last executing test programs: 8.44109283s ago: executing program 0 (id=736): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(r1, &(0x7f0000000080)='./file0\x00', 0x200, 0x7) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)="c1e220d8e43b10eefb0386fb", 0xc}, 0x1, 0x0, 0x0, 0x10011}, 0x24002094) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}, 0xffffff94}], 0x8000000000002f2, 0x40002022, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) lseek(r4, 0xb, 0x4) write$FUSE_INTERRUPT(r4, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r5, 0x9, 0x0) 7.003527895s ago: executing program 0 (id=739): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() setrlimit(0x0, &(0x7f0000000100)={0xb, 0x3}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) connect$802154_dgram(r0, &(0x7f0000000340)={0x24, @short={0x2, 0x1}}, 0x14) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x3f, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000300)=@default_ibss_ssid, 0x6, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x4, 0x0, 0xf9, 0xa, 0x60, 0x20, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xffffffffffffeffd, 0x50}, {0x5}, 0x5, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x850) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a00"], 0xb8}}, 0x4000) 6.819552137s ago: executing program 1 (id=741): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x80002, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmmsg(r5, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 5.881282798s ago: executing program 1 (id=744): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000060000"], 0x48) io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000002480), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x38, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000074f86fc9506010400000000000000000500000a05000100"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r6, 0x11, 0xa, 0x0, &(0x7f0000000080)) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "0000ffff"}, 0x28) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file7\x00', 0x0, 0x10}, 0x14) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[], 0xcc}}, 0x0) 5.880881901s ago: executing program 2 (id=745): clock_getres(0x17, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000087dd23b23c6206ab12af99aa4575a1af1c7c7d39ce3c833d2a27e752fd6ec751d7f868a4332cb24e5e0d18e899163af37b773acbe2e3c6e24fa484d83d4499f00885c6f2c0877a6b3797b490f5a7d25508609fcb021cd6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x1000004, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_OPERSTATE={0x5, 0x10, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x7f, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b5080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000820000009500"/72], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000280)=@sr0, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000300)='nilfs2\x00', 0x1a0c000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000000100)=0x7) ioctl$USBDEVFS_FREE_STREAMS(r4, 0xc0105500, &(0x7f0000000140)=ANY=[@ANYBLOB="a1"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x800) readv(r7, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0xcf00}, {0x0, 0xe00}], 0x10000000000000fb) r8 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r8, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f0000000340)={0x7, 0x4, &(0x7f0000000040)=[0x5, 0x6, 0xfff9, 0x9], &(0x7f00000000c0), &(0x7f00000002c0)=[0x100, 0x7, 0x1, 0xa8, 0x2, 0x9, 0x9, 0x80, 0x8], &(0x7f0000000300)=[0xeb]}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="14010000300001000000000000000000040100800c0002000000000000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0xfffffffc) ioctl$sock_x25_SIOCDELRT(r7, 0x890c, &(0x7f0000000740)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x5, 'team_slave_1\x00'}) quotactl_fd$Q_GETQUOTA(r9, 0xffffffff80000702, 0xee01, &(0x7f00000003c0)) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) read$FUSE(r7, &(0x7f0000002980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x2, 0x0) 5.722468059s ago: executing program 3 (id=746): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018180000", @ANYRES32, @ANYBLOB="000000000000000085200000050000009500000000000000c24b399501ef627ad5401c8da363bf34487859c5b4fababf8d8fbd91cc8c8fd29e5808465e8969f9eec3054836e09f4ab3ab26eb5084b039663dfd47e3f6"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x81}, 0x10, 0x22e86, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000ac0), 0x10, 0x762}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000980)=ANY=[@ANYBLOB="602200004400010029bd7000040000000200000004004880482201"], 0x2260}, 0x1, 0x0, 0x0, 0x20004895}, 0x2000c814) socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mq_notify(0xffffffffffffffff, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)) timer_settime(r3, 0x0, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) close(r4) 5.4651959s ago: executing program 0 (id=747): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000240)='./file0\x00') openat$binderfs(0xffffffffffffff9c, 0x0, 0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469f"], &(0x7f0000000100)='GPL\x00'}, 0x94) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x80186803, 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x7, [@typedef={0x0, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{}, {0x8, 0x4}, {0x0, 0x5}, {0x4, 0x1}, {0xf, 0x3}, {0x5, 0x2}, {}, {0x7, 0x2}, {0xf, 0x3}, {}]}]}, {0x0, [0x61, 0x30, 0x5f, 0x2e, 0x61]}}, &(0x7f00000005c0)=""/238, 0x87, 0xee, 0x0, 0x1}, 0x28) chroot(0x0) 5.436201705s ago: executing program 2 (id=748): write$tun(0xffffffffffffffff, 0x0, 0xfdef) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) syz_open_dev$hidraw(0x0, 0x82, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x801}, 0xc8c4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="59dcfa311443ff3125f6caddcd030333581e502b", 0x14}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="10ffffffeb2986ca4ea6fdf9c7305abdea3886a7143302abdff3ca66f671962437b7520ba118180fc8f16f580a0eb7e21305534975a25709185e4e9ff0d9e3efa27ca786780735bc401111c74193bee3ea682c2fbcb8e8844c4b05aaf1853fda9748408b2daf4f8b8a31f027ade66b63c14cc75003e9c3fae66c9fcb8ade9fea839d1bac9a75f4fe496ffc8de0b917b9acd03ae9abe4c31b06afd24c1afb"], 0x10}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x1, 0x0, &(0x7f0000000040)="a1"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) 5.30498433s ago: executing program 3 (id=749): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) gettid() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="000000d1"], 0x50) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x6, &(0x7f0000000240)=[{0x6, 0x6, 0x9, 0xfff}, {0xfff9, 0xa, 0x8, 0x8}, {0x926c, 0xb, 0x2, 0x80000000}, {0x2, 0x0, 0x4f, 0x9}, {0xa3, 0x0, 0xfb, 0xfffffff8}, {0x9, 0x3, 0x8, 0x8001}]}) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) close_range(r1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(0x0, r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4008000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) fsmount(0xffffffffffffffff, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x32, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x80000) socket$inet6_sctp(0xa, 0x5, 0x84) 4.230950157s ago: executing program 0 (id=750): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x40, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0xffffffffffffffab, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 4.220385423s ago: executing program 2 (id=751): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x80002, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmmsg(r5, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 4.099649348s ago: executing program 3 (id=752): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x80002, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmmsg(r5, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 4.0239703s ago: executing program 1 (id=753): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x0, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000040)={0x5, r2, 0x3e, {0xe8, 0x3}, 0x7f}, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0xa00965, 0x2}) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000440)={r3, r3, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) shutdown(r3, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2) socket$alg(0x26, 0x5, 0x0) 3.308958496s ago: executing program 2 (id=754): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="090020001600"/18, @ANYBLOB='\x00'/17, @ANYRES16=0x0, @ANYRESOCT], 0x50) socket$pppoe(0x18, 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x88d4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xf0, 0x40, 0x180, 0x0, 0x4, 0x2, {0x0, 0x9}, {0x350, 0x20002, 0xffffffff}, {0xf4ef, 0x300}, {0x3, 0x4000002, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x800) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r5 = io_uring_setup(0x115a, &(0x7f0000000440)={0x0, 0x3ca, 0x40, 0x3, 0x226}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, 0x0, 0x6c) mkdir(&(0x7f0000000040)='./mysys\x00', 0x64) mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$nfs(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x8040, &(0x7f0000000140)={[{'lock'}], [{@obj_type={'obj_type', 0x3d, '/dev/video#\x00'}}, {@subj_type={'subj_type', 0x3d, 'sysfs\x00'}}]}) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys/bus/pci/drivers/xhci_hcd/new_id\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='1af4 10', 0x7) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000000c0)={0x0, 0x42474752, 0xf00, 0x0, 0x3, @discrete={0x1, 0x8}}) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) r7 = accept4(r3, 0x0, 0x0, 0x80000) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000814}], 0x1, 0x40800) 3.009278233s ago: executing program 2 (id=755): r0 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000409000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() add_key(&(0x7f0000000840)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0xb, 0x9, 0x32315258, 0x7, 0xe, 0x8, 0x5, 0xa, 0x0, 0x2, 0x0, 0x3}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wlan1\x00'}) 3.008241938s ago: executing program 3 (id=756): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'dummy0\x00', 0x1000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) setns(0xc9, 0x0) r1 = socket(0x2a, 0x2, 0xd) socket(0x2, 0x80805, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0xa90, 0x5, 0x0, 0x4ba}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031211d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000048c0)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f3d6e3d26e0953cd941b35beb47bf8d3ec308cd2f1578709c7c024d8a35c79fa866a68d3c2a57840ca367fae5ad498f0d478d4a7f9b3207792e4bc3b67449cbd24cb6b5dbf7968ce455011d258c63a9f7ccc1c3a80d4104be6fac97028cf8eb4", 0x60}], 0x1, &(0x7f00000025c0)=[{0x58, 0x102, 0xa, "6069224862b481ac6000f011533eb1076faff32d81f5dbe87ecfe36acca1aedc699afb28a6e7ab02c91aa1c99c23227d5242d93132e9f9a7f3d22703153a2b9066e6eab7257d9b809b040287"}, {0xb8, 0x1, 0x7, "4e8685643df5eae28b2f5e709606449020f9d156eccc47e70c08bb23d9199675db6f6306bbeba46086ca45b9e1ba09bf395c3687570dbca6016b473be06eb4ea27169648ca384128f1c77dc8e95eb17e71b793f3ca00a3b7411bf5593d23f6409bebf782183d803e9466f94a3424e9da3ed6982c6e48697cfbc8a58b9f3641bf411e58e42f9d6a6a823858a1ec8d573f547c4fa9fcad8935d6bd9f116f8634cc7599da4628500821fb"}, {0x28, 0x108, 0x4, "05c175aa89069d2d92f604f091bdb468a270211ae47045283f"}, {0x64, 0x117, 0x55c, "0c5d7cde42977645d11d78c06989a872b7024bc0110d55a6a3f91b065b675915e5aed0906eb0a6a81f8ef479052eb47fe29c6aa37605a3947fe491ccda863f6bb87147e1a3a04e601877efa9e6df25e0767672796b68a4"}, {0x100c, 0x84, 0x7ff, "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"}, {0x88, 0x104, 0xe82, "7d08aa6ecf7a75fa5f1907f77e9656fbe9a724fd811a7c7f7dc0b6672a866be7da302c5728a4391e7007bde8e795a802a6bb5980d38ff91be80a3af9e902384fe8a2f0aaa27da6541e9e75fc05cc72bde1d6b67413fea8b3ce1068b886febd42ed04cefd0ad4d051cd400529d3bb1683251a0231cd4fea6bac32"}, {0x44, 0x103, 0x0, "66c82736a494df4e4a2932df057770f6441655b41d92f7642fd547c4adcd52e35ed5b40f58a6bc943caa95ceee16ea06b8040ee55036"}, {0x100c, 0x324, 0x30, "a739a99a913bc322700b6f1c31285b7a67ffd6c6489090db56e89da01c90b3b9d25e449892498a3304677a00ee579debf10d462ebdd6bacc84ffd91b1f2fcecd58f97595b0e7deffa726cfc6bee7c423467b76f43a9256564747c2088d6cb35fa6be0111a2dde43be350cb19102d36b756711eab7853bbb59122a9d9841db4d763d41fb49356dd3ad683612aef6f6bd7ada87b51563adba4c1b2718c777a41f8a5c25c2dd3a15b78ae34eb489c8442ea93874205caaada1f629d6c88f7fdfee15badd70e1e5cf8a3160d633623876fb3ea7bf76a58a25c6f73bdc9e311c894242216ad0dc44e773356023b86e372c8f6e660c6866483abb3a039461f2de6a6fbdff3c987ff9ea09130429a9358bb2906b8af8a962d192cf726d4689a4f6f83607cda46cbae1497bc88043129886e0320546b2a559a420f809176d245c845b9950e97ddc89a2eb03b9fc3d2cc48ac85bf4f2510bddc3946b273f0fbde757110c9d22320ac0116a88beb8e09067a9edf45feb2599c31745c89a3da5b6ff939a7b4bf00e0ee26ee4e1bcf99192770da189d7e88d1a0cf0fd65bfb8dea8cb15a574607d900a3f590584cac7e9a5821207de8b3fe4330bcccbc4483e92dd54bd4d42b8d8432e48270fef9bdd89971556abadfb81222ea0dc710c7b37ec6e935e1c95db7b979023e28f32ab078e79d9f284bba3e24487b5dafba23651115b88588903e58aca82d4f8bb950487f8891485fc6ac7350e90e9d5453bd2328a6c969a080d6d30a93e96be229859de268a444e53e727767e0ffd0bdfae7f3257fd5a3b4d884d175a500a50706167eee53368a37c79a0dd7ea24900514549a4ff31470071e2df8f9c0a1f99f5cb6bee20d2d07d0ec77c9a8ea693c91f1fe74882e26962d58b1a4424bece5bba761f11eda4ac7972599c1062f9ec4e0bbd21aa8b439563ea87097f31e8188ad0e7e82ca54a973757d9dc17dce3b364ce69f936e8728c4d57f23a6b510e50ea008a0954f023d02828b2b9cac30ab383e258f1b66b11e8f09411db3d7c7b541ea01e74a14a9b559a0b87606330ad03c1accb5dc21055e17e020f07c9b521b1cb8276957515ab23dc77323c69ab172d729aa1cedb5087f8e464121594a5f086b96f869cb875eca50d8546a51cb75eb8bc8519c4267c6796dd80960892474a44d47f051e92fab63486babbfe597fc098350bba64fc50d801d3132a68dd75fe9c23097449634e34ccf990dd7dc8390eeba2697838b267d5d9d8b3169510f74987ed34e7903a5b2b6949a4ead1dcf98e62ef53c38d7c464a38f812d33319ecec9cc751b5b96ed75fce5dcfef896a7b1fabace60816e7da9c91b843f50c1e229cf51ded8d12e9d7401c7a41a7ed6005241596a2aac7bf0befc77aa364b2c7d9a5699865af429358e21f8a8a7bfa6847796c41845fd7535a15a10b0e7c05006d60060956679347779267f95c9d4efc0cc0ee7d9fdab528526a58612f201a8f87e34e2d62267f487275dea4925f9347c356ccf7b5dabe7917094ab1a360b24cacdb3137ff20115290465a1b8924885d19fd253076b5663ffe831ecd8aa036c8dc54b953da10326d75655e0e3dda6f777e5fd3e15edbb6d3dfd4cec4f70e1e2706cfcd0e4ab3566f3cbc142dbfda8d0310f455679ba419e837a566b6d1e1f22c3d03eed340bba272afaeeda571b3a0a1bc35ecfe1c9b5aa8a01e5030409f6f15749ab9a17851e647caab09908fb08f9ab4b666142dc4c5a5cc30b2f1f55bfc121ed37fd01cc1bcb563a86949c43f7515b1c5e375559749ddd6ee460a0193eb3c405ff44d296c8c7c9de15d08e4ea83e1e410d4c4735fae7bb9f3efbffb87089ffa5daaff07a92fa55c32827123d8fadd8a3b67308663ecea6a5b6672b67d9d1fb317656d163a8c09047c93464903c3f2f9a0acee035ce221a881c46c2a90fe4d7ecbc8a7b70c3a7bdb125f860fc709d1e009d753f5a8eb82f57e59c220537f1567f5093367fb842cb074e2540bac