last executing test programs: 30.950093766s ago: executing program 3 (id=63): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000001080)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000010c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x81284400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000001100), 0x0, 0x0) read$msr(r5, &(0x7f0000001240)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f000001a300), 0x42, 0x0) write$dsp(r6, &(0x7f000001a340)='S', 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f000001a3c0)) r7 = syz_open_dev$sndpcmp(&(0x7f000001a400), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r7, 0xc0884123, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$unix(r8, 0x0, 0x0, 0x80000) 23.970281496s ago: executing program 2 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r4, &(0x7f00000013c0)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000100)={0x3e}) 22.330373956s ago: executing program 2 (id=71): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc010) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$watch_queue(0x0, 0x80) mmap$KVM_VCPU(&(0x7f0000122000/0x4000)=nil, 0x0, 0x3000002, 0x4010, 0xffffffffffffffff, 0x0) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000)) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000600)={0x8, 0x41}) eventfd2(0x100004, 0x800) 21.901163586s ago: executing program 3 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc010) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$watch_queue(0x0, 0x80) mmap$KVM_VCPU(&(0x7f0000122000/0x4000)=nil, 0x0, 0x3000002, 0x4010, 0xffffffffffffffff, 0x0) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000)) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000600)={0x8, 0x41}) gettid() 20.866911722s ago: executing program 3 (id=73): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r4, &(0x7f00000013c0)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000100)={0x3e}) 17.679186029s ago: executing program 1 (id=76): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_LOCAL={0x8, 0x2, @private=0xa010104}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 16.688346643s ago: executing program 2 (id=77): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000001080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000010c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x81284400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000001100), 0x0, 0x0) read$msr(r5, &(0x7f0000001240)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f000001a300), 0x42, 0x0) write$dsp(r6, &(0x7f000001a340)='S', 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f000001a3c0)) r7 = syz_open_dev$sndpcmp(&(0x7f000001a400), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r7, 0xc0884123, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$unix(r8, 0x0, 0x0, 0x80000) 14.648230183s ago: executing program 3 (id=78): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000001080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000010c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x81284400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000001100), 0x0, 0x0) read$msr(r5, &(0x7f0000001240)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f000001a300), 0x42, 0x0) write$dsp(r6, &(0x7f000001a340)='S', 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f000001a3c0)) r7 = syz_open_dev$sndpcmp(&(0x7f000001a400), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r7, 0xc0884123, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$unix(r8, 0x0, 0x0, 0x80000) 14.35075424s ago: executing program 1 (id=79): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000001080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000010c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x81284400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000001100), 0x0, 0x0) read$msr(r5, &(0x7f0000001240)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f000001a300), 0x42, 0x0) write$dsp(r6, &(0x7f000001a340)='S', 0x1) r7 = syz_open_dev$sndctrl(&(0x7f000001a380), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f000001a3c0)) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$unix(r8, 0x0, 0x0, 0x80000) 13.420470853s ago: executing program 0 (id=80): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/dev0/enable\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r2, &(0x7f0000000440)='naa.6001405123456780\n\x00', 0x16) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f00000004c0)='./config/target/core/rd_mcp_0/dev0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\n\x00', 0x3) close(r3) write(0xffffffffffffffff, &(0x7f0000000600), 0x0) syz_open_dev$sg(&(0x7f0000000680), 0x1, 0x2) syz_open_dev$sg(&(0x7f0000000680), 0x2, 0x2) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) 10.848198456s ago: executing program 1 (id=81): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0180001001c000000"], 0x38}}], 0x1, 0xc050) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 10.67740518s ago: executing program 0 (id=82): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000007000000890704"], 0x38}}], 0x1, 0xc050) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 10.559122483s ago: executing program 2 (id=83): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_create_resource$binfmt(0x0) execveat$binfmt(r1, r2, &(0x7f0000000740), 0x0, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x7f) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000840)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0) read$proc_mixer(r3, &(0x7f0000000300)=""/253, 0xfd) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001940)=@newtfilter={0x10e8, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f3, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x10b8, 0x2, [@TCA_FLOWER_ACT={0x10b4, 0x3, [@m_mirred={0x10b0, 0x1, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x81, 0x10000000, 0x8, 0xcd91}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x1ff, 0x6, 0x2, 0x1000}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x10001, 0x20000000, 0x2, 0x2}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xad, 0xd4a, 0x4, 0xfffffffe, 0x5}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x80000001, 0x2, 0x5, 0x7d4}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x340000, 0xcfc, 0x0, 0x3, 0x8}, 0x2}}]}, {0xfc4, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x10e8}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x1, 0x10, 0xfffffff1, 0x8, 0x6324, 0xffffffffffffffff, 0x9, '\x00', 0x0, r1, 0x2, 0x1, 0x4}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffff9c, &(0x7f0000000180), 0x620602, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000001200)=ANY=[@ANYBLOB]) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x2000) 10.445502175s ago: executing program 0 (id=84): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r4, &(0x7f00000013c0)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000100)={0x3e}) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) 8.713121108s ago: executing program 3 (id=85): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000001080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000010c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x81284400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000001100), 0x0, 0x0) read$msr(r5, &(0x7f0000001240)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f000001a300), 0x42, 0x0) write$dsp(r6, &(0x7f000001a340)='S', 0x1) r7 = syz_open_dev$sndctrl(&(0x7f000001a380), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f000001a3c0)) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$unix(r8, 0x0, 0x0, 0x80000) 8.21860338s ago: executing program 1 (id=86): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @empty, 0x2000420}, 0x1c) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 7.877259088s ago: executing program 0 (id=87): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8080, 0x7, 0xbb, 0xffffd45d, {{0xa, 0x4, 0x3, 0x0, 0x28, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_addr={0x44, 0x14, 0xd, 0x1, 0x5, [{@local, 0x4}, {@multicast2, 0x3}]}]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff00"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4, r3}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r3, 0xffff, '\x00', r2, r0}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket(0x2d, 0x2, 0x0) connect$netlink(r6, &(0x7f00000001c0)=@unspec={0x2d}, 0xc) write$6lowpan_control(r5, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 7.020747189s ago: executing program 2 (id=88): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000001080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000010c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x81284400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000001100), 0x0, 0x0) read$msr(r5, &(0x7f0000001240)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f000001a300), 0x42, 0x0) write$dsp(r6, &(0x7f000001a340)='S', 0x1) r7 = syz_open_dev$sndctrl(&(0x7f000001a380), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f000001a3c0)) r8 = syz_open_dev$sndpcmp(&(0x7f000001a400), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r8, 0xc0884123, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$unix(r9, 0x0, 0x0, 0x80000) 6.837673993s ago: executing program 1 (id=89): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) 4.52672657s ago: executing program 0 (id=90): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, &(0x7f0000000300)={0x0, 0x10f211, 0x4, 0x2002, 0x40001c, 0x0, r0}, &(0x7f00000007c0), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)={0x50, r3, 0x1, 0x200, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) 3.218814682s ago: executing program 2 (id=91): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x4, 0xc4}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x1, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235, 0x0, r0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES64=r3], 0xa4}}, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401"], 0x18}}, 0x2000481c) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c000280050001000000000006000340000100000800074000000001"], 0x6c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000003010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 2.997524287s ago: executing program 3 (id=92): socket$nl_generic(0x10, 0x3, 0x10) syz_extract_tcp_res(0x0, 0x6, 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, &(0x7f0000000300)={0x0, 0x10f211, 0x4, 0x2002, 0x40001c, 0x0, r0}, &(0x7f00000007c0), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000008c0), 0x492492492492627, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r3) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)={0x50, r4, 0x1, 0x200, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) 48.519299ms ago: executing program 1 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10) listen(r2, 0x5) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000280), 0x4) setsockopt$inet_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300), 0x4) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000340)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) sendto$inet(r3, &(0x7f0000000380)='\x00', 0x4000, 0x40, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 0 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) close(r0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000400)='naa.6001405', 0xb) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts. syzkaller login: [ 73.163831][ T5759] cgroup: Unknown subsys name 'net' [ 73.291779][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.657070][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.166988][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.196033][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.204081][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.214767][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.222830][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.231591][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.244999][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.253857][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.266120][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.277332][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.285209][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.294644][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.303505][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.311499][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.319184][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.339161][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.347466][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.348948][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.363700][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.372471][ T5088] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.380152][ T5088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.390430][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.413276][ T5772] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.421251][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.829880][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 76.863917][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 76.879609][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 76.936027][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 77.089383][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.097169][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.104526][ T5773] bridge_slave_0: entered allmulticast mode [ 77.111777][ T5773] bridge_slave_0: entered promiscuous mode [ 77.130539][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.137825][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.144992][ T5770] bridge_slave_0: entered allmulticast mode [ 77.152855][ T5770] bridge_slave_0: entered promiscuous mode [ 77.171037][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.178278][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.185989][ T5777] bridge_slave_0: entered allmulticast mode [ 77.192814][ T5777] bridge_slave_0: entered promiscuous mode [ 