed48ced58d9a4eeb003619c802c43947e190e3bfa28bf5f", 0x92}, {&(0x7f0000003200)="b32ef4e539fe25cd5c4fa8030c97df5a5bbf4720cf267294b82a2dc6fde7bb0f1ea037701f562effaed121394425ba", 0x2f}, {&(0x7f0000003240)="154c50496ad0e6c339b10dfd034dfb973ef4ba7d06405cb2395e8c281ce2fe0d", 0x20}, {&(0x7f0000003280)="079d371d14ce0d3cb3f8944dd1511cdd3366836dcaa28d26a55d3b388f301cf81901a42bd074e9cb6fb30fbab210d2240373bcd7af5f222d24db6f561a1fce6321e0b5e573e219a7e688d6140fff4d699e4430c173c5b988ca0baf7d714c7fab6ba16492b48d170559d4d847d204b3777b51c354c7ac522f1da44c52728a864c1a64031a2bf0599553084425edcdc22f7084b5acfb2a8ac3c1525fbfe442211a10def432163f6534eb542716fa268ca42a5a02e4da4f931d08b8f6b993475ab799e15d1c5869ab0f823ef0a04533c79c27886991418a87e832a15e0e9b2a42fe7147d06718d94e01b9636f365f6497", 0xef}, {&(0x7f0000003380)="4d54fda8e26ba5", 0x7}], 0x8, &(0x7f0000003440)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x80000000}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x48, 0x50}], 0x2, 0x801) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) openat$comedi(0xffffffffffffff9c, 0x0, 0xe2100, 0x0) 18.893353384s ago: executing program 3 (id=873): r0 = socket$inet(0x2, 0x6, 0x80000000) r1 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x1, 0x10000008, 0x0}) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x201000, &(0x7f0000000740)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x2998beb0}}, {@max_read={'max_read', 0x3d, 0x7}}, {@max_read={'max_read', 0x3d, 0x5}}], [{@hash}, {@dont_hash}, {@euid_gt}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x7e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa2104e06d7b2186dd6019f14d00483c0020010000000002000000000000000002ff0200000000000000000000000000013205000000000000c910fe"], 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="f6c69a012cb0bc65f540803b28c4605ee8ab7327d39202f7a739f6bc85485211be1a4619d7e6f565310ed454319a46fe75e917c88fe67739eacc54bb01c577d8e5bb69ee116e9aa252e6a763b09f87963cde91c92eebed6fe6a222c3692ff74e208d38e30ed73748c6639c5879cbc3fbb0e3a8"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0)=0xfffff800, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000010000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 12.228559988s ago: executing program 4 (id=886): r0 = socket$kcm(0x10, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r1, &(0x7f0000000300)=""/56, 0x38) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x100800, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 12.139631911s ago: executing program 4 (id=888): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) unshare(0x6a040000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000540)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x9bc6, 0x4, 0x0, 0x7fffffff], 0x4, 0x0, 0x0, [{}, {}, {}, {}]}, 0xb8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000006000000181100008f9dcf1b1dcf5bd1284ee1d39ec8ed70448f08797da7c39dd11a2f64d845b31a5d4c5a5f15ba275e62f0d0d45c651fa77637fa38c2c74bd33ef4c2e6edc0cb98ae7aec6876afd014d4d860ce6e", @ANYRES32, @ANYBLOB="0000000000000000b702000014100000b7031e0730d77db9500e4197d2cba8e00700000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000004000b7020000010000008500000084000000b7"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ptrace$pokeuser(0x6, r1, 0x2, 0xffffffffffffffb4) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4) ioctl$DVB_DEMUX_DMX_START(0xffffffffffffffff, 0x6f29) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000440)={0x6, 0x1000000000000000}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)) 9.422138008s ago: executing program 1 (id=889): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc01c586a, &(0x7f0000000280)={r4, &(0x7f0000000140)='\'$\x00', 0x400080, &(0x7f0000000180)={@align=0x80, {0x1, 0x4, 0x6, 0x8}}, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0x3ff}) waitid$P_PIDFD(0x3, r5, &(0x7f0000000500), 0x4, &(0x7f0000000580)) shutdown(0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000002}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f00000003c0)) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="07f026bd7000fedbdf252b0000000c000500000000000000000008000200", @ANYRES32, @ANYBLOB="1f67538f5538be142035d4d8a22c51a837ac1bf7e47a5f8b1b7c4a5876d6030000006327fc904761817be5038347e3ac00f3e7f604aa14141f24235f69d1f1f26d2d9a9685521ae222ce54a474994c4b1352ca576fb15f07e7b89196fe4f46231659d1317ebcadd20f6194e88ed475728b159709f297e7cca5e548"], 0x28}, 0x1, 0x0, 0x0, 0xc0000}, 0x8000) 8.307200824s ago: executing program 1 (id=890): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1ff, 0x2, 0xddcd2000, 0x1000, &(0x7f0000001000/0x1000)=nil}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0xd}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.183801268s ago: executing program 3 (id=891): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x420, 0x230, 0x0, 0xffffffff, 0x2d4, 0x0, 0x39c, 0x39c, 0xffffffff, 0x39c, 0x39c, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1b, @multicast1, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'team_slave_0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xffffff00, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x0, 0x20}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, 0x0) syz_ublk_setup_io_uring(0x6548, 0x0, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0xf0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}]}]}, 0x44}}, 0x20048004) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0xa, 0x78, 0x28e, 0x0, 0x66b8, 0x46ed0086}) 7.16811636s ago: executing program 1 (id=892): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x21, 0xa, 0xffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x63, 0x100000, {0x0}, {0xee01}, 0x8000, 0x5080}) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000080)=0xfff, 0xffffffffffffffff, &(0x7f00000000c0)=0x3, 0xc, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001240)='\x00\x00', 0x2}, {0x0}], 0x2}, 0x80) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000540)={0x2, @vbi={0x7, 0x8, 0x3d54, 0x494e4f4b, [0x0, 0x4], [0x3, 0x5], 0x2023c860d0553049}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000080)='net/fib_trie\x00') pread64(r8, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002) socket$nl_generic(0x10, 0x3, 0x10) 7.124656232s ago: executing program 0 (id=893): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xc0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000180), 0x12) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x23, 0x4, 0x2, 0x40, r4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r6}, &(0x7f0000000980), &(0x7f00000002c0)=r5}, 0x20) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='W', 0x1}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 6.969201956s ago: executing program 3 (id=894): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="170000001114010026bd7000ffdbdf25080003000400000008000100010000003cc2518398e65fb171c0a2ce008fe07b3497e76030a8723d4cd3fb5f05b10a9c0868da7e5423c152d371f2aa72a767f448b18497deb9f8ce1137ed81f7e494957264f7ea598f277e7efe4980f6acdf28dd1303c3cd3e909cdcb6fd257ca20409d6d6528ca31139fc150844eec04f9a31024e780dc4fc57a9abb25702acd6594558f0920da52587f3b160571f5a07097bc1b3c792b7a947b0"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x80) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863618700080000000000c8000a006647809efdffd0a0856630cdbd4fdec1541e6551e6b90d0e8a5214577fab185af8361c34f01b360c8ee1af6b5406b3b755dffec9a075a86eb0c34a1fe327746f5a", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x800448d5, &(0x7f0000000880)="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") syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), 0x0, &(0x7f0000000180)) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r6, r8, 0x0, 0x6) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) 6.148295483s ago: executing program 1 (id=895): get_mempolicy(0x0, &(0x7f0000000140), 0x9, &(0x7f0000129000/0x8000)=nil, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x114, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x102, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff732144f7ad7c1b9d", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000080), &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x7d, 0x1) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private1, 0x0, 0x2, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x5, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0xaf, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4cf, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe4) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) r7 = timerfd_create(0x0, 0x800) timerfd_gettime(r7, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000640)=ANY=[], 0x0) 6.102631374s ago: executing program 0 (id=896): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f00000003c0)={"637bf629b5896eeb77e137c6e7f24b7891d6f012acc9fe23b2a34566bb56", 0x2, 0x1, 0x0, 0x101, 0x81, 0x5, 0x1, 0x6, [0x5, 0x4, 0x1, 0x401, 0x3, 0x2ab9, 0x4e2edc8b, 0x80000001, 0x8, 0x7, 0x3, 0x4, 0x7ef, 0xc, 0xffff0000, 0x2, 0x6, 0x7, 0x6]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0x12) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r8 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB='6\x00'/12, @ANYRES32, @ANYBLOB="8aaa7229a3599b09aa3aac0123d125523a61bee47d73ecb7f26cc97d7893f362725c0e306987e8e5e74b222f84616f4535a274e73aad1d9c2812695ab0587314e1288ee3f4a75c798a20ee0f158a0911d3e4d4586a8df0a59162ecc5ded890f3d04889719694abfdf07014acd8961ca21844c77f84c93bb6808ee1502c925b8ac6fa8ee80c3f1281d0567fc2ae36e2bd65b8696370b5a6ad80856f53bf8af4c5f20a83a96955fb2ea7310d1b3ffc378455fff65df3fb014176fc", @ANYRES64], 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=ANY=[@ANYBLOB="18000000041401009296a629d5e2a4d04c1a08786eb800000000000000000000000000ba84dafd5f677d7b1a86ffdd91039f4f90204569967c5261bb29a4cddabc41a55e168d1ca3105b1b35edfa6c3472a1d738a57880444ce22226524dcffe395359edf16afef46b83c24f0151056e837263d5d240dc2ac9aa725579734a6deb395edf53f12a715907689613a5884123968dd511973971d3159c301de132b3fa7e69c701640fe51c46a4b8b990ae49446b666c8f295982f41718953e4e06bf7653d5d01dafe7ab85b0c111fc258294bdc9134932d8c70a1190d3990d6520cd8fc2ad703289cdae8bf1e861f1560d18c8565b66", @ANYRESOCT, @ANYRES64], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 6.018250937s ago: executing program 4 (id=897): socket$unix(0x1, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000a00), 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x36}, @loopback, 0xd, 0xe}}) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)}, {&(0x7f00000003c0)}], 0x2}], 0x1, 0x40800) readv(r7, &(0x7f0000000900)=[{&(0x7f0000000600)=""/137, 0x89}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f0000000300)=""/89, 0x59}, {&(0x7f00000007c0)=""/142, 0x8e}], 0x4) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000b40)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 5.014029019s ago: executing program 1 (id=898): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0x21, 0x2, 0xa) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x5, 0x0, [{0xb1b, 0x0, 0x1000}, {0x772, 0x0, 0x6d51}, {0xa7a, 0x0, 0x2}, {0x3ff, 0x0, 0x6}, {0xa4f, 0x0, 0x12b3}]}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) fcntl$dupfd(r5, 0x406, r5) fchown(r4, 0x0, 0x0) 4.961672771s ago: executing program 0 (id=899): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc01c586a, &(0x7f0000000280)={r4, &(0x7f0000000140)='\'$\x00', 0x400080, &(0x7f0000000180)={@align=0x80, {0x1, 0x4, 0x6, 0x8}}, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0x3ff}) waitid$P_PIDFD(0x3, r5, &(0x7f0000000500), 0x4, &(0x7f0000000580)) shutdown(0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000002}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f00000003c0)) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="07f026bd7000fedbdf252b0000000c000500000000000000000008000200", @ANYRES32, @ANYBLOB="1f67538f5538be142035d4d8a22c51a837ac1bf7e47a5f8b1b7c4a5876d6030000006327fc904761817be5038347e3ac00f3e7f604aa14141f24235f69d1f1f26d2d9a9685521ae222ce54a474994c4b1352ca576fb15f07e7b89196fe4f46231659d1317ebcadd20f6194e88ed475728b159709f297e7cca5e548"], 0x28}, 0x1, 0x0, 0x0, 0xc0000}, 0x8000) 2.452427082s ago: executing program 3 (id=900): r0 = socket$inet(0x2, 0x6, 0x80000000) r1 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x1, 0x10000008, 0x0}) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x201000, &(0x7f0000000740)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x2998beb0}}, {@max_read={'max_read', 0x3d, 0x7}}, {@max_read={'max_read', 0x3d, 0x5}}], [{@hash}, {@dont_hash}, {@euid_gt}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x7e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa2104e06d7b2186dd6019f14d00483c0020010000000002000000000000000002ff0200000000000000000000000000013205000000000000c910fe"], 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="f6c69a012cb0bc65f540803b28c4605ee8ab7327d39202f7a739f6bc85485211be1a4619d7e6f565310ed454319a46fe75e917c88fe67739eacc54bb01c577d8e5bb69ee116e9aa252e6a763b09f87963cde91c92eebed6fe6a222c3692ff74e208d38e30ed73748c6639c5879cbc3fbb0e3a8"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0)=0xfffff800, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000010000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.419394753s ago: executing program 4 (id=901): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1ff, 0x2, 0xddcd2000, 0x1000, &(0x7f0000001000/0x1000)=nil}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0xd}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.320261226s ago: executing program 1 (id=902): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{&(0x7f0000000480)=@file={0xfd, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x10, 0x4010}}], 0x2, 0x20000000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x28000054) sendmsg$nl_route_sched_retired(r3, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x81, 0x101000) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fallocate(r6, 0x44, 0x0, 0x80400000) ioctl$XFS_IOC_GOINGDOWN(r4, 0x8004587d, &(0x7f00000002c0)=0x7) write$nbd(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000000000000000000033796594"], 0x40) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x2}) ioctl$XFS_IOC_SET_RESBLKS(r4, 0xc0105872, &(0x7f0000000040)={0x10001, 0x4}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r8, &(0x7f0000000480)=""/74, 0x4a) write$char_usb(r8, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) 2.252811658s ago: executing program 0 (id=903): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x420, 0x230, 0x0, 0xffffffff, 0x2d4, 0x0, 0x39c, 0x39c, 0xffffffff, 0x39c, 0x39c, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1b, @multicast1, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'team_slave_0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xffffff00, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x0, 0x20}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, 0x0) syz_ublk_setup_io_uring(0x6548, 0x0, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0xf0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}]}]}, 0x44}}, 0x20048004) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0xa, 0x78, 0x28e, 0x0, 0x66b8, 0x46ed0086}) 1.24055818s ago: executing program 4 (id=904): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\t\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000880)={0x40, 0x15, 0x28, "38685962be3cf52d438cd3f2d06c96cd5c1ed3d3f7709f178aa3d9722998ac115c9130c3046213a1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) 1.047557297s ago: executing program 0 (id=905): r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff94020000200000004000000000000000e503000000000000000000002c9f38000004"], 0x78) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003240)=ANY=[@ANYBLOB="347441f953d439cd5e80aba529e3bc0572bf1ab6aaaeb734af895ff7b9138406920cfa63f0da5969d6e8e4aff1c3acb4d8a607510571be2372abab5abe2c36d5b989ae7a11a6a9d42a84ecc69419dc580ad2507ddcffeec1303640693bddfc33a76f645ea70122fdd0e048e06d3f8c00d1a1307db974094e1fccb2c5357ed167729c649c9e90b1560be4c973632cbe91d6", @ANYRESDEC, @ANYBLOB="a0ce58e1a10c3092709977498d73bbc70380cfe551d25f2c39713a17dce9e8a375c62de150adfa28d1e07d8f58833be5eba20863", @ANYRES64], 0x7c}}, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) io_uring_setup(0x57f0, &(0x7f0000000500)={0x0, 