2ad575cf8c42180ed9d2c6d389a4b3c87cc45d65c8c46caa4704ae6c2c2162d04b71ecd548fa8db5b8034ab171f0dfea8126905868e662560ea8dd6d17f11dbe679814504d1319a1045e2d9483bca714d186e44ca3ab0bce0f10c1358a57ecc738e5a071b2d393aa3df2ff9ca07c1cf75962025e8d353b0ef6212d954c15e98b0e665bec0cea45404457192fa9910df0f8a68ed93eb251863985cbd66e2167e8f71db41ff45d99cf583b9523ad35e5e690d472e3d3dcdfd8f735cc89e5e0eeb0d5e4891f58e9cced8de61eb58791b25e042162ffba0345969459b4107b2109699d0b0e5d4958826c349ce633838eb61a4691c52e37398a74f16df8d422ec11c39b326c24eccf1e1664ab260b3685b4cde8c7a0b6f78b7229616a2920ff12d93c1586c172a64f89c2da4597bd39b6c1999917c6a629130ac0133d68a8cfafdb3f51ff766439c7c21929de7dac321eff2be56e67d16e87c66000410a41b243972427f27b39a43f4f15a636c637ec5c49eef365f98f55038f461ceda1ed32122fcda91597ef4c99d085b7a64f7dd59ca5589072f1158d854c2b980f0222c029519d9bbd6cf4fd5c87173bf5c67ed8638d53fb05e133f0111f5674bbe3fe7d71755afc529a6669296429a6ce241283e774d9fd16448d6c7246496a1bc77bce6c8c463ff84237c42d52f4125e5da3d066a802099758b94c4101b20190cf78b4a767b0f7c0cd2c6ebdad675f5bc95f46e959bed34e49d191f3099a2f7917c9417f9988b0e2785d950ad8544b19fbfd9d29b3d77984428a2a6d5bc44eb567e733397ddb7b7921adfa2ebbe64308bbc26aeff34a54b9f48fa7a1b35635ea536ff04dbb19f15b2de4238686a032d72493e6660c03f87568440e10d9962a54a2e2594f2c8550e03b3279d2b93749579f23ee020cb0e4496e00d5aeffdf3e9513677ef34b0cf0b4d33e2897265089b59385ef673e2314700a009ff92a86280d2b40d6c53ab649ab87941793bb4d496448846a8a78cebd0ea1279b94386a4ac46370287d72733058f24177a1b29aa0734b710ccc6d74fcced170fa15b39c79de34bbc5484faf1fcda75d06e60059eda6c47cae9a8df8856ab4a0f93e86a4ad1bd5af40259a2f936c6d92bb6ee087704e3e9f5b03cd9dba13e23250da916cbe0f2a671e968340d287e19be2acd9905124f8eb75f953c46d30a758e78493ad544bdcdeae7cb39e7cb0eed15eb5c817f16be589e5b51ba3e1a202256f95aff81a6c0823a6cfa2118ab9f80e9397e3b3ebb201dca91ae8c5ad2786645584a2dc64b1f06ed3b9415eb06aada7c897c829adbc3145767e2f307b589641b5ff0736a183f755c9769b66259fb9be4fef1ed0ccee3517ad10a42e1c333aec9796d9c83afb518aa69a4811d454fdfdc16c29f0009a42490ccdc612f6216e8fd6c3dd4aa9b2a60b9a5e59f93269b3cedd713cef92305d0d2f429c4ab4f101976e163c8515c19531ee13f58a5b2fd11dda6d583d62d13e6996c4ff9745d7f9ca1501b84aa347b9fd0bd74a0d95fc5ba65fb3deb3cb1ba30addc6a89cd83b313ddce46eeb31109dad92ddaa4b953a6d160684ebf3091dab23b8083b86dcc68270d4585fe791192536f97f3dcc866a0f972047f9fb020659a54d5a972ba5dd44227bff5c227943a9450626f6544eced58083017ae5e510745b4ed6f39608a4fa55497bfe0e13f11c31932198208b994cb9c84caf4a1dc617edcbd57a93eb8de3c7cf197549256fd09e56c996051e5765a4cf50de232fda1f3f8ca34b3c5b3265c3acb14b588523f1c14c57dac6c7c95f97170d1457004d488572d8817e793c7a43b7f80764fccd8123c259f8e5e63c95192b296385e96e55ffcc56d2b2890c476ca212c7a2f1d64156e709383ff03829717bd79c58cdeeb8c6c9695c46cc677d45cc03404881ffc778432d65b85a7f884813ed4e4c81f58d4c4820d63fb649db66449d29991eeecceb595237cef33a594ddfc4efc025cfa8803ac71ce7e068ac5071c1b4b80a3c6d683bc09b79b3976926df458fad57623f2f3e69eb5394f617bd0516becf31c1ff22d7f2657046f786490b1193ef69f97b01e6aed589d28dcebc5f7834b9a615e9cead7df7054dd39c775fb2dd60fb274c89b94f9f333c94bbbb39622d42e52038e2e8ddf1fba708ea2e6b64eae904c679683f6b88462f5e0b15962e33c5eaf79311fc0e3eb71e22eaba32d6c8d45331d52e347688152911292ca004e19e714ae8fc9a1478a71786fa08d8cc02d84d342f5e24ad1c3e515eb7f0354922460b73fa532523528ea080264ac708f2d288ef0ce6baef681ab95c16f65e5062541e17377b503dab215f8767b5c3acca9c7a4d5853a058e97da6ecf47e4f881f8317efccb46784c4a2e44c1efc1440757fc3bd374b2ee46d73a4f4d5461b3e20b0cdf51fd1fce8a5808e020c2e41f119c7ecdce5a73b13893236d9686aa15af924f88f307471247b6bf3d224eef4496346bfffbb37294499ace292060876abd556b4a47c52a0afa3de0202253ecca4580263698b87c9dc640aa0915e33aa5962feea10f80c99d78c03ef7c17c3523568418c02d56ee776922a34f1fab9d3b81ffe4433c03bf7da7b967c9ec5e87d8e281178907a65afd540d3e97d4a96ca142497fc3f056ba5ff73e3f7b0f5defd59a0228343f96d2ba6a1cbcb1ad3ee42de6dff900a02cf40b3c55e574e75421fc1d65bb26416f3d232e0342da6e419c89b5fcc72bba43f6ce888d9b5c05e7045ebe0ed71d0a6861db3db910a5181eb0f5499076f8b257a6884acb7f33d3ce923597aa2b65b3167f2d3185bca696850cb6b9a28a6a9c83ef962d27c6c9017482f812b2ef4a11f7b3b9e1c6bd49032a6b0a8f17d732d57f6f7c4be5d345bc8d54df6593cb8e3d3babc9bf338d419cf2a558b6389d4528c638a2f5cbaf226ea69453e48dcf85512eeab7f515e91ae28673b96ff1e6775d182dcde8be00dc1794a6ca1191b1580bd797b871da83b284a0f4aaac10d31a1835343a1d0e7dcc3abb60ba50d295e65a734d73e35934202c68c0d311f9b1a2655f57b6a6dbffea5c506b50ba2b12165284745c8d8ee7f707b2547016057969b50a1084aea07bb27bfccd5cb639d00a219c8ec7916ea386db093c96821ec516c23cbb970427c21309c58e4022721f67c71e059c0af56140a239b3985bd88c9edc691a5adf477d3321f3c0d86080475ff0d7887e2d07959610e66c03f04431eb16577000040f0a7e39c46f73628b52aba6886db553853420991d4036eb71721d8b5c093521c813ad048012b7f435056b9f9c777035183946a818bc44e63416c28d9941326db4520c68d2ca0aeedbf1e22acfac7767b7e8203c9eff64207cdcf91e36e191f651fba506716a392bd2466bd294d3fb7ac71893b07460f7ea3e74a5662410c5342150f59d628c16582abadff854d6c1d8492b1e95f98bed4f9f6e4e1912021b15f457d4558f8a37f12d8e801010076491ec37505ce79e0fa636fdc060dcfb8505d1e9b2e4cbded699ab5304ac95f725b3c0d96f52eef2751f1c72bf93bb2942f2f06a4895c435d1fe16ffcd0d198d495e2221ec74bd7d75d528ac01a3e6a5110cc8649b7e15442b11c8613b537733adb915b5239deab9b903d98405024d11b881d2b907ef2c52d8e117d626330b8a3bbade6eaa321037cb597f9fa2ef8f32a598fce23aba2b11cef7d67f27ba405322f82afe5636d3dd5a22c60ec6629a4bf75c3bfca4ad917e65f7ec0b1934c900a1c58392"}], 0x2280}, 0x40000084) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB="0100000000003a00000008000300", @ANYRES32=r10, @ANYBLOB="04005b00"], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) close(0x4) 2.916649575s ago: executing program 1 (id=757): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f00000013c0), 0xc0, 0x40001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x148}}, 0x4810) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x804) 2.758894428s ago: executing program 3 (id=758): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000004000)=""/4099, 0x1003) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) ioctl$OCFS2_IOC_GROUP_ADD64(0xffffffffffffffff, 0x40186f03, &(0x7f0000000000)={0x28b1, 0x2, 0x0, 0x1000}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x16, 0x0, 0x7, 0x6}, 0x48) connect$llc(r4, &(0x7f0000000080)={0x1a, 0x118, 0x0, 0x8, 0x8, 0x10, @multicast}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, 0x0, 0x0}, 0x20) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}}, 0x0) 976.453646ms ago: executing program 1 (id=759): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000240)='./file0\x00') openat$binderfs(0xffffffffffffff9c, 0x0, 0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469f"], &(0x7f0000000100)='GPL\x00'}, 0x94) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x80186803, 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x7, [@typedef={0x0, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{}, {0x8, 0x4}, {0x0, 0x5}, {0x4, 0x1}, {0xf, 0x3}, {0x5, 0x2}, {}, {0x7, 0x2}, {0xf, 0x3}, {}]}]}, {0x0, [0x61, 0x30, 0x5f, 0x2e, 0x61]}}, &(0x7f00000005c0)=""/238, 0x87, 0xee, 0x0, 0x1}, 0x28) chroot(0x0) 976.111438ms ago: executing program 2 (id=760): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000001c0)=0xffffffc3, 0x389) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x8, 0x9, 0x2, 0x2, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2, 0xd}, 0x50) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80a0}, 0x4000) memfd_secret(0x0) r1 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000070904000001020d0000052406000105240000000d240f0100000000000000000006241a00000809058103000200fe000904010001020d00000904010102020d00000905820200020942f90905030210"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x7, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x32, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x90, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0xd5f}}, {{{0x9, 0x5, 0x81, 0x3, 0x79f, 0xa1, 0x7, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x8, 0x83, 0x6}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x2, 0x8, 0x7, 0xcf, 0xff}, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xfcff}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000440)={0x14, &(0x7f00000002c0)={0x20, 0x5, 0x4c, {0x4c, 0x23, "aafb9850df283668d251c6775e2f9c24f9d16fe831cf2c29586b18a370f58db561789a1d63aeaee4bd319bd9524b4651a882dae40014188ae73ba38d5bb6062305800bc24adc4e5c8cd5"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, &(0x7f00000013c0)={0x0, 0x22, 0x12, {[@local=@item_012={0x2, 0x2, 0x0, "d5b1"}, @local=@item_4={0x3, 0x2, 0x8, "d3802a5e"}, @main=@item_4={0x3, 0x0, 0x9, "e193d688"}, @main=@item_4={0x3, 0x0, 0x8, "0be06073"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x256}}}}, &(0x7f0000000780)={0x18, &(0x7f0000000480)=ANY=[@ANYBLOB="401523000000d9450fd2f5a318dcb4d98b5a31c63376438c696e4139e2c5465220898daf5b2221"], &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x97}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x11}, &(0x7f0000000600)={0x20, 0x1, 0x7e, "452af242f6efb241b1ee94bf0a6faeaadb866ba000977624320163423619f0b1969ea48e95ac3d9a595251b8bd51c1d11616969b8f61e4dc9f69c5bb00b28e385a1bfc49201500de4d63e312c99530b910f4c7a846c18bae4c9e6a8c59c1b07d2554fb26b2485b4148f67b539d8bf51374c32cb31577457a0629e2974364"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x1a}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480001, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='attr/fscreate\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) syz_clone3(&(0x7f0000000080)={0x1810000, 0x0, 0x0, 0x0, {0x20080027}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket(0x400000000010, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0xb30, 0x539, 0xf, 0x7, 0xf, 0x40, 0x2, 0xfff, 0x7fff, 0x4, 0x5, 0x8}}, 0x0, 0x0, 0x0, 0x0}) 974.462246ms ago: executing program 0 (id=767): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0xa}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x29}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000019080)={{0xa, 0x4e22, 0x9, @mcast1, 0x6}, {0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}, 0xffffffffffffffff, {[0x96, 0x1ff, 0x7, 0x7, 0x98ed, 0x6, 0x6, 0x1]}}, 0x5c) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@mcast1, 0x4e1d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x2, @in=@broadcast, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x80}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r6, 0xffffffffffffffff, 0x0) 15.782056ms ago: executing program 0 (id=761): sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000003, 0x204031, 0xffffffffffffffff, 0x97170000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0x3, 0x6}, 'syz0\x00', 0x38}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f00000002c0)={{0x0, 0x2710}, 0x12, 0x7, 0x100000a}, 0x18) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r2 = syz_open_dev$evdev(&(0x7f00000005c0), 0x3214, 0x0) syz_usb_disconnect(r2) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000740)=ANY=[@ANYBLOB="1201500200000008"], 0x0) ioctl$EVIOCRMFF(r2, 0x40045506, &(0x7f0000000180)=0xb) r3 = openat$mice(0xffffff9c, &(0x7f00000000c0), 0x24000) read$FUSE(r3, &(0x7f0000001300)={0x2020}, 0x2020) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 15.458387ms ago: executing program 3 (id=762): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file1\x00', 0x0, 0x37) ftruncate(r1, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='file2\x00', 0x42, 0x1ff) ftruncate(r2, 0x1000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='file3\x00', 0x42, 0x1ff) ftruncate(r3, 0x1000000) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/loop0\x00', 0x2, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/loop2\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/loop3\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r3) r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x24) write(r6, &(0x7f0000001100), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r7, 0x40480923, &(0x7f0000001300)="000000005a00000003000000000000000500000000040000040000000300000000000000") ioctl(r7, 0x40140921, &(0x7f0000001400)="000000000700000000000000000000000600") ioctl(r7, 0x40140921, &(0x7f0000001500)="0100000007000000010000000100000006000000") ioctl(r7, 0x80140912, &(0x7f0000001600)="0200000007000000020000000200000006000000") ioctl(r7, 0x400c0930, 0x0) ioctl(r7, 0x40140921, &(0x7f0000001700)="030000000700000003000000ffffffff0200") 0s ago: executing program 1 (id=763): syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x64, 0x4, 0x2f0, 0x100000c, 0x0, 0x1b4, 0xb8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@inet=@socket1={{0x24}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x5}}}}, {{@uncond, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x6, 0x6, 0x4, 0x0, 0x5, 0x1]}}}]}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x34c) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r7, 0xb) pread64(r1, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) pwritev2(r1, &(0x7f0000000200), 0x0, 0x3, 0xffff8000, 0x14) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x0, 0x4, 0x1, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff7, 0x400001, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x4, 0x4, 0x20001e5b, 0x3, 0xe66, 0x3, 0x6, 0x4006, 0x0, 0x3]}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:65242' (ED25519) to the list of known hosts. [ 41.519024][ T5666] cgroup: Unknown subsys name 'net' [ 41.651555][ T5666] cgroup: Unknown subsys name 'cpuset' [ 41.656365][ T5666] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.620576][ T5666] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.856135][ T5753] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.859991][ T5753] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.869799][ T5757] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.873691][ T5766] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.878201][ T5766] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.883010][ T5766] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.886271][ T5757] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.886419][ T5766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.887167][ T5768] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.888833][ T5768] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.889984][ T5768] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.890943][ T5769] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.891221][ T5757] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.893155][ T5766] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.894369][ T5757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.895805][ T5768] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.896211][ T5757] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.908378][ T5753] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.908962][ T5753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.912673][ T5768] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.404077][ T5752] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.407969][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.411049][ T5752] bridge_slave_0: entered allmulticast mode [ 47.415039][ T5752] bridge_slave_0: entered promiscuous mode [ 47.442798][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.445793][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.449028][ T5752] bridge_slave_1: entered allmulticast mode [ 47.452051][ T5752] bridge_slave_1: entered promiscuous mode [ 47.501456][ T5752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.509270][ T5752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.530665][ T5752] team0: Port device team_slave_0 added [ 47.567006][ T5752] team0: Port device team_slave_1 added [ 47.608072][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.610995][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.620999][ T5752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.638755][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.641697][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.652517][ T5752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.787317][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.790825][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.793913][ T5754] bridge_slave_0: entered allmulticast mode [ 47.798207][ T5754] bridge_slave_0: entered promiscuous mode [ 47.833325][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.836558][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.839990][ T5754] bridge_slave_1: entered allmulticast mode [ 47.844138][ T5754] bridge_slave_1: entered promiscuous mode [ 47.868713][ T5752] hsr_slave_0: entered promiscuous mode [ 47.872298][ T5752] hsr_slave_1: entered promiscuous mode [ 47.952013][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.963898][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.967200][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.970529][ T5761] bridge_slave_0: entered allmulticast mode [ 47.974629][ T5761] bridge_slave_0: entered promiscuous mode [ 47.983947][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.987106][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.990467][ T5761] bridge_slave_1: entered allmulticast mode [ 47.994232][ T5761] bridge_slave_1: entered promiscuous mode [ 48.006560][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.096059][ T5754] team0: Port device team_slave_0 added [ 48.102448][ T5754] team0: Port device team_slave_1 added [ 48.120838][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.124952][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.128918][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.132038][ T5764] bridge_slave_0: entered allmulticast mode [ 48.135907][ T5764] bridge_slave_0: entered promiscuous mode [ 48.156474][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.165487][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.168629][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.171863][ T5764] bridge_slave_1: entered allmulticast mode [ 48.175695][ T5764] bridge_slave_1: entered promiscuous mode [ 48.208025][ T5761] team0: Port device team_slave_0 added [ 48.210831][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.213122][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.222534][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.245195][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.250095][ T5761] team0: Port device team_slave_1 added [ 48.252883][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.255221][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.263888][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.281898][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.332543][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.335374][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.346382][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.369637][ T5764] team0: Port device team_slave_0 added [ 48.383666][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.386489][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.396930][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.409745][ T5764] team0: Port device team_slave_1 added [ 48.415843][ T5754] hsr_slave_0: entered promiscuous mode [ 48.419117][ T5754] hsr_slave_1: entered promiscuous mode [ 48.421635][ T5754] debugfs: 'hsr0' already exists in 'hsr' [ 48.423964][ T5754] Cannot create hsr debugfs directory [ 48.486228][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.489275][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.500587][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.515568][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.518583][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.529480][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.550499][ T5761] hsr_slave_0: entered promiscuous mode [ 48.554191][ T5761] hsr_slave_1: entered promiscuous mode [ 48.557153][ T5761] debugfs: 'hsr0' already exists in 'hsr' [ 48.559825][ T5761] Cannot create hsr debugfs directory [ 48.645147][ T5764] hsr_slave_0: entered promiscuous mode [ 48.648655][ T5764] hsr_slave_1: entered promiscuous mode [ 48.651734][ T5764] debugfs: 'hsr0' already exists in 'hsr' [ 48.654164][ T5764] Cannot create hsr debugfs directory [ 48.673523][ T5752] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.683707][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.688010][ T5752] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.694518][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.722531][ T5752] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.728226][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.737798][ T5752] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.744457][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.969815][ T5754] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.977438][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.981763][ T5768] Bluetooth: hci1: command tx timeout [ 48.981853][ T5759] Bluetooth: hci2: command tx timeout [ 48.986579][ T5754] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.988225][ T5768] Bluetooth: hci3: command tx timeout [ 48.988265][ T5759] Bluetooth: hci0: command tx timeout [ 48.998671][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.005322][ T5754] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.014342][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.019273][ T5754] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.030989][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.111649][ T5761] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.121691][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.126645][ T5761] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.134290][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.138365][ T5761] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.144670][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.148767][ T5761] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.154148][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.232945][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.240138][ T5764] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.247249][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.252070][ T5764] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.258656][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.266968][ T5764] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.273149][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.276934][ T5764] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.283171][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.311649][ T5752] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.335063][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.338579][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.355133][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.358202][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.394702][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.435072][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.457199][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.460117][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.481663][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.489477][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.493097][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.525102][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.533477][ T5761] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.551798][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.554773][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.571900][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.574477][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.580479][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.597391][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.600523][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.615497][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.617912][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.845341][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.902337][ T5752] veth0_vlan: entered promiscuous mode [ 49.912191][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.922797][ T5752] veth1_vlan: entered promiscuous mode [ 49.943454][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.988728][ T5754] veth0_vlan: entered promiscuous mode [ 49.992880][ T5752] veth0_macvtap: entered promiscuous mode [ 50.002534][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.014474][ T5752] veth1_macvtap: entered promiscuous mode [ 50.020631][ T5754] veth1_vlan: entered promiscuous mode [ 50.042891][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.048940][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.063882][ T5761] veth0_vlan: entered promiscuous mode [ 50.079973][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.086597][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.098314][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.102642][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.124094][ T5761] veth1_vlan: entered promiscuous mode [ 50.146989][ T5754] veth0_macvtap: entered promiscuous mode [ 50.162345][ T5754] veth1_macvtap: entered promiscuous mode [ 50.184947][ T5764] veth0_vlan: entered promiscuous mode [ 50.191378][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.194637][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.205489][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.210759][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.220488][ T5764] veth1_vlan: entered promiscuous mode [ 50.241054][ T5761] veth0_macvtap: entered promiscuous mode [ 50.247152][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.252534][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.255830][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.257712][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.263425][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.269555][ T5761] veth1_macvtap: entered promiscuous mode [ 50.278566][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.315905][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.336549][ T5764] veth0_macvtap: entered promiscuous mode [ 50.337469][ T5752] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.345869][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.364353][ T5752] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.365857][ T5764] veth1_macvtap: entered promiscuous mode [ 50.373135][ T5752] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.379855][ T5752] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.380052][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.387392][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.391200][ T217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.395174][ T217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.400425][ T5752] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.402345][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.407465][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.430804][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.435100][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.466999][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.473700][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.477151][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.478992][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.483774][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.495283][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.522666][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.526123][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.561815][ T217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.564358][ T217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.582606][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.588446][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.607291][ T217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.611162][ T217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.726375][ T5912] syzkaller0: entered promiscuous mode [ 50.728265][ T5912] syzkaller0: entered allmulticast mode [ 50.917120][ T5920] IPVS: Scheduler module ip_vs_ not found [ 50.949174][ T5923] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 50.999020][ T5923] kvm: pic: level sensitive irq not supported [ 51.000263][ T5923] kvm: pic: non byte read [ 51.008697][ T5923] kvm: pic: level sensitive irq not supported [ 51.009016][ T5923] kvm: pic: non byte read [ 51.013657][ T5923] kvm: pic: level sensitive irq not supported [ 51.013930][ T5923] kvm: pic: non byte read [ 51.019510][ T5923] kvm: pic: level sensitive irq not supported [ 51.020444][ T5923] kvm: pic: non byte read [ 51.027086][ T5923] kvm: pic: level sensitive irq not supported [ 51.027693][ T5923] kvm: pic: non byte read [ 51.034480][ T5923] kvm: pic: level sensitive irq not supported [ 51.034922][ T5923] kvm: pic: non byte read [ 51.042704][ T5923] kvm: pic: level sensitive irq not supported [ 51.043842][ T5923] kvm: pic: non byte read [ 51.050872][ T5923] kvm: pic: level sensitive irq not supported [ 51.051312][ T5923] kvm: pic: non byte read [ 51.057611][ T5923] kvm: pic: level sensitive irq not supported [ 51.057698][ T5768] Bluetooth: hci3: command tx timeout [ 51.058008][ T5923] kvm: pic: non byte read [ 51.066880][ T5923] kvm: pic: level sensitive irq not supported [ 51.067301][ T5923] kvm: pic: non byte read [ 51.071355][ T5768] Bluetooth: hci0: command tx timeout [ 51.071380][ T64] Bluetooth: hci2: command tx timeout [ 51.071395][ T5768] Bluetooth: hci1: command tx timeout [ 51.532056][ T5927] tipc: Started in network mode [ 51.534837][ T5927] tipc: Node identity 8a85379d51bc, cluster identity 4711 [ 51.537441][ T5927] tipc: Enabled bearer , priority 0 [ 51.551323][ T5927] syzkaller0: entered promiscuous mode [ 51.553277][ T5927] syzkaller0: entered allmulticast mode [ 51.568480][ T5927] tipc: Resetting bearer [ 51.575089][ T5926] tipc: Resetting bearer [ 51.584165][ T5926] tipc: Disabling bearer [ 51.626718][ T5931] syz_tun: entered allmulticast mode [ 51.634480][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 51.770049][ T5940] bridge0: port 3(syz_tun) entered blocking state [ 51.772454][ T5940] bridge0: port 3(syz_tun) entered disabled state [ 51.775291][ T5940] syz_tun: entered allmulticast mode [ 51.779400][ T5940] syz_tun: entered promiscuous mode [ 51.781755][ T5940] bridge0: port 3(syz_tun) entered blocking state [ 51.784435][ T5940] bridge0: port 3(syz_tun) entered listening state [ 51.839067][ T5946] netlink: 'syz.3.14': attribute type 1 has an invalid length. [ 51.896917][ T5952] gfs2: not a GFS2 filesystem [ 52.217733][ T5848] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 52.349995][ T41] bridge0: port 3(syz_tun) entered disabled state [ 52.401891][ T5848] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 52.405629][ T5848] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 52.410006][ T5848] usb 8-1: config 0 interface 0 has no altsetting 0 [ 52.414920][ T5848] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 52.419100][ T5848] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 52.422473][ T5848] usb 8-1: Product: syz [ 52.424278][ T5848] usb 8-1: Manufacturer: syz [ 52.426266][ T5848] usb 8-1: SerialNumber: syz [ 52.433378][ T5848] usb 8-1: config 0 descriptor?? [ 52.441662][ T5848] hub 8-1:0.0: bad descriptor, ignoring hub [ 52.444646][ T5848] hub 8-1:0.0: probe with driver hub failed with error -5 [ 52.452120][ T5848] usb 8-1: selecting invalid altsetting 0 [ 52.463804][ T5930] syz_tun: left allmulticast mode [ 52.696835][ T6001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.702454][ T6001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.707344][ T6003] syzkaller1: entered promiscuous mode [ 52.710451][ T6003] syzkaller1: entered allmulticast mode [ 52.740584][ T5848] usb 8-1: USB disconnect, device number 2 [ 53.137700][ T5759] Bluetooth: hci0: command tx timeout [ 53.139293][ T5768] Bluetooth: hci1: command tx timeout [ 53.139357][ T64] Bluetooth: hci2: command tx timeout [ 53.139380][ T64] Bluetooth: hci3: command tx timeout [ 53.340329][ T43] audit: type=1326 audit(1785377621.492:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.1.