last executing test programs: 3m15.754899682s ago: executing program 0 (id=792): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78dea", 0x3e}, {&(0x7f00000006c0)="080c0434", 0x4}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e4", 0x7c}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee0000002"], 0x1a0}, 0x41) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) pwritev2(r0, &(0x7f0000000fc0)=[{&(0x7f0000000980)}, {&(0x7f0000000a80)="b29781546141f21a2755c8fa29603a348761d31f831fef75469f10964051e3d3782e47188cfbceec02ae44894a18e45f98157d06eb454386644911cbdeb622556cb11262b059d48746a03f", 0x4b}, {&(0x7f0000000b40)="63c8759628d8e9ed614413e247d386b3096fed276d332309d68986d3f7af05943ab75c034167c6a07aa6ee89716d07346fd52cf6dcd247fac2c219747ba584e50d2aeff39014e715dc321d1ed2de88714dab5f067a57ea0df617acc735ec0eb66689602f2cb3bebaa0cd78e47967a505e68b4afbbe8e76e8f394bffc6de487be94f4914a4fd4a1e7683c4c6040c0ed2fe7d607bebe1d366397de7ee0acb7c32294ff870ec8027d59c7d95b8047e8bccf89e367f9c151e01362f97576c48a67487924a739c5e34ccc98bad5d3bbd878997ae40779fd67912c2befdca64f73713144", 0xe1}, {&(0x7f0000000c40)="e2b95701f4fec49beae0fb2a8854201e807aa612fa70329347e64f01351a1c3b2bfd01c7d046dea576cd758d6f2047fed8cdc3d22410b3833fd90703d03d2845f4865b59db3650a8b42f740eb436fd7d8344eec55eec9c2623d86853471d429182b046d4240ab3352026200792849ba97be338b279bb0132e93c6c491b2f9555644c7597be81", 0x86}, {0x0}, {&(0x7f0000000d40)="52d51bbbf61822978f30974c2fe603d82c8af1451ae6146edc6a19b8b57d245e42cf0d24b12866bb4ef591015ffab441dae4418f908983227cb890d9a92aa47a80c4f2608781cedaba44d59f547690c62454385a79360f4e7768f713", 0x5c}, {&(0x7f0000000dc0)="486efb6d5b0d39", 0x7}, {&(0x7f0000000e00)="30ceabe93a5c632f420ed95afc616e63cee2ebe833276a46d5782dd3c9f0ffe05bbe0f4ec820db268536744353119298e683897c5e2d45255690ca", 0x3b}, {&(0x7f0000000e40)="ab55d7618fa466ee4e1463e3ba5004661251354ae8ca2414e188099e6580688c14c7898bbb2243c00aa838d72acb524979451966aacd9c650af7e613897a9798e89bb6306a6d890bbff61afa4c42b43c592a94b74e539e2cedd3498f6e862e85be45d165dfbbf2f9384bdb4789c32b87f7c3860c69942aa8c6f2a00597c9fff43e5ecffb2da0ca5a567c61a1ebac2275121b5570e8ec6cf0cbeea1192d9e46ef0d83ace4449763ca72f3643e5a058c685a25b60264153c6a248521c21ce238cb03dfc2b8ccb47b724494cf3b2d483d20d13efaeeebe14cd23a", 0xd9}, {&(0x7f0000000f40)="96e56842fa01c6c71c61eaa252d367d91c10ef622b1a519d49c0db8ccc3639d2ac66d648f7e71af811684308b8c4b2ced4c820d192dd2bbab3562c82495289caacc66fadde6be27c0762016b49883f50deacd9a3be661ca3a809bd1239987a7a3483e5f89966d2c82cf22ff1640d750ad778", 0x72}], 0xa, 0x2, 0xd, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000002c0)={0x1, 0x7, 0x8, &(0x7f0000000180)={0x5, "1d27f0db2e1f25eff995475188afe0ebe9bab69516a5e88a718dca33021b22b650"}}) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x5) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m13.625572446s ago: executing program 0 (id=796): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) io_uring_enter(0xffffffffffffffff, 0x4c5f, 0x2915, 0x2, &(0x7f0000000040)={[0x1000]}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 3m5.062407015s ago: executing program 0 (id=811): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m3.904227608s ago: executing program 0 (id=814): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) io_uring_enter(0xffffffffffffffff, 0x4c5f, 0x2915, 0x2, &(0x7f0000000040)={[0x1000]}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 3m2.84489459s ago: executing program 0 (id=817): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002) socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800) 2m59.994501462s ago: executing program 0 (id=822): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2c) getdents64(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") setxattr$incfs_metadata(&(0x7f0000000300)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$invalidate(0x15, r5) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r3, 0x0) 2m44.104756714s ago: executing program 32 (id=822): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2c) getdents64(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") setxattr$incfs_metadata(&(0x7f0000000300)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$invalidate(0x15, r5) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r3, 0x0) 24.628936736s ago: executing program 1 (id=1127): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f00000000c0)=0x2, 0x4) r1 = syz_io_uring_setup(0xd7, &(0x7f0000000280)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) r2 = semget$private(0x0, 0x4000000009, 0x0) semop(r2, &(0x7f0000000080)=[{0x0, 0xec7b, 0x1000}], 0x1) r3 = socket(0xa, 0x801, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) getsockopt(r3, 0x0, 0x14, 0x0, &(0x7f0000001ffc)) semtimedop(r2, &(0x7f00000001c0)=[{0x3, 0x5903, 0x1000}, {0x3, 0x0, 0x1000}], 0x2, &(0x7f0000000200)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f0000000380)=@v3={0x3000000, [{0x80000001}, {0xff, 0xffffffd0}], r5}, 0x18, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{0x0}], 0x1, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc048aeca, &(0x7f0000000100)={0x7, 0x0, [{0x0, 0x0, 0x7}, {0x400000b3, 0x0, 0x1}, {0x9bd, 0x0, 0x66}, {0x9a7, 0x0, 0x2000000f0a}, {0x809, 0x0, 0x3}, {0x879, 0x0, 0x8}, {0xada}]}) 22.584264559s ago: executing program 1 (id=1133): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='-\x00'/20, @ANYRES32, @ANYBLOB="040000000300736404000000000000000000001b4f4a990000000000"], 0x50) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='//\xf2/\x06\b\xa30\\\x00\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0) io_submit(r3, 0x0, &(0x7f00000006c0)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000180)={0x97, 0x7}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x64a9, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x20004) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010500000003001c002525000000"], 0x14}}, 0x6048800) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x20000000, 0x1, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f06888102006853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0af2205c4cdfb146f1fd8bb6363d10f70da60fd53ded22c87eb2be01004a460573c33424b437bb192c1d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f6000100000282806d15a000df00"}) 21.331497533s ago: executing program 1 (id=1137): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 15.747087565s ago: executing program 1 (id=1150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x82, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0xfffffffc, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x7, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x7ff800, 0x800, 0x300000, 0x9f, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x801, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0x10000000, 0x3, 0x379, 0x9, 0xe, 0x1ff, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0xc, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x4, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x1, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x3, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x880, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0xa, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x8], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x10001, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x1000, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x2000008, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x5, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0x7ff, 0xf, 0x133, 0x6]}, 0x45c) openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040), 0x4) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8982, &(0x7f00000000c0)={0x7, 'vlan1\x00', {0xe}, 0x5}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0000000711095000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0xc6, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaa230180c200000088a8070081"], 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x5c388262, 0x4) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000000100)={0x6, 0x8}) ioctl$DRM_IOCTL_MODE_CURSOR2(r7, 0xc02464bb, &(0x7f0000000040)={0x2, 0x0, 0x4, 0x7, 0x5b45, 0xbb, 0x823, 0x8ae, 0xf81e}) 15.672997106s ago: executing program 3 (id=1152): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0x0, 0x0, 0x3}, {0x6}]}, 0x10) clock_adjtime(0x0, &(0x7f0000000040)={0xd54}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x3580) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x1, 0x0, 0x4}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000001c0)={'s526\x00', [0xcf7, 0x20, 0xfffffffd, 0x4000, 0x7, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x7, 0x4, 0x1, 0x8, 0x101, 0xf7fffffe, 0x1ff, 0x2, 0x0, 0x10000008, 0x927, 0xeb96, 0x8401, 0x40d, 0xe69, 0x81, 0x10008, 0x3, 0x1cdc, 0xfbfffffa]}) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000440), &(0x7f00000003c0), &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x40) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4e26, @remote}, {0x2, 0x4e21, @broadcast}, 0x4, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0xe8e, 0x7}) 15.482386738s ago: executing program 5 (id=1153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 14.754837216s ago: executing program 4 (id=1154): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 14.738159496s ago: executing program 5 (id=1155): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES8=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x380, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000019280)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f000052f000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 13.826313756s ago: executing program 2 (id=1156): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='-\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000300736404000000000000000000001b4f4a990000000000"], 0x50) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='//\xf2/\x06\b\xa30\\\x00\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0) io_submit(r3, 0x0, &(0x7f00000006c0)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000180)={0x97, 0x7}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x64a9, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x20004) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010500000003001c002525000000"], 0x14}}, 0x6048800) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x20000000, 0x1, "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"}) 13.812375147s ago: executing program 4 (id=1157): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x20004805) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3) fsopen(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) syz_open_pts(r2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x80000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x4, r6, 0x80000}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000140)={0xe000001b}) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004044) 13.785219197s ago: executing program 3 (id=1158): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x20004805) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3) fsopen(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) syz_open_pts(r2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0xe000001b}) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004044) 10.745962681s ago: executing program 3 (id=1159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) r1 = fsmount(0xffffffffffffffff, 0x1, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x80) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x45b81976}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xca}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2de21be}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4800}, 0x850) 10.742497781s ago: executing program 4 (id=1160): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x20004805) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3) fsopen(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) syz_open_pts(r2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x80000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x4, r6, 0x80000}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000140)={0xe000001b}) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004044) 10.586607632s ago: executing program 5 (id=1161): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 9.254048807s ago: executing program 2 (id=1162): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000300736404000000000000000000001b4f4a990000000000"], 0x50) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='//\xf2/\x06\b\xa30\\\x00\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0) io_submit(r3, 0x0, &(0x7f00000006c0)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000180)={0x97, 0x7}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x64a9, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x20004) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010500000003001c002525000000"], 0x14}}, 0x6048800) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x20000000, 0x1, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f06888102006853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0af2205c4cdfb146f1fd8bb6363d10f70da60fd53ded22c87eb2be01004a460573c33424b437bb192c1d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f6000100000282806d15a000df00"}) 9.225134878s ago: executing program 4 (id=1163): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x20004805) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3) fsopen(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) syz_open_pts(r2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x80000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x4, r6, 0x80000}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000140)={0xe000001b}) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004044) 9.193777988s ago: executing program 5 (id=1164): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000640)='\xcd\xff\xea\x1f\x02\x00E\x88-\xb0\xbc`(\xe8\x92\xe9\xf9\xd0\x803\x05\x00R\xac\x15\xfb\x8e\x7fx,\x9c\x00\x00\x00\x90\xc7\x11U\xdcd\\\xdc\x1b+\tq\xf4\xbe\x99\xd6\x11;\x9b\xc4\xad\xf73|J\x96\xf4L\xfb\xf2\xba\xe5\xdd0 }\x9bdq\xa9X\xed\xef\xf2\t\xafN\x80\xe2\x14\xbc\xc3Le\xe2p.&\x00\x10N\xe6\xd5\xfb]\xe4\x9a\x83FS\xc4&\xf3T\xa8\x8b\xb5L\xafx\x9cco&?\xb1\x95?z\xd3\xdb.7\xc1\xc8b\xe9|\xaaM\x04+*\x18\x86!:\x7fp\xf1\xacsPxx \xf3\x14w\xb6\x8e\xae\xa3\x11\x02\xd0N\xfcu\xc7\xb0\nr\x95l\xc7\xbc\x0e;\xcb\xfbn\x03\x935\xfb\xf8Z\xd0V-,\xf1\xea\r\xef\xfe_\xee\xb1\xc0\x06\xbegmU_*\xd7\x1f\x00'/219, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x60405, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r3, 0x89f2, &(0x7f00000011c0)={0x6, 0xffff, 0x0, 0xd, 0x0, "5dee000000594000"}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000001640)=[{&(0x7f00000000c0)="d2", 0x1}], 0x1}}], 0x1, 0x8080) epoll_create(0x7e) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xd, 0x80000002}, 0x0, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x3, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a00)="1b0ea417", 0x4}], 0x1}, 0x800) sendfile(r0, r1, 0x0, 0x8000fb00) 6.459954778s ago: executing program 4 (id=1165): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) r1 = fsmount(0xffffffffffffffff, 0x1, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, 0x0, 0x80) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x45b81976}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xca}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2de21be}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4800}, 0x850) 6.438531268s ago: executing program 2 (id=1166): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78dea", 0x3e}, {&(0x7f00000006c0)="080c0434", 0x4}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e4", 0x7c}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff"], 0x1a0}, 0x41) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) pwritev2(r0, &(0x7f0000000fc0)=[{&(0x7f0000000980)}, {0x0}, {&(0x7f0000000b40)="63c8759628d8e9ed614413e247d386b3096fed276d332309d68986d3f7af05943ab75c034167c6a07aa6ee89716d07346fd52cf6dcd247fac2c219747ba584e50d2aeff39014e715dc321d1ed2de88714dab5f067a57ea0df617acc735ec0eb66689602f2cb3bebaa0cd78e47967a505e68b4afbbe8e76e8f394bffc6de487be94f4914a4fd4a1e7683c4c6040c0ed2fe7d607bebe1d366397de7ee0acb7c32294ff870ec8027d59c7d95b8047e8bccf89e367f9c151e01362f97576c48a67487924a739c5e34ccc98bad5d3bbd878997ae40779fd67912c2befdca64f73713144ec7678", 0xe4}, {&(0x7f0000000c40)="e2b95701f4fec49beae0fb2a8854201e807aa612fa70329347e64f01351a1c3b2bfd01c7d046dea576cd758d6f2047fed8cdc3d22410b3833fd90703d03d2845f4865b59db3650a8b42f740eb436fd7d8344eec55eec9c2623d86853471d429182b046d4240ab3352026200792849ba97be338b279bb0132e93c6c491b2f9555644c7597be81", 