0xb72b, 0x1, 0x2, 0x6d}) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000b80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{0x0}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000180)=[{&(0x7f00000008c0)}], 0x1}}], 0x2, 0x48000) syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x40000) r4 = openat$comedi(0xffffff9c, &(0x7f0000000200)='/dev/comedi3\x00', 0x10000, 0x0) ioctl$COMEDI_POLL(r4, 0x640f) mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') 78.430338ms ago: executing program 4 (id=906): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x46c, @empty, 0x9}, @in6={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x30}, 0x9}]}, &(0x7f0000000100)=0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) fsmount(0xffffffffffffffff, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@void, @val={0xc, 0x99, {0xfffffff3, 0x3d}}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x404488d) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r7, 0x800c6f40, &(0x7f00000000c0)={""/4, 0x4}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) 0s ago: executing program 0 (id=907): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x5c3a, &(0x7f0000000080)={0x0, 0xde28, 0x11000, 0x1, 0x0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts. [ 56.341832][ T4259] cgroup: Unknown subsys name 'net' [ 56.442629][ T4259] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.717573][ T4259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.050227][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.058329][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.069085][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.076632][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.084285][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.092214][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.097898][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.100705][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.107011][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.113584][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.121868][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.127860][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.135628][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.141662][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.148867][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.156081][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.163194][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.170029][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.177482][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.183446][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.191145][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.204262][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.204545][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.211650][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.219280][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.235832][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.242984][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.252402][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.259886][ T4278] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 59.268817][ T4278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.644253][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 59.662291][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 59.723568][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 59.805091][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 59.868923][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.876050][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.885560][ T4280] device bridge_slave_0 entered promiscuous mode [ 59.900408][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.908101][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.915725][ T4271] device bridge_slave_0 entered promiscuous mode [ 59.923672][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 59.939807][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.947055][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.954664][ T4280] device bridge_slave_1 entered promiscuous mode [ 59.966081][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.973892][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.982104][ T4271] device bridge_slave_1 entered promiscuous mode [ 60.004934][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.014345][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.022148][ T4277] device bridge_slave_0 entered promiscuous mode [ 60.053231][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.062306][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.070145][ T4277] device bridge_slave_1 entered promiscuous mode [ 60.087563][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.121308][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.134145][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.159738][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.182849][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.196636][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.205836][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.216247][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.223884][ T4272] device bridge_slave_0 entered promiscuous mode [ 60.260280][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.267772][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.275417][ T4272] device bridge_slave_1 entered promiscuous mode [ 60.291658][ T4280] team0: Port device team_slave_0 added [ 60.299404][ T4280] team0: Port device team_slave_1 added [ 60.312990][ T4271] team0: Port device team_slave_0 added [ 60.339916][ T4277] team0: Port device team_slave_0 added [ 60.347888][ T4271] team0: Port device team_slave_1 added [ 60.359021][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.369241][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.377054][ T4283] device bridge_slave_0 entered promiscuous mode [ 60.389950][ T4277] team0: Port device team_slave_1 added [ 60.397570][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.404528][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.430641][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.455282][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.477729][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.484884][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.495412][ T4283] device bridge_slave_1 entered promiscuous mode [ 60.503517][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.510626][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.539151][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.551950][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.581924][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.591306][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.617600][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.640102][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.647250][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.673212][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.686675][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.693679][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.720088][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.743365][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.754667][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.780806][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.813112][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.825448][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.851608][ T4272] team0: Port device team_slave_0 added [ 60.878080][ T4283] team0: Port device team_slave_0 added [ 60.893600][ T4272] team0: Port device team_slave_1 added [ 60.909033][ T4280] device hsr_slave_0 entered promiscuous mode [ 60.915630][ T4280] device hsr_slave_1 entered promiscuous mode [ 60.924579][ T4271] device hsr_slave_0 entered promiscuous mode [ 60.931409][ T4271] device hsr_slave_1 entered promiscuous mode [ 60.938494][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.946703][ T4271] Cannot create hsr debugfs directory [ 60.953829][ T4283] team0: Port device team_slave_1 added [ 61.010658][ T4277] device hsr_slave_0 entered promiscuous mode [ 61.017898][ T4277] device hsr_slave_1 entered promiscuous mode [ 61.024577][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.032804][ T4277] Cannot create hsr debugfs directory [ 61.038669][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.045616][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.071732][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.100037][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.107118][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.133258][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.154486][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.161528][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.188141][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.235986][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.243277][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.269438][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.297000][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 61.297011][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 61.297189][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 61.303189][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 61.376471][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 61.388782][ T4272] device hsr_slave_0 entered promiscuous mode [ 61.403421][ T4272] device hsr_slave_1 entered promiscuous mode [ 61.410036][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.418024][ T4272] Cannot create hsr debugfs directory [ 61.439312][ T4283] device hsr_slave_0 entered promiscuous mode [ 61.446004][ T4283] device hsr_slave_1 entered promiscuous mode [ 61.452778][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.460705][ T4283] Cannot create hsr debugfs directory [ 61.670223][ T4280] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.681763][ T4280] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.696861][ T4280] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.710598][ T4280] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.761759][ T4277] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.771643][ T4277] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.791248][ T4277] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.811795][ T4277] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.855336][ T4271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.873001][ T4271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.888970][ T4271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.897983][ T4271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.963368][ T4272] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.973899][ T4272] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.001743][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.008570][ T4272] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.019884][ T4272] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.064534][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.079498][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.089776][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.117959][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.125697][ T4283] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.144715][ T4283] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.155338][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.164882][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.175511][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.182835][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.193937][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.204332][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.212727][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.219837][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.228434][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.244731][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.251980][ T4283] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.264499][ T4283] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.283436][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.291323][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.317215][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.326957][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.335740][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.344655][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.351766][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.359525][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.369904][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.382676][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.391720][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.401005][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.408140][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.418040][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.463285][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.478080][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.487974][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.497154][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.505678][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.514655][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.523456][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.541527][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.558736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.568523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.577489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.585264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.593430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.602399][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.612023][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.620568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.631556][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.657159][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.666723][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.676085][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.689378][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.697700][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.706228][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.714448][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.723313][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.732134][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.741135][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.748262][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.756117][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.771446][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.801922][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.835411][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.845139][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.852285][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.861944][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.881520][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.904056][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.923595][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.954660][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.973976][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.002317][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.013222][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.023465][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.032659][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.042517][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.051709][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.060894][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.070009][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.086926][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.101683][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.114795][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.124018][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.133724][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.140880][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.181271][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.197593][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.215461][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.244157][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.251378][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.276925][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.293391][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.341581][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.350713][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.368766][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.376779][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 