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 53.348987][ T43] audit: type=1326 audit(1785377621.492:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.1.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 53.357833][ T43] audit: type=1326 audit(1785377621.492:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.1.23" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 53.386806][ T43] audit: type=1326 audit(1785377621.532:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.1.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 53.397652][ T43] audit: type=1326 audit(1785377621.532:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.1.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 53.413922][ T43] audit: type=1326 audit(1785377621.562:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.1.23" exe="/syz-executor" sig=0 arch=40000003 syscall=276 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 53.423206][ T43] audit: type=1326 audit(1785377621.562:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.1.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 53.431009][ T43] audit: type=1326 audit(1785377621.562:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.1.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 53.439405][ T43] audit: type=1326 audit(1785377621.562:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.1.23" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 53.445972][ T43] audit: type=1326 audit(1785377621.572:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.1.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 53.474831][ T6013] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 53.628834][ T6017] usbip_vudc: v_rx exit with error -512 [ 53.640241][ T6019] syzkaller0: entered promiscuous mode [ 53.644974][ T6019] syzkaller0: entered allmulticast mode [ 53.840059][ T6005] orangefs_mount: mount request failed with -4 [ 54.194961][ T6043] mmap: syz.2.34 (6043) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.099146][ T6048] netlink: 76 bytes leftover after parsing attributes in process `syz.2.37'. [ 55.103310][ T6048] syzkaller0: entered promiscuous mode [ 55.105255][ T6048] syzkaller0: entered allmulticast mode [ 55.218311][ T5768] Bluetooth: hci0: command tx timeout [ 55.220051][ T5768] Bluetooth: hci2: command tx timeout [ 55.222107][ T5768] Bluetooth: hci3: command tx timeout [ 55.224565][ T5768] Bluetooth: hci1: command tx timeout [ 55.376691][ T6053] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 55.394574][ T6053] usbip-vudc usbip-vudc.0: failed to lookup sock [ 55.499142][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 55.502656][ T6057] netlink: 'syz.2.40': attribute type 30 has an invalid length. [ 55.554507][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 55.557885][ T6058] netlink: 'syz.2.40': attribute type 30 has an invalid length. [ 55.644035][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 55.875731][ T6065] fuse: fd is not a fuse device [ 56.388662][ T34] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 56.550285][ T34] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 56.555412][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 56.559615][ T34] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 56.564657][ T34] usb 8-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 56.568425][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 56.571712][ T34] usb 8-1: Product: syz [ 56.573440][ T34] usb 8-1: Manufacturer: syz [ 56.586793][ T6069] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 56.594467][ T34] usb_debug 8-1:1.0: debug converter detected [ 56.608584][ T34] usb 8-1: debug converter now attached to ttyUSB0 [ 56.630628][ T5830] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.634612][ T5830] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.639136][ T5830] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.642802][ T5830] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.684530][ T6058] Zero length message leads to an empty skb [ 56.813053][ T9] usb 8-1: USB disconnect, device number 3 [ 56.836291][ T9] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 56.847078][ T9] usb_debug 8-1:1.0: device disconnected [ 57.954006][ T6096] syzkaller0: entered promiscuous mode [ 57.955970][ T6098] binder_alloc: 6097: binder_alloc_buf, no vma [ 57.956278][ T6096] syzkaller0: entered allmulticast mode [ 58.327335][ T6081] Set syz1 is full, maxelem 65536 reached [ 59.076298][ T6105] tipc: Enabling of bearer rejected, failed to enable media [ 59.288589][ T1351] libceph: connect (1)[c::]:6789 error -101 [ 59.292042][ T1351] libceph: mon0 (1)[c::]:6789 connect error [ 59.331060][ T6136] Bluetooth: MGMT ver 1.23 [ 59.573736][ T1351] libceph: connect (1)[c::]:6789 error -101 [ 59.575869][ T1351] libceph: mon0 (1)[c::]:6789 connect error [ 59.636854][ T6153] tipc: Enabling of bearer rejected, failed to enable media [ 59.747430][ T6159] fuse: fd is not a fuse device [ 59.751198][ T6159] fuse: fd is not a fuse device [ 60.088380][ T1351] libceph: connect (1)[c::]:6789 error -101 [ 60.090802][ T1351] libceph: mon0 (1)[c::]:6789 connect error [ 60.099030][ T6127] ceph: No mds server is up or the cluster is laggy [ 60.271066][ T6192] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 60.280194][ T6192] nfs4: Unknown parameter '\:' [ 60.493189][ T6206] netlink: 'syz.2.79': attribute type 1 has an invalid length. [ 60.534689][ T6212] fuse: fd is not a fuse device [ 60.571633][ T6214] netlink: 'syz.0.83': attribute type 1 has an invalid length. [ 60.602920][ T6216] fuse: fd is not a fuse device [ 60.767668][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 60.918436][ T6240] fuse: fd is not a fuse device [ 60.937653][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 60.943769][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 60.947942][ T9] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 60.951025][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.955980][ T9] usb 8-1: config 0 descriptor?? [ 60.965326][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'. [ 61.013840][ T6245] netlink: 'syz.0.92': attribute type 12 has an invalid length. [ 61.171196][ T9] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 61.381019][ T34] usb 8-1: USB disconnect, device number 4 [ 61.383599][ C3] iowarrior 8-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 61.943791][ T6258] fuse: fd is not a fuse device [ 62.261265][ T6275] binder: 6273:6275 ioctl c0306201 80000080 returned -14 [ 62.361605][ T6282] syzkaller0: entered promiscuous mode [ 62.363213][ T6282] syzkaller0: entered allmulticast mode [ 62.383352][ T6286] syzkaller0: entered promiscuous mode [ 62.387701][ T6286] syzkaller0: entered allmulticast mode [ 62.713814][ T6300] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 63.519862][ T6310] overlayfs: failed to resolve './cgroup': -2 [ 63.820593][ T6302] @0Ù: renamed from bond_slave_1 (while UP) [ 64.763788][ T6344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.128'. [ 64.991012][ T5753] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 64.995414][ T5753] CPU: 2 UID: 0 PID: 5753 Comm: kworker/u34:2 Not tainted syzkaller #0 PREEMPT(full) [ 64.995440][ T5753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.995461][ T5753] Workqueue: hci0 hci_rx_work [ 64.995582][ T5753] Call Trace: [ 64.995598][ T5753] [ 64.995607][ T5753] dump_stack_lvl+0x100/0x190 [ 64.995706][ T5753] sysfs_warn_dup.cold+0x1c/0x28 [ 64.995754][ T5753] sysfs_create_dir_ns+0x24b/0x2b0 [ 64.995813][ T5753] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 64.995848][ T5753] ? find_held_lock+0x2b/0x80 [ 64.995888][ T5753] ? kobject_add_internal+0x25f/0x930 [ 64.995926][ T5753] ? kobject_add_internal+0x25f/0x930 [ 64.995959][ T5753] ? do_raw_spin_unlock+0x145/0x1e0 [ 64.995982][ T5753] kobject_add_internal+0x2c8/0x930 [ 64.996016][ T5753] kobject_add+0x16a/0x1e0 [ 64.996045][ T5753] ? __pfx_kobject_add+0x10/0x10 [ 64.996075][ T5753] ? class_to_subsys+0x10f/0x150 [ 64.996133][ T5753] ? kobject_put+0xb9/0x640 [ 64.996159][ T5753] ? _raw_spin_unlock+0x28/0x50 [ 64.996187][ T5753] device_add+0x294/0x1970 [ 64.996225][ T5753] ? __pfx_dev_set_name+0x10/0x10 [ 64.996248][ T5753] ? __pfx_device_add+0x10/0x10 [ 64.996278][ T5753] ? mgmt_send_event_skb+0x2fb/0x460 [ 64.996314][ T5753] hci_conn_add_sysfs+0x1a3/0x260 [ 64.996342][ T5753] le_conn_complete_evt+0x11eb/0x1f60 [ 64.996374][ T5753] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 64.996395][ T5753] ? hci_event_packet+0x186/0xcd0 [ 64.996421][ T5753] hci_le_conn_complete_evt+0x23c/0x3a0 [ 64.996445][ T5753] ? skb_pull_data+0x15f/0x1e0 [ 64.996476][ T5753] hci_le_meta_evt+0x34a/0x5f0 [ 64.996500][ T5753] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 64.996526][ T5753] hci_event_packet+0x51c/0xcd0 [ 64.996549][ T5753] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 64.996574][ T5753] ? __pfx_hci_event_packet+0x10/0x10 [ 64.996598][ T5753] ? kcov_remote_start+0x384/0x670 [ 64.996634][ T5753] ? lockdep_hardirqs_on+0x78/0x100 [ 64.996662][ T5753] hci_rx_work+0x451/0xfc0 [ 64.996687][ T5753] process_one_work+0xa23/0x1940 [ 64.996726][ T5753] ? __pfx_process_one_work+0x10/0x10 [ 64.996759][ T5753] ? __pfx_hci_rx_work+0x10/0x10 [ 64.996782][ T5753] worker_thread+0x5ef/0xe50 [ 64.996825][ T5753] ? kthread+0x13a/0x450 [ 64.996849][ T5753] ? __pfx_worker_thread+0x10/0x10 [ 64.996874][ T5753] kthread+0x370/0x450 [ 64.996898][ T5753] ? __pfx_kthread+0x10/0x10 [ 64.996925][ T5753] ret_from_fork+0x72b/0xd50 [ 64.996959][ T5753] ? __pfx_ret_from_fork+0x10/0x10 [ 64.996983][ T5753] ? native_load_gs_index+0x1e/0xc0 [ 64.997016][ T5753] ? __switch_to+0x800/0x10f0 [ 64.997045][ T5753] ? __pfx_kthread+0x10/0x10 [ 64.997069][ T5753] ret_from_fork_asm+0x1a/0x30 [ 64.997109][ T5753] [ 64.997136][ T5753] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 65.113894][ T5753] Bluetooth: hci0: failed to register connection device [ 65.158106][ T6312] Set syz1 is full, maxelem 65536 reached [ 65.328885][ T6355] Mass Storage Function, version: 2009/09/11 [ 65.332388][ T6355] LUN: removable file: (no medium) [ 65.356212][ T6355] input: syz1 as /devices/virtual/input/input5 [ 65.476379][ T6366] sch_tbf: burst 959 is lower than device syzkaller0 mtu (1500) ! [ 65.480433][ T6363] syzkaller0: entered promiscuous mode [ 65.482757][ T6363] syzkaller0: entered allmulticast mode [ 65.487275][ T6366] syzkaller0: entered promiscuous mode [ 65.490293][ T6366] syzkaller0: entered allmulticast mode [ 66.300181][ T6396] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.304272][ T6396] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.483965][ T6396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.591074][ T6396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.849870][ T6409] netlink: 40 bytes leftover after parsing attributes in process `syz.1.148'. [ 66.855454][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'. [ 66.862617][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.867669][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.896331][ T5830] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.899444][ T5830] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.902265][ T5830] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.905017][ T5830] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.908067][ T5830] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.910957][ T5830] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.913776][ T5830] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.916745][ T5830] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.952623][ T6414] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.553588][ T6436] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 67.648932][ T6443] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003 [ 68.032456][ T6466] netlink: 'syz.0.166': attribute type 1 has an invalid length. [ 68.185606][ T6466] bond1: entered promiscuous mode [ 68.198228][ T6466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.237203][ T6468] macvtap1: entered allmulticast mode [ 68.337372][ T6469] bond1: (slave bridge1): making interface the new active one [ 68.359204][ T6469] bridge1: entered promiscuous mode [ 68.372708][ T6469] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 70.277163][ T6493] syz.3.176 uses obsolete (PF_INET,SOCK_PACKET) [ 70.403403][ T6493] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 70.423720][ T6493] bond1: (slave macvlan2): making interface the new active one [ 70.434813][ T6495] netlink: 14 bytes leftover after parsing attributes in process `syz.3.176'. [ 70.455236][ T6493] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 70.650659][ T10] bond_slave_0: entered promiscuous mode [ 70.655176][ T10] @0Ù: entered promiscuous mode [ 70.705765][ T6495] bond_slave_0: left promiscuous mode [ 70.713204][ T6495] @0Ù: left promiscuous mode [ 70.768325][ T6495] bond1: (slave macvlan2): Releasing active interface [ 70.801675][ T6495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.812901][ T6495] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 70.820107][ T6495] bond0 (unregistering): Released all slaves [ 70.884809][ T6510] syzkaller0: entered promiscuous mode [ 70.889879][ T6510] syzkaller0: entered allmulticast mode [ 70.901815][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.911045][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.956334][ T6517] syz_tun: entered allmulticast mode [ 70.981601][ T6516] syz_tun: left allmulticast mode [ 72.688930][ T6552] syzkaller0: entered promiscuous mode [ 72.693093][ T6552] syzkaller0: entered allmulticast mode [ 72.882858][ T6556] tipc: Started in network mode [ 72.887567][ T6556] tipc: Node identity 0ae4bc6bd141, cluster identity 4711 [ 72.894892][ T6556] tipc: Enabled bearer , priority 10 [ 73.015320][ T6555] tipc: Resetting bearer [ 73.039992][ T6555] tipc: Disabling bearer [ 74.434984][ T6573] 0: reclassify loop, rule prio 0, protocol 700 [ 74.613310][ T6577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.203'. [ 74.794800][ T6583] tipc: Enabling of bearer rejected, failed to enable media [ 74.898334][ T6597] openvswitch: netlink: IP tunnel dst address not specified [ 74.995209][ T6603] fuse: fd is not a fuse device [ 75.195181][ T6618] syzkaller0: entered promiscuous mode [ 75.197108][ T6618] syzkaller0: entered allmulticast mode [ 75.300041][ T5904] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 75.465350][ T6625] syzkaller0: entered promiscuous mode [ 75.467665][ T5904] usb 7-1: Using ep0 maxpacket: 8 [ 75.470441][ T6625] syzkaller0: entered allmulticast mode [ 75.473415][ T5904] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 75.478895][ T5904] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 75.483853][ T5904] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 75.491601][ T5904] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.500154][ T5904] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 75.504094][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.655858][ T6627] netlink: 'syz.3.222': attribute type 11 has an invalid length. [ 75.706327][ T6627] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 75.727200][ T5904] usb 7-1: GET_CAPABILITIES returned 0 [ 75.729891][ T5904] usbtmc 7-1:16.0: can't read capabilities [ 75.755938][ T6627] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 75.759068][ T6627] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 75.894305][ T6631] tipc: Enabling of bearer rejected, failed to enable media [ 76.007341][ T6611] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 76.018486][ T6611] block device autoloading is deprecated and will be removed. [ 76.129753][ T5904] usb 7-1: USB disconnect, device number 2 [ 76.326258][ T6654] tipc: Enabling of bearer rejected, failed to enable media [ 77.208697][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 78.908224][ T6719] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 78.911423][ T6719] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 79.032472][ T6723] fuse: fd is not a fuse device [ 79.094219][ T6725] fuse: fd is not a fuse device [ 79.385087][ T6739] fuse: fd is not a fuse device [ 79.701031][ T6754] overlayfs: failed to clone lowerpath [ 79.839556][ T6756] netlink: 'syz.1.261': attribute type 1 has an invalid length. [ 79.875507][ T6756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.917268][ T6756] bond1: entered promiscuous mode [ 79.919680][ T6756] bond1: entered allmulticast mode [ 80.063957][ T6762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.262'. [ 80.117035][ T6765] syzkaller0: entered promiscuous mode [ 80.119368][ T6765] syzkaller0: entered allmulticast mode [ 80.559090][ T6776] tipc: Started in network mode [ 80.561221][ T6776] tipc: Node identity ac14140f, cluster identity 4711 [ 80.569229][ T6776] tipc: New replicast peer: 172.30.0.3 [ 80.572283][ T6776] tipc: Enabled bearer , priority 10 [ 81.396720][ T56] cfg80211: failed to load regulatory.db [ 81.579801][ T1043] tipc: Node number set to 2886997007 [ 81.879621][ T6797] tc action pedit 'at' offset -2147483648 out of bounds [ 81.961682][ T6799] tmpfs: Unknown parameter 'grpquotas/usb/drivers/usbip-host/match_busid' [ 82.139513][ T6801] syzkaller0: entered promiscuous mode [ 82.141914][ T6801] syzkaller0: entered allmulticast mode [ 83.596631][ T6821] fuse: fd is not a fuse device [ 84.235278][ T6849] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 84.344000][ T6851] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 84.368609][ T6851] pic_ioport_write: 5 callbacks suppressed [ 84.368630][ T6851] kvm: pic: level sensitive irq not supported [ 84.373414][ T6851] picdev_read: 5 callbacks suppressed [ 84.373441][ T6851] kvm: pic: non byte read [ 84.384663][ T6851] kvm: pic: level sensitive irq not supported [ 84.385489][ T6851] kvm: pic: non byte read [ 84.394469][ T6851] kvm: pic: level sensitive irq not supported [ 84.395480][ T6851] kvm: pic: non byte read [ 84.404312][ T6851] kvm: pic: level sensitive irq not supported [ 84.404838][ T6851] kvm: pic: non byte read [ 84.413289][ T6851] kvm: pic: level sensitive irq not supported [ 84.414087][ T6851] kvm: pic: non byte read [ 84.422317][ T6851] kvm: pic: level sensitive irq not supported [ 84.423002][ T6851] kvm: pic: non byte read [ 84.456641][ T6859] fuse: fd is not a fuse device [ 84.510746][ T6857] fuse: fd is not a fuse device [ 85.034310][ T6872] input: syz1 as /devices/virtual/input/input7 [ 85.383002][ T6887] netlink: 'syz.1.304': attribute type 1 has an invalid length. [ 85.960547][ T6912] fuse: fd is not a fuse device [ 85.991934][ T6907] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 88.412586][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 88.649726][ T6976] random: crng reseeded on system resumption [ 88.881382][ T6980] syz_tun: entered allmulticast mode [ 90.444497][ T7009] capability: warning: `syz.3.335' uses deprecated v2 capabilities in a way that may be insecure [ 90.779733][ T7022] netlink: 72 bytes leftover after parsing attributes in process `syz.3.336'. [ 91.868324][ T7036] cgroup: release_agent respecified [ 92.419969][ T7052] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 92.424160][ T7052] bond1: (slave macvlan2): making interface the new active one [ 92.427355][ T7052] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 92.442283][ T7052] netlink: 14 bytes leftover after parsing attributes in process `syz.2.346'. [ 92.451669][ T7052] bond1: (slave macvlan2): Releasing active interface [ 92.458950][ T7052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.463190][ T7052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.466924][ T7052] bond0 (unregistering): Released all slaves [ 92.816490][ T7062] overlayfs: failed to clone upperpath [ 94.439283][ T7048] Set syz1 is full, maxelem 65536 reached [ 95.256825][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 95.256861][ T43] audit: type=1326 audit(1785377663.402:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.1.353" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f18fec code=0x0 [ 96.371666][ T7100] vlan2: entered promiscuous mode [ 96.624604][ T43] audit: type=1326 audit(1785377664.772:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.3.357" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x0 [ 97.263250][ T7104] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 97.290688][ T7104] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 97.294714][ T7104] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 97.297272][ T7104] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 97.309080][ T7104] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 97.380848][ T7104] pci 0000:00:01.0: Adding to iommu group 1 [ 97.387192][ T7104] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 97.389630][ T7104] pci 0000:00:01.0: vgaarb: bridge control possible [ 97.391754][ T7104] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 97.420280][ T7104] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 97.432766][ T7104] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 97.442716][ T7104] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 97.460296][ T7104] [drm] Found bochs VGA, ID 0xb0c5. [ 97.461980][ T7104] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 97.501208][ T7104] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 97.696702][ T7104] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 98.192212][ T1351] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 98.363259][ T7127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.374349][ T7127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.487076][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 98.592295][ T1351] usb 7-1: unable to get BOS descriptor or descriptor too short [ 98.603133][ T1351] usb 7-1: no configurations [ 98.605123][ T1351] usb 7-1: can't read configurations, error -22 [ 98.619354][ T7141] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 98.623847][ T7141] bond2: (slave macvlan2): making interface the new active one [ 98.627163][ T7141] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 98.631471][ T10] bond_slave_0: entered promiscuous mode [ 98.633326][ T10] bond_slave_1: entered promiscuous mode [ 98.646210][ T7141] netlink: 14 bytes leftover after parsing attributes in process `syz.1.364'. [ 98.651629][ T7141] bond_slave_0: left promiscuous mode [ 98.653638][ T7141] bond_slave_1: left promiscuous mode [ 98.702384][ T7141] bond2: (slave macvlan2): Releasing active interface [ 98.752530][ T7141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.775702][ T7141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.794994][ T7141] bond0 (unregistering): Released all slaves [ 98.812749][ T7151] openvswitch: netlink: IP tunnel dst address not specified [ 100.190830][ T7194] ======================================================= [ 100.190830][ T7194] WARNING: The mand mount option has been deprecated and [ 100.190830][ T7194] and is ignored by this kernel. Remove the mand [ 100.190830][ T7194] option from the mount to silence this warning. [ 100.190830][ T7194] ======================================================= [ 100.261492][ T7192] trusted_key: syz.0.376 sent an empty control message without MSG_MORE. [ 100.992937][ T34] Process accounting resumed [ 101.099521][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 101.104789][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 101.113595][ T7210] netlink: 72 bytes leftover after parsing attributes in process `syz.0.382'. [ 101.617799][ T5753] Bluetooth: hci3: command 0x2016 tx timeout [ 102.023956][ T7224] openvswitch: netlink: IP tunnel dst address not specified [ 102.415510][ T7230] cgroup: release_agent respecified [ 102.473469][ T7230] input: syz0 as /devices/virtual/input/input8 [ 103.082946][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'. [ 103.338689][ T7249] netlink: 188 bytes leftover after parsing attributes in process `syz.2.393'. [ 103.697659][ T5768] Bluetooth: hci3: command 0x2016 tx timeout [ 104.362521][ T7262] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 104.365661][ T7262] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 104.383990][ T7262] vhci_hcd vhci_hcd.0: Device attached [ 104.479410][ T7268] Invalid ELF header magic: != ELF [ 104.498569][ T7268] overlayfs: failed to clone lowerpath [ 104.530158][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.537666][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.593029][ T7269] netlink: 72 bytes leftover after parsing attributes in process `syz.2.397'. [ 104.793299][ T56] usb 44-1: SetAddress Request (2) to port 0 [ 104.806756][ T56] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 105.192736][ T7274] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.195703][ T7274] bridge0: port 2(bridge_slave_1) entered listening state [ 105.198713][ T7274] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.201543][ T7274] bridge0: port 1(bridge_slave_0) entered listening state [ 105.213617][ T7274] bridge0: port 3(syz_tun) entered blocking state [ 105.216504][ T7274] bridge0: port 3(syz_tun) entered disabled state [ 105.220203][ T7274] syz_tun: entered allmulticast mode [ 105.223805][ T7274] syz_tun: entered promiscuous mode [ 105.233369][ T7274] bridge0: port 3(syz_tun) entered blocking state [ 105.236067][ T7274] bridge0: port 3(syz_tun) entered listening state [ 105.319273][ T7263] vhci_hcd: connection reset by peer [ 105.329426][ T5830] vhci_hcd vhci_hcd.3: stop threads [ 105.331596][ T5830] vhci_hcd vhci_hcd.3: release socket [ 105.334190][ T5830] vhci_hcd vhci_hcd.3: disconnect device [ 105.425006][ T7282] 9p: Bad value for 'rfdno' [ 105.548222][ T1164] bridge0: port 3(syz_tun) entered disabled state [ 106.080766][ T7296] lo: entered allmulticast mode [ 106.083551][ T7296] lo: left allmulticast mode [ 106.377328][ T5753] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 106.382270][ T5753] CPU: 2 UID: 0 PID: 5753 Comm: kworker/u34:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.382303][ T5753] Tainted: [L]=SOFTLOCKUP [ 106.382310][ T5753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.382333][ T5753] Workqueue: hci1 hci_rx_work [ 106.382507][ T5753] Call Trace: [ 106.382529][ T5753] [ 106.382537][ T5753] dump_stack_lvl+0x100/0x190 [ 106.382644][ T5753] sysfs_warn_dup.cold+0x1c/0x28 [ 106.382693][ T5753] sysfs_create_dir_ns+0x24b/0x2b0 [ 106.382773][ T5753] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 106.382801][ T5753] ? find_held_lock+0x2b/0x80 [ 106.382842][ T5753] ? kobject_add_internal+0x25f/0x930 [ 106.382880][ T5753] ? kobject_add_internal+0x25f/0x930 [ 106.382913][ T5753] ? do_raw_spin_unlock+0x145/0x1e0 [ 106.382937][ T5753] kobject_add_internal+0x2c8/0x930 [ 106.382970][ T5753] kobject_add+0x16a/0x1e0 [ 106.383000][ T5753] ? __pfx_kobject_add+0x10/0x10 [ 106.383026][ T5753] ? class_to_subsys+0x10f/0x150 [ 106.383088][ T5753] ? kobject_put+0xb9/0x640 [ 106.383115][ T5753] ? _raw_spin_unlock+0x28/0x50 [ 106.383142][ T5753] device_add+0x294/0x1970 [ 106.383184][ T5753] ? __pfx_dev_set_name+0x10/0x10 [ 106.383204][ T5753] ? __pfx_device_add+0x10/0x10 [ 106.383234][ T5753] ? mgmt_send_event_skb+0x2fb/0x460 [ 106.383272][ T5753] hci_conn_add_sysfs+0x1a3/0x260 [ 106.383299][ T5753] le_conn_complete_evt+0x11eb/0x1f60 [ 106.383329][ T5753] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 106.383379][ T5753] ? hci_event_packet+0x186/0xcd0 [ 106.383408][ T5753] hci_le_conn_complete_evt+0x23c/0x3a0 [ 106.383433][ T5753] ? skb_pull_data+0x15f/0x1e0 [ 106.383466][ T5753] hci_le_meta_evt+0x34a/0x5f0 [ 106.383492][ T5753] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 106.383525][ T5753] hci_event_packet+0x51c/0xcd0 [ 106.383547][ T5753] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 106.383572][ T5753] ? __pfx_hci_event_packet+0x10/0x10 [ 106.383597][ T5753] ? kcov_remote_start+0x384/0x670 [ 106.383633][ T5753] ? lockdep_hardirqs_on+0x78/0x100 [ 106.383661][ T5753] hci_rx_work+0x451/0xfc0 [ 106.383689][ T5753] process_one_work+0xa23/0x1940 [ 106.383728][ T5753] ? __pfx_process_one_work+0x10/0x10 [ 106.383759][ T5753] ? __pfx_hci_rx_work+0x10/0x10 [ 106.383781][ T5753] worker_thread+0x5ef/0xe50 [ 106.383818][ T5753] ? kthread+0x13a/0x450 [ 106.383842][ T5753] ? __pfx_worker_thread+0x10/0x10 [ 106.383866][ T5753] kthread+0x370/0x450 [ 106.383889][ T5753] ? __pfx_kthread+0x10/0x10 [ 106.383915][ T5753] ret_from_fork+0x72b/0xd50 [ 106.383949][ T5753] ? __pfx_ret_from_fork+0x10/0x10 [ 106.383973][ T5753] ? native_load_gs_index+0x1e/0xc0 [ 106.384003][ T5753] ? __switch_to+0x800/0x10f0 [ 106.384031][ T5753] ? __pfx_kthread+0x10/0x10 [ 106.384057][ T5753] ret_from_fork_asm+0x1a/0x30 [ 106.384098][ T5753] [ 106.384125][ T5753] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 106.494079][ T5753] Bluetooth: hci1: failed to register connection device [ 106.746065][ T7310] process 'syz.1.409' launched './file2' with NULL argv: empty string added [ 106.792066][ T43] audit: type=1804 audit(1785377674.942:24): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.410" name="bus" dev="ramfs" ino=13936 res=1 errno=0 [ 106.800086][ T43] audit: type=1804 audit(1785377674.942:25): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.410" name="bus" dev="ramfs" ino=13936 res=1 errno=0 [ 107.219493][ T5768] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 107.224396][ T5768] Bluetooth: hci0: Injecting HCI hardware error event [ 107.227766][ T5768] Bluetooth: hci0: hardware error 0x00 [ 107.418461][ T845] Process accounting resumed [ 108.503914][ T7334] warning: `syz.2.416' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.747645][ T1351] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 108.913293][ T1351] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.934784][ T1351] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 108.939002][ T1351] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.953978][ T1351] usb 7-1: config 0 descriptor?? [ 109.627691][ T5768] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 109.857867][ T56] usb 44-1: device descriptor read/8, error -110 [ 109.937268][ T1351] usbhid 7-1:0.0: can't add hid device: -71 [ 109.940920][ T1351] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 109.956269][ T1351] usb 7-1: USB disconnect, device number 5 [ 110.267930][ T56] usb usb44-port1: attempt power cycle [ 110.838697][ T56] usb usb44-port1: unable to enumerate USB device [ 110.937181][ T7391] veth1_vlan: entered allmulticast mode [ 111.620024][ T7401] xt_connbytes: Forcing CT accounting to be enabled [ 111.622129][ T7401] xt_TPROXY: Can be used only with -p tcp or -p udp [ 112.080082][ T34] Process accounting resumed [ 112.925717][ T7422] binder: 7421:7422 ioctl c008aeb0 80002180 returned -22 [ 114.022811][ T7447] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.318487][ T7483] syzkaller0: entered promiscuous mode [ 116.320248][ T7483] syzkaller0: entered allmulticast mode [ 116.475383][ T7492] syzkaller0: entered promiscuous mode [ 116.475400][ T7492] syzkaller0: entered allmulticast mode [ 116.566119][ T7496] bond0 (unregistering): Released all slaves [ 116.579072][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'. [ 116.968485][ T5753] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 117.737311][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.456'. [ 117.742741][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.456'. [ 117.746899][ T7529] netlink: 72 bytes leftover after parsing attributes in process `syz.2.456'. [ 118.387019][ T7544] syzkaller0: entered promiscuous mode [ 118.394301][ T7544] syzkaller0: entered allmulticast mode [ 118.574750][ T7546] cgroup: release_agent respecified [ 118.693031][ T7548] input: syz0 as /devices/virtual/input/input9 [ 120.401893][ T7579] syzkaller0: entered promiscuous mode [ 120.406922][ T7579] syzkaller0: entered allmulticast mode [ 120.750164][ T56] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 120.776786][ T845] IPVS: starting estimator thread 0... [ 120.819246][ T7589] comedi comedi0: 8255: I/O base address not correctly aligned [ 120.887628][ T7596] IPVS: using max 43 ests per chain, 103200 per kthread [ 120.921170][ T56] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 120.924507][ T56] usb 8-1: config 1 has no interface number 0 [ 120.927057][ T56] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 120.931032][ T56] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 120.934459][ T56] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.941747][ T56] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 120.945086][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.952113][ T56] usb 8-1: Product: syz [ 120.954484][ T56] usb 8-1: Manufacturer: syz [ 120.957170][ T56] usb 8-1: SerialNumber: syz [ 120.977775][ T5753] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 120.986062][ T7582] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.997194][ T5753] Bluetooth: hci3: Injecting HCI hardware error event [ 121.018440][ T5768] Bluetooth: hci3: hardware error 0x00 [ 121.826877][ T7611] syzkaller0: entered promiscuous mode [ 121.831521][ T7611] syzkaller0: entered allmulticast mode [ 122.092910][ T56] usb 8-1: Error in usbnet_get_endpoints (-71) [ 122.166260][ T56] usb 8-1: USB disconnect, device number 5 [ 122.343586][ T7631] syzkaller0: entered promiscuous mode [ 122.345904][ T7631] syzkaller0: entered allmulticast mode [ 122.712915][ T43] audit: type=1326 audit(1785377689.860:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7636 comm="syz.0.482" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 122.739631][ T43] audit: type=1326 audit(1785377689.860:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7636 comm="syz.0.482" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 122.749502][ T43] audit: type=1326 audit(1785377689.860:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7636 comm="syz.0.482" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 122.758530][ T43] audit: type=1326 audit(1785377689.860:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7636 comm="syz.0.482" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 122.770899][ T43] audit: type=1326 audit(1785377689.860:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7636 comm="syz.0.482" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703efec code=0x7ffc0000 [ 122.779258][ T43] audit: type=1326 audit(1785377689.860:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7636 comm="syz.0.482" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 122.792561][ T43] audit: type=1326 audit(1785377689.860:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7636 comm="syz.0.482" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 122.803836][ T43] audit: type=1326 audit(1785377689.860:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7636 comm="syz.0.482" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 122.816814][ T43] audit: type=1326 audit(1785377689.860:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7636 comm="syz.0.482" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 122.826283][ T43] audit: type=1326 audit(1785377689.860:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7636 comm="syz.0.482" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf703efec code=0x7ffc0000 [ 123.143934][ T5768] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 123.175113][ T7642] Cannot find add_set index 2 as target [ 123.484455][ T7650] netlink: 188 bytes leftover after parsing attributes in process `syz.3.484'. [ 125.102047][ T7682] bond2 (unregistering): Released all slaves [ 125.157819][ T7685] bridge0: port 3(syz_tun) entered disabled state [ 125.164627][ T7685] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.168049][ T7685] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.217694][ T7690] ipt_rpfilter: unknown options [ 125.279157][ T7685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.295614][ T7685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.491650][ T7685] bond1: left promiscuous mode [ 125.495207][ T7685] bond1: left allmulticast mode [ 125.499499][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.514874][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.524523][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.533514][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.597297][ T7693] syzkaller0: entered promiscuous mode [ 125.602034][ T7693] syzkaller0: entered allmulticast mode [ 127.792891][ T7726] xt_hashlimit: max too large, truncated to 1048576 [ 128.206209][ T7740] erspan0: entered promiscuous mode [ 128.208050][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 128.600242][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 128.610982][ T7756] netlink: 72 bytes leftover after parsing attributes in process `syz.0.508'. [ 128.701619][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 129.419984][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.512'. [ 130.021632][ T7778] syzkaller0: entered promiscuous mode [ 130.024861][ T7778] syzkaller0: entered allmulticast mode [ 130.587887][ T1043] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 130.749473][ T1043] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 130.755060][ T1043] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 130.762785][ T1043] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 130.770110][ T1043] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 130.776493][ T1043] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 130.785438][ T1043] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 130.789164][ T1043] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 130.797993][ T1043] usb 8-1: Product: syz [ 130.800661][ T1043] usb 8-1: Manufacturer: syz [ 130.815495][ T1043] cdc_wdm 8-1:1.0: skipping garbage [ 130.824668][ T1043] cdc_wdm 8-1:1.0: skipping garbage [ 130.846040][ T1043] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 130.852151][ T1043] cdc_wdm 8-1:1.0: Unknown control protocol [ 131.837586][ T5863] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 131.964222][ T43] kauditd_printk_skb: 427 callbacks suppressed [ 131.964241][ T43] audit: type=1804 audit(1785377699.110:463): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.524" name="bus" dev="ramfs" ino=16748 res=1 errno=0 [ 131.987632][ T5863] usb 7-1: Using ep0 maxpacket: 8 [ 131.992217][ T5863] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 131.995606][ T5863] usb 7-1: config 179 has no interface number 0 [ 131.998588][ T5863] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 132.001189][ T43] audit: type=1804 audit(1785377699.110:464): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.524" name="bus" dev="ramfs" ino=16748 res=1 errno=0 [ 132.003592][ T5863] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 132.015098][ T5863] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 132.019751][ T5863] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 132.024348][ T5863] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 132.029986][ T5863] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 132.033753][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.048644][ T7814] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 132.368381][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.370490][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.115130][ C3] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 133.115130][ T1351] usb 7-1: USB disconnect, device number 6 [ 133.122048][ C3] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 133.225860][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'. [ 133.314856][ T10] usb 8-1: USB disconnect, device number 6 [ 134.650299][ T7860] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 134.653142][ T7860] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 134.662026][ T7860] vhci_hcd vhci_hcd.0: Device attached [ 134.681267][ T7859] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 135.008122][ T845] usb 44-1: SetAddress Request (6) to port 0 [ 135.008495][ T845] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 135.073511][ T7865] geneve2: entered allmulticast mode [ 135.207371][ T7861] vhci_hcd: connection reset by peer [ 135.219785][ T13] vhci_hcd vhci_hcd.3: stop threads [ 135.222834][ T13] vhci_hcd vhci_hcd.3: release socket [ 135.226467][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 135.614621][ T7878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.535'. [ 136.100524][ T42] IPVS: starting estimator thread 0... [ 136.199139][ T7894] IPVS: using max 27 ests per chain, 64800 per kthread [ 137.421324][ T7917] netlink: 72 bytes leftover after parsing attributes in process `syz.1.543'. [ 137.844906][ T43] audit: type=1326 audit(1785377704.990:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.2.544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 137.863845][ T43] audit: type=1326 audit(1785377705.000:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.2.544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 137.879679][ T43] audit: type=1326 audit(1785377705.010:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.2.544" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 137.895850][ T43] audit: type=1326 audit(1785377705.010:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.2.544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 137.907719][ T43] audit: type=1326 audit(1785377705.010:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.2.544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 137.926367][ T43] audit: type=1326 audit(1785377705.020:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.2.544" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 138.754423][ T7946] bond0 (unregistering): Released all slaves [ 138.758958][ T7949] ufs: You didn't specify the type of your ufs filesystem [ 138.758958][ T7949] [ 138.758958][ T7949] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 138.758958][ T7949] [ 138.758958][ T7949] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 138.777955][ T7949] ufs: failed to set blocksize [ 138.813598][ T43] audit: type=1326 audit(1785377705.960:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.2.544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 138.825554][ T43] audit: type=1326 audit(1785377705.970:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.2.544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 139.827729][ T42] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 139.977711][ T42] usb 8-1: Using ep0 maxpacket: 8 [ 139.982189][ T42] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 139.985265][ T42] usb 8-1: config 179 has no interface number 0 [ 139.987973][ T42] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 139.991550][ T42] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 139.995265][ T42] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 139.998924][ T42] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 140.002648][ T42] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 