0x86}, {0x0}, {&(0x7f0000000d40)="52d51bbbf61822978f30974c2fe603d82c8af1451ae6146edc6a19b8b57d245e42cf0d24b12866bb4ef591015ffab441dae4418f908983227cb890d9a92aa47a80c4f2608781cedaba44d59f547690c62454385a79360f4e7768f713", 0x5c}, {&(0x7f0000000dc0)="486efb6d5b0d39", 0x7}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)="ab55d7618fa466ee4e1463e3ba5004661251354ae8ca2414e188099e6580688c14c7898bbb2243c00aa838d72acb524979451966aacd9c650af7e613897a9798e89bb6306a6d890bbff61afa4c42b43c592a94b74e539e2cedd3498f6e862e85be45d165dfbbf2f9384bdb4789c32b87f7c3860c69942aa8c6f2a00597c9fff43e5ecffb2da0ca5a567c61a1ebac2275121b5570e8ec6cf0cbeea1192d9e46ef0d83ace4449763ca72f3643e5a058c685a25b60264153c6a248521c21ce238cb03dfc2b8ccb47b724494cf3b2d483d20d13efaeeebe14cd23a", 0xd9}, {&(0x7f0000000f40)="96e56842fa01c6c71c61eaa252d367d91c10ef622b1a519d49c0db8ccc3639d2ac66d648f7e71af811684308b8c4b2ced4c820d192dd2bbab3562c82495289caacc66fadde6be27c0762016b49883f50deacd9a3be661ca3a809bd1239987a7a3483e5f89966d2c82cf22ff1640d750ad778", 0x72}], 0xa, 0x2, 0xd, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000002c0)={0x1, 0x7, 0x8, &(0x7f0000000180)={0x5, "1d27f0db2e1f25eff995475188afe0ebe9bab69516a5e88a718dca33021b22b650"}}) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x5) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.373543769s ago: executing program 1 (id=1167): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6.125976522s ago: executing program 5 (id=1168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.057483813s ago: executing program 3 (id=1169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r3) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffe4, 0xb}, {0xfff3, 0x7}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.623558998s ago: executing program 3 (id=1170): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20000000) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$kcm(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0xffffffff, 0x4, 0xfff, 0x2530, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x7}, 0x50) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) getrlimit(0x8, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) socket$nl_rdma(0x10, 0x3, 0x14) 3.776615978s ago: executing program 2 (id=1171): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.800848159s ago: executing program 1 (id=1172): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="ec0500000000000061106c000000000000009500000000008000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xf97f, 0x400, 0x1, 0x9}, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) syz_genetlink_get_family_id$team(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044040}, 0x24008040) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xffffffffffffffff, 0x3a, 'allow_other', 0x3a, '', 0x3a, './cgroup.cpu/cpuset.cpus', 0x3a, [0x46, 0x46]}, 0x45) r2 = syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000004e40)={0xff, 0x8, 0xfffc, 0x0, "4d512c91002a495067614268710cdcd3f82acf5a890400000000000000fbf29c"}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) 2.65568799s ago: executing program 2 (id=1173): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x20004805) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3) fsopen(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) syz_open_pts(r2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0xe000001b}) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004044) 2.474858963s ago: executing program 5 (id=1174): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='-\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000300736404000000000000000000001b4f4a990000000000"], 0x50) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='//\xf2/\x06\b\xa30\\\x00\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0) io_submit(r3, 0x0, &(0x7f00000006c0)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000180)={0x97, 0x7}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x64a9, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x20004) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010500000003001c002525000000"], 0x14}}, 0x6048800) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x20000000, 0x1, "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"}) 799.795141ms ago: executing program 3 (id=1175): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) r1 = fsmount(0xffffffffffffffff, 0x1, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf25140000000c0007800800020000ea"], 0x20}}, 0x80) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x45b81976}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xca}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2de21be}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4800}, 0x850) 431.014685ms ago: executing program 4 (id=1176): socket$packet(0x11, 0x3, 0x300) r0 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) membarrier(0x2, 0x0) io_uring_setup(0x30ab, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r0}) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x2b, '\x00', @buffer={"010d1de90c6171360aaf4716308a633fda925d1085c6b9f70f72ad6cc5f48537", 0x20}, 0xfffffff9}, {0xa, '\x00', @data, 0x7ff}, {0x26, '\x00', @st={0x4, [{0x3, @svalue=0x4}, {0x2, @svalue=0x775a}, {0x3, @svalue=0xd2}, {0x1, @svalue=0xfffffffffffffff8}]}, 0x7fe}]}) ftruncate(0xffffffffffffffff, 0xffffffffffffffff) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0xfe5f, 0x12) 0s ago: executing program 2 (id=1177): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioperm(0x1, 0x9b1, 0xfff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x54, r4, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x7e}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x54}, 0x4, 0x700000000000000, 0x0, 0x2004c020}, 0x4004) mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) kernel console output (not intermixed with test programs): 32.464332][ T4211] device bridge_slave_0 entered promiscuous mode [ 132.477042][ T4211] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.484254][ T4211] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.492215][ T4211] device bridge_slave_1 entered promiscuous mode [ 132.500788][ T4219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.561626][ T4219] team0: Port device team_slave_0 added [ 132.574175][ T4219] team0: Port device team_slave_1 added [ 132.585143][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.592392][ T4215] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.600074][ T4215] device bridge_slave_0 entered promiscuous mode [ 132.625234][ T4211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.637799][ T4211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.647363][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.654632][ T4215] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.662653][ T4215] device bridge_slave_1 entered promiscuous mode [ 132.669903][ T4216] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.677085][ T4216] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.685470][ T4216] device bridge_slave_0 entered promiscuous mode [ 132.717978][ T4216] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.725925][ T4216] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.733872][ T4216] device bridge_slave_1 entered promiscuous mode [ 132.748584][ T4219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.755657][ T4219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.781620][ T4219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.794959][ T4219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.801917][ T4219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.828763][ T4219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.845909][ T4211] team0: Port device team_slave_0 added [ 132.859269][ T4211] team0: Port device team_slave_1 added [ 132.891549][ T4215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.904261][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.910739][ T4215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.910847][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.936448][ T4220] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.943803][ T4220] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.951671][ T4220] device bridge_slave_0 entered promiscuous mode [ 132.961274][ T4216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.973621][ T4216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.002239][ T4220] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.009313][ T4220] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.017776][ T4220] device bridge_slave_1 entered promiscuous mode [ 133.027069][ T4215] team0: Port device team_slave_0 added [ 133.042407][ T4215] team0: Port device team_slave_1 added [ 133.055935][ T4211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.063035][ T4211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.089271][ T4211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.106945][ T4211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.114035][ T4211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.140168][ T4211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.176599][ T4216] team0: Port device team_slave_0 added [ 133.184937][ T4216] team0: Port device team_slave_1 added [ 133.200884][ T4220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.222599][ T4219] device hsr_slave_0 entered promiscuous mode [ 133.229234][ T4219] device hsr_slave_1 entered promiscuous mode [ 133.237226][ T4215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.244715][ T4215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.271035][ T4215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.284513][ T4215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.291488][ T4215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.317591][ T4215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.350584][ T4220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.395351][ T4216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.402455][ T4216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.428876][ T4216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.453882][ T4211] device hsr_slave_0 entered promiscuous mode [ 133.460996][ T4211] device hsr_slave_1 entered promiscuous mode [ 133.467901][ T4211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.476425][ T4211] Cannot create hsr debugfs directory [ 133.487425][ T4216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.494687][ T4216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.520746][ T4216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.543602][ T4215] device hsr_slave_0 entered promiscuous mode [ 133.550296][ T4215] device hsr_slave_1 entered promiscuous mode [ 133.557424][ T4215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.565652][ T4215] Cannot create hsr debugfs directory [ 133.585717][ T4220] team0: Port device team_slave_0 added [ 133.596206][ T4220] team0: Port device team_slave_1 added [ 133.632018][ T4216] device hsr_slave_0 entered promiscuous mode [ 133.639099][ T4216] device hsr_slave_1 entered promiscuous mode [ 133.646379][ T4216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.654113][ T4216] Cannot create hsr debugfs directory [ 133.677712][ T4220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.684872][ T4220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.710900][ T4220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.741964][ T4220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.748991][ T4220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.775049][ T4220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.843177][ T1332] Bluetooth: hci0: command 0x0409 tx timeout [ 133.849820][ T1332] Bluetooth: hci1: command 0x0409 tx timeout [ 133.913471][ T4220] device hsr_slave_0 entered promiscuous mode [ 133.920245][ T4220] device hsr_slave_1 entered promiscuous mode [ 133.922538][ T1332] Bluetooth: hci4: command 0x0409 tx timeout [ 133.926547][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 133.938469][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 133.938616][ T4220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.952499][ T4220] Cannot create hsr debugfs directory [ 134.090088][ T4219] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 134.117127][ T4219] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 134.125898][ T4219] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 134.136417][ T4219] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 134.203678][ T4211] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 134.212776][ T4211] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 134.221782][ T4211] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 134.240710][ T4211] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 134.299690][ T4216] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 134.309913][ T4216] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 134.323722][ T4216] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 134.357230][ T4216] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 134.389125][ T4219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.416661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.426193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.456307][ T4219] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.464013][ T4215] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 134.492568][ T4215] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 134.505900][ T4215] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 134.520215][ T4215] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 134.545634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.554721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.564569][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.571732][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.596675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.605530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.614752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.624321][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.631380][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.639275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.649508][ T4220] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 134.658448][ T4220] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.672768][ T4220] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 134.684524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.694545][ T4220] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.711924][ T4211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.732214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.741464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.751351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.760373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.768789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.778835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.806072][ T4219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.817451][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.827131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.835593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.844807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.871875][ T4216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.882808][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.891053][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.914787][ T4211] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.939929][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.950794][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.967955][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.975234][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.990945][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.999545][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.015914][ T4216] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.029169][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.039332][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.051037][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.064965][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.072139][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.115900][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.126851][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.136069][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.143203][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.153218][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.161780][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.170626][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.177716][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.187958][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.198056][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.207805][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.215401][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.225457][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.239408][ T4219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.265022][ T4215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.279229][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.290597][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.300122][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.308762][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.317717][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.326340][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.335828][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.344924][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.356536][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.365210][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.373795][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.386428][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.394606][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.409552][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.418556][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.433617][ T4220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.447122][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.459734][ T4215] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.468343][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.478601][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.491832][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.500757][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.508721][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.545894][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.561156][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.573184][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.585609][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.594040][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.601092][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.609160][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.618240][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.627084][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.634186][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.642018][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.651614][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.663485][ T4220] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.691226][ T4216] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.710633][ T4216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.723917][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.733902][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.743120][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.751848][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.760407][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.769026][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.781179][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.789955][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.798694][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.807903][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.816229][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.824502][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.832478][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.845860][ T4219] device veth0_vlan entered promiscuous mode [ 135.858461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.867902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.877089][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.884384][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.897836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.907274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.916379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.922695][ T1332] Bluetooth: hci1: command 0x041b tx timeout [ 135.930350][ T1332] Bluetooth: hci0: command 0x041b tx timeout [ 135.945218][ T4219] device veth1_vlan entered promiscuous mode [ 135.962348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 135.970569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.984137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.993372][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.000451][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.008340][ T4256] Bluetooth: hci2: command 0x041b tx timeout [ 136.010101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.014791][ T4256] Bluetooth: hci4: command 0x041b tx timeout [ 136.022183][ T4254] Bluetooth: hci3: command 0x041b tx timeout [ 136.030404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.041989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.057483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.066873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.076652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.086388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.109413][ T4215] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.120392][ T4215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.146696][ T4211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.154870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 136.164655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.183053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.203181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.211641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.221392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.231499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.248232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.270152][ T4220] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.280915][ T4220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.299891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.310092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.319736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.328696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.337455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.346920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.358901][ T4219] device veth0_macvtap entered promiscuous mode [ 136.382601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.390509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.433440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.440972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.463792][ T4219] device veth1_macvtap entered promiscuous mode [ 136.481541][ T4216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.501525][ T4219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.534218][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.549245][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.578145][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.606505][ T4219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.639445][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.650148][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.665584][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.675060][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.707119][ T4219] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.716178][ T4219] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.726915][ T4219] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.736025][ T4219] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.753387][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.763295][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.771898][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.780793][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.789617][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.797800][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.812011][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.819596][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.836491][ T4216] device veth0_vlan entered promiscuous mode [ 136.876391][ T4220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.891204][ T4211] device veth0_vlan entered promiscuous mode [ 136.913142][ T4216] device veth1_vlan entered promiscuous mode [ 136.919785][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.927886][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.936290][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.945485][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.954473][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.978624][ T4211] device veth1_vlan entered promiscuous mode [ 136.996032][ T4215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.017527][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.026454][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.034548][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.042581][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.094992][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.105660][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.115002][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.125100][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.134242][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.143882][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.152415][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.178790][ T4211] device veth0_macvtap entered promiscuous mode [ 137.188418][ T4216] device veth0_macvtap entered promiscuous mode [ 137.207492][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.215924][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.223482][ T4211] device veth1_macvtap entered promiscuous mode [ 137.232937][ T4216] device veth1_macvtap entered promiscuous mode [ 137.239952][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 137.248860][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 137.257243][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 137.266145][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 137.275966][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.286704][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.296663][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.305098][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.314639][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.323936][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.331784][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.341936][ T4220] device veth0_vlan entered promiscuous mode [ 137.370460][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.382535][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.401105][ T4216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.418303][ T4211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.428880][ T4211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.439962][ T4211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.452139][ T4211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.465341][ T4211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.477783][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.486801][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.495807][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.504444][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.517327][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.529505][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.540882][ T4216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.549046][ T4220] device veth1_vlan entered promiscuous mode [ 137.564698][ T4211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.575252][ T4211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.585313][ T4211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.596362][ T4211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.608360][ T4211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.620290][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.629642][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.638887][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.647576][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.657168][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.666010][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.675608][ T4215] device veth0_vlan entered promiscuous mode [ 137.689652][ T489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.690159][ T4211] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.707974][ T4211] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.708062][ T489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.716855][ T4211] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.735906][ T4211] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.748271][ T4216] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.757248][ T4216] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.768691][ T4216] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.777649][ T4216] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.787795][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.796958][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.804801][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.826969][ T4215] device veth1_vlan entered promiscuous mode [ 137.865705][ T4220] device veth0_macvtap entered promiscuous mode [ 137.903390][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.911794][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.933902][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.944451][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.960822][ T4220] device veth1_macvtap entered promiscuous mode [ 137.982503][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 137.999405][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.003139][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 138.029503][ T4215] device veth0_macvtap entered promiscuous mode [ 138.043174][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 138.062370][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.078190][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.087482][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 138.107406][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 138.120359][ T4220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.120396][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 138.131852][ T4220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.153547][ T4220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.165220][ T4220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.175363][ T4220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.188546][ T4220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.200996][ T4220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.211836][ T4215] device veth1_macvtap entered promiscuous mode [ 138.226817][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.247602][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.281788][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.297751][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.423822][ T4220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.434832][ T4220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.445476][ T4220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.456894][ T4220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.467471][ T4220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.478135][ T4220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.489778][ T4220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.507041][ T4220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.516250][ T4220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.525662][ T4220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.536437][ T4220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.553593][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.593541][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.767168][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.823547][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.879248][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.943269][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.995614][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.054613][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.132573][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.143620][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.155218][ T4215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.183526][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.201000][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.233648][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.251839][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.260893][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.278975][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.294983][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.310493][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.321319][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.348670][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.359383][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.369671][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.380774][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.399492][ T4215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.998868][ T4298] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7'. [ 140.002076][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 140.412094][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 140.422085][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 140.432076][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 140.442072][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 140.452080][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 140.462074][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 140.472073][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 140.482075][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 140.492077][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 140.969337][ T4295] Bluetooth: hci1: command 0x0419 tx timeout [ 140.975711][ T4295] Bluetooth: hci0: command 0x0419 tx timeout [ 140.981833][ T4295] Bluetooth: hci2: command 0x0419 tx timeout [ 140.987982][ T4295] Bluetooth: hci3: command 0x0419 tx timeout [ 140.994122][ T4295] Bluetooth: hci4: command 0x0419 tx timeout [ 141.022368][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.030232][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.066566][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.075199][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.086158][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.095219][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.104781][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.116194][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.128829][ T4215] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.138557][ T4215] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.147750][ T4215] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.156908][ T4215] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.284527][ T1229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.388642][ T1229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.462572][ T489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.482175][ T489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.553006][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.561274][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.265873][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.282120][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.290929][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.352208][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.378096][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.401814][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.429122][ T4308] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 142.454544][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.483653][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.537122][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.784265][ T4317] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 142.891321][ T4317] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 143.021530][ T4317] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 143.069875][ T4317] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 143.109088][ T4317] pit: kvm: requested 164266 ns i8254 timer period limited to 200000 ns [ 143.166609][ T4317] pit: kvm: requested 15085 ns i8254 timer period limited to 200000 ns [ 143.223599][ T4317] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 143.259708][ T4317] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 143.309606][ T4317] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 143.349821][ T4317] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 143.358251][ T4254] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 143.704906][ T4338] netlink: 'syz.1.12': attribute type 1 has an invalid length. [ 143.784806][ T4254] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.823689][ T4254] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.862778][ T4340] netlink: 'syz.1.13': attribute type 1 has an invalid length. [ 143.945257][ T4343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'. [ 144.042455][ T4254] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.069787][ T4254] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.075668][ T4345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'. [ 144.106042][ T4254] usb 4-1: Product: syz [ 144.110319][ T4254] usb 4-1: Manufacturer: syz [ 144.156854][ T4254] usb 4-1: SerialNumber: syz [ 144.542251][ T4350] binder: 4349:4350 ioctl c0306201 200000000240 returned -11 [ 145.422406][ T4254] usb 4-1: 0:2 : does not exist [ 145.427725][ T4254] usb 4-1: unit 9 not found! [ 145.560625][ T4254] usb 4-1: USB disconnect, device number 2 [ 145.812915][ T4370] netlink: 96 bytes leftover after parsing attributes in process `syz.0.22'. [ 146.278171][ T4367] binder_alloc: 4358: binder_alloc_buf, no vma [ 147.708810][ T4380] netlink: 96 bytes leftover after parsing attributes in process `syz.0.25'. [ 147.780724][ T4286] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 147.790589][ T4286] Bluetooth: hci1: Injecting HCI hardware error event [ 147.798630][ T4218] Bluetooth: hci1: hardware error 0x00 [ 148.488635][ T4389] device syzkaller0 entered promiscuous mode [ 149.826658][ T4406] netlink: 96 bytes leftover after parsing attributes in process `syz.1.33'. [ 150.978311][ T4425] netlink: 'syz.3.38': attribute type 1 has an invalid length. [ 151.412976][ T4429] netlink: 'syz.2.39': attribute type 8 has an invalid length. [ 153.763149][ T4449] netlink: 'syz.1.42': attribute type 1 has an invalid length. [ 154.066765][ T4449] team0: Port device team_slave_0 removed [ 156.515175][ T4481] netlink: 96 bytes leftover after parsing attributes in process `syz.0.51'. [ 158.803061][ T4286] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 159.361530][ T4286] Bluetooth: hci3: Injecting HCI hardware error event [ 159.591102][ T4497] netlink: 96 bytes leftover after parsing attributes in process `syz.1.55'. [ 159.655220][ T4218] Bluetooth: hci3: hardware error 0x00 [ 162.233506][ T4507] binder: BINDER_SET_CONTEXT_MGR already set [ 162.270536][ T4507] binder: 4506:4507 ioctl 4018620d 200000004a80 returned -16 [ 162.673711][ T146] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 162.782711][ T4532] netlink: 96 bytes leftover after parsing attributes in process `syz.4.68'. [ 163.512900][ T4543] netlink: 96 bytes leftover after parsing attributes in process `syz.2.69'. [ 164.285685][ T4547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'. [ 167.744312][ T4601] netlink: 96 bytes leftover after parsing attributes in process `syz.1.85'. [ 168.547755][ T4609] create_pit_timer: 21 callbacks suppressed [ 168.547772][ T4609] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 168.629797][ T4609] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 168.683801][ T4609] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 168.734012][ T4609] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 168.783119][ T4609] pit: kvm: requested 164266 ns i8254 timer period limited to 200000 ns [ 168.791701][ T4609] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 168.872345][ T4609] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 168.889286][ T4612] binder_alloc: 4598: binder_alloc_buf, no vma [ 168.907591][ T4609] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 168.963173][ T4609] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 169.008398][ T4609] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 169.182352][ T21] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 169.585322][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.600378][ T21] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.832336][ T21] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 169.859512][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.892473][ T21] usb 3-1: Product: syz [ 169.920923][ T21] usb 3-1: Manufacturer: syz [ 169.937177][ T21] usb 3-1: SerialNumber: syz [ 170.452475][ T21] usb 3-1: 0:2 : does not exist [ 170.457555][ T21] usb 3-1: unit 9 not found! [ 170.533307][ T21] usb 3-1: USB disconnect, device number 2 [ 170.611888][ T4204] udevd[4204]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.519504][ T21] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 171.553410][ T4674] netlink: 96 bytes leftover after parsing attributes in process `syz.4.97'. [ 172.072186][ T21] Bluetooth: hci4: Injecting HCI hardware error event [ 172.079418][ T146] Bluetooth: hci4: hardware error 0x00 [ 172.831976][ T4675] binder: BINDER_SET_CONTEXT_MGR already set [ 172.870144][ T4675] binder: 4661:4675 ioctl 4018620d 200000004a80 returned -16 [ 173.142256][ T4285] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 173.525513][ T4698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.98'. [ 173.578656][ T4702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.104'. [ 173.592501][ T4285] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.607244][ T4285] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.729855][ T4705] tipc: Started in network mode [ 173.763702][ T4705] tipc: Node identity b6c5464981cb, cluster identity 4711 [ 173.786069][ T4705] tipc: Enabled bearer , priority 0 [ 173.795907][ T4710] device syzkaller0 entered promiscuous mode [ 173.825821][ T4705] tipc: Resetting bearer [ 173.835396][ T4285] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.851350][ T4285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.870815][ T4285] usb 2-1: Product: syz [ 173.877115][ T4285] usb 2-1: Manufacturer: syz [ 173.883545][ T4285] usb 2-1: SerialNumber: syz [ 173.895964][ T4704] tipc: Resetting bearer [ 173.911498][ T4713] create_pit_timer: 49 callbacks suppressed [ 173.911514][ T4713] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 173.928168][ T4704] tipc: Disabling bearer [ 173.962490][ T4709] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 173.971569][ T4709] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 173.980940][ T4709] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 174.000979][ T4709] pit: kvm: requested 164266 ns i8254 timer period limited to 200000 ns [ 174.052787][ T4709] pit: kvm: requested 15085 ns i8254 timer period limited to 200000 ns [ 174.066405][ T4709] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 174.076093][ T4709] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 174.095012][ T4709] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 174.110012][ T4709] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 174.402388][ T4285] usb 2-1: 0:2 : does not exist [ 174.407520][ T4285] usb 2-1: unit 9 not found! [ 174.418214][ T4251] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 174.459669][ T4285] usb 2-1: USB disconnect, device number 2 [ 174.712209][ T4286] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 174.727229][ T4204] udevd[4204]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.832510][ T4251] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.854323][ T4251] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.045592][ T4251] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.064467][ T4251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.082118][ T4251] usb 1-1: Product: syz [ 175.085170][ T4286] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.092180][ T4251] usb 1-1: Manufacturer: syz [ 175.113983][ T4251] usb 1-1: SerialNumber: syz [ 175.115143][ T4286] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.142356][ T13] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 175.288902][ T4286] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.308717][ T4286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.325562][ T4286] usb 5-1: Product: syz [ 175.336507][ T4286] usb 5-1: Manufacturer: syz [ 175.341795][ T4286] usb 5-1: SerialNumber: syz [ 175.512420][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.524985][ T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.552443][ T4251] usb 1-1: 0:2 : does not exist [ 175.557737][ T4251] usb 1-1: unit 9 not found! [ 175.600037][ T4251] usb 1-1: USB disconnect, device number 2 [ 175.692520][ T13] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.701872][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.710753][ T13] usb 4-1: Product: syz [ 175.715329][ T13] usb 4-1: Manufacturer: syz [ 175.720015][ T13] usb 4-1: SerialNumber: syz [ 175.732578][ T4286] usb 5-1: 0:2 : does not exist [ 175.737743][ T4286] usb 5-1: unit 9 not found! [ 175.751725][ T4286] usb 5-1: USB disconnect, device number 2 [ 175.767011][ T4204] udevd[4204]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.912166][ T4256] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 175.973165][ T4205] udevd[4205]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 176.123925][ T13] usb 4-1: 0:2 : does not exist [ 176.137072][ T13] usb 4-1: unit 9 not found! [ 176.166573][ T13] usb 4-1: USB disconnect, device number 3 [ 176.201735][ T4204] udevd[4204]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.272344][ T4256] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.295038][ T4256] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.459509][ T4218] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 176.486037][ T4256] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.505751][ T4256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.516735][ T4256] usb 3-1: Product: syz [ 176.520948][ T4256] usb 3-1: Manufacturer: syz [ 176.529505][ T4256] usb 3-1: SerialNumber: syz [ 176.732616][ T4766] device syzkaller0 entered promiscuous mode [ 176.852853][ T4256] usb 3-1: 0:2 : does not exist [ 176.858012][ T4256] usb 3-1: unit 9 not found! [ 176.877978][ T4256] usb 3-1: USB disconnect, device number 3 [ 177.128920][ T4204] udevd[4204]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.177608][ T4781] device syzkaller1 entered promiscuous mode [ 177.749542][ T4792] netlink: 'syz.3.126': attribute type 8 has an invalid length. [ 177.909093][ T4797] loop4: detected capacity change from 0 to 1024 [ 178.004695][ T4797] EXT4-fs (loop4): inline encryption not supported [ 178.060456][ T4797] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 178.060456][ T4797] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 178.060456][ T4797] [ 178.162312][ T4797] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 178.191022][ T4797] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 178.191022][ T4797] [ 178.337585][ T4218] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 178.382142][ T4285] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 178.592901][ T4797] loop4: detected capacity change from 0 to 4096 [ 178.642723][ T4797] ======================================================= [ 178.642723][ T4797] WARNING: The mand mount option has been deprecated and [ 178.642723][ T4797] and is ignored by this kernel. Remove the mand [ 178.642723][ T4797] option from the mount to silence this warning. [ 178.642723][ T4797] ======================================================= [ 178.780124][ T4797] EXT4-fs (loop4): Ignoring removed bh option [ 178.806098][ T4797] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 178.822261][ T4285] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.832970][ T4797] System zones: 0-5 [ 178.861148][ T4797] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,dioread_nolock,block_validity,errors=continue,grpjquota=,bh,delalloc,noquota,,errors=continue. Quota mode: writeback. [ 178.879757][ T4285] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.291096][ T4285] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.442167][ T4285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.450252][ T4285] usb 3-1: Product: syz [ 179.559697][ T4285] usb 3-1: Manufacturer: syz [ 179.611391][ T4285] usb 3-1: SerialNumber: syz [ 180.177769][ T4218] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 180.682504][ T4285] usb 3-1: 0:2 : does not exist [ 180.688661][ T4285] usb 3-1: unit 9 not found! [ 180.750198][ T4285] usb 3-1: USB disconnect, device number 4 [ 180.822544][ T4204] udevd[4204]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.443753][ T4861] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 183.751438][ T4863] loop4: detected capacity change from 0 to 1024 [ 183.807638][ T4863] EXT4-fs (loop4): inline encryption not supported [ 183.852317][ T4863] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 183.852317][ T4863] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 183.852317][ T4863] [ 183.927340][ T4863] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.016138][ T4863] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 184.016138][ T4863] [ 184.095841][ T4877] create_pit_timer: 129 callbacks suppressed [ 184.095857][ T4877] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 184.188693][ T4877] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 184.216695][ T4877] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 184.227678][ T4877] pit: kvm: requested 164266 ns i8254 timer period limited to 200000 ns [ 184.260148][ T4877] pit: kvm: requested 15085 ns i8254 timer period limited to 200000 ns [ 184.310859][ T4863] loop4: detected capacity change from 0 to 4096 [ 184.338109][ T4877] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 184.361919][ T4877] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 184.405641][ T4863] EXT4-fs (loop4): Ignoring removed bh option [ 184.429880][ T4877] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 184.454204][ T4863] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 184.483156][ T4877] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 184.492630][ T4863] System zones: 0-5 [ 184.502946][ T4877] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 184.542270][ T1110] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 184.554906][ T4863] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,dioread_nolock,block_validity,errors=continue,grpjquota=,bh,delalloc,noquota,,errors=continue. Quota mode: writeback. [ 185.092344][ T1110] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.149711][ T1110] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.373072][ T1110] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.399309][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.447066][ T1110] usb 4-1: Product: syz [ 185.467595][ T1110] usb 4-1: Manufacturer: syz [ 185.495473][ T1110] usb 4-1: SerialNumber: syz [ 185.923043][ T7] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 186.022285][ T1110] usb 4-1: 0:2 : does not exist [ 186.027259][ T1110] usb 4-1: unit 9 not found! [ 186.062383][ T1110] usb 4-1: USB disconnect, device number 4 [ 186.292362][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.332090][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.532372][ T7] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.562137][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.570216][ T7] usb 3-1: Product: syz [ 186.602174][ T7] usb 3-1: Manufacturer: syz [ 186.627396][ T7] usb 3-1: SerialNumber: syz [ 187.248870][ T7] usb 3-1: 0:2 : does not exist [ 187.254241][ T7] usb 3-1: unit 9 not found! [ 187.317736][ T7] usb 3-1: USB disconnect, device number 5 [ 187.532333][ T4918] netlink: 96 bytes leftover after parsing attributes in process `syz.3.161'. [ 188.916424][ T4945] device syzkaller0 entered promiscuous mode [ 189.132297][ T7] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 189.562481][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.589386][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.792734][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.825543][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.862833][ T7] usb 2-1: Product: syz [ 189.877011][ T7] usb 2-1: Manufacturer: syz [ 189.900121][ T7] usb 2-1: SerialNumber: syz [ 190.274198][ T4975] netlink: 96 bytes leftover after parsing attributes in process `syz.4.173'. [ 190.532290][ T7] usb 2-1: 0:2 : does not exist [ 190.537302][ T7] usb 2-1: unit 9 not found! [ 190.644560][ T7] usb 2-1: USB disconnect, device number 3 [ 190.902651][ T4991] tipc: Started in network mode [ 190.918059][ T4991] tipc: Node identity 62a8b1b3d663, cluster identity 4711 [ 190.933557][ T4204] udevd[4204]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.963681][ T4991] tipc: Enabled bearer , priority 0 [ 190.991264][ T4992] device syzkaller0 entered promiscuous mode [ 191.054356][ T4991] tipc: Resetting bearer [ 191.093850][ T4990] tipc: Resetting bearer [ 191.119445][ T4990] tipc: Disabling bearer [ 191.765575][ T4995] netlink: 96 bytes leftover after parsing attributes in process `syz.1.180'. [ 192.555587][ T4285] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 192.634146][ T4285] Bluetooth: hci0: Injecting HCI hardware error event [ 192.740991][ T146] Bluetooth: hci0: hardware error 0x00 [ 193.773829][ T21] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 193.792191][ T21] Bluetooth: hci2: Injecting HCI hardware error event [ 193.816391][ T4218] Bluetooth: hci2: hardware error 0x00 [ 193.835570][ T5022] create_pit_timer: 76 callbacks suppressed [ 193.835586][ T5022] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 193.922386][ T5027] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 193.934619][ T5027] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 193.966328][ T5027] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 193.985783][ T5027] pit: kvm: requested 164266 ns i8254 timer period limited to 200000 ns [ 194.055689][ T5027] pit: kvm: requested 15085 ns i8254 timer period limited to 200000 ns [ 194.105237][ T5027] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 194.137289][ T5027] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 194.199819][ T5027] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 194.252186][ T7] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 194.275289][ T5027] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 194.325626][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.332089][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.428098][ T5045] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 194.677033][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.703783][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.912403][ T7] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.951268][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.969739][ T7] usb 3-1: Product: syz [ 194.994468][ T7] usb 3-1: Manufacturer: syz [ 194.999745][ T7] usb 3-1: SerialNumber: syz [ 195.044456][ T5054] tipc: Started in network mode [ 195.062596][ T5054] tipc: Node identity fa59f942aa4b, cluster identity 4711 [ 195.085936][ T5054] tipc: Enabled bearer , priority 0 [ 195.115966][ T5056] device syzkaller0 entered promiscuous mode [ 195.198757][ T5054] tipc: Resetting bearer [ 195.231720][ T5053] tipc: Resetting bearer [ 195.256308][ T5053] tipc: Disabling bearer [ 195.468443][ T5058] loop1: detected capacity change from 0 to 512 [ 195.528490][ T7] usb 3-1: 0:2 : does not exist [ 195.533594][ T7] usb 3-1: unit 9 not found! [ 195.582392][ T7] usb 3-1: USB disconnect, device number 6 [ 195.670805][ T5058] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 195.744470][ T5058] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 195.838496][ T5066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'. [ 195.923620][ T4204] udevd[4204]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.930451][ T5058] EXT4-fs (loop1): 1 truncate cleaned up [ 195.982204][ T5058] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.652211][ T7] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 197.092341][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.109232][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.352469][ T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.376781][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.417297][ T7] usb 5-1: Product: syz [ 197.421527][ T7] usb 5-1: Manufacturer: syz [ 197.467086][ T7] usb 5-1: SerialNumber: syz [ 197.782221][ T13] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 198.012434][ T7] usb 5-1: 0:2 : does not exist [ 198.017408][ T7] usb 5-1: unit 9 not found! [ 198.072676][ T7] usb 5-1: USB disconnect, device number 3 [ 198.124828][ T4204] udevd[4204]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.172911][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.199162][ T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.412456][ T13] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 198.426728][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.435589][ T13] usb 3-1: Product: syz [ 198.439787][ T13] usb 3-1: Manufacturer: syz [ 198.444904][ T13] usb 3-1: SerialNumber: syz [ 198.542286][ T4256] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 198.962705][ T4256] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.997814][ T4256] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.175450][ T13] usb 3-1: 0:2 : does not exist [ 199.180465][ T13] usb 3-1: unit 9 not found! [ 199.222532][ T4256] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.263198][ T13] usb 3-1: USB disconnect, device number 7 [ 199.272066][ T4256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.342225][ T4256] usb 4-1: Product: syz [ 199.346454][ T4256] usb 4-1: Manufacturer: syz [ 199.361458][ T4204] udevd[4204]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.362405][ T4256] usb 4-1: SerialNumber: syz [ 199.844565][ T5131] syz.4.215 (5131) used greatest stack depth: 20176 bytes left [ 199.922452][ T4256] usb 4-1: 0:2 : does not exist [ 199.927531][ T4256] usb 4-1: unit 9 not found! [ 199.962386][ T4256] usb 4-1: USB disconnect, device number 5 [ 200.270331][ T5148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.219'. [ 200.332346][ T5149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.217'. [ 200.657933][ T5145] netlink: 96 bytes leftover after parsing attributes in process `syz.1.218'. [ 204.282253][ T5199] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 204.292415][ T5199] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 204.301066][ T5199] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 206.481424][ T5202] tipc: Enabled bearer , priority 0 [ 206.521138][ T5198] tipc: Resetting bearer [ 206.577977][ T5196] tipc: Disabling bearer [ 207.352300][ T5230] netlink: 96 bytes leftover after parsing attributes in process `syz.0.240'. [ 208.253633][ T5229] device syzkaller0 entered promiscuous mode [ 208.315223][ T5229] tipc: Started in network mode [ 208.320194][ T5229] tipc: Node identity e67da8b8ff1b, cluster identity 4711 [ 208.369446][ T5229] tipc: Enabled bearer , priority 0 [ 208.428649][ T5227] tipc: Resetting bearer [ 208.494213][ T5227] tipc: Disabling bearer [ 208.896861][ T5253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.249'. [ 209.111332][ T5254] create_pit_timer: 92 callbacks suppressed [ 209.111350][ T5254] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 209.136973][ T5253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.236221][ T5254] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 209.266814][ T5254] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 209.286025][ T5254] pit: kvm: requested 15085 ns i8254 timer period limited to 200000 ns [ 209.305578][ T5254] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 209.344481][ T5259] bond1 (unregistering): Released all slaves [ 209.377710][ T5254] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 209.402596][ T5254] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 209.532175][ T4295] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 210.496061][ T5254] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 210.537540][ T5254] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 210.572414][ T5254] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 210.674386][ T5271] device syzkaller0 entered promiscuous mode [ 210.862367][ T4295] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.894228][ T4295] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.082386][ T4295] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.109277][ T4295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.140455][ T4295] usb 5-1: Product: syz [ 211.158268][ T4295] usb 5-1: Manufacturer: syz [ 211.806193][ T4295] usb 5-1: SerialNumber: syz [ 212.592198][ T4295] usb 5-1: can't set config #1, error -71 [ 212.600634][ T4295] usb 5-1: USB disconnect, device number 4 [ 214.449757][ T5311] netlink: 96 bytes leftover after parsing attributes in process `syz.0.264'. [ 215.693830][ T5323] device syzkaller0 entered promiscuous mode [ 217.111540][ T5342] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 217.120704][ T5342] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 217.129353][ T5342] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 221.460113][ T5375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.280'. [ 221.491405][ T5375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.079086][ T5398] Error parsing options; rc = [-22] [ 223.835241][ T5387] bond1 (unregistering): Released all slaves [ 225.036805][ T5403] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 225.045068][ T5403] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 225.053573][ T5403] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 225.453078][ T5418] input: syz1 as /devices/virtual/input/input5 [ 227.689768][ T5430] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 227.698178][ T5430] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 227.706745][ T5430] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 230.904328][ T5443] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 230.912841][ T5443] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 230.921571][ T5443] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 231.432689][ T5458] input: syz1 as /devices/virtual/input/input6 [ 231.711316][ T5468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.310'. [ 232.903068][ T5474] netlink: 96 bytes leftover after parsing attributes in process `syz.0.311'. [ 234.647068][ T5490] Zero length message leads to an empty skb [ 237.366757][ T5505] netlink: 96 bytes leftover after parsing attributes in process `syz.2.321'. [ 242.423663][ T5539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.332'. [ 242.630794][ T5539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.798893][ T5545] bond1 (unregistering): Released all slaves [ 244.374049][ T5571] device syzkaller0 entered promiscuous mode [ 244.941497][ T5573] netlink: 96 bytes leftover after parsing attributes in process `syz.4.339'. [ 249.132182][ T5599] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 249.140966][ T5599] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 249.150015][ T5599] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 252.307745][ T5634] Error parsing options; rc = [-22] [ 254.611913][ T5651] device syzkaller0 entered promiscuous mode [ 255.772266][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.779486][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.179918][ T5671] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 256.188374][ T5671] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 256.197082][ T5671] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 256.568051][ T5669] tipc: Enabled bearer , priority 0 [ 256.854046][ T5666] tipc: Disabling bearer [ 257.733704][ T5684] tipc: Enabled bearer , priority 0 [ 258.156760][ T5681] tipc: Disabling bearer [ 258.228641][ T5694] create_pit_timer: 12 callbacks suppressed [ 258.228658][ T5694] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 258.349727][ T5694] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 258.385972][ T5694] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 258.541808][ T5694] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 258.569515][ T5694] pit: kvm: requested 87161 ns i8254 timer period limited to 200000 ns [ 259.124986][ T5694] pit: kvm: requested 15085 ns i8254 timer period limited to 200000 ns [ 259.182397][ T1107] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 259.546558][ T5694] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 259.555532][ T5694] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 259.569085][ T5694] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 259.649860][ T5694] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 259.892234][ T1107] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.931717][ T5717] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 259.940299][ T5717] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 259.949106][ T5717] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 260.833176][ T1107] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.372515][ T1107] usb 4-1: string descriptor 0 read error: -71 [ 261.382510][ T1107] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.403442][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.462688][ T1107] usb 4-1: can't set config #1, error -71 [ 261.494541][ T1107] usb 4-1: USB disconnect, device number 6 [ 262.218178][ T5738] Error parsing options; rc = [-22] [ 263.652233][ T5670] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 