63.376813][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 63.376852][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 63.386492][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 63.413134][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.422129][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.433322][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.444350][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.464710][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.471865][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 63.503575][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.511952][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.523233][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.532728][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.542013][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.551110][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.560430][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.569077][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.580494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.588137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.608518][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.631690][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.647081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.655809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.682425][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.689622][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.750946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.759612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.769205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.778704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.786334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.793996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.802954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.811437][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.818510][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.827672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.836445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.849574][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.886050][ T4280] device veth0_vlan entered promiscuous mode [ 63.912238][ T4277] device veth0_vlan entered promiscuous mode [ 63.925403][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.934661][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.947803][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.960622][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.969731][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.983939][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.992750][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.003148][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.011376][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.020064][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.059771][ T4280] device veth1_vlan entered promiscuous mode [ 64.070094][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.079151][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.089659][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.098858][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.107848][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.116715][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.132364][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.139949][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.169332][ T4277] device veth1_vlan entered promiscuous mode [ 64.181677][ T4283] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.192765][ T4283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.208668][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.216858][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.224773][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.233928][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.242819][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.251606][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.262106][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.271220][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.279754][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.288726][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.299728][ T4272] device veth0_vlan entered promiscuous mode [ 64.321478][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.336858][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.345073][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.367136][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.386628][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.401553][ T4272] device veth1_vlan entered promiscuous mode [ 64.424423][ T4277] device veth0_macvtap entered promiscuous mode [ 64.458043][ T4280] device veth0_macvtap entered promiscuous mode [ 64.480382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.498636][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.525209][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.540024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.549317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.569206][ T4277] device veth1_macvtap entered promiscuous mode [ 64.582849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.592205][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.617114][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.637056][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.670577][ T4280] device veth1_macvtap entered promiscuous mode [ 64.702671][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.718378][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.737855][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.753957][ T4272] device veth0_macvtap entered promiscuous mode [ 64.773925][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.800444][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.811398][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.823153][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.839588][ T4272] device veth1_macvtap entered promiscuous mode [ 64.847763][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.859500][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.872376][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.882471][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.894234][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.910060][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.928596][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.942581][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.954260][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.974492][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.986757][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.996898][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.007731][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.019042][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.033197][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.043794][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.057214][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.084129][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.093415][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.101223][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.109586][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.123722][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.132697][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.142617][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.153031][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.164006][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.173986][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.184842][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.196791][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.207677][ T4280] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.217060][ T4280] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.225778][ T4280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.235168][ T4280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.258454][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.267519][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.276069][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.285486][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.296045][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.306356][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.315058][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.323894][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.337920][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.347027][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.355730][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.365210][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.408343][ T4271] device veth0_vlan entered promiscuous mode [ 65.431310][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.440765][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.449078][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.458624][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.467854][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.468082][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 65.475617][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.486182][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 65.488871][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 65.494385][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 65.532941][ T4271] device veth1_vlan entered promiscuous mode [ 65.539877][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 65.569089][ T4283] device veth0_vlan entered promiscuous mode [ 65.576874][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.585721][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.594338][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.603327][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.612167][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.644630][ T4283] device veth1_vlan entered promiscuous mode [ 65.731588][ T4271] device veth0_macvtap entered promiscuous mode [ 65.750300][ T4271] device veth1_macvtap entered promiscuous mode [ 65.765725][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.774495][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.784309][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.792451][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.801376][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.810139][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.818492][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.830623][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.839409][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.870016][ T4283] device veth0_macvtap entered promiscuous mode [ 65.877367][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.885265][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.897631][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.906039][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.930322][ T4283] device veth1_macvtap entered promiscuous mode [ 65.952097][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.963612][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.973817][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.984328][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.994278][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.004816][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.015873][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.037444][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.049895][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.072380][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.085178][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.093430][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.103134][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.114262][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.128050][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.139316][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.150198][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.160132][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.170799][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.183407][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.191277][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.201890][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.211888][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.223956][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.234045][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.244650][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.256106][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.284721][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.299877][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.308698][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.317978][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.326770][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.338144][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.338425][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.356060][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.357127][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.372088][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.384763][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.394758][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.405278][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.415149][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.426317][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.437832][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.449519][ T4271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.461010][ T4271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.469831][ T4271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.478775][ T4271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.492772][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.501626][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.512458][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.523765][ T4283] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.533334][ T4283] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.542198][ T4283] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.552547][ T4283] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.577359][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.585195][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.594439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.692766][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.718726][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.734308][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.756332][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.764225][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.804172][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.847069][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.855276][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.894852][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.944086][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.945315][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.969731][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.985650][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.034545][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.062423][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.536691][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 