140.006933][ T42] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 140.021318][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.027124][ T7964] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 140.097786][ T845] usb 44-1: device descriptor read/8, error -110 [ 140.202891][ T7972] openvswitch: netlink: Duplicate key (type 6). [ 140.582159][ T845] usb usb44-port1: attempt power cycle [ 141.147748][ T42] usb 8-1: USB disconnect, device number 7 [ 141.147807][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 141.152390][ C2] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 141.314320][ T7990] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.320774][ T845] usb usb44-port1: unable to enumerate USB device [ 141.345316][ T7956] Set syz1 is full, maxelem 65536 reached [ 142.481965][ T7999] bond0 (unregistering): Released all slaves [ 143.070611][ T8009] e1000e 0000:00:02.0 eth1: removed PHC [ 143.209854][ T8009] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 143.618051][ T8029] erspan0: entered promiscuous mode [ 143.626117][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.563'. [ 144.310079][ T8072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.615310][ T8079] random: crng reseeded on system resumption [ 144.737888][ T42] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 145.577824][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 145.580777][ T42] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 145.584443][ T42] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 145.588049][ T42] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.591015][ T42] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.595088][ T42] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.597962][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.816652][ T8099] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 145.818822][ T8099] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 145.829968][ T8099] vhci_hcd vhci_hcd.0: Device attached [ 146.119813][ T5536] usb 44-1: SetAddress Request (10) to port 0 [ 146.122893][ T5536] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 146.480017][ T8100] vhci_hcd: connection reset by peer [ 146.484113][ T5830] vhci_hcd vhci_hcd.3: stop threads [ 146.486295][ T5830] vhci_hcd vhci_hcd.3: release socket [ 146.488531][ T5830] vhci_hcd vhci_hcd.3: disconnect device [ 146.808907][ T8115] bond2 (unregistering): Released all slaves [ 146.971060][ T8119] xt_connbytes: Forcing CT accounting to be enabled [ 146.974414][ T8119] xt_TPROXY: Can be used only with -p tcp or -p udp [ 147.279816][ T42] usb 7-1: usb_control_msg returned -71 [ 147.281587][ T42] usbtmc 7-1:16.0: can't read capabilities [ 147.295959][ T42] usb 7-1: USB disconnect, device number 7 [ 148.367808][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.582'. [ 148.992079][ T43] audit: type=1326 audit(1785377716.140:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.1.584" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 149.002816][ T43] audit: type=1326 audit(1785377716.140:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.1.584" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 149.015807][ T43] audit: type=1326 audit(1785377716.140:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.1.584" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 149.024725][ T43] audit: type=1326 audit(1785377716.140:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.1.584" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 149.034828][ T43] audit: type=1326 audit(1785377716.140:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.1.584" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 149.803641][ T43] audit: type=1326 audit(1785377716.950:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.1.584" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 149.812564][ T43] audit: type=1326 audit(1785377716.950:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.1.584" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 150.002820][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 150.006537][ T8165] syz_tun: left allmulticast mode [ 150.008819][ T8165] syz_tun: left promiscuous mode [ 150.011109][ T8165] bridge0: port 3(syz_tun) entered disabled state [ 150.016704][ T8165] bridge_slave_1: left allmulticast mode [ 150.019181][ T8165] bridge_slave_1: left promiscuous mode [ 150.022900][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.027038][ T8165] bridge_slave_0: left allmulticast mode [ 150.029124][ T8165] bridge_slave_0: left promiscuous mode [ 150.031075][ T8165] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.037606][ T5863] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 150.187652][ T5863] usb 8-1: Using ep0 maxpacket: 8 [ 150.193015][ T5863] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 150.198180][ T5863] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 150.202563][ T5863] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.206929][ T5863] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.212631][ T5863] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 150.216425][ T5863] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.444628][ T5863] usb 8-1: usb_control_msg returned -71 [ 150.449103][ T5863] usbtmc 8-1:16.0: can't read capabilities [ 150.476180][ T5863] usb 8-1: USB disconnect, device number 8 [ 150.567403][ T8170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.589'. [ 151.217706][ T5536] usb 44-1: device descriptor read/8, error -110 [ 151.618456][ T5536] usb usb44-port1: attempt power cycle [ 152.044836][ T8186] wg2 speed is unknown, defaulting to 1000 [ 152.062313][ T8186] wg2 speed is unknown, defaulting to 1000 [ 152.088601][ T8186] wg2 speed is unknown, defaulting to 1000 [ 152.377610][ T1043] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 152.413287][ T5536] usb usb44-port1: unable to enumerate USB device [ 152.583081][ T1043] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.589071][ T1043] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 152.593383][ T1043] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.597235][ T1043] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 152.602309][ T1043] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 152.615712][ T1043] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.621593][ T1043] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.624671][ T1043] usb 7-1: Product: syz [ 152.626918][ T1043] usb 7-1: Manufacturer: syz [ 152.646484][ T1043] cdc_wdm 7-1:1.0: skipping garbage [ 152.649045][ T1043] cdc_wdm 7-1:1.0: skipping garbage [ 152.656202][ T1043] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 152.658786][ T1043] cdc_wdm 7-1:1.0: Unknown control protocol [ 152.868931][ T5536] wg2 speed is unknown, defaulting to 1000 [ 152.874200][ T8186] infiniband syz2: set active [ 152.879702][ T8186] infiniband syz2: added wg2 [ 152.954074][ T8186] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 152.961501][ T8186] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 152.970829][ T8186] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 153.009914][ T8186] RDS/IB: syz2: added [ 153.018408][ T8186] smc: adding ib device syz2 with port count 1 [ 153.021342][ T8186] smc: ib device syz2 port 1 has no pnetid [ 153.033809][ T5536] wg2 speed is unknown, defaulting to 1000 [ 153.045644][ T8186] wg2 speed is unknown, defaulting to 1000 [ 153.283872][ T43] audit: type=1326 audit(1785377720.430:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.1.596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 153.333558][ T43] audit: type=1326 audit(1785377720.450:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.1.596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 153.363220][ T43] audit: type=1326 audit(1785377720.450:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.1.596" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 153.510567][ T8186] wg2 speed is unknown, defaulting to 1000 [ 154.115904][ T8186] wg2 speed is unknown, defaulting to 1000 [ 154.352224][ T43] kauditd_printk_skb: 91 callbacks suppressed [ 154.352242][ T43] audit: type=1326 audit(1785377721.500:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.1.596" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 154.379601][ T43] audit: type=1326 audit(1785377721.520:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.1.596" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 154.650962][ T8186] wg2 speed is unknown, defaulting to 1000 [ 155.187935][ T8222] bond0 (unregistering): Released all slaves [ 155.745380][ T5536] usb 7-1: USB disconnect, device number 8 [ 156.139812][ T8239] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11 [ 157.603707][ T8262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.608'. [ 158.238613][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.610'. [ 158.448838][ T8275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.611'. [ 158.457682][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'. [ 159.349678][ T8284] bond0 (unregistering): Released all slaves [ 159.984752][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'. [ 159.988365][ T8300] bridge_slave_1: left allmulticast mode [ 159.990515][ T8300] bridge_slave_1: left promiscuous mode [ 159.993609][ T8300] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.168282][ T8300] bridge_slave_0: left allmulticast mode [ 160.170346][ T8300] bridge_slave_0: left promiscuous mode [ 160.172768][ T8300] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.256276][ T8302] efs: cannot read volume header [ 160.863860][ T8311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.505176][ T8345] netlink: 'syz.2.626': attribute type 74 has an invalid length. [ 164.313763][ T8357] wg2 speed is unknown, defaulting to 1000 [ 164.603603][ T8362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.631'. [ 164.606749][ T8362] syz_tun: left allmulticast mode [ 164.609996][ T8362] syz_tun: left promiscuous mode [ 164.612836][ T8362] bridge0: port 3(syz_tun) entered disabled state [ 164.649555][ T8362] bridge_slave_1: left allmulticast mode [ 164.652017][ T8362] bridge_slave_1: left promiscuous mode [ 164.655763][ T8362] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.686169][ T8362] bridge_slave_0: left allmulticast mode [ 164.693224][ T8362] bridge_slave_0: left promiscuous mode [ 164.699548][ T8362] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.713294][ T56] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 164.731272][ T8363] efs: cannot read volume header [ 164.879564][ T56] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 164.927430][ T56] usb 7-1: config 1 has no interface number 0 [ 164.929844][ T56] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 164.938120][ T56] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 164.946944][ T56] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.979924][ T56] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 164.990128][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.002769][ T56] usb 7-1: Product: syz [ 165.008220][ T56] usb 7-1: Manufacturer: syz [ 165.017155][ T56] usb 7-1: SerialNumber: syz [ 165.263219][ T8359] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 165.518262][ T8371] bond0 (unregistering): Released all slaves [ 165.975293][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'. [ 166.517220][ T56] usb 7-1: Error in usbnet_get_endpoints (-71) [ 166.537935][ T56] usb 7-1: USB disconnect, device number 9 [ 167.050988][ T8394] overlayfs: failed to resolve './file0': -2 [ 167.068048][ T43] audit: type=1326 audit(1785377734.210:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8388 comm="syz.3.636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 167.139184][ T43] audit: type=1326 audit(1785377734.220:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8388 comm="syz.3.636" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 167.161747][ T43] audit: type=1326 audit(1785377734.220:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8388 comm="syz.3.636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 167.180028][ T43] audit: type=1326 audit(1785377734.220:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8388 comm="syz.3.636" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 167.920255][ T8410] fuse: fd is not a fuse device [ 168.192652][ T43] audit: type=1326 audit(1785377735.330:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8388 comm="syz.3.636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 168.232438][ T43] audit: type=1326 audit(1785377735.330:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8388 comm="syz.3.636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 168.434401][ T8417] loop0: detected capacity change from 0 to 32768 [ 168.446340][ T8417] loop1: detected capacity change from 0 to 32768 [ 168.454700][ T8417] loop2: detected capacity change from 0 to 32768 [ 168.468295][ T8417] loop3: detected capacity change from 0 to 32768 [ 168.496939][ T8417] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 168.727694][ T8418] md: could not open device unknown-block(0,0). [ 168.729865][ T8418] md: md_import_device returned -6 [ 169.000396][ T8426] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.003833][ T8426] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.253950][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 169.275673][ T8426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.291732][ T8426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.537982][ T9] wg2 speed is unknown, defaulting to 1000 [ 169.538028][ T9] syz2: Port: 1 Link DOWN [ 169.557057][ T8434] bond0 (unregistering): Released all slaves [ 169.596552][ T5830] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.596620][ T5830] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.596650][ T5830] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.596678][ T5830] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.597708][ T9] wg2 speed is unknown, defaulting to 1000 [ 170.257864][ T5753] Bluetooth: hci1: command 0x0406 tx timeout [ 171.291751][ T8462] capability: warning: `syz.3.655' uses 32-bit capabilities (legacy support in use) [ 171.391014][ T8468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.402009][ T8468] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.431134][ T8468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.487874][ T8468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.498724][ T8468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.507137][ T8468] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.515417][ T8468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.529304][ T8468] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 171.553770][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.556213][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.578529][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.581161][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.669727][ T5848] wg2 speed is unknown, defaulting to 1000 [ 171.681118][ T5848] syz2: Port: 1 Link ACTIVE [ 171.703504][ T56] wg2 speed is unknown, defaulting to 1000 [ 171.795730][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.660'. [ 173.540230][ T8515] bond0 (unregistering): Released all slaves [ 174.184488][ T8506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.488221][ T8532] input: syz0 as /devices/virtual/input/input12 [ 174.817712][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 175.087611][ T43] audit: type=1800 audit(1785377742.230:582): pid=8548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.675" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 175.603065][ T8560] overlayfs: failed to resolve './file0': -2 [ 176.694682][ T8574] bond2 (unregistering): Released all slaves [ 177.684885][ T8589] netlink: 20 bytes leftover after parsing attributes in process `syz.1.681'. [ 177.694753][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.681'. [ 178.035720][ T42] libceph: connect (1)[c::]:6789 error -101 [ 178.039323][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 178.238282][ T8595] wg2 speed is unknown, defaulting to 1000 [ 178.307972][ T42] libceph: connect (1)[c::]:6789 error -101 [ 178.310698][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 178.590954][ T8587] ceph: No mds server is up or the cluster is laggy [ 179.834059][ T8615] 9p: Bad value for 'rfdno' [ 180.439888][ T8626] fuse: fd is not a fuse device [ 180.942936][ T8631] 9p: Bad value for 'rfdno' [ 181.521238][ T8640] wg2 speed is unknown, defaulting to 1000 [ 183.692617][ T8661] binder: 8660:8661 ioctl 4018620d 0 returned -22 [ 183.702305][ T8661] binder: 8660:8661 ioctl c0306201 0 returned -14 [ 185.335316][ T8696] netlink: 56 bytes leftover after parsing attributes in process `syz.3.708'. [ 185.612541][ T8692] wg2 speed is unknown, defaulting to 1000 [ 186.726136][ T8716] bridge0: entered promiscuous mode [ 186.728083][ T8716] bridge0: entered allmulticast mode [ 186.787558][ T8715] x_tables: duplicate underflow at hook 3 [ 186.800303][ T8715] ./bus: Can't lookup blockdev [ 187.065038][ T8721] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 187.752339][ T8735] Cannot find del_set index 0 as target [ 187.817199][ T5848] libceph: connect (1)[c::]:6789 error -101 [ 187.840986][ T5848] libceph: mon0 (1)[c::]:6789 connect error [ 188.108421][ T5848] libceph: connect (1)[c::]:6789 error -101 [ 188.187780][ T5848] libceph: mon0 (1)[c::]:6789 connect error [ 188.709158][ T5848] libceph: connect (1)[c::]:6789 error -101 [ 188.741092][ T5848] libceph: mon0 (1)[c::]:6789 connect error [ 189.227687][ T8735] ceph: No mds server is up or the cluster is laggy [ 189.768882][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.718'. [ 189.789445][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.718'. [ 189.794205][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.718'. [ 189.802787][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.718'. [ 189.807121][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.718'. [ 190.372508][ T8753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.716'. [ 190.797695][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 190.982396][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 190.985909][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 190.994076][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.038487][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 191.042082][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 191.049486][ T10] usb 7-1: Product: syz [ 191.051204][ T10] usb 7-1: Manufacturer: syz [ 191.053015][ T10] usb 7-1: SerialNumber: syz [ 191.270720][ T8767] input: syz0 as /devices/virtual/input/input16 [ 191.297100][ T10] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 191.481740][ T845] usb 7-1: USB disconnect, device number 11 [ 191.490692][ T845] usblp0: removed [ 191.578142][ T1367] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 192.291180][ T8792] input: syz1 as /devices/virtual/input/input17 [ 192.293868][ T8792] input: failed to attach handler leds to device input17, error: -6 [ 193.437783][ T8798] xt_connbytes: Forcing CT accounting to be enabled [ 193.449513][ T8798] xt_TPROXY: Can be used only with -p tcp or -p udp [ 193.478109][ T1367] IPVS: starting estimator thread 0... [ 193.484776][ T42] libceph: connect (1)[c::]:6789 error -101 [ 193.487012][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 193.526421][ T8798] ceph: No mds server is up or the cluster is laggy [ 193.577678][ T8811] IPVS: using max 31 ests per chain, 74400 per kthread [ 193.779212][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.781311][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.173986][ T43] audit: type=1800 audit(1785377761.320:583): pid=8807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.731" name="bus" dev="ramfs" ino=19749 res=0 errno=0 [ 196.151330][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.739'. [ 196.919910][ T8860] netlink: 27 bytes leftover after parsing attributes in process `syz.2.745'. [ 196.965266][ T8860] /dev/sr0: Can't open blockdev [ 197.004285][ T8860] usb usb9: usbfs: process 8860 (syz.2.745) did not claim interface 0 before use [ 197.028676][ T8860] netlink: 'syz.2.745': attribute type 1 has an invalid length. [ 197.035689][ T8860] netlink: 224 bytes leftover after parsing attributes in process `syz.2.745'. [ 197.325094][ T8866] netlink: zone id is out of range [ 197.327788][ T8866] netlink: zone id is out of range [ 198.269442][ T217] wlan0: Trigger new scan to find an IBSS to join [ 199.816379][ T8909] syzkaller0: entered promiscuous mode [ 199.819009][ T8909] syzkaller0: entered allmulticast mode [ 200.534315][ T8933] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 200.593112][ T8933] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 200.596734][ T8933] overlayfs: failed to look up (tracing) for ino (-66) [ 201.298605][ T217] wlan0: Trigger new scan to find an IBSS to join [ 202.077611][ T10] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 202.555081][ T8953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.767'. [ 202.699674][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 202.703801][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 202.707799][ T10] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.712593][ T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 202.720445][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.724008][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.726592][ T10] usb 7-1: Product: syz [ 202.728579][ T10] usb 7-1: Manufacturer: syz [ 202.737086][ T10] usb 7-1: SerialNumber: syz [ 202.764697][ T8951] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 202.863326][ T8978] md: array md0 already has disks! [ 202.907808][ T8978] md: could not open device unknown-block(7,1). [ 202.910509][ T8978] md: error, md_import_device() returned -16 [ 202.950459][ T8978] md/raid:md0: not clean -- starting background reconstruction [ 202.953529][ T845] libceph: connect (1)[c::]:6789 error -101 [ 202.954192][ T8978] md/raid:md0: device loop0 operational as raid disk 0 [ 202.956134][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 202.958520][ T8978] md/raid:md0: device loop2 operational as raid disk 2 [ 202.963207][ T8978] md/raid:md0: device loop1 operational as raid disk 1 [ 202.983320][ T8951] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 202.997210][ T8978] md/raid:md0: raid level 5 active with 3 out of 3 devices, algorithm 0 [ 203.005494][ T8985] ceph: No mds server is up or the cluster is laggy [ 203.006290][ T8978] md0: detected capacity change from 0 to 4096 [ 203.052230][ T8984] block device autoloading is deprecated and will be removed. [ 203.055044][ T8984] md: loop3 has zero or unknown size, marking faulty! [ 203.057201][ T8984] md: md_import_device returned -22 [ 203.059680][ T1367] [ 203.060446][ T1367] ====================================================== [ 203.062506][ T1367] WARNING: possible circular locking dependency detected [ 203.064676][ T1367] syzkaller #0 Tainted: G L [ 203.066676][ T1367] ------------------------------------------------------ [ 203.068856][ T1367] kworker/3:2/1367 is trying to acquire lock: [ 203.070743][ T1367] ffff888051a38358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_start_sync+0x79/0xbe0 [ 203.073744][ T1367] [ 203.073744][ T1367] but task is already holding lock: [ 203.076027][ T1367] ffffc9000716fd08 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 203.079526][ T1367] [ 203.079526][ T1367] which lock already depends on the new lock. [ 203.079526][ T1367] [ 203.082710][ T1367] [ 203.082710][ T1367] the existing dependency chain (in reverse order) is: [ 203.085504][ T1367] [ 203.085504][ T1367] -> #3 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 203.088460][ T1367] lock_acquire+0x1b9/0x370 [ 203.090043][ T1367] process_one_work+0x98e/0x1940 [ 203.091759][ T1367] worker_thread+0x5ef/0xe50 [ 203.093356][ T1367] kthread+0x370/0x450 [ 203.094817][ T1367] ret_from_fork+0x72b/0xd50 [ 203.096437][ T1367] ret_from_fork_asm+0x1a/0x30 [ 203.098093][ T1367] [ 203.098093][ T1367] -> #2 ((wq_completion)md_misc){+.+.}-{0:0}: [ 203.100664][ T1367] lock_acquire+0x1b9/0x370 [ 203.102253][ T1367] touch_wq_lockdep_map+0xad/0x1c0 [ 203.104007][ T1367] __flush_workqueue+0x131/0x1200 [ 203.105741][ T1367] md_alloc+0x30/0x10a0 [ 203.107212][ T1367] md_probe+0x73/0xf0 [ 203.108666][ T1367] blk_probe_dev+0x149/0x1e0 [ 203.110290][ T1367] blk_request_module+0x16/0xc0 [ 203.111973][ T1367] blkdev_get_no_open+0x9b/0xf0 [ 203.113658][ T1367] bdev_file_open_by_dev+0x70/0x210 [ 203.115442][ T1367] swsusp_check+0x72/0x470 [ 203.116998][ T1367] software_resume+0x6f/0x330 [ 203.118634][ T1367] resume_store+0x248/0x460 [ 203.120227][ T1367] kobj_attr_store+0x58/0x80 [ 203.121842][ T1367] sysfs_kf_write+0xf2/0x150 [ 203.123461][ T1367] kernfs_fop_write_iter+0x3e0/0x5f0 [ 203.125284][ T1367] vfs_write+0x6ac/0x1050 [ 203.126821][ T1367] ksys_write+0x12a/0x250 [ 203.128398][ T1367] __do_fast_syscall_32+0xe7/0x970 [ 203.130161][ T1367] do_fast_syscall_32+0x32/0x70 [ 203.131876][ T1367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.134009][ T1367] [ 203.134009][ T1367] -> #1 (major_names_lock){+.+.}-{4:4}: [ 203.136420][ T1367] lock_acquire+0x1b9/0x370 [ 203.138021][ T1367] __mutex_lock+0x1a4/0x1bd0 [ 203.139695][ T1367] blk_probe_dev+0x28/0x1e0 [ 203.141286][ T1367] blk_request_module+0x16/0xc0 [ 203.142989][ T1367] blkdev_get_no_open+0x9b/0xf0 [ 203.144674][ T1367] bdev_file_open_by_dev+0x70/0x210 [ 203.146446][ T1367] md_import_device+0x120/0x360 [ 203.148202][ T1367] md_add_new_disk+0x4b6/0x1820 [ 203.149889][ T1367] md_ioctl+0x2b28/0x36b0 [ 203.151435][ T1367] compat_blkdev_ioctl+0x682/0x7b0 [ 203.153186][ T1367] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 203.155076][ T1367] __do_fast_syscall_32+0xe7/0x970 [ 203.156832][ T1367] do_fast_syscall_32+0x32/0x70 [ 203.158543][ T1367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.160685][ T1367] [ 203.160685][ T1367] -> #0 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 203.163182][ T1367] check_prev_add+0xeb/0xe60 [ 203.164722][ T1367] __lock_acquire+0x136c/0x1a40 [ 203.166336][ T1367] lock_acquire+0x1b9/0x370 [ 203.167876][ T1367] __mutex_lock+0x1a4/0x1bd0 [ 203.169436][ T1367] md_start_sync+0x79/0xbe0 [ 203.170967][ T1367] process_one_work+0xa23/0x1940 [ 203.172603][ T1367] worker_thread+0x5ef/0xe50 [ 203.174149][ T1367] kthread+0x370/0x450 [ 203.175557][ T1367] ret_from_fork+0x72b/0xd50 [ 203.177097][ T1367] ret_from_fork_asm+0x1a/0x30 [ 203.178726][ T1367] [ 203.178726][ T1367] other info that might help us debug this: [ 203.178726][ T1367] [ 203.181732][ T1367] Chain exists of: [ 203.181732][ T1367] &mddev->reconfig_mutex --> (wq_completion)md_misc --> (work_completion)(&mddev->sync_work) [ 203.181732][ T1367] [ 203.186412][ T1367] Possible unsafe locking scenario: [ 203.186412][ T1367] [ 203.188704][ T1367] CPU0 CPU1 [ 203.190295][ T1367] ---- ---- [ 203.191916][ T1367] lock((work_completion)(&mddev->sync_work)); [ 203.193828][ T1367] lock((wq_completion)md_misc); [ 203.196104][ T1367] lock((work_completion)(&mddev->sync_work)); [ 203.198777][ T1367] lock(&mddev->reconfig_mutex); [ 203.200348][ T1367] [ 203.200348][ T1367] *** DEADLOCK *** [ 203.200348][ T1367] [ 203.202746][ T1367] 2 locks held by kworker/3:2/1367: [ 203.204305][ T1367] #0: ffff88801cf45d40 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 203.207405][ T1367] #1: ffffc9000716fd08 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 203.210860][ T1367] [ 203.210860][ T1367] stack backtrace: [ 203.212627][ T1367] CPU: 3 UID: 0 PID: 1367 Comm: kworker/3:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.212643][ T1367] Tainted: [L]=SOFTLOCKUP [ 203.212646][ T1367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.212655][ T1367] Workqueue: md_misc md_start_sync [ 203.212673][ T1367] Call Trace: [ 203.212679][ T1367] [ 203.212684][ T1367] dump_stack_lvl+0x100/0x190 [ 203.212698][ T1367] print_circular_bug.cold+0x178/0x1c7 [ 203.212716][ T1367] check_noncircular+0x146/0x160 [ 203.212731][ T1367] ? lock_release+0x24d/0x310 [ 203.212748][ T1367] check_prev_add+0xeb/0xe60 [ 203.212764][ T1367] __lock_acquire+0x136c/0x1a40 [ 203.212781][ T1367] lock_acquire+0x1b9/0x370 [ 203.212796][ T1367] ? md_start_sync+0x79/0xbe0 [ 203.212811][ T1367] ? __pfx___might_resched+0x10/0x10 [ 203.212828][ T1367] __mutex_lock+0x1a4/0x1bd0 [ 203.212842][ T1367] ? md_start_sync+0x79/0xbe0 [ 203.212856][ T1367] ? md_start_sync+0x79/0xbe0 [ 203.212870][ T1367] ? __lock_acquire+0x49f/0x1a40 [ 203.212885][ T1367] ? check_prev_add+0x354/0xe60 [ 203.212900][ T1367] ? __pfx___mutex_lock+0x10/0x10 [ 203.212912][ T1367] ? lockdep_unlock+0x5a/0xc0 [ 203.212926][ T1367] ? md_spares_need_change+0x1dc/0x320 [ 203.212940][ T1367] ? md_start_sync+0x79/0xbe0 [ 203.212954][ T1367] md_start_sync+0x79/0xbe0 [ 203.212970][ T1367] process_one_work+0xa23/0x1940 [ 203.212987][ T1367] ? __pfx_process_one_work+0x10/0x10 [ 203.213003][ T1367] ? __pfx_md_start_sync+0x10/0x10 [ 203.213018][ T1367] worker_thread+0x5ef/0xe50 [ 203.213034][ T1367] ? __pfx_worker_thread+0x10/0x10 [ 203.213048][ T1367] ? kthread+0x13a/0x450 [ 203.213061][ T1367] ? __pfx_worker_thread+0x10/0x10 [ 203.213074][ T1367] kthread+0x370/0x450 [ 203.213087][ T1367] ? __pfx_kthread+0x10/0x10 [ 203.213100][ T1367] ret_from_fork+0x72b/0xd50 [ 203.213113][ T1367] ? __pfx_ret_from_fork+0x10/0x10 [ 203.213126][ T1367] ? __switch_to+0x800/0x10f0 [ 203.213142][ T1367] ? __pfx_kthread+0x10/0x10 [ 203.213155][ T1367] ret_from_fork_asm+0x1a/0x30 [ 203.213171][ T1367] [ 203.223477][ T8994] md: resync of RAID array md0 [ 203.293987][ T8994] md: md0: resync done. [ 204.838379][ T10] cdc_ncm 7-1:1.0: bind() failure [ 204.842030][ T10] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 204.844340][ T10] cdc_ncm 7-1:1.1: bind() failure [ 204.847410][ T10] usb 7-1: USB disconnect, device number 12 [ 205.297925][ T1163] wlan0: Trigger new scan to find an IBSS to join [ 206.207911][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50