264.453825][ T5751] netlink: 96 bytes leftover after parsing attributes in process `syz.3.391'. [ 265.342135][ T5670] usb 2-1: device descriptor read/all, error -71 [ 268.640819][ T5778] netlink: 96 bytes leftover after parsing attributes in process `syz.0.398'. [ 270.044947][ T5783] netlink: 96 bytes leftover after parsing attributes in process `syz.2.389'. [ 270.504134][ T5794] create_pit_timer: 44 callbacks suppressed [ 270.504146][ T5794] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 270.630307][ T5794] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 270.691239][ T5794] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 271.251280][ T5800] netlink: 96 bytes leftover after parsing attributes in process `syz.3.392'. [ 272.102441][ T5794] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 272.110953][ T5794] pit: kvm: requested 87161 ns i8254 timer period limited to 200000 ns [ 272.198094][ T5794] pit: kvm: requested 15085 ns i8254 timer period limited to 200000 ns [ 272.212105][ T4255] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 272.253000][ T5794] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 272.261344][ T5794] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 272.362425][ T5794] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 272.370824][ T5794] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 272.582261][ T4255] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.622112][ T4255] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.822258][ T4255] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.863793][ T4255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.882409][ T4255] usb 5-1: Product: syz [ 272.896919][ T4255] usb 5-1: Manufacturer: syz [ 272.901825][ T4255] usb 5-1: SerialNumber: syz [ 273.564254][ T5804] netlink: 96 bytes leftover after parsing attributes in process `syz.1.406'. [ 275.142303][ T4255] usb 5-1: 0:2 : does not exist [ 275.147379][ T4255] usb 5-1: unit 9 not found! [ 275.794713][ T4255] usb 5-1: USB disconnect, device number 5 [ 276.047628][ T4204] udevd[4204]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.066686][ T5819] loop0: detected capacity change from 0 to 512 [ 276.137600][ T5819] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 276.281232][ T5819] EXT4-fs (loop0): 1 truncate cleaned up [ 276.290233][ T5819] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 277.757539][ T5850] device syzkaller0 entered promiscuous mode [ 278.813461][ T5850] tipc: Enabled bearer , priority 0 [ 278.874985][ T5849] tipc: Resetting bearer [ 278.923529][ T5854] netlink: 96 bytes leftover after parsing attributes in process `syz.3.415'. [ 280.296329][ T5849] tipc: Disabling bearer [ 280.532272][ T1107] tipc: Node number set to 1343420738 [ 280.893317][ T5880] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 280.901759][ T5880] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 280.910392][ T5880] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 281.982653][ T5887] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 281.991198][ T5887] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 281.999824][ T5887] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 284.088182][ T5920] device syzkaller0 entered promiscuous mode [ 284.135975][ T5920] tipc: Enabled bearer , priority 0 [ 284.228332][ T5919] tipc: Resetting bearer [ 284.257471][ T5925] loop2: detected capacity change from 0 to 512 [ 284.324032][ T5919] tipc: Disabling bearer [ 284.363072][ T5925] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 284.430620][ T5925] EXT4-fs (loop2): 1 truncate cleaned up [ 284.436524][ T5925] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 286.011316][ T5947] netlink: 96 bytes leftover after parsing attributes in process `syz.0.438'. [ 290.182051][ T5982] autofs4:pid:5982:autofs_fill_super: called with bogus options [ 292.069980][ T5992] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 292.078402][ T5992] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 292.087076][ T5992] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 294.656003][ T5998] netlink: 96 bytes leftover after parsing attributes in process `syz.4.453'. [ 297.737963][ T6051] loop3: detected capacity change from 0 to 512 [ 297.796154][ T6053] device syzkaller0 entered promiscuous mode [ 297.848317][ T6051] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 298.072559][ T6051] EXT4-fs (loop3): 1 truncate cleaned up [ 298.078367][ T6051] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 298.913400][ T6071] netlink: 96 bytes leftover after parsing attributes in process `syz.4.462'. [ 299.813034][ T6077] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 299.821556][ T6077] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 299.830358][ T6077] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 300.429868][ T6086] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 300.438996][ T6086] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 300.448436][ T6086] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 301.195255][ T6092] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 301.650008][ T6098] device syzkaller0 entered promiscuous mode [ 303.113107][ T6112] loop0: detected capacity change from 0 to 1024 [ 303.172415][ T6112] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 303.662737][ T6115] netlink: 96 bytes leftover after parsing attributes in process `syz.2.481'. [ 306.075622][ T6127] netlink: 'syz.0.480': attribute type 4 has an invalid length. [ 310.663851][ T6162] Error parsing options; rc = [-22] [ 312.244987][ T6180] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 312.253413][ T6180] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 312.262316][ T6180] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 316.943907][ T6205] netlink: 96 bytes leftover after parsing attributes in process `syz.2.492'. [ 317.740882][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.747309][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.369463][ T6243] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 321.377921][ T6243] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 321.386565][ T6243] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 321.822688][ T6241] loop4: detected capacity change from 0 to 1024 [ 322.030435][ T6241] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 325.429767][ T6281] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 325.439770][ T6281] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 325.448365][ T6281] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 326.190236][ T6295] autofs4:pid:6295:autofs_fill_super: called with bogus options [ 342.840970][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'. [ 350.101807][ T6504] device syzkaller0 entered promiscuous mode [ 352.516565][ T6529] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 352.524845][ T6529] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 352.533301][ T6529] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 354.005038][ T6550] loop1: detected capacity change from 0 to 1024 [ 354.029964][ T6550] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 354.070972][ T6548] create_pit_timer: 20 callbacks suppressed [ 354.070989][ T6548] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 354.215432][ T6548] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 354.284192][ T6548] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 354.337057][ T6548] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 354.391444][ T6548] pit: kvm: requested 87161 ns i8254 timer period limited to 200000 ns [ 354.466903][ T6548] pit: kvm: requested 15085 ns i8254 timer period limited to 200000 ns [ 354.572250][ T7] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 354.702292][ T6548] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 354.840241][ T6548] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 355.076534][ T6548] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 355.272295][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.352819][ T6548] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 355.365308][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 356.492276][ T7] usb 3-1: string descriptor 0 read error: -71 [ 356.498717][ T7] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 356.571100][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.854385][ T7] usb 3-1: can't set config #1, error -71 [ 356.991971][ T7] usb 3-1: USB disconnect, device number 8 [ 359.981727][ T6641] loop0: detected capacity change from 0 to 1024 [ 360.192590][ T6641] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 361.164755][ T6656] netlink: 'syz.0.601': attribute type 4 has an invalid length. [ 365.974917][ T6675] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 366.019342][ T6675] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 366.351667][ T6675] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 370.899913][ T6745] netlink: 96 bytes leftover after parsing attributes in process `syz.3.624'. [ 371.724530][ T6736] device syzkaller0 entered promiscuous mode [ 377.368281][ T6820] tipc: Enabled bearer , priority 0 [ 377.376200][ T6820] device syzkaller0 entered promiscuous mode [ 377.492831][ T6820] tipc: Resetting bearer [ 377.579681][ T6819] tipc: Resetting bearer [ 377.604892][ T6826] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 377.645329][ T6819] tipc: Disabling bearer [ 379.049594][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.057393][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.412826][ T6878] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 384.423850][ T6878] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 384.432594][ T6878] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 384.956670][ T6898] netlink: 36 bytes leftover after parsing attributes in process `syz.4.651'. [ 385.004817][ T6896] create_pit_timer: 16 callbacks suppressed [ 385.004834][ T6896] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 385.063756][ T6896] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 385.076473][ T6896] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 385.102403][ T6896] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 385.306067][ T6896] pit: kvm: requested 87161 ns i8254 timer period limited to 200000 ns [ 385.379690][ T6896] pit: kvm: requested 15085 ns i8254 timer period limited to 200000 ns [ 385.388852][ T6896] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 385.428930][ T6896] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 385.524794][ T6896] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 385.542753][ T4295] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 385.558732][ T6896] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 386.802237][ T4295] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.892550][ T4295] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 388.006957][ T4295] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 388.120476][ T4295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.662301][ T4295] usb 1-1: can't set config #1, error -71 [ 388.674649][ T4295] usb 1-1: USB disconnect, device number 3 [ 389.156890][ T6953] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 389.165435][ T6953] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 389.174251][ T6953] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 395.573949][ T7031] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 395.879167][ T7036] autofs4:pid:7036:autofs_fill_super: called with bogus options [ 397.641931][ C1] sched: RT throttling activated [ 399.119982][ T7057] netlink: 36 bytes leftover after parsing attributes in process `syz.0.684'. [ 399.447505][ T7067] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 399.456222][ T7067] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 399.465053][ T7067] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 402.060365][ T7090] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 402.466819][ T7098] tipc: Enabled bearer , priority 0 [ 402.503052][ T7098] device syzkaller0 entered promiscuous mode [ 402.601675][ T7098] tipc: Resetting bearer [ 402.639678][ T7097] tipc: Resetting bearer [ 402.678035][ T7097] tipc: Disabling bearer [ 403.865286][ T7114] create_pit_timer: 18 callbacks suppressed [ 403.865303][ T7114] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 404.498847][ T7108] pit: kvm: requested 26819 ns i8254 timer period limited to 200000 ns [ 404.522267][ T4295] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 404.676393][ T7108] pit: kvm: requested 26819 ns i8254 timer period limited to 200000 ns [ 404.769476][ T7108] pit: kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 404.778515][ T7108] pit: kvm: requested 107276 ns i8254 timer period limited to 200000 ns [ 404.787441][ T7108] pit: kvm: requested 198628 ns i8254 timer period limited to 200000 ns [ 404.797194][ T7108] pit: kvm: requested 8380 ns i8254 timer period limited to 200000 ns [ 404.878672][ T7108] pit: kvm: requested 26819 ns i8254 timer period limited to 200000 ns [ 404.933078][ T7108] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 404.969397][ T7108] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 405.062314][ T4295] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.123259][ T4295] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 405.472296][ T4295] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 405.492168][ T4295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.510144][ T4295] usb 4-1: Product: syz [ 405.515161][ T4295] usb 4-1: Manufacturer: syz [ 405.519910][ T4295] usb 4-1: SerialNumber: syz [ 405.531816][ T7133] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 406.852066][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 407.042646][ T4295] usb 4-1: 0:2 : does not exist [ 407.061216][ T4295] usb 4-1: unit 0 not found! [ 407.102149][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 407.118802][ T4295] usb 4-1: USB disconnect, device number 7 [ 407.230311][ T13] usb 1-1: config 0 has an invalid descriptor of length 103, skipping remainder of the config [ 407.274023][ T13] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 408.917072][ T4204] udevd[4204]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.182273][ T13] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 409.210962][ T13] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 409.468971][ T13] usb 1-1: Product: syz [ 410.042120][ T13] usb 1-1: Manufacturer: syz [ 410.047611][ T13] usb 1-1: SerialNumber: syz [ 410.083804][ T13] usb 1-1: config 0 descriptor?? [ 410.142174][ T13] usb 1-1: can't set config #0, error -71 [ 410.153361][ T13] usb 1-1: USB disconnect, device number 4 [ 410.210496][ T7173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.712'. [ 412.897687][ T7193] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 412.906538][ T7193] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 412.915626][ T7193] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 413.996476][ T7201] device syzkaller0 entered promiscuous mode [ 417.772940][ T7228] tipc: Enabled bearer , priority 0 [ 417.963994][ T7223] device syzkaller0 entered promiscuous mode [ 420.333944][ T5670] tipc: Node number set to 3033248179 [ 421.010041][ T7220] tipc: Resetting bearer [ 421.095079][ T7220] tipc: Disabling bearer [ 429.667775][ T7316] device syzkaller0 entered promiscuous mode [ 433.793793][ T7385] loop1: detected capacity change from 0 to 512 [ 433.845145][ T7385] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 435.723697][ T7385] EXT4-fs (loop1): 1 truncate cleaned up [ 435.743721][ T7385] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 439.305151][ T7440] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 440.272055][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.278527][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.673887][ T7449] netlink: 96 bytes leftover after parsing attributes in process `syz.3.773'. [ 441.832119][ T4285] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 442.112134][ T4285] usb 5-1: Using ep0 maxpacket: 8 [ 442.262441][ T4285] usb 5-1: config 0 has an invalid descriptor of length 103, skipping remainder of the config [ 442.308991][ T4285] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 442.592485][ T4285] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 442.625683][ T4285] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 442.871737][ T4285] usb 5-1: Product: syz [ 442.882070][ T4285] usb 5-1: Manufacturer: syz [ 442.932265][ T4285] usb 5-1: SerialNumber: syz [ 442.957373][ T4285] usb 5-1: config 0 descriptor?? [ 442.992286][ T4285] usb 5-1: can't set config #0, error -71 [ 443.010283][ T4285] usb 5-1: USB disconnect, device number 6 [ 445.862672][ T7504] netlink: 96 bytes leftover after parsing attributes in process `syz.4.784'. [ 447.112310][ T7519] tipc: Enabled bearer , priority 0 [ 447.120037][ T7519] device syzkaller0 entered promiscuous mode [ 447.134362][ T7519] tipc: Resetting bearer [ 447.143996][ T7518] tipc: Resetting bearer [ 447.217333][ T7518] tipc: Disabling bearer [ 450.554065][ T7551] loop3: detected capacity change from 0 to 512 [ 450.779472][ T7551] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 450.834785][ T7555] tipc: Enabled bearer , priority 0 [ 451.270839][ T7557] device syzkaller0 entered promiscuous mode [ 451.521576][ T7551] EXT4-fs (loop3): 1 truncate cleaned up [ 451.542033][ T7551] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 451.610806][ T7555] tipc: Resetting bearer [ 451.683019][ T7554] tipc: Resetting bearer [ 451.713257][ T7554] tipc: Disabling bearer [ 456.820248][ T7596] netlink: 96 bytes leftover after parsing attributes in process `syz.4.805'. [ 458.646106][ T7611] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 458.655596][ T7611] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 458.664364][ T7611] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 459.171191][ T7618] tipc: Started in network mode [ 459.213815][ T7618] tipc: Node identity 06e39ae6196f, cluster identity 4711 [ 459.221439][ T7618] tipc: Enabled bearer , priority 0 [ 459.252323][ T7620] device syzkaller0 entered promiscuous mode [ 459.359757][ T7618] tipc: Resetting bearer [ 459.390006][ T7617] tipc: Resetting bearer [ 459.843528][ T7617] tipc: Disabling bearer [ 461.508509][ T7636] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 461.517137][ T7636] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 461.526574][ T7636] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 463.995756][ T7646] netlink: 96 bytes leftover after parsing attributes in process `syz.2.818'. [ 464.821597][ T7657] loop0: detected capacity change from 0 to 512 [ 465.148501][ T7657] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 465.163873][ T7664] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 465.172440][ T7664] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 465.181183][ T7664] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 466.097870][ T7657] EXT4-fs (loop0): 1 truncate cleaned up [ 466.107735][ T7657] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 467.260139][ T7673] tipc: Enabling of bearer rejected, failed to enable media [ 474.229837][ T7739] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 475.938136][ T7756] netlink: 96 bytes leftover after parsing attributes in process `syz.4.839'. [ 477.084737][ T7764] tipc: Enabled bearer , priority 0 [ 477.121156][ T7764] device syzkaller0 entered promiscuous mode [ 477.743193][ T7763] tipc: Resetting bearer [ 478.414326][ T7763] tipc: Disabling bearer [ 481.121523][ T4669] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.661345][ T1107] Bluetooth: hci5: command 0x0409 tx timeout [ 483.531726][ T7793] chnl_net:caif_netlink_parms(): no params data found [ 485.640259][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 486.729597][ T4669] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.333646][ T4669] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.684000][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 488.019783][ T7811] netlink: 96 bytes leftover after parsing attributes in process `syz.4.852'. [ 488.277668][ T4669] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.394459][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.462046][ T7793] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.482093][ T7793] device bridge_slave_0 entered promiscuous mode [ 488.505694][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.545165][ T7793] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.547879][ T7839] kvm [7838]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xc880 [ 488.578913][ T7839] kvm [7838]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 488.583304][ T7793] device bridge_slave_1 entered promiscuous mode [ 488.659986][ T7839] kvm [7838]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0xa088 [ 488.701020][ T7839] kvm [7838]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xd1a8 [ 488.742877][ T7839] kvm [7838]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 488.767994][ T7793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.867666][ T4254] Bluetooth: hci5: command 0x0419 tx timeout [ 490.116948][ T7793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.325887][ T7793] team0: Port device team_slave_0 added [ 490.337996][ T7793] team0: Port device team_slave_1 added [ 490.360034][ T7793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.399037][ T7793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.512184][ T7793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.555039][ T4669] tipc: Left network mode [ 490.563638][ T7793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.612133][ T7793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.710269][ T7793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.547530][ T7793] device hsr_slave_0 entered promiscuous mode [ 491.582630][ T7793] device hsr_slave_1 entered promiscuous mode [ 491.654204][ T7793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.886932][ T7793] Cannot create hsr debugfs directory [ 493.911267][ T7891] netlink: 96 bytes leftover after parsing attributes in process `syz.1.868'. [ 495.790289][ T7904] netlink: 96 bytes leftover after parsing attributes in process `syz.3.872'. [ 497.361749][ T7793] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 497.396875][ T7793] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 497.430993][ T7793] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 497.469900][ T7793] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 498.789884][ T7793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.847607][ T4669] device hsr_slave_0 left promiscuous mode [ 498.878010][ T4669] device hsr_slave_1 left promiscuous mode [ 498.955401][ T4669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.046364][ T4669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.218836][ T4669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.316093][ T4669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.457116][ T4669] device bridge_slave_1 left promiscuous mode [ 499.550809][ T4669] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.873151][ T4669] device bridge_slave_0 left promiscuous mode [ 499.879363][ T4669] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.141332][ T4669] device veth1_macvtap left promiscuous mode [ 500.152327][ T4669] device veth0_macvtap left promiscuous mode [ 500.175289][ T4669] device veth1_vlan left promiscuous mode [ 500.181377][ T4669] device veth0_vlan left promiscuous mode [ 500.657644][ T4669] team0 (unregistering): Port device team_slave_1 removed [ 500.677147][ T4669] team0 (unregistering): Port device team_slave_0 removed [ 500.727477][ T4669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.789654][ T4669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.207678][ T4669] bond0 (unregistering): Released all slaves [ 501.525931][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.533000][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.073775][ T7793] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.154158][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 502.166042][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 503.880555][ T7974] netlink: 96 bytes leftover after parsing attributes in process `syz.3.883'. [ 504.706713][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 504.793238][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 504.837251][ T4648] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.844418][ T4648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.474829][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 508.527798][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 508.575865][ T4648] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.583047][ T4648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.766222][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 508.920368][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 508.930768][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 508.941574][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 508.957215][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 508.966956][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 509.002091][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 509.064088][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 509.138469][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 509.147714][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 509.161719][ T7793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 509.236772][ T7793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 509.289618][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 509.302782][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 512.009582][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 512.022154][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 512.087482][ T7793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.692165][ T8065] device syzkaller0 entered promiscuous mode [ 517.985242][ T8089] tipc: Enabled bearer , priority 0 [ 518.015651][ T8089] device syzkaller0 entered promiscuous mode [ 518.054304][ T8089] tipc: Resetting bearer [ 518.907856][ T8102] netlink: 96 bytes leftover after parsing attributes in process `syz.4.904'. [ 520.149694][ T8088] tipc: Resetting bearer [ 522.619124][ T8088] tipc: Disabling bearer [ 522.899210][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 522.932736][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 523.236335][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 525.173625][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 525.454436][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 525.462808][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 525.693634][ T7793] device veth0_vlan entered promiscuous mode [ 525.747518][ T7793] device veth1_vlan entered promiscuous mode [ 525.904045][ T8137] autofs4:pid:8137:autofs_fill_super: called with bogus options [ 525.924785][ T7793] device veth0_macvtap entered promiscuous mode [ 525.982400][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 526.000166][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 526.019416][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 526.041499][ T7793] device veth1_macvtap entered promiscuous mode [ 526.194348][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.299643][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.378562][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.672112][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.692449][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.949678][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.992360][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.012074][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.072507][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.109594][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 527.147460][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 527.214135][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 527.264088][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.401582][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.501577][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.553565][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.619854][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.844613][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.854843][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.865451][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.993710][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.160337][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 528.191693][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 528.365151][ T7793] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.412794][ T7793] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.457195][ T7793] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.519448][ T7793] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.531673][ T8177] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.921'. [ 528.824038][ T4654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.992281][ T4654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.095884][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 529.152081][ T4542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.160049][ T4542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.250681][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 530.679012][ T8196] device syzkaller0 entered promiscuous mode [ 532.234289][ T8211] loop4: detected capacity change from 0 to 256 [ 532.662236][ T8211] FAT-fs (loop4): Directory bread(block 64) failed [ 532.722139][ T8211] FAT-fs (loop4): Directory bread(block 65) failed [ 532.728906][ T8211] FAT-fs (loop4): Directory bread(block 66) failed [ 532.850050][ T8211] FAT-fs (loop4): Directory bread(block 67) failed [ 532.922094][ T8211] FAT-fs (loop4): Directory bread(block 68) failed [ 533.022413][ T8211] FAT-fs (loop4): Directory bread(block 69) failed [ 533.050963][ T8211] FAT-fs (loop4): Directory bread(block 70) failed [ 533.192316][ T8211] FAT-fs (loop4): Directory bread(block 71) failed [ 533.260196][ T8211] FAT-fs (loop4): Directory bread(block 72) failed [ 534.390989][ T8211] FAT-fs (loop4): Directory bread(block 73) failed [ 535.482876][ T8237] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.932'. [ 535.971608][ T8244] netlink: 96 bytes leftover after parsing attributes in process `syz.2.933'. [ 537.326868][ T8252] netlink: 96 bytes leftover after parsing attributes in process `syz.4.934'. [ 539.585419][ T8262] device syzkaller0 entered promiscuous mode [ 539.863046][ T8270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.942'. [ 540.238772][ T8284] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 540.247313][ T8284] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 540.256087][ T8284] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 548.899912][ T8340] device syzkaller0 entered promiscuous mode [ 549.403397][ T8358] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 549.425859][ T8358] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 550.552488][ T8358] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 550.673707][ T8372] autofs4:pid:8372:autofs_fill_super: called with bogus options [ 550.939449][ T8378] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 551.241996][ T4295] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 551.271661][ T8391] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 551.280251][ T8391] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 551.288930][ T8391] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 552.692186][ T4295] usb 3-1: Using ep0 maxpacket: 8 [ 553.761602][ T8401] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 554.318065][ T8409] netlink: 96 bytes leftover after parsing attributes in process `syz.3.966'. [ 555.114809][ T4295] usb 3-1: config 0 has an invalid descriptor of length 103, skipping remainder of the config [ 555.135032][ T4295] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 555.202248][ T4295] usb 3-1: string descriptor 0 read error: -71 [ 555.209024][ T4295] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 555.340012][ T4295] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 555.353395][ T4295] usb 3-1: config 0 descriptor?? [ 555.421625][ T4295] usb 3-1: can't set config #0, error -71 [ 555.459480][ T8417] device syzkaller0 entered promiscuous mode [ 555.477338][ T4295] usb 3-1: USB disconnect, device number 9 [ 556.359861][ T8435] tipc: Started in network mode [ 556.395100][ T8435] tipc: Node identity 4a987444ce14, cluster identity 4711 [ 556.431995][ T8435] tipc: Enabled bearer , priority 0 [ 556.472487][ T8439] device syzkaller0 entered promiscuous mode [ 556.549737][ T8435] tipc: Resetting bearer [ 556.598674][ T8434] tipc: Resetting bearer [ 556.647473][ T8434] tipc: Disabling bearer [ 556.954128][ T8454] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 556.963528][ T8454] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 556.972474][ T8454] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 559.682319][ T8473] netlink: 96 bytes leftover after parsing attributes in process `syz.3.980'. [ 561.107755][ T8489] device syzkaller0 entered promiscuous mode [ 562.615317][ T8513] netlink: 24 bytes leftover after parsing attributes in process `syz.5.989'. [ 562.964289][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.970761][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.560812][ T8516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.991'. [ 569.493642][ T8546] tipc: Enabled bearer , priority 0 [ 569.553100][ T8546] device syzkaller0 entered promiscuous mode [ 569.625244][ T8545] tipc: Resetting bearer [ 570.573815][ T8545] tipc: Disabling bearer [ 576.157076][ T8633] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1015'. [ 583.269734][ T8709] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 583.278837][ T8709] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 583.287440][ T8709] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 584.330821][ T8720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1033'. [ 591.540170][ T8781] tipc: Enabled bearer , priority 0 [ 591.560009][ T8781] device syzkaller0 entered promiscuous mode [ 591.622470][ T8780] tipc: Resetting bearer [ 591.915363][ T8780] tipc: Disabling bearer [ 600.203944][ T8871] tipc: Enabled bearer , priority 0 [ 600.276108][ T8879] device syzkaller0 entered promiscuous mode [ 600.356175][ T8878] loop2: detected capacity change from 0 to 1024 [ 600.371768][ T8866] tipc: Resetting bearer [ 600.729464][ T8878] EXT4-fs (loop2): inline encryption not supported [ 600.746439][ T8878] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 600.746439][ T8878] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 600.746439][ T8878] [ 600.751125][ T8866] tipc: Disabling bearer [ 600.815563][ T8878] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 600.878514][ T8878] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 600.878514][ T8878] [ 601.217577][ T8878] loop2: detected capacity change from 0 to 4096 [ 601.315494][ T8878] EXT4-fs (loop2): Ignoring removed bh option [ 601.355204][ T8878] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 601.396603][ T8878] System zones: 0-5 [ 601.448381][ T8878] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,dioread_nolock,block_validity,errors=continue,grpjquota=,bh,delalloc,noquota,,errors=continue. Quota mode: writeback. [ 602.624102][ T8926] device syzkaller0 entered promiscuous mode [ 602.947531][ T8937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1078'. [ 605.388618][ T8948] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1080'. [ 605.901109][ T8963] tipc: Enabled bearer , priority 0 [ 605.931070][ T8963] device syzkaller0 entered promiscuous mode [ 605.960211][ T8962] tipc: Resetting bearer [ 605.980179][ T8960] loop3: detected capacity change from 0 to 1024 [ 606.063528][ T8962] tipc: Disabling bearer [ 606.092224][ T8960] EXT4-fs (loop3): inline encryption not supported [ 606.115530][ T8960] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 606.115530][ T8960] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 606.115530][ T8960] [ 606.172370][ T4255] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 606.180777][ T4255] Bluetooth: hci5: Injecting HCI hardware error event [ 606.222199][ T146] Bluetooth: hci5: hardware error 0x00 [ 606.246787][ T8960] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 606.300124][ T8960] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 606.300124][ T8960] [ 606.594782][ T8960] loop3: detected capacity change from 0 to 4096 [ 606.854883][ T8960] EXT4-fs (loop3): Ignoring removed bh option [ 606.897030][ T8960] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 606.949839][ T8960] System zones: 0-5 [ 606.986447][ T8960] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,dioread_nolock,block_validity,errors=continue,grpjquota=,bh,delalloc,noquota,,errors=continue. Quota mode: writeback. [ 607.067190][ T8994] device syzkaller0 entered promiscuous mode [ 608.411582][ T9021] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1095'. [ 608.520822][ T9030] tipc: Enabled bearer , priority 0 [ 608.531033][ T9030] tipc: Resetting bearer [ 608.541991][ T9029] tipc: Disabling bearer [ 612.520895][ T9052] loop5: detected capacity change from 0 to 1024 [ 612.595726][ T9056] device syzkaller0 entered promiscuous mode [ 612.658219][ T9052] EXT4-fs (loop5): inline encryption not supported [ 612.701029][ T9052] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 612.701029][ T9052] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 612.701029][ T9052] [ 612.830702][ T9052] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 612.871607][ T9052] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 612.871607][ T9052] [ 612.928919][ T9062] autofs4:pid:9062:autofs_fill_super: called with bogus options [ 614.318974][ T9071] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 614.327557][ T9071] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 614.336244][ T9071] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 615.244649][ T9052] loop5: detected capacity change from 0 to 4096 [ 615.263659][ T9075] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1111'. [ 615.290030][ T9052] EXT4-fs (loop5): Ignoring removed bh option [ 615.462408][ T9052] EXT4-fs: failed to create workqueue [ 615.484530][ T9052] EXT4-fs (loop5): mount failed [ 617.220421][ T9110] autofs4:pid:9110:autofs_fill_super: called with bogus options [ 619.736393][ T9137] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1128'. [ 620.564540][ T9156] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 620.573381][ T9156] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 620.581970][ T9156] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 621.768609][ T9166] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 621.777872][ T9166] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 621.786554][ T9166] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 622.815822][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1135'. [ 623.009550][ T9182] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 623.018064][ T9182] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 623.026746][ T9182] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 624.416257][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.422864][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.460322][ T9200] autofs4:pid:9200:autofs_fill_super: called with bogus options [ 624.897016][ T9202] tipc: Enabled bearer , priority 0 [ 624.994857][ T9202] tipc: Resetting bearer [ 625.123858][ T9201] tipc: Disabling bearer [ 633.454529][ T9262] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 633.463295][ T9262] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 633.472035][ T9262] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 635.030552][ T9277] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 635.039096][ T9277] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 635.048092][ T9277] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 643.528162][ T9317] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 643.733704][ T9324] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 643.742377][ T9324] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 643.750891][ T9324] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 644.223233][ T9329] ================================================================== [ 644.231543][ T9329] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4f/0xf0 [ 644.238934][ T9329] Write of size 4 at addr ffff888149b3e7a0 by task syz.4.1176/9329 [ 644.246833][ T9329] [ 644.249151][ T9329] CPU: 1 PID: 9329 Comm: syz.4.1176 Not tainted syzkaller #0 [ 644.256513][ T9329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 644.266870][ T9329] Call Trace: [ 644.270178][ T9329] [ 644.273150][ T9329] dump_stack_lvl+0x188/0x250 [ 644.278100][ T9329] ? show_regs_print_info+0x20/0x20 [ 644.283397][ T9329] ? _printk+0xda/0x130 [ 644.287568][ T9329] ? load_image+0x400/0x400 [ 644.292066][ T9329] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 644.297526][ T9329] print_address_description+0x60/0x2d0 [ 644.303070][ T9329] ? try_module_get+0x4f/0xf0 [ 644.307830][ T9329] kasan_report+0xdf/0x130 [ 644.312241][ T9329] ? try_module_get+0x4f/0xf0 [ 644.316928][ T9329] kasan_check_range+0x235/0x290 [ 644.321876][ T9329] try_module_get+0x4f/0xf0 [ 644.326374][ T9329] dvb_device_open+0xf1/0x370 [ 644.331149][ T9329] ? do_raw_spin_unlock+0x11d/0x230 [ 644.336348][ T9329] chrdev_open+0x5c5/0x6a0 [ 644.340770][ T9329] ? cd_forget+0x160/0x160 [ 644.345184][ T9329] ? fsnotify_perm+0x3a7/0x560 [ 644.349944][ T9329] ? cd_forget+0x160/0x160 [ 644.354360][ T9329] do_dentry_open+0x7ff/0xf80 [ 644.359151][ T9329] path_openat+0x26f5/0x2fa0 [ 644.363750][ T9329] ? verify_lock_unused+0x140/0x140 [ 644.368961][ T9329] ? slab_post_alloc_hook+0x4c/0x380 [ 644.374242][ T9329] ? do_filp_open+0x410/0x410 [ 644.379158][ T9329] do_filp_open+0x1e2/0x410 [ 644.383657][ T9329] ? vfs_tmpfile+0x300/0x300 [ 644.388442][ T9329] ? _raw_spin_unlock+0x24/0x40 [ 644.393302][ T9329] ? alloc_fd+0x598/0x630 [ 644.397753][ T9329] do_sys_openat2+0x150/0x4b0 [ 644.402426][ T9329] ? __lock_acquire+0x7d10/0x7d10 [ 644.407462][ T9329] ? do_sys_open+0xe0/0xe0 [ 644.411960][ T9329] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 644.417945][ T9329] ? lock_chain_count+0x20/0x20 [ 644.422794][ T9329] ? vtime_user_exit+0x2c8/0x3e0 [ 644.427740][ T9329] __x64_sys_openat+0x135/0x160 [ 644.432589][ T9329] do_syscall_64+0x4c/0xa0 [ 644.436999][ T9329] ? clear_bhb_loop+0x30/0x80 [ 644.441669][ T9329] ? clear_bhb_loop+0x30/0x80 [ 644.446361][ T9329] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 644.452436][ T9329] RIP: 0033:0x7f0597a1460e [ 644.456916][ T9329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 644.476957][ T9329] RSP: 002b:00007f0595c8bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 644.485371][ T9329] RAX: ffffffffffffffda RBX: 00007f0595c8c6c0 RCX: 00007f0597a1460e [ 644.493447][ T9329] RDX: 0000000000000002 RSI: 00007f0595c8bc00 RDI: ffffffffffffff9c [ 644.501422][ T9329] RBP: 00007f0595c8bc00 R08: 0000000000000000 R09: 0000000000000000 [ 644.509395][ T9329] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 644.517387][ T9329] R13: 00007f0597ccd128 R14: 00007f0597ccd090 R15: 00007ffde2e7b088 [ 644.525379][ T9329] [ 644.528421][ T9329] [ 644.530743][ T9329] Allocated by task 1: [ 644.534803][ T9329] __kasan_kmalloc+0xb5/0xf0 [ 644.539408][ T9329] dvb_register_device+0x311/0x2170 [ 644.544635][ T9329] dvb_dmxdev_init+0x2c5/0x420 [ 644.549488][ T9329] vidtv_bridge_probe+0xb56/0xf70 [ 644.554506][ T9329] platform_probe+0x137/0x1c0 [ 644.559176][ T9329] really_probe+0x284/0xc80 [ 644.563669][ T9329] __driver_probe_device+0x18c/0x330 [ 644.569034][ T9329] driver_probe_device+0x4f/0x420 [ 644.574133][ T9329] __driver_attach+0x46b/0x670 [ 644.578886][ T9329] bus_for_each_dev+0x182/0x1f0 [ 644.583729][ T9329] bus_add_driver+0x30a/0x5a0 [ 644.588421][ T9329] driver_register+0x32d/0x430 [ 644.593189][ T9329] vidtv_bridge_init+0x39/0x70 [ 644.597947][ T9329] do_one_initcall+0x272/0x730 [ 644.602724][ T9329] do_initcall_level+0x137/0x1f0 [ 644.607658][ T9329] do_initcalls+0x4b/0x90 [ 644.612009][ T9329] kernel_init_freeable+0x3e9/0x570 [ 644.617202][ T9329] kernel_init+0x19/0x1b0 [ 644.621527][ T9329] ret_from_fork+0x1f/0x30 [ 644.625937][ T9329] [ 644.628252][ T9329] The buggy address belongs to the object at ffff888149b3e600 [ 644.628252][ T9329] which belongs to the cache kmalloc-256 of size 256 [ 644.642292][ T9329] The buggy address is located 160 bytes to the right of [ 644.642292][ T9329] 256-byte region [ffff888149b3e600, ffff888149b3e700) [ 644.656084][ T9329] The buggy address belongs to the page: [ 644.661707][ T9329] page:ffffea000526cf80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x149b3e [ 644.672023][ T9329] head:ffffea000526cf80 order:1 compound_mapcount:0 [ 644.678693][ T9329] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 644.686771][ T9329] raw: 057ff00000010200 ffffea0001dd7e80 0000000900000009 ffff888016c41b40 [ 644.695348][ T9329] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 644.704106][ T9329] page dumped because: kasan: bad access detected [ 644.710502][ T9329] page_owner tracks the page as allocated [ 644.716211][ T9329] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 19974476353, free_ts 0 [ 644.734225][ T9329] get_page_from_freelist+0x1bbd/0x1ca0 [ 644.739773][ T9329] __alloc_pages+0x1ee/0x480 [ 644.744354][ T9329] alloc_page_interleave+0x24/0x1e0 [ 644.749558][ T9329] new_slab+0xc0/0x4b0 [ 644.753641][ T9329] ___slab_alloc+0x80a/0xdd0 [ 644.758230][ T9329] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 644.763678][ T9329] bus_add_driver+0xda/0x5a0 [ 644.768268][ T9329] driver_register+0x32d/0x430 [ 644.773023][ T9329] i2c_register_driver+0xb6/0x160 [ 644.778039][ T9329] do_one_initcall+0x272/0x730 [ 644.782791][ T9329] do_initcall_level+0x137/0x1f0 [ 644.787717][ T9329] do_initcalls+0x4b/0x90 [ 644.792040][ T9329] kernel_init_freeable+0x3e9/0x570 [ 644.797315][ T9329] kernel_init+0x19/0x1b0 [ 644.801637][ T9329] ret_from_fork+0x1f/0x30 [ 644.806042][ T9329] page_owner free stack trace missing [ 644.811404][ T9329] [ 644.813731][ T9329] Memory state around the buggy address: [ 644.819523][ T9329] ffff888149b3e680: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 644.827573][ T9329] ffff888149b3e700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 644.835623][ T9329] >ffff888149b3e780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 644.843782][ T9329] ^ [ 644.848881][ T9329] ffff888149b3e800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 644.856931][ T9329] ffff888149b3e880: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 644.864979][ T9329] ================================================================== [ 644.873136][ T9329] Disabling lock debugging due to kernel taint [ 644.880034][ T9329] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 644.887225][ T9329] CPU: 1 PID: 9329 Comm: syz.4.1176 Tainted: G B syzkaller #0 [ 644.895973][ T9329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 644.906108][ T9329] Call Trace: [ 644.909386][ T9329] [ 644.912319][ T9329] dump_stack_lvl+0x188/0x250 [ 644.917013][ T9329] ? show_regs_print_info+0x20/0x20 [ 644.922200][ T9329] ? load_image+0x400/0x400 [ 644.926695][ T9329] panic+0x2e5/0x810 [ 644.930579][ T9329] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 644.936731][ T9329] ? bpf_jit_dump+0xd0/0xd0 [ 644.941333][ T9329] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 644.947216][ T9329] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 644.953101][ T9329] ? _raw_spin_unlock+0x40/0x40 [ 644.957943][ T9329] ? try_module_get+0x4f/0xf0 [ 644.962609][ T9329] check_panic_on_warn+0x80/0xa0 [ 644.967544][ T9329] ? try_module_get+0x4f/0xf0 [ 644.972228][ T9329] end_report+0x6d/0xf0 [ 644.976526][ T9329] kasan_report+0x102/0x130 [ 644.981029][ T9329] ? try_module_get+0x4f/0xf0 [ 644.985701][ T9329] kasan_check_range+0x235/0x290 [ 644.990641][ T9329] try_module_get+0x4f/0xf0 [ 644.995133][ T9329] dvb_device_open+0xf1/0x370 [ 644.999802][ T9329] ? do_raw_spin_unlock+0x11d/0x230 [ 645.004991][ T9329] chrdev_open+0x5c5/0x6a0 [ 645.009490][ T9329] ? cd_forget+0x160/0x160 [ 645.013899][ T9329] ? fsnotify_perm+0x3a7/0x560 [ 645.018658][ T9329] ? cd_forget+0x160/0x160 [ 645.023069][ T9329] do_dentry_open+0x7ff/0xf80 [ 645.027749][ T9329] path_openat+0x26f5/0x2fa0 [ 645.032428][ T9329] ? verify_lock_unused+0x140/0x140 [ 645.037713][ T9329] ? slab_post_alloc_hook+0x4c/0x380 [ 645.042990][ T9329] ? do_filp_open+0x410/0x410 [ 645.047747][ T9329] do_filp_open+0x1e2/0x410 [ 645.052247][ T9329] ? vfs_tmpfile+0x300/0x300 [ 645.056830][ T9329] ? _raw_spin_unlock+0x24/0x40 [ 645.061674][ T9329] ? alloc_fd+0x598/0x630 [ 645.066001][ T9329] do_sys_openat2+0x150/0x4b0 [ 645.070668][ T9329] ? __lock_acquire+0x7d10/0x7d10 [ 645.075692][ T9329] ? do_sys_open+0xe0/0xe0 [ 645.080108][ T9329] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 645.086082][ T9329] ? lock_chain_count+0x20/0x20 [ 645.090925][ T9329] ? vtime_user_exit+0x2c8/0x3e0 [ 645.095865][ T9329] __x64_sys_openat+0x135/0x160 [ 645.100908][ T9329] do_syscall_64+0x4c/0xa0 [ 645.105352][ T9329] ? clear_bhb_loop+0x30/0x80 [ 645.110035][ T9329] ? clear_bhb_loop+0x30/0x80 [ 645.114860][ T9329] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 645.120763][ T9329] RIP: 0033:0x7f0597a1460e [ 645.125180][ T9329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 645.144780][ T9329] RSP: 002b:00007f0595c8bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 645.153447][ T9329] RAX: ffffffffffffffda RBX: 00007f0595c8c6c0 RCX: 00007f0597a1460e [ 645.161583][ T9329] RDX: 0000000000000002 RSI: 00007f0595c8bc00 RDI: ffffffffffffff9c [ 645.169815][ T9329] RBP: 00007f0595c8bc00 R08: 0000000000000000 R09: 0000000000000000 [ 645.177798][ T9329] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 645.185772][ T9329] R13: 00007f0597ccd128 R14: 00007f0597ccd090 R15: 00007ffde2e7b088 [ 645.193757][ T9329] [ 645.197062][ T9329] Kernel Offset: disabled [ 645.201410][ T9329] Rebooting in 86400 seconds..