67.537175][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 67.537220][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 67.685980][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 67.692099][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 67.791744][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.800512][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.811180][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.106173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 69.242905][ T4367] siw: device registration error -23 [ 69.306612][ T4362] lo speed is unknown, defaulting to 1000 [ 69.389481][ T4362] lo speed is unknown, defaulting to 1000 [ 69.452662][ T4362] lo speed is unknown, defaulting to 1000 [ 69.470604][ T4371] mmap: syz.4.5 (4371): VmData 37392384 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 69.544698][ T4362] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 69.632943][ T4362] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 69.719378][ T4377] Zero length message leads to an empty skb [ 70.109517][ T4362] lo speed is unknown, defaulting to 1000 [ 70.126974][ T4362] lo speed is unknown, defaulting to 1000 [ 70.470659][ T4362] lo speed is unknown, defaulting to 1000 [ 70.517693][ T4388] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.540994][ T4362] lo speed is unknown, defaulting to 1000 [ 70.589568][ T4362] lo speed is unknown, defaulting to 1000 [ 70.600268][ T4362] lo speed is unknown, defaulting to 1000 [ 70.826188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.846170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 70.856170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 70.866173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 70.876171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 70.886174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 70.916177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 70.926171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 70.936166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 70.965047][ T4398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11'. [ 70.987429][ T4398] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11'. [ 71.626942][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.633459][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.665639][ T1169] cfg80211: failed to load regulatory.db [ 73.063269][ T4412] process 'syz.0.15' launched './file0' with NULL argv: empty string added [ 74.360290][ T4436] siw: device registration error -23 [ 74.368189][ T4436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 75.325000][ T4441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23'. [ 75.394807][ T4441] netlink: 36 bytes leftover after parsing attributes in process `syz.4.23'. [ 76.112898][ T4441] syz.4.23 (4441) used greatest stack depth: 18096 bytes left [ 76.454043][ T4449] lo speed is unknown, defaulting to 1000 [ 77.906427][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.748797][ T14] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 78.788239][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.824436][ T14] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 253 [ 78.866957][ T14] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 78.929271][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.944480][ T14] usb 5-1: Product: syz [ 78.949107][ T14] usb 5-1: Manufacturer: syz [ 78.953783][ T14] usb 5-1: SerialNumber: syz [ 78.990161][ T14] usb 5-1: config 0 descriptor?? [ 79.613424][ T4476] siw: device registration error -23 [ 79.624355][ T4476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 80.360076][ T14] usb 5-1: USB disconnect, device number 2 [ 80.573773][ T4480] siw: device registration error -23 [ 80.580750][ T4480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 81.148323][ T4489] netlink: 36 bytes leftover after parsing attributes in process `syz.2.36'. [ 81.996951][ T4487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.36'. [ 82.015455][ T4488] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 82.025804][ T4488] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 82.035492][ T4488] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 82.205508][ T4493] lo speed is unknown, defaulting to 1000 [ 85.521314][ T3598] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.777821][ T3598] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 85.794540][ T3598] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 85.806261][ T4314] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.845718][ T4527] fuse: Bad value for 'fd' [ 85.881565][ T4530] siw: device registration error -23 [ 85.888818][ T4530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 88.061724][ T3598] usb 3-1: string descriptor 0 read error: -71 [ 88.076368][ T3598] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 88.116462][ T3598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.167159][ T3598] usb 3-1: config 0 descriptor?? [ 88.197343][ T3598] usb 3-1: can't set config #0, error -71 [ 88.329829][ T4543] lo speed is unknown, defaulting to 1000 [ 88.333870][ T3598] usb 3-1: USB disconnect, device number 2 [ 89.132781][ T4546] siw: device registration error -23 [ 89.140572][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 89.777472][ T4555] netlink: 28 bytes leftover after parsing attributes in process `syz.2.57'. [ 91.504325][ T4566] siw: device registration error -23 [ 91.512515][ T4566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'. [ 91.987841][ T4574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.50'. [ 92.007530][ T4574] netlink: 36 bytes leftover after parsing attributes in process `syz.3.50'. [ 94.199289][ T127] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.419309][ T127] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 94.461082][ T127] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.517460][ T4592] lo speed is unknown, defaulting to 1000 [ 94.523485][ T4592] lo speed is unknown, defaulting to 1000 [ 94.532121][ T4592] lo speed is unknown, defaulting to 1000 [ 94.565001][ T4592] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 94.622350][ T4592] lo speed is unknown, defaulting to 1000 [ 94.633841][ T4592] lo speed is unknown, defaulting to 1000 [ 94.644115][ T4592] lo speed is unknown, defaulting to 1000 [ 94.653804][ T4592] lo speed is unknown, defaulting to 1000 [ 94.664479][ T4592] lo speed is unknown, defaulting to 1000 [ 95.263797][ T4596] lo speed is unknown, defaulting to 1000 [ 95.349333][ T127] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 253 [ 96.616425][ T127] usb 3-1: string descriptor 0 read error: -71 [ 96.622719][ T127] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 96.726244][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.790273][ T127] usb 3-1: config 0 descriptor?? [ 96.832593][ T127] usb 3-1: can't set config #0, error -71 [ 96.980036][ T127] usb 3-1: USB disconnect, device number 3 [ 98.976905][ T4603] netlink: 28 bytes leftover after parsing attributes in process `syz.3.70'. [ 99.243452][ T4614] fuse: Bad value for 'fd' [ 99.577842][ T4622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 102.056288][ T4352] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.962370][ T4352] usb 1-1: device descriptor read/64, error -71 [ 104.607366][ T4352] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.776301][ T4352] usb 1-1: device descriptor read/64, error -71 [ 104.928965][ T4352] usb usb1-port1: attempt power cycle [ 105.712564][ T4644] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.140135][ T4659] siw: device registration error -23 [ 106.147931][ T4659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 106.220414][ T4644] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 106.445295][ T4644] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.455500][ T4644] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 253 [ 106.486818][ T4644] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 106.496386][ T4644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.506180][ T4644] usb 2-1: Product: syz [ 106.510428][ T4644] usb 2-1: Manufacturer: syz [ 106.516215][ T4644] usb 2-1: SerialNumber: syz [ 106.540710][ T4644] usb 2-1: config 0 descriptor?? [ 106.774404][ T4666] siw: device registration error -23 [ 106.781480][ T4666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 107.536079][ T4665] lo speed is unknown, defaulting to 1000 [ 107.592938][ T4661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.82'. [ 108.898949][ T127] usb 2-1: USB disconnect, device number 2 [ 111.338268][ T4688] device gretap1 entered promiscuous mode [ 111.347096][ T4688] batman_adv: batadv0: Adding interface: gretap1 [ 111.353479][ T4688] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.379100][ T4688] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 112.633855][ T4704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 117.496385][ T4740] netlink: 28 bytes leftover after parsing attributes in process `syz.2.103'. [ 121.877857][ T4763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'. [ 124.377425][ T4779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.111'. [ 124.443505][ T4779] netlink: 36 bytes leftover after parsing attributes in process `syz.2.111'. [ 126.138013][ T4795] device gretap1 entered promiscuous mode [ 126.144440][ T4795] batman_adv: batadv0: Adding interface: gretap1 [ 126.255725][ T4795] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.287394][ T4795] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 126.383009][ T4804] ubi16: attaching mtd0 [ 126.402735][ T4804] ubi16: scanning is finished [ 126.407688][ T4804] ubi16: empty MTD device detected [ 128.020963][ T4804] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 128.128811][ T4804] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 128.173640][ T4804] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 128.610097][ T4804] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 128.626359][ T4804] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 128.633355][ T4804] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 128.653502][ T4804] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2294441618 [ 128.664721][ T4804] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 128.677161][ T4808] ubi16: background thread "ubi_bgt16d" started, PID 4808 [ 132.173865][ T4828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 132.751443][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.759970][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.784950][ T4839] siw: device registration error -23 [ 133.795276][ T4839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 136.196251][ T4644] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 137.666439][ T4644] usb 5-1: Using ep0 maxpacket: 8 [ 137.680675][ T4644] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.769147][ T4861] 9pnet_virtio: no channels available for device syz [ 137.811497][ T4644] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 137.890358][ T4644] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.088550][ T4644] usb 5-1: config 0 descriptor?? [ 138.208863][ T4864] netlink: 7 bytes leftover after parsing attributes in process `syz.2.132'. [ 138.240211][ T4865] netlink: 'syz.1.133': attribute type 1 has an invalid length. [ 138.289207][ T4865] netlink: 'syz.1.133': attribute type 2 has an invalid length. [ 138.326925][ T4644] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 138.826264][ T4315] usb 5-1: USB disconnect, device number 3 [ 139.655359][ T4881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.135'. [ 140.316341][ T4864] syz.2.132 (4864): drop_caches: 2 [ 140.689917][ T4878] device gretap1 entered promiscuous mode [ 142.310949][ T4878] batman_adv: batadv0: Adding interface: gretap1 [ 142.342537][ T4878] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.398876][ T4878] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 142.601526][ T4899] siw: device registration error -23 [ 142.609210][ T4899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 145.546287][ T4315] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 145.751325][ T4315] usb 2-1: Using ep0 maxpacket: 8 [ 145.762491][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 145.797091][ T4315] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 145.826596][ T4915] netlink: 'syz.0.146': attribute type 1 has an invalid length. [ 145.834348][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.842609][ T4915] netlink: 'syz.0.146': attribute type 2 has an invalid length. [ 145.864757][ T4315] usb 2-1: config 0 descriptor?? [ 146.690383][ T4315] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 146.811860][ T4644] usb 2-1: USB disconnect, device number 3 [ 146.969453][ T4929] netlink: 7 bytes leftover after parsing attributes in process `syz.3.147'. [ 151.893140][ T4933] syz.3.147 (4933): drop_caches: 2 [ 153.032768][ T4966] siw: device registration error -23 [ 153.040498][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.152'. [ 154.049603][ T4965] ubi: mtd0 is already attached to ubi16 [ 154.467059][ T4962] netlink: 'syz.0.158': attribute type 10 has an invalid length. [ 154.474818][ T4962] netlink: 40 bytes leftover after parsing attributes in process `syz.0.158'. [ 154.483927][ T4962] device ipvlan1 entered promiscuous mode [ 154.489897][ T4962] bridge0: port 3(ipvlan1) entered blocking state [ 154.496357][ T4962] bridge0: port 3(ipvlan1) entered disabled state [ 154.503858][ T4962] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 158.051110][ T127] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 158.306185][ T127] usb 5-1: Using ep0 maxpacket: 8 [ 158.314362][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.186347][ T127] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 159.245190][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.334836][ T127] usb 5-1: config 0 descriptor?? [ 160.598760][ T127] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 160.643502][ T127] usb 5-1: USB disconnect, device number 4 [ 161.844202][ T5006] ubi: mtd0 is already attached to ubi16 [ 161.855166][ T5006] netlink: 'syz.3.171': attribute type 10 has an invalid length. [ 161.863832][ T5006] netlink: 40 bytes leftover after parsing attributes in process `syz.3.171'. [ 161.872843][ T5006] device ipvlan1 entered promiscuous mode [ 161.879596][ T5006] bridge0: port 3(ipvlan1) entered blocking state [ 161.886169][ T5006] bridge0: port 3(ipvlan1) entered disabled state [ 161.893986][ T5006] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 164.535982][ T5021] syz.1.167 (5021): drop_caches: 2 [ 168.496206][ T4382] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 168.826220][ T4382] usb 4-1: Using ep0 maxpacket: 8 [ 170.234545][ T4382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.246713][ T4382] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 170.255849][ T4382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.288356][ T4382] usb 4-1: config 0 descriptor?? [ 171.323505][ T4382] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 171.489388][ T5067] netlink: 7 bytes leftover after parsing attributes in process `syz.1.186'. [ 172.741046][ T5067] syz.1.186 (5067): drop_caches: 2 [ 172.881146][ T127] usb 4-1: USB disconnect, device number 3 [ 176.469793][ T5089] device gretap1 entered promiscuous mode [ 176.498288][ T5089] batman_adv: batadv0: Adding interface: gretap1 [ 176.506037][ T5089] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.544473][ T5089] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 176.566207][ T4352] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 176.818691][ T4352] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 177.616273][ T4352] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.778130][ T4352] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 253 [ 178.624798][ T5100] ubi: mtd0 