77.199991][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.209464][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.216729][ T5773] bridge_slave_1: entered allmulticast mode [ 77.223416][ T5773] bridge_slave_1: entered promiscuous mode [ 77.250377][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.257640][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.264770][ T5770] bridge_slave_1: entered allmulticast mode [ 77.274159][ T5770] bridge_slave_1: entered promiscuous mode [ 77.298491][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.305913][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.313188][ T5777] bridge_slave_1: entered allmulticast mode [ 77.320108][ T5777] bridge_slave_1: entered promiscuous mode [ 77.353278][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.362604][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.371169][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.378805][ T5778] bridge_slave_0: entered allmulticast mode [ 77.385632][ T5778] bridge_slave_0: entered promiscuous mode [ 77.394760][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.407455][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.418442][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.438201][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.446064][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.453728][ T5778] bridge_slave_1: entered allmulticast mode [ 77.460998][ T5778] bridge_slave_1: entered promiscuous mode [ 77.469562][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.489224][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.522761][ T5777] team0: Port device team_slave_0 added [ 77.531199][ T5777] team0: Port device team_slave_1 added [ 77.572690][ T5773] team0: Port device team_slave_0 added [ 77.588765][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.602759][ T5770] team0: Port device team_slave_0 added [ 77.622110][ T5773] team0: Port device team_slave_1 added [ 77.629583][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.650527][ T5770] team0: Port device team_slave_1 added [ 77.667605][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.674590][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.703083][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.743378][ T5778] team0: Port device team_slave_0 added [ 77.750475][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.757534][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.783625][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.822138][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.829418][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.855504][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.868770][ T5778] team0: Port device team_slave_1 added [ 77.875120][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.882169][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.909163][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.921778][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.928899][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.955181][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.967745][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.974705][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.005729][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.103557][ T5770] hsr_slave_0: entered promiscuous mode [ 78.111128][ T5770] hsr_slave_1: entered promiscuous mode [ 78.119115][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.126399][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.152940][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.169654][ T5777] hsr_slave_0: entered promiscuous mode [ 78.176303][ T5777] hsr_slave_1: entered promiscuous mode [ 78.182675][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.190852][ T5777] Cannot create hsr debugfs directory [ 78.214415][ T5773] hsr_slave_0: entered promiscuous mode [ 78.220979][ T5773] hsr_slave_1: entered promiscuous mode [ 78.228008][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.235628][ T5773] Cannot create hsr debugfs directory [ 78.241772][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.249005][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.275447][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.376416][ T5772] Bluetooth: hci0: command tx timeout [ 78.378404][ T5775] Bluetooth: hci2: command tx timeout [ 78.411350][ T5778] hsr_slave_0: entered promiscuous mode [ 78.417732][ T5778] hsr_slave_1: entered promiscuous mode [ 78.423750][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.432365][ T5778] Cannot create hsr debugfs directory [ 78.455599][ T5775] Bluetooth: hci3: command tx timeout [ 78.455615][ T5772] Bluetooth: hci1: command tx timeout [ 78.748072][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.772444][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.788343][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.800183][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.838908][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.849837][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.862740][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.872938][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.974058][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.992166][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.003439][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.015135][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.112596][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.150185][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.161199][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.172556][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.183154][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.219831][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.258078][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.265296][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.309514][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.323972][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.331153][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.352798][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.412806][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.431741][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.459192][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.466367][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.511186][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.518373][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.529749][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.536922][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.546571][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.553670][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.684457][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.710772][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.787181][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.821437][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.828648][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.861249][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.868481][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.962366][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.042117][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.073486][ T5770] veth0_vlan: entered promiscuous mode [ 80.107015][ T5770] veth1_vlan: entered promiscuous mode [ 80.174426][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.221882][ T5770] veth0_macvtap: entered promiscuous mode [ 80.263047][ T5770] veth1_macvtap: entered promiscuous mode [ 80.282725][ T5777] veth0_vlan: entered promiscuous mode [ 80.330709][ T5777] veth1_vlan: entered promiscuous mode [ 80.341503][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.360598][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.379238][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.417892][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.428173][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.438249][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.447411][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.456888][ T5775] Bluetooth: hci2: command tx timeout [ 80.465661][ T5775] Bluetooth: hci0: command tx timeout [ 80.519070][ T5777] veth0_macvtap: entered promiscuous mode [ 80.529049][ T5777] veth1_macvtap: entered promiscuous mode [ 80.537126][ T5775] Bluetooth: hci1: command tx timeout [ 80.541703][ T5772] Bluetooth: hci3: command tx timeout [ 80.561186][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.581059][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.591967][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.604160][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.653100][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.663972][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.676161][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.712053][ T5773] veth0_vlan: entered promiscuous mode [ 80.732703][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.741867][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.753269][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.762156][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.790421][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.811333][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.847438][ T5773] veth1_vlan: entered promiscuous mode [ 80.869598][ T5778] veth0_vlan: entered promiscuous mode [ 80.887130][ T5778] veth1_vlan: entered promiscuous mode [ 80.894939][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.903473][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.945100][ T5773] veth0_macvtap: entered promiscuous mode [ 80.967880][ T5773] veth1_macvtap: entered promiscuous mode [ 81.042141][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.054480][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.065637][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.076896][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.088866][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.119063][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.128342][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.140576][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.153486][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.166152][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.182517][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.195254][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.212618][ T5778] veth0_macvtap: entered promiscuous mode [ 81.224654][ T5778] veth1_macvtap: entered promiscuous mode [ 81.245101][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.260459][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.271326][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.282134][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.292532][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.303585][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.328397][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.360344][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.376358][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.385204][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.397027][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.459313][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.469997][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.480403][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.492921][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.503258][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.518138][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.534737][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.838640][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.989095][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.029342][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.038212][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.046994][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.055981][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.537484][ T5775] Bluetooth: hci2: command tx timeout [ 82.543162][ T5772] Bluetooth: hci0: command tx timeout [ 82.616877][ T5775] Bluetooth: hci3: command tx timeout [ 82.622387][ T5772] Bluetooth: hci1: command tx timeout [ 82.646606][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.690212][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.793321][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.812478][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.853352][ T5851] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 82.861326][ T5851] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1'. [ 83.644140][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.645716][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.658899][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.720718][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.918953][ T5772] Bluetooth: hci0: command tx timeout [ 84.919036][ T5088] Bluetooth: hci1: command tx timeout [ 84.924384][ T5772] Bluetooth: hci3: command tx timeout [ 84.929880][ T5775] Bluetooth: hci2: command tx timeout [ 86.525887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 86.554702][ T28] audit: type=1800 audit(1791800302.287:2): pid=5867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3" name="sub_compatible_id" dev="configfs" ino=7461 res=0 errno=0 [ 86.871714][ T974] cfg80211: failed to load regulatory.db [ 91.645903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.065386][ T5906] comedi comedi2: reset error (fatal) [ 96.884621][ T5916] netlink: 'syz.2.17': attribute type 4 has an invalid length. [ 96.892265][ T5916] netlink: 17 bytes leftover after parsing attributes in process `syz.2.17'. [ 98.530129][ T173] hid-sensor-hub 0003:1234:5678.0001: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 99.325825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 101.011766][ T5939] dummy0 speed is unknown, defaulting to 1000 [ 101.020721][ T5939] dummy0 speed is unknown, defaulting to 1000 [