is already attached to ubi16 [ 178.643937][ T4352] usb 5-1: string descriptor 0 read error: -71 [ 178.650474][ T4352] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 178.666371][ T4352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.679359][ T5100] netlink: 'syz.2.187': attribute type 10 has an invalid length. [ 178.721855][ T5100] netlink: 40 bytes leftover after parsing attributes in process `syz.2.187'. [ 178.732038][ T5100] device ipvlan1 entered promiscuous mode [ 178.759933][ T4352] usb 5-1: config 0 descriptor?? [ 178.766474][ T5100] bridge0: port 3(ipvlan1) entered blocking state [ 178.863091][ T5100] bridge0: port 3(ipvlan1) entered disabled state [ 178.880302][ T5100] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 178.955177][ T4352] usb 5-1: can't set config #0, error -71 [ 179.428710][ T4352] usb 5-1: USB disconnect, device number 5 [ 179.919207][ T5120] 9pnet_virtio: no channels available for device syz [ 179.996199][ T4382] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 181.346284][ T4382] usb 3-1: device descriptor read/64, error -71 [ 181.686237][ T4382] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 182.290958][ T5125] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 182.436174][ T4382] usb 3-1: device descriptor read/64, error -71 [ 182.437274][ T5132] netlink: 7 bytes leftover after parsing attributes in process `syz.3.203'. [ 182.542488][ T5132] syz.3.203 (5132): drop_caches: 2 [ 182.575169][ T4382] usb usb3-port1: attempt power cycle [ 182.599258][ T5134] netlink: 7 bytes leftover after parsing attributes in process `syz.0.204'. [ 182.642783][ T5134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.204'. [ 182.662763][ T5134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 182.676713][ T5134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 183.578170][ T5149] syz.0.204 (5149): drop_caches: 2 [ 184.768242][ T5166] netlink: 24 bytes leftover after parsing attributes in process `syz.4.209'. [ 184.778113][ T5166] netlink: 24 bytes leftover after parsing attributes in process `syz.4.209'. [ 184.801170][ T5166] netlink: 36 bytes leftover after parsing attributes in process `syz.4.209'. [ 184.956263][ T4352] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 186.773065][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 186.779630][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 186.785627][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 186.791777][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 186.813035][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 186.826186][ T4352] usb 2-1: Using ep0 maxpacket: 8 [ 186.879901][ T4352] usb 2-1: device descriptor read/all, error -71 [ 186.975895][ T5173] 9pnet_virtio: no channels available for device syz [ 189.176270][ T5185] netlink: 7 bytes leftover after parsing attributes in process `syz.1.215'. [ 189.635721][ T5185] syz.1.215 (5185): drop_caches: 2 [ 192.883748][ T5205] netlink: 7 bytes leftover after parsing attributes in process `syz.1.222'. [ 192.909506][ T5205] netlink: 'syz.1.222': attribute type 1 has an invalid length. [ 193.067712][ T5205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.081228][ T5213] device gretap1 entered promiscuous mode [ 193.148899][ T5213] batman_adv: batadv0: Adding interface: gretap1 [ 193.155286][ T5213] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.188885][ T4352] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 193.307302][ T5217] syz.1.222 (5217): drop_caches: 2 [ 193.385036][ T5213] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 193.496279][ T4352] usb 1-1: Using ep0 maxpacket: 8 [ 193.697953][ T4352] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.760885][ T4352] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 193.813033][ T4352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.853365][ T4352] usb 1-1: config 0 descriptor?? [ 194.079193][ T4352] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 194.192334][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.198702][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.532717][ T5226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.223'. [ 194.559314][ T5226] netlink: 36 bytes leftover after parsing attributes in process `syz.3.223'. [ 195.273659][ T4644] usb 1-1: USB disconnect, device number 5 [ 195.433126][ T5232] 9pnet_virtio: no channels available for device syz [ 198.284041][ T5237] netlink: 7 bytes leftover after parsing attributes in process `syz.0.230'. [ 198.387958][ T5237] syz.0.230 (5237): drop_caches: 2 [ 200.138527][ T5248] device syzkaller0 entered promiscuous mode [ 200.926821][ T5260] netlink: 7 bytes leftover after parsing attributes in process `syz.0.236'. [ 200.967368][ T5260] netlink: 'syz.0.236': attribute type 1 has an invalid length. [ 201.912827][ T5260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.605054][ T5268] syz.0.236 (5268): drop_caches: 2 [ 204.236216][ T14] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 204.342606][ T5279] netlink: 7 bytes leftover after parsing attributes in process `syz.1.242'. [ 204.409592][ T5280] 9pnet_virtio: no channels available for device syz [ 204.446270][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 205.770499][ T5279] syz.1.242 (5279): drop_caches: 2 [ 205.816900][ T14] usb 4-1: device descriptor read/all, error -71 [ 206.890090][ T5292] device syzkaller0 entered promiscuous mode [ 208.170987][ T5306] netlink: 7 bytes leftover after parsing attributes in process `syz.0.251'. [ 208.181663][ T5306] netlink: 'syz.0.251': attribute type 1 has an invalid length. [ 208.206446][ T5306] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.138635][ T5310] syz.0.251 (5310): drop_caches: 2 [ 210.810299][ T5325] 9pnet_virtio: no channels available for device syz [ 213.116263][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 214.136163][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 214.154130][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.195919][ T14] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 215.816208][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.825941][ T14] usb 1-1: config 0 descriptor?? [ 216.090278][ T14] usb 1-1: can't set config #0, error -71 [ 216.272614][ T14] usb 1-1: USB disconnect, device number 6 [ 217.533379][ T5357] device syzkaller0 entered promiscuous mode [ 217.709753][ T5361] netlink: 7 bytes leftover after parsing attributes in process `syz.3.258'. [ 217.838822][ T5361] syz.3.258 (5361): drop_caches: 2 [ 218.033406][ T5369] 9pnet_virtio: no channels available for device syz [ 221.722715][ T5382] netlink: 7 bytes leftover after parsing attributes in process `syz.0.264'. [ 221.733220][ T5382] netlink: 'syz.0.264': attribute type 1 has an invalid length. [ 221.760078][ T5382] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.066325][ T4275] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 223.460882][ T5391] syz.0.264 (5391): drop_caches: 2 [ 225.269338][ T5405] netlink: 7 bytes leftover after parsing attributes in process `syz.2.277'. [ 225.325202][ T5405] syz.2.277 (5405): drop_caches: 2 [ 226.196575][ T5425] 9pnet_virtio: no channels available for device syz [ 231.366244][ T3598] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 231.586569][ T3598] usb 5-1: Using ep0 maxpacket: 8 [ 231.662184][ T3598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.081527][ T3598] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 233.119950][ T3598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.210340][ T3598] usb 5-1: config 0 descriptor?? [ 233.439578][ T5456] netlink: 7 bytes leftover after parsing attributes in process `syz.1.289'. [ 233.461454][ T3598] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 233.495181][ T5456] syz.1.289 (5456): drop_caches: 2 [ 234.086449][ T3598] usb 5-1: USB disconnect, device number 7 [ 238.851620][ T5498] netlink: 7 bytes leftover after parsing attributes in process `syz.3.300'. [ 240.497512][ T5498] syz.3.300 (5498): drop_caches: 2 [ 242.736380][ T5370] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 242.946280][ T5370] usb 4-1: Using ep0 maxpacket: 8 [ 242.953347][ T5370] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 242.975874][ T5370] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 243.005906][ T5370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.117496][ T5370] usb 4-1: config 0 descriptor?? [ 243.390917][ T5370] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 243.828969][ T5523] ubi: mtd0 is already attached to ubi16 [ 243.835831][ T5523] netlink: 'syz.1.309': attribute type 10 has an invalid length. [ 243.843713][ T5523] netlink: 40 bytes leftover after parsing attributes in process `syz.1.309'. [ 243.852796][ T5523] device ipvlan1 entered promiscuous mode [ 243.858925][ T5523] bridge0: port 3(ipvlan1) entered blocking state [ 243.865510][ T5523] bridge0: port 3(ipvlan1) entered disabled state [ 243.873461][ T5523] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 243.947865][ T5370] usb 4-1: USB disconnect, device number 6 [ 246.315349][ T5557] netlink: 7 bytes leftover after parsing attributes in process `syz.0.317'. [ 246.532549][ T5557] syz.0.317 (5557): drop_caches: 2 [ 249.078301][ T5560] ubi: mtd0 is already attached to ubi16 [ 249.084865][ T5560] netlink: 'syz.0.321': attribute type 10 has an invalid length. [ 249.092878][ T5560] netlink: 40 bytes leftover after parsing attributes in process `syz.0.321'. [ 249.101847][ T5560] bridge0: port 3(ipvlan1) entered blocking state [ 249.108322][ T5560] bridge0: port 3(ipvlan1) entered disabled state [ 249.115456][ T5560] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 249.206287][ T4382] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 249.326182][ T127] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 249.396289][ T4382] usb 5-1: Using ep0 maxpacket: 8 [ 249.403126][ T4382] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.306181][ T4382] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 250.315548][ T4382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.327245][ T4382] usb 5-1: config 0 descriptor?? [ 250.338711][ T127] usb 3-1: device descriptor read/all, error -71 [ 250.536320][ T4382] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 252.299322][ T4382] usb 5-1: USB disconnect, device number 8 [ 252.990918][ T5603] netlink: 7 bytes leftover after parsing attributes in process `syz.0.331'. [ 254.424605][ T5603] syz.0.331 (5603): drop_caches: 2 [ 255.618613][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.624955][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.286232][ T4382] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 258.486199][ T4382] usb 4-1: Using ep0 maxpacket: 8 [ 258.494335][ T4382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 258.506892][ T4382] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 258.516212][ T4382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.556814][ T4382] usb 4-1: config 0 descriptor?? [ 258.774956][ T4382] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 259.577374][ T5647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'. [ 259.684995][ T5654] netlink: 7 bytes leftover after parsing attributes in process `syz.2.344'. [ 259.751269][ T4644] usb 4-1: USB disconnect, device number 7 [ 259.845436][ T5654] syz.2.344 (5654): drop_caches: 2 [ 266.300861][ T5693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.350'. [ 266.458154][ T5701] netlink: 7 bytes leftover after parsing attributes in process `syz.4.358'. [ 266.605451][ T5701] syz.4.358 (5701): drop_caches: 2 [ 267.875308][ T4316] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 268.176196][ T4316] usb 1-1: Using ep0 maxpacket: 8 [ 269.518439][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 269.669195][ T4316] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 269.678805][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.696723][ T4316] usb 1-1: config 0 descriptor?? [ 269.771437][ T4316] usb 1-1: can't set config #0, error -71 [ 269.796536][ T4316] usb 1-1: USB disconnect, device number 7 [ 271.085651][ T5737] netlink: 7 bytes leftover after parsing attributes in process `syz.2.370'. [ 271.115602][ T5737] syz.2.370 (5737): drop_caches: 2 [ 272.323940][ T5745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.371'. [ 274.346343][ T4644] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 275.166401][ T4644] usb 1-1: Using ep0 maxpacket: 8 [ 275.173741][ T4644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.202534][ T4644] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 275.341005][ T4644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.377929][ T4644] usb 1-1: config 0 descriptor?? [ 275.590324][ T4644] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 277.079139][ T4644] usb 1-1: USB disconnect, device number 8 [ 277.346575][ T5785] netlink: 7 bytes leftover after parsing attributes in process `syz.3.382'. [ 278.551774][ T5785] syz.3.382 (5785): drop_caches: 2 [ 279.786604][ T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 279.996273][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 280.731717][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.872554][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.932377][ T14] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 280.972144][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.007729][ T14] usb 1-1: config 0 descriptor?? [ 281.434297][ T14] bigben 0003:146B:0902.0001: unexpected rdesc, please submit for review [ 281.467157][ T14] bigben 0003:146B:0902.0001: unknown main item tag 0x0 [ 281.474530][ T14] bigben 0003:146B:0902.0001: unknown main item tag 0x0 [ 281.483140][ T14] bigben 0003:146B:0902.0001: unknown main item tag 0x0 [ 281.490772][ T14] bigben 0003:146B:0902.0001: unknown main item tag 0x0 [ 281.498105][ T14] bigben 0003:146B:0902.0001: unknown main item tag 0x0 [ 281.518161][ T14] bigben 0003:146B:0902.0001: hidraw0: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.0-1/input0 [ 281.529623][ T14] bigben 0003:146B:0902.0001: missing HID_OUTPUT_REPORT 0 [ 281.537063][ T14] bigben 0003:146B:0902.0001: no output report found [ 281.697520][ T5822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 282.733437][ T5826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.385'. [ 283.594810][ T5827] usb 1-1: USB disconnect, device number 9 [ 283.655806][ T5832] netlink: 7 bytes leftover after parsing attributes in process `syz.1.397'. [ 283.790358][ T5832] syz.1.397 (5832): drop_caches: 2 [ 283.946168][ T4320] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 285.909232][ T4320] usb 4-1: Using ep0 maxpacket: 8 [ 285.958574][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 286.009803][ T4320] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 286.076408][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.147735][ T4320] usb 4-1: config 0 descriptor?? [ 287.041888][ T4320] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 287.126602][ T4320] usb 4-1: USB disconnect, device number 8 [ 287.587490][ T5867] netlink: 7 bytes leftover after parsing attributes in process `syz.4.410'. [ 287.674971][ T5868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.409'. [ 289.548499][ T5867] syz.4.410 (5867): drop_caches: 2 [ 290.516315][ T14] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 291.114842][ T14] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 291.176903][ T14] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 291.215406][ T14] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 291.228711][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.242391][ T14] usb 4-1: Product: syz [ 291.249734][ T14] usb 4-1: Manufacturer: syz [ 291.258603][ T14] usb 4-1: SerialNumber: syz [ 291.280825][ T14] usb 4-1: config 0 descriptor?? [ 291.330744][ T14] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 291.467997][ T14] gspca_sunplus: reg_r err -71 [ 291.598261][ T14] sunplus: probe of 4-1:0.0 failed with error -71 [ 291.658687][ T14] usb 4-1: USB disconnect, device number 9 [ 293.459296][ T5921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.422'. [ 294.777306][ T5924] netlink: 7 bytes leftover after parsing attributes in process `syz.2.423'. [ 294.818398][ T5924] syz.2.423 (5924): drop_caches: 2 [ 295.240415][ T5935] lo speed is unknown, defaulting to 1000 [ 296.246333][ T4320] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 296.440038][ T4320] usb 2-1: unable to get BOS descriptor or descriptor too short [ 296.507031][ T4320] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.794737][ T4320] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.664688][ T4320] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 297.673979][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.682608][ T4320] usb 2-1: Product: syz [ 297.687134][ T4320] usb 2-1: Manufacturer: syz [ 297.691756][ T4320] usb 2-1: SerialNumber: syz [ 298.082256][ T5968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.433'. [ 298.355479][ T5971] netlink: 7 bytes leftover after parsing attributes in process `syz.3.436'. [ 298.522101][ T5971] syz.3.436 (5971): drop_caches: 2 [ 298.642483][ T5979] lo speed is unknown, defaulting to 1000 [ 299.682598][ T4320] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 299.711390][ T4320] usb 2-1: USB disconnect, device number 6 [ 300.342161][ T4372] udevd[4372]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.473001][ T5991] 9pnet_virtio: no channels available for device syz [ 303.194139][ T6014] netlink: 7 bytes leftover after parsing attributes in process `syz.0.450'. [ 303.261123][ T6014] syz.0.450 (6014): drop_caches: 2 [ 303.422444][ T6018] lo speed is unknown, defaulting to 1000 [ 303.539459][ T6022] netlink: 'syz.1.453': attribute type 2 has an invalid length. [ 303.547276][ T6022] netlink: 224 bytes leftover after parsing attributes in process `syz.1.453'. [ 306.862259][ T6049] netlink: 7 bytes leftover after parsing attributes in process `syz.0.462'. [ 307.026103][ T6053] syz.0.462 (6053): drop_caches: 2 [ 307.502487][ T6052] lo speed is unknown, defaulting to 1000 [ 307.812979][ T6061] netlink: 'syz.4.466': attribute type 2 has an invalid length. [ 307.820910][ T6061] netlink: 224 bytes leftover after parsing attributes in process `syz.4.466'. [ 309.073527][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.465'. [ 309.978194][ T6085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.473'. [ 310.024434][ T6085] netlink: 36 bytes leftover after parsing attributes in process `syz.0.473'. [ 310.199011][ T14] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 311.595003][ T14] usb 4-1: unable to get BOS descriptor or descriptor too short [ 311.596152][ T4320] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 311.633850][ T14] usb 4-1: not running at top speed; connect to a high speed hub [ 311.644772][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.664326][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.685879][ T14] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 311.704560][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.716584][ T14] usb 4-1: Product: syz [ 311.721029][ T14] usb 4-1: Manufacturer: syz [ 311.725803][ T14] usb 4-1: SerialNumber: syz [ 311.730839][ T6095] netlink: 7 bytes leftover after parsing attributes in process `syz.1.478'. [ 311.802155][ T6098] netlink: 'syz.2.479': attribute type 2 has an invalid length. [ 311.806138][ T4320] usb 1-1: Using ep0 maxpacket: 32 [ 311.815232][ T6098] netlink: 224 bytes leftover after parsing attributes in process `syz.2.479'. [ 312.607867][ T4320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 312.618557][ T4320] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 312.628659][ T4320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 312.642390][ T4320] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 312.651919][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.660442][ T4320] usb 1-1: Product: syz [ 312.664799][ T4320] usb 1-1: Manufacturer: syz [ 312.669553][ T4320] usb 1-1: SerialNumber: syz [ 312.705685][ T4320] usb 1-1: config 0 descriptor?? [ 312.734908][ T6099] syz.1.478 (6099): drop_caches: 2 [ 312.879739][ T14] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 312.936306][ T14] usb 4-1: USB disconnect, device number 10 [ 313.169120][ T6100] udevd[6100]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.347163][ T6107] 9pnet_virtio: no channels available for device syz [ 314.042377][ T4320] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 314.401585][ T6115] siw: device registration error -23 [ 314.407711][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.483'. [ 314.479837][ T4320] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 314.617773][ T6127] netlink: 36 bytes leftover after parsing attributes in process `syz.2.487'. [ 315.286574][ T6123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.487'. [ 315.304917][ T6126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.487'. [ 315.336471][ T4320] usb 1-1: USB disconnect, device number 10 [ 315.663131][ T6147] netlink: 'syz.3.490': attribute type 2 has an invalid length. [ 315.671012][ T6147] netlink: 224 bytes leftover after parsing attributes in process `syz.3.490'. [ 316.680019][ T6149] netlink: 7 bytes leftover after parsing attributes in process `syz.2.492'. [ 317.594501][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.912319][ T6156] syz.2.492 (6156): drop_caches: 2 [ 317.984972][ T6162] 9pnet_virtio: no channels available for device syz [ 318.051038][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.593615][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 319.784617][ T6181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.499'. [ 319.797607][ T6181] netlink: 36 bytes leftover after parsing attributes in process `syz.4.499'. [ 320.967969][ T6198] netlink: 'syz.2.504': attribute type 2 has an invalid length. [ 320.975796][ T6198] netlink: 224 bytes leftover after parsing attributes in process `syz.2.504'. [ 321.833492][ T6204] netlink: 7 bytes leftover after parsing attributes in process `syz.3.507'. [ 322.066550][ T6208] syz.3.507 (6208): drop_caches: 2 [ 322.774994][ T6216] 9pnet_virtio: no channels available for device syz [ 324.615016][ T6218] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 325.493332][ T4644] libceph: connect (1)[c::]:6789 error -101 [ 325.510325][ T4644] libceph: mon0 (1)[c::]:6789 connect error [ 327.158785][ T6240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.513'. [ 327.170607][ T6240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.513'. [ 327.318104][ T6226] ceph: No mds server is up or the cluster is laggy [ 327.663004][ T6243] siw: device registration error -23 [ 327.669864][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 327.786424][ T4314] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 327.966185][ T6255] netlink: 'syz.4.518': attribute type 2 has an invalid length. [ 327.974691][ T6255] netlink: 224 bytes leftover after parsing attributes in process `syz.4.518'. [ 328.046126][ T4314] usb 1-1: Using ep0 maxpacket: 8 [ 328.736685][ T4314] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 328.744316][ T4314] usb 1-1: can't read configurations, error -71 [ 329.249907][ T6280] 9pnet_virtio: no channels available for device syz [ 329.393084][ T6276] lo speed is unknown, defaulting to 1000 [ 332.637512][ T6292] netlink: 24 bytes leftover after parsing attributes in process `syz.4.527'. [ 332.647802][ T6292] netlink: 24 bytes leftover after parsing attributes in process `syz.4.527'. [ 332.786878][ T6291] siw: device registration error -23 [ 333.194055][ T6306] netlink: 'syz.1.532': attribute type 2 has an invalid length. [ 333.202362][ T6306] netlink: 224 bytes leftover after parsing attributes in process `syz.1.532'. [ 334.287302][ T6322] netlink: 'syz.2.536': attribute type 1 has an invalid length. [ 334.325174][ T6322] netlink: 'syz.2.536': attribute type 2 has an invalid length. [ 335.504443][ T6336] lo speed is unknown, defaulting to 1000 [ 336.421179][ T6337] 9pnet_virtio: no channels available for device syz [ 336.822505][ T6341] siw: device registration error -23 [ 339.059833][ T6365] netlink: 'syz.0.547': attribute type 2 has an invalid length. [ 339.067651][ T6365] netlink: 224 bytes leftover after parsing attributes in process `syz.0.547'. [ 340.975140][ T6392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.552'. [ 340.985462][ T6392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.552'. [ 342.158971][ T6406] siw: device registration error -23 [ 344.739223][ T6429] netlink: 'syz.2.563': attribute type 2 has an invalid length. [ 344.747241][ T6429] netlink: 224 bytes leftover after parsing attributes in process `syz.2.563'. [ 346.400849][ T6450] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(20) [ 346.407876][ T6450] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 346.417887][ T6450] vhci_hcd vhci_hcd.0: Device attached [ 346.736513][ T4315] usb 34-1: SetAddress Request (2) to port 0 [ 346.757887][ T4315] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 347.180268][ T6451] vhci_hcd: connection reset by peer [ 347.229506][ T4478] vhci_hcd: stop threads [ 347.234596][ T4478] vhci_hcd: release socket [ 347.247641][ T4478] vhci_hcd: disconnect device [ 347.970753][ T3598] libceph: connect (1)[c::]:6789 error -101 [ 347.994281][ T3598] libceph: mon0 (1)[c::]:6789 connect error [ 348.037271][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.570'. [ 350.692179][ T6469] ceph: No mds server is up or the cluster is laggy [ 350.701054][ T4320] libceph: connect (1)[c::]:6789 error -101 [ 350.707855][ T4320] libceph: mon0 (1)[c::]:6789 connect error [ 350.869433][ T6481] lo speed is unknown, defaulting to 1000 [ 351.308977][ T6493] netlink: 'syz.3.577': attribute type 2 has an invalid length. [ 351.316913][ T6493] netlink: 224 bytes leftover after parsing attributes in process `syz.3.577'. [ 351.856287][ T4315] usb 34-1: device descriptor read/8, error -110 [ 352.360378][ T4315] usb usb34-port1: attempt power cycle [ 352.413911][ T6516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.582'. [ 352.424724][ T6516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.582'. [ 352.553062][ T4644] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 353.646200][ T4644] usb 1-1: Using ep0 maxpacket: 32 [ 353.683030][ T4644] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 353.883849][ T4644] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 353.966184][ T4644] usb 1-1: config 0 interface 0 has no altsetting 0 [ 354.034798][ T4644] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 354.074932][ T4644] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.115774][ T4644] usb 1-1: Product: syz [ 354.125902][ T4644] usb 1-1: Manufacturer: syz [ 354.130880][ T6528] lo speed is unknown, defaulting to 1000 [ 354.136154][ T4644] usb 1-1: SerialNumber: syz [ 354.173029][ T4315] usb usb34-port1: unable to enumerate USB device [ 354.676740][ T4644] usb 1-1: config 0 descriptor?? [ 355.378358][ T4644] gs_usb 1-1:0.0: Configuring for 99 interfaces [ 356.715871][ T6526] netlink: 36 bytes leftover after parsing attributes in process `syz.1.586'. [ 356.921359][ T4644] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 357.106293][ T4644] gs_usb: probe of 1-1:0.0 failed with error -71 [ 357.116262][ T4644] usb 1-1: USB disconnect, device number 13 [ 358.441686][ T6565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.596'. [ 358.451715][ T6565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.596'. [ 358.976375][ T6563] sched: RT throttling activated [ 359.001558][ T6566] netlink: 'syz.2.594': attribute type 2 has an invalid length. [ 359.009394][ T6566] netlink: 224 bytes leftover after parsing attributes in process `syz.2.594'. [ 359.950996][ T6572] siw: device registration error -23 [ 359.957812][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.598'. [ 360.235119][ T6579] lo speed is unknown, defaulting to 1000 [ 360.377819][ T6582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.600'. [ 363.384374][ T6607] siw: device registration error -23 [ 363.392846][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 363.463550][ T6610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.608'. [ 363.475573][ T6610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.608'. [ 363.596215][ T4320] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 363.801153][ T4320] usb 1-1: Using ep0 maxpacket: 16 [ 364.212451][ T4320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.250509][ T4320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.260454][ T4320] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 364.273475][ T4320] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 364.282621][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.293467][ T4320] usb 1-1: config 0 descriptor?? [ 365.686747][ T4320] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 365.703979][ T4320] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 365.715641][ T4320] microsoft 0003:045E:07DA.0002: no inputs found [ 365.722374][ T4320] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 365.909666][ T5370] usb 1-1: USB disconnect, device number 14 [ 366.032519][ T6625] netlink: 'syz.1.610': attribute type 2 has an invalid length. [ 366.040349][ T6625] netlink: 224 bytes leftover after parsing attributes in process `syz.1.610'. [ 366.800813][ T6624] lo speed is unknown, defaulting to 1000 [ 366.847177][ T6628] fido_id[6628]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 366.984386][ T6629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.614'. [ 369.768668][ T6659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.622'. [ 369.778679][ T6659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.622'. [ 370.216241][ T5370] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 370.510092][ T6669] netlink: 'syz.2.625': attribute type 2 has an invalid length. [ 370.517984][ T6669] netlink: 224 bytes leftover after parsing attributes in process `syz.2.625'. [ 370.527179][ T5370] usb 1-1: Using ep0 maxpacket: 8 [ 370.549845][ T5370] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 370.566545][ T4319] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 370.627544][ T5370] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 370.697703][ T5370] usb 1-1: config 0 has no interface number 0 [ 370.740543][ T5370] usb 1-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 370.785873][ T4319] usb 5-1: unable to get BOS descriptor or descriptor too short [ 370.810128][ T4319] usb 5-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 371.309169][ T5370] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 371.351279][ T4319] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 371.371503][ T5370] usb 1-1: config 0 interface 186 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.397436][ T4319] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 371.419646][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.448585][ T5370] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 371.480193][ T4319] usb 5-1: Product: syz [ 371.484422][ T4319] usb 5-1: Manufacturer: syz [ 371.492334][ T5370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.500898][ T5370] usb 1-1: Product: syz [ 371.505068][ T5370] usb 1-1: Manufacturer: syz [ 371.509900][ T4319] usb 5-1: SerialNumber: syz [ 371.521677][ T5370] usb 1-1: SerialNumber: syz [ 371.537740][ T5370] usb 1-1: config 0 descriptor?? [ 371.568508][ T5370] iowarrior 1-1:0.186: no interrupt-in endpoint found [ 372.075181][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.629'. [ 372.084286][ T6685] netlink: 60 bytes leftover after parsing attributes in process `syz.3.629'. [ 372.919068][ T4315] usb 1-1: USB disconnect, device number 15 [ 372.973683][ T4319] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 373.016341][ T4319] usb 5-1: USB disconnect, device number 9 [ 373.063300][ T6289] udevd[6289]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.724648][ T6693] netlink: 'syz.3.631': attribute type 4 has an invalid length. [ 373.734512][ T6693] netlink: 152 bytes leftover after parsing attributes in process `syz.3.631'. [ 373.877819][ T6701] syz.1.633 (6701): drop_caches: 2 [ 374.342535][ T6704] siw: device registration error -23 [ 374.354861][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'. [ 374.821897][ T6716] netlink: 'syz.2.637': attribute type 2 has an invalid length. [ 374.830152][ T6716] netlink: 224 bytes leftover after parsing attributes in process `syz.2.637'. [ 375.807591][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 375.816935][ T6724] netlink: 60 bytes leftover after parsing attributes in process `syz.3.641'. [ 376.933842][ T6742] netlink: 7 bytes leftover after parsing attributes in process `syz.3.646'. [ 377.652606][ T5370] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 377.743849][ T6744] syz.3.646 (6744): drop_caches: 2 [ 378.051261][ T6739] siw: device registration error -23 [ 378.066211][ T5370] usb 5-1: Using ep0 maxpacket: 32 [ 378.074727][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'. [ 378.075450][ T5370] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 378.096121][ T5370] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 378.106190][ T5370] usb 5-1: config 0 interface 0 has no altsetting 0 [ 378.115483][ T5370] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 378.124656][ T5370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.132796][ T5370] usb 5-1: Product: syz [ 378.137687][ T5370] usb 5-1: Manufacturer: syz [ 378.142637][ T5370] usb 5-1: SerialNumber: syz [ 378.150046][ T5370] usb 5-1: config 0 descriptor?? [ 378.436784][ T6761] netlink: 'syz.3.654': attribute type 2 has an invalid length. [ 378.445093][ T6761] netlink: 224 bytes leftover after parsing attributes in process `syz.3.654'. [ 378.509493][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.515889][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.564663][ T5370] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 378.978348][ T5370] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 379.279377][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'. [ 379.288534][ T6765] netlink: 60 bytes leftover after parsing attributes in process `syz.1.656'. [ 379.656816][ T5370] usb 5-1: USB disconnect, device number 10 [ 379.945628][ T6783] netlink: 7 bytes leftover after parsing attributes in process `syz.3.664'. [ 380.869081][ T6786] syz.3.664 (6786): drop_caches: 2 [ 381.058366][ T6796] netlink: 'syz.0.667': attribute type 2 has an invalid length. [ 381.066283][ T6796] netlink: 224 bytes leftover after parsing attributes in process `syz.0.667'. [ 381.887129][ T6787] siw: device registration error -23 [ 381.902783][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.665'. [ 382.386231][ T4275] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 383.102078][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 383.111465][ T6815] netlink: 48 bytes leftover after parsing attributes in process `syz.3.673'. [ 383.196211][ T4275] usb 1-1: Using ep0 maxpacket: 32 [ 383.209040][ T4275] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 383.284076][ T4275] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 383.315250][ T4275] usb 1-1: config 0 interface 0 has no altsetting 0 [ 383.365266][ T4275] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 383.564719][ T4275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.577293][ T4275] usb 1-1: Product: syz [ 383.581798][ T4275] usb 1-1: Manufacturer: syz [ 383.589215][ T4275] usb 1-1: SerialNumber: syz [ 383.595566][ T4275] usb 1-1: config 0 descriptor?? [ 384.268530][ T6834] netlink: 7 bytes leftover after parsing attributes in process `syz.3.680'. [ 384.477036][ T6835] syz.3.680 (6835): drop_caches: 2 [ 385.114646][ T4275] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 385.261505][ T6840] netlink: 'syz.1.681': attribute type 2 has an invalid length. [ 385.269296][ T6840] netlink: 224 bytes leftover after parsing attributes in process `syz.1.681'. [ 385.318082][ T4275] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 385.412937][ T4275] gs_usb: probe of 1-1:0.0 failed with error -71 [ 385.424183][ T4275] usb 1-1: USB disconnect, device number 16 [ 385.510490][ T6842] siw: device registration error -23 [ 385.567084][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'. [ 386.898493][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'. [ 386.907848][ T6865] netlink: 48 bytes leftover after parsing attributes in process `syz.1.690'. [ 388.494895][ T6870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.693'. [ 388.506436][ T6870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.693'. [ 389.293520][ T6878] netlink: 7 bytes leftover after parsing attributes in process `syz.4.695'. [ 389.369542][ T6885] netlink: 'syz.1.694': attribute type 2 has an invalid length. [ 389.377732][ T6885] netlink: 224 bytes leftover after parsing attributes in process `syz.1.694'. [ 391.513070][ T6884] syz.4.695 (6884): drop_caches: 2 [ 391.628244][ T6883] siw: device registration error -23 [ 391.634160][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.697'. [ 392.667358][ T4644] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 392.740280][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 392.749513][ T6911] netlink: 48 bytes leftover after parsing attributes in process `syz.1.704'. [ 394.135590][ T6923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.707'. [ 394.146108][ T6923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.707'. [ 394.196180][ T4644] usb 4-1: Using ep0 maxpacket: 32 [ 394.206580][ T4644] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 394.442733][ T4644] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 394.902239][ T6927] netlink: 7 bytes leftover after parsing attributes in process `syz.2.708'. [ 394.917555][ T6928] netlink: 'syz.0.709': attribute type 2 has an invalid length. [ 394.965936][ T6928] netlink: 224 bytes leftover after parsing attributes in process `syz.0.709'. [ 396.914571][ T4644] usb 4-1: config 0 interface 0 has no altsetting 0 [ 396.995263][ T6927] syz.2.708 (6927): drop_caches: 2 [ 397.177819][ T4644] usb 4-1: string descriptor 0 read error: -71 [ 397.184506][ T4644] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 397.310654][ T4644] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.459003][ T4644] usb 4-1: config 0 descriptor?? [ 398.497909][ T4644] usb 4-1: can't set config #0, error -71 [ 398.510847][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'. [ 398.591285][ T4644] usb 4-1: USB disconnect, device number 11 [ 398.895034][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.717'. [ 398.904253][ T6959] netlink: 44 bytes leftover after parsing attributes in process `syz.2.717'. [ 400.097213][ T6968] netlink: 'syz.2.722': attribute type 2 has an invalid length. [ 400.105048][ T6968] netlink: 224 bytes leftover after parsing attributes in process `syz.2.722'. [ 400.198865][ T6971] netlink: 24 bytes leftover after parsing attributes in process `syz.0.721'. [ 400.208947][ T6971] netlink: 24 bytes leftover after parsing attributes in process `syz.0.721'. [ 401.485814][ T6977] netlink: 7 bytes leftover after parsing attributes in process `syz.0.725'. [ 401.628306][ T6981] syz.0.725 (6981): drop_caches: 2 [ 401.697152][ T4644] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 401.986322][ T4644] usb 5-1: Using ep0 maxpacket: 32 [ 401.995463][ T4644] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 402.749325][ T4644] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 402.790856][ T4644] usb 5-1: config 0 interface 0 has no altsetting 0 [ 402.873572][ T4644] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 404.558233][ T4644] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.596301][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 404.598165][ T4644] usb 5-1: Product: syz [ 404.619901][ T4644] usb 5-1: Manufacturer: syz [ 404.659812][ T4644] usb 5-1: SerialNumber: syz [ 404.664604][ T6996] netlink: 44 bytes leftover after parsing attributes in process `syz.0.732'. [ 406.191337][ T4644] usb 5-1: config 0 descriptor?? [ 406.206502][ T4644] usb 5-1: can't set config #0, error -71 [ 406.237422][ T4644] usb 5-1: USB disconnect, device number 11 [ 407.295313][ T7018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.736'. [ 407.306133][ T7018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.736'. [ 408.155285][ T7021] netlink: 'syz.1.738': attribute type 2 has an invalid length. [ 408.163231][ T7021] netlink: 224 bytes leftover after parsing attributes in process `syz.1.738'. [ 409.301804][ T7036] netlink: 7 bytes leftover after parsing attributes in process `syz.4.742'. [ 410.219139][ T7043] syz.4.742 (7043): drop_caches: 2 [ 410.256790][ T4644] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 410.668989][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.747'. [ 410.678090][ T7051] netlink: 44 bytes leftover after parsing attributes in process `syz.2.747'. [ 411.396229][ T4644] usb 2-1: Using ep0 maxpacket: 32 [ 411.409654][ T4644] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 411.505119][ T4644] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 411.561853][ T4644] usb 2-1: config 0 interface 0 has no altsetting 0 [ 413.324223][ T4644] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 413.345173][ T4644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.447209][ T4644] usb 2-1: config 0 descriptor?? [ 413.469697][ T4644] usb 2-1: can't set config #0, error -71 [ 413.597941][ T4644] usb 2-1: USB disconnect, device number 7 [ 414.602376][ T7081] netlink: 'syz.4.754': attribute type 2 has an invalid length. [ 414.610198][ T7081] netlink: 224 bytes leftover after parsing attributes in process `syz.4.754'. [ 417.947585][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.759'. [ 418.380568][ T7100] netlink: 7 bytes leftover after parsing attributes in process `syz.3.760'. [ 418.539405][ T7104] syz.3.760 (7104): drop_caches: 2 [ 418.656169][ T4644] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 419.576334][ T4644] usb 2-1: Using ep0 maxpacket: 32 [ 419.590204][ T4644] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 419.676817][ T4644] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 419.748055][ T4644] usb 2-1: config 0 interface 0 has no altsetting 0 [ 420.054243][ T4644] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 420.138234][ T4644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.147770][ T4644] usb 2-1: Product: syz [ 420.153117][ T4644] usb 2-1: Manufacturer: syz [ 420.158999][ T4644] usb 2-1: SerialNumber: syz [ 420.169592][ T4644] usb 2-1: config 0 descriptor?? [ 420.806518][ T4644] gs_usb 2-1:0.0: Configuring for 99 interfaces [ 421.218149][ T4644] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 421.226604][ T4644] gs_usb: probe of 2-1:0.0 failed with error -71 [ 421.254666][ T4644] usb 2-1: USB disconnect, device number 8 [ 421.273624][ T7120] device vlan0 entered promiscuous mode [ 421.541864][ T7132] netlink: 'syz.4.768': attribute type 2 has an invalid length. [ 421.550477][ T7132] netlink: 224 bytes leftover after parsing attributes in process `syz.4.768'. [ 423.527628][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.775'. [ 426.041514][ T7162] netlink: 7 bytes leftover after parsing attributes in process `syz.2.779'. [ 426.216121][ T7167] syz.2.779 (7167): drop_caches: 2 [ 426.599432][ T7176] netlink: 'syz.2.782': attribute type 2 has an invalid length. [ 426.607540][ T7176] netlink: 224 bytes leftover after parsing attributes in process `syz.2.782'. [ 430.464198][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.790'. [ 431.154788][ T7216] netlink: 7 bytes leftover after parsing attributes in process `syz.4.792'. [ 431.731584][ T7221] syz.4.792 (7221): drop_caches: 2 [ 432.898549][ T7228] netlink: 'syz.3.796': attribute type 2 has an invalid length. [ 432.906616][ T7228] netlink: 224 bytes leftover after parsing attributes in process `syz.3.796'. [ 436.679433][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 439.948549][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.954937][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.755304][ T7287] netlink: 7 bytes leftover after parsing attributes in process `syz.4.813'. [ 441.850209][ T7289] syz.4.813 (7289): drop_caches: 2 [ 442.771003][ T7288] netlink: 'syz.3.812': attribute type 2 has an invalid length. [ 442.779001][ T7288] netlink: 224 bytes leftover after parsing attributes in process `syz.3.812'. [ 444.967042][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.820'. [ 447.712499][ T7328] netlink: 7 bytes leftover after parsing attributes in process `syz.0.825'. [ 447.861193][ T7331] syz.0.825 (7331): drop_caches: 2 [ 455.347459][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'. [ 455.743374][ T7370] netlink: 7 bytes leftover after parsing attributes in process `syz.3.839'. [ 455.935467][ T7375] syz.3.839 (7375): drop_caches: 2 [ 456.683991][ T7380] netlink: 'syz.1.830': attribute type 2 has an invalid length. [ 456.692588][ T7380] netlink: 224 bytes leftover after parsing attributes in process `syz.1.830'. [ 459.661076][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.847'. [ 463.431037][ T7414] netlink: 'syz.4.851': attribute type 2 has an invalid length. [ 463.438879][ T7414] netlink: 224 bytes leftover after parsing attributes in process `syz.4.851'. [ 464.252029][ T7415] netlink: 7 bytes leftover after parsing attributes in process `syz.1.850'. [ 465.428578][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 465.446939][ T7422] netlink: 'syz.1.850': attribute type 1 has an invalid length. [ 465.447322][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 465.463577][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 465.472229][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 465.480542][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 465.489116][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 465.598502][ T7422] 8021q: adding VLAN 0 to HW filter on device bond2 [ 466.520467][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'. [ 466.546813][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'. [ 466.699757][ T7422] syz.1.850 (7422): drop_caches: 2 [ 467.537058][ T47] Bluetooth: hci4: command 0x0409 tx timeout [ 468.036481][ T7416] lo speed is unknown, defaulting to 1000 [ 468.130907][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.858'. [ 469.002375][ T7441] lo speed is unknown, defaulting to 1000 [ 469.626078][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 472.710815][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 472.952500][ T7467] netlink: 'syz.0.864': attribute type 2 has an invalid length. [ 472.960393][ T7467] netlink: 224 bytes leftover after parsing attributes in process `syz.0.864'. [ 473.743324][ T7416] chnl_net:caif_netlink_parms(): no params data found [ 473.997010][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.004180][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.022517][ T7416] device bridge_slave_0 entered promiscuous mode [ 474.075822][ T7416] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.736101][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 474.848843][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.857203][ T7416] device bridge_slave_1 entered promiscuous mode [ 474.890586][ T7416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.902631][ T7416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.931021][ T7416] team0: Port device team_slave_0 added [ 474.940564][ T7416] team0: Port device team_slave_1 added [ 474.962208][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.969268][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.995863][ T7416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.038122][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.045109][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.061295][ T7480] netlink: 7 bytes leftover after parsing attributes in process `syz.4.867'. [ 475.217361][ T7416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.233196][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.868'. [ 475.418875][ T7483] netlink: 'syz.4.867': attribute type 1 has an invalid length. [ 476.111781][ T7488] syz.4.867 (7488): drop_caches: 2 [ 476.135652][ T7483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 476.146611][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'. [ 476.155488][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.867'. [ 477.540593][ T7416] device hsr_slave_0 entered promiscuous mode [ 477.560896][ T7497] fuse: Bad value for 'fd' [ 477.601621][ T7416] device hsr_slave_1 entered promiscuous mode [ 478.770919][ T7416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.786056][ T7416] Cannot create hsr debugfs directory [ 480.984198][ T7511] netlink: 'syz.0.874': attribute type 2 has an invalid length. [ 480.992094][ T7511] netlink: 224 bytes leftover after parsing attributes in process `syz.0.874'. [ 481.405895][ T7515] lo speed is unknown, defaulting to 1000 [ 481.567178][ T7416] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 481.658464][ T7416] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 481.753492][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.879'. [ 482.528373][ T7416] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 482.772084][ T7416] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 482.980473][ T7535] netlink: 7 bytes leftover after parsing attributes in process `syz.4.880'. [ 483.009746][ T7531] netlink: 'syz.4.880': attribute type 1 has an invalid length. [ 483.066897][ T7531] 8021q: adding VLAN 0 to HW filter on device bond2 [ 483.089690][ T7541] fuse: Bad value for 'fd' [ 483.295178][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.880'. [ 483.409012][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 483.951602][ T7544] syz.4.880 (7544): drop_caches: 2 [ 484.465539][ T7416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.485296][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 484.546393][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 484.617562][ T7416] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.631119][ T7553] netlink: 'syz.4.885': attribute type 2 has an invalid length. [ 484.639133][ T7553] netlink: 224 bytes leftover after parsing attributes in process `syz.4.885'. [ 485.020438][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 485.111710][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 485.222538][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.229782][ T6163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.475500][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 485.548728][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 485.574106][ T7561] ubi: mtd0 is already attached to ubi16 [ 485.591165][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 485.615322][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.622562][ T6163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.642015][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 485.654691][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 485.671776][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 485.680057][ T7558] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 487.162696][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 487.211978][ T7563] lo speed is unknown, defaulting to 1000 [ 487.212129][ T7561] netlink: 'syz.3.873': attribute type 10 has an invalid length. [ 487.226446][ T7561] netlink: 40 bytes leftover after parsing attributes in process `syz.3.873'. [ 487.245255][ T7561] bridge0: port 3(ipvlan1) entered blocking state [ 487.260142][ T7561] bridge0: port 3(ipvlan1) entered disabled state [ 487.316105][ T7558] usb 1-1: Using ep0 maxpacket: 8 [ 487.325692][ T7558] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 487.376549][ T7558] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 487.423743][ T7558] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.546691][ T7558] usb 1-1: config 0 descriptor?? [ 487.546735][ T7561] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 487.594880][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 487.639517][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 487.722281][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 487.843217][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 487.875271][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 487.985574][ T7558] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 488.035207][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 488.098494][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 488.197643][ T7416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 488.418897][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'. [ 488.794157][ C1] iowarrior 1-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 488.807920][ T4352] usb 1-1: USB disconnect, device number 17 [ 490.399224][ T7416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.408249][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 490.415880][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 491.485719][ T7594] netlink: 7 bytes leftover after parsing attributes in process `syz.3.894'. [ 491.533668][ T7594] netlink: 'syz.3.894': attribute type 1 has an invalid length. [ 491.652002][ T7594] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.660248][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.894'. [ 491.669842][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 491.817626][ T7607] syz.3.894 (7607): drop_caches: 2 [ 492.423799][ T7608] netlink: 'syz.1.895': attribute type 2 has an invalid length. [ 492.464439][ T7608] netlink: 224 bytes leftover after parsing attributes in process `syz.1.895'. [ 492.590023][ T7604] siw: device registration error -23 [ 492.606039][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 494.968196][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.899'. [ 495.476977][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 495.489514][ T7637] ubi: mtd0 is already attached to ubi16 [ 495.510022][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 495.550027][ T7637] netlink: 'syz.3.900': attribute type 10 has an invalid length. [ 495.561606][ T7637] netlink: 40 bytes leftover after parsing attributes in process `syz.3.900'. [ 495.770599][ T4314] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 496.176174][ T4314] usb 2-1: Using ep0 maxpacket: 8 [ 496.378214][ T7637] bridge0: port 3(ipvlan1) entered blocking state [ 496.392004][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 496.420260][ T7637] bridge0: port 3(ipvlan1) entered disabled state [ 496.460215][ T4314] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 496.502198][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.536132][ T7637] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 496.580725][ T4314] usb 2-1: config 0 descriptor?? [ 496.613877][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 496.633160][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 496.654822][ T7416] device veth0_vlan entered promiscuous mode [ 496.686280][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 496.737632][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 496.762864][ T7646] 9pnet_virtio: no channels available for device syz [ 496.838225][ T4314] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 496.862824][ T7416] device veth1_vlan entered promiscuous mode [ 497.329770][ T4314] usb 2-1: USB disconnect, device number 9 [ 497.590735][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 497.626567][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 497.788427][ T7651] ================================================================== [ 497.796541][ T7651] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4f/0xf0 [ 497.803951][ T7651] Write of size 4 at addr ffff888028e231a0 by task syz.4.906/7651 [ 497.811767][ T7651] [ 497.814112][ T7651] CPU: 1 PID: 7651 Comm: syz.4.906 Not tainted syzkaller #0 [ 497.821500][ T7651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 497.831586][ T7651] Call Trace: [ 497.834878][ T7651] [ 497.837853][ T7651] dump_stack_lvl+0x188/0x24e [ 497.842553][ T7651] ? __lock_acquire+0x7d10/0x7d10 [ 497.847605][ T7651] ? show_regs_print_info+0x12/0x12 [ 497.852833][ T7651] ? load_image+0x400/0x400 [ 497.857366][ T7651] ? __virt_addr_valid+0x465/0x540 [ 497.862501][ T7651] ? try_module_get+0x4f/0xf0 [ 497.867189][ T7651] print_report+0xa8/0x210 [ 497.871629][ T7651] kasan_report+0x10b/0x140 [ 497.876153][ T7651] ? try_module_get+0x4f/0xf0 [ 497.880844][ T7651] kasan_check_range+0x235/0x290 [ 497.885806][ T7651] try_module_get+0x4f/0xf0 [ 497.890330][ T7651] dvb_device_open+0xf1/0x370 [ 497.895038][ T7651] ? do_raw_spin_unlock+0x11d/0x230 [ 497.900956][ T7651] chrdev_open+0x5c5/0x6a0 [ 497.906523][ T7651] ? cd_forget+0x160/0x160 [ 497.910960][ T7651] ? fsnotify_perm+0x39b/0x550 [ 497.915756][ T7651] ? cd_forget+0x160/0x160 [ 497.920186][ T7651] do_dentry_open+0x7e9/0x10d0 [ 497.924971][ T7651] path_openat+0x2635/0x2ee0 [ 497.929600][ T7651] ? verify_lock_unused+0x140/0x140 [ 497.934833][ T7651] ? do_syscall_64+0x4c/0xa0 [ 497.939562][ T7651] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.945672][ T7651] ? do_filp_open+0x430/0x430 [ 497.950457][ T7651] do_filp_open+0x1f1/0x430 [ 497.954970][ T7651] ? vfs_tmpfile+0x480/0x480 [ 497.959589][ T7651] ? _raw_spin_unlock+0x24/0x40 [ 497.964548][ T7651] ? alloc_fd+0x58f/0x630 [ 497.968998][ T7651] do_sys_openat2+0x150/0x4b0 [ 497.973704][ T7651] ? do_sys_open+0xe0/0xe0 [ 497.978137][ T7651] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 497.984221][ T7651] ? lock_chain_count+0x20/0x20 [ 497.989190][ T7651] __x64_sys_openat+0x135/0x160 [ 497.994063][ T7651] do_syscall_64+0x4c/0xa0 [ 497.998498][ T7651] ? clear_bhb_loop+0x60/0xb0 [ 498.003194][ T7651] ? clear_bhb_loop+0x60/0xb0 [ 498.007885][ T7651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 498.013795][ T7651] RIP: 0033:0x7fc31675d68e [ 498.018232][ T7651] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 498.037857][ T7651] RSP: 002b:00007fc31768bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 498.046266][ T7651] RAX: ffffffffffffffda RBX: 00007fc31768c6c0 RCX: 00007fc31675d68e [ 498.054228][ T7651] RDX: 0000000000040002 RSI: 00007fc31768bc00 RDI: ffffffffffffff9c [ 498.062198][ T7651] RBP: 00007fc31768bc00 R08: 0000000000000000 R09: 0000000000000000 [ 498.070160][ T7651] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 498.078120][ T7651] R13: 00007fc316a16218 R14: 00007fc316a16180 R15: 00007ffdccbe8948 [ 498.086084][ T7651] [ 498.089090][ T7651] [ 498.091406][ T7651] Allocated by task 1: [ 498.095452][ T7651] kasan_set_track+0x4b/0x70 [ 498.100035][ T7651] __kasan_kmalloc+0x8e/0xa0 [ 498.104622][ T7651] dvb_register_device+0x311/0x2150 [ 498.109807][ T7651] dvb_dmxdev_init+0x2c5/0x420 [ 498.114557][ T7651] vidtv_bridge_probe+0xb56/0xf70 [ 498.119569][ T7651] platform_probe+0x137/0x1c0 [ 498.124229][ T7651] really_probe+0x2aa/0xc70 [ 498.128720][ T7651] __driver_probe_device+0x18c/0x330 [ 498.133988][ T7651] driver_probe_device+0x4f/0x420 [ 498.138997][ T7651] __driver_attach+0x44a/0x6e0 [ 498.143744][ T7651] bus_for_each_dev+0x182/0x1f0 [ 498.148581][ T7651] bus_add_driver+0x30a/0x5a0 [ 498.153253][ T7651] driver_register+0x32d/0x430 [ 498.158121][ T7651] vidtv_bridge_init+0x39/0x67 [ 498.162915][ T7651] do_one_initcall+0x26a/0x840 [ 498.167774][ T7651] do_initcall_level+0x137/0x1e4 [ 498.172698][ T7651] do_initcalls+0x4b/0x8a [ 498.177030][ T7651] kernel_init_freeable+0x415/0x5be [ 498.182222][ T7651] kernel_init+0x19/0x1b0 [ 498.186624][ T7651] ret_from_fork+0x1f/0x30 [ 498.191023][ T7651] [ 498.193341][ T7651] The buggy address belongs to the object at ffff888028e23000 [ 498.193341][ T7651] which belongs to the cache kmalloc-256 of size 256 [ 498.207484][ T7651] The buggy address is located 160 bytes to the right of [ 498.207484][ T7651] 256-byte region [ffff888028e23000, ffff888028e23100) [ 498.221267][ T7651] [ 498.223572][ T7651] The buggy address belongs to the physical page: [ 498.229960][ T7651] page:ffffea0000a38880 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28e22 [ 498.240095][ T7651] head:ffffea0000a38880 order:1 compound_mapcount:0 compound_pincount:0 [ 498.248590][ T7651] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 498.256663][ T7651] raw: 00fff00000010200 ffffea00007bff00 dead000000000004 ffff888017441b40 [ 498.265505][ T7651] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 498.274084][ T7651] page dumped because: kasan: bad access detected [ 498.280488][ T7651] page_owner tracks the page as allocated [ 498.286287][ T7651] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 9405231330, free_ts 0 [ 498.306371][ T7651] post_alloc_hook+0x173/0x1a0 [ 498.311129][ T7651] get_page_from_freelist+0x1a1e/0x1ab0 [ 498.316661][ T7651] __alloc_pages+0x1ec/0x4f0 [ 498.321331][ T7651] alloc_slab_page+0x5d/0x160 [ 498.326013][ T7651] new_slab+0x87/0x2c0 [ 498.330122][ T7651] ___slab_alloc+0xbc6/0x1240 [ 498.334783][ T7651] __kmem_cache_alloc_node+0x1a0/0x260 [ 498.340237][ T7651] kmalloc_trace+0x26/0xe0 [ 498.344663][ T7651] set_kthread_struct+0xb3/0x1f0 [ 498.349590][ T7651] copy_process+0x1339/0x4030 [ 498.354252][ T7651] kernel_clone+0x24b/0x900 [ 498.358735][ T7651] kernel_thread+0x118/0x180 [ 498.363313][ T7651] kthreadd+0x555/0x700 [ 498.367463][ T7651] ret_from_fork+0x1f/0x30 [ 498.371864][ T7651] page_owner free stack trace missing [ 498.377225][ T7651] [ 498.379529][ T7651] Memory state around the buggy address: [ 498.385154][ T7651] ffff888028e23080: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 498.393197][ T7651] ffff888028e23100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 498.401241][ T7651] >ffff888028e23180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 498.409285][ T7651] ^ [ 498.414382][ T7651] ffff888028e23200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.422424][ T7651] ffff888028e23280: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 498.430463][ T7651] ================================================================== [ 498.439539][ T7651] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 498.446752][ T7651] CPU: 1 PID: 7651 Comm: syz.4.906 Not tainted syzkaller #0 [ 498.454039][ T7651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 498.464189][ T7651] Call Trace: [ 498.467471][ T7651] [ 498.470411][ T7651] dump_stack_lvl+0x188/0x24e [ 498.475106][ T7651] ? memcpy+0x3c/0x60 [ 498.479100][ T7651] ? show_regs_print_info+0x12/0x12 [ 498.484313][ T7651] ? load_image+0x400/0x400 [ 498.488905][ T7651] panic+0x2e5/0x730 [ 498.492812][ T7651] ? bpf_jit_dump+0xd0/0xd0 [ 498.497536][ T7651] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 498.503516][ T7651] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 498.509434][ T7651] ? _raw_spin_unlock+0x40/0x40 [ 498.514385][ T7651] ? print_memory_metadata+0x314/0x400 [ 498.519862][ T7651] check_panic_on_warn+0x80/0xa0 [ 498.524900][ T7651] ? try_module_get+0x4f/0xf0 [ 498.529606][ T7651] end_report+0x66/0x110 [ 498.533868][ T7651] kasan_report+0x118/0x140 [ 498.538475][ T7651] ? try_module_get+0x4f/0xf0 [ 498.543160][ T7651] kasan_check_range+0x235/0x290 [ 498.548127][ T7651] try_module_get+0x4f/0xf0 [ 498.552646][ T7651] dvb_device_open+0xf1/0x370 [ 498.557345][ T7651] ? do_raw_spin_unlock+0x11d/0x230 [ 498.562556][ T7651] chrdev_open+0x5c5/0x6a0 [ 498.567005][ T7651] ? cd_forget+0x160/0x160 [ 498.571512][ T7651] ? fsnotify_perm+0x39b/0x550 [ 498.576643][ T7651] ? cd_forget+0x160/0x160 [ 498.581191][ T7651] do_dentry_open+0x7e9/0x10d0 [ 498.586053][ T7651] path_openat+0x2635/0x2ee0 [ 498.590727][ T7651] ? verify_lock_unused+0x140/0x140 [ 498.596015][ T7651] ? do_syscall_64+0x4c/0xa0 [ 498.601276][ T7651] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 498.607361][ T7651] ? do_filp_open+0x430/0x430 [ 498.612052][ T7651] do_filp_open+0x1f1/0x430 [ 498.616656][ T7651] ? vfs_tmpfile+0x480/0x480 [ 498.621265][ T7651] ? _raw_spin_unlock+0x24/0x40 [ 498.626127][ T7651] ? alloc_fd+0x58f/0x630 [ 498.630469][ T7651] do_sys_openat2+0x150/0x4b0 [ 498.635171][ T7651] ? do_sys_open+0xe0/0xe0 [ 498.639604][ T7651] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 498.645605][ T7651] ? lock_chain_count+0x20/0x20 [ 498.650471][ T7651] __x64_sys_openat+0x135/0x160 [ 498.655427][ T7651] do_syscall_64+0x4c/0xa0 [ 498.659858][ T7651] ? clear_bhb_loop+0x60/0xb0 [ 498.664584][ T7651] ? clear_bhb_loop+0x60/0xb0 [ 498.669274][ T7651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 498.675180][ T7651] RIP: 0033:0x7fc31675d68e [ 498.679602][ T7651] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 498.699304][ T7651] RSP: 002b:00007fc31768bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 498.707729][ T7651] RAX: ffffffffffffffda RBX: 00007fc31768c6c0 RCX: 00007fc31675d68e [ 498.715703][ T7651] RDX: 0000000000040002 RSI: 00007fc31768bc00 RDI: ffffffffffffff9c [ 498.723680][ T7651] RBP: 00007fc31768bc00 R08: 0000000000000000 R09: 0000000000000000 [ 498.731665][ T7651] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 498.739648][ T7651] R13: 00007fc316a16218 R14: 00007fc316a16180 R15: 00007ffdccbe8948 [ 498.747633][ T7651] [ 498.751007][ T7651] Kernel Offset: disabled [ 498.755319][ T7651] Rebooting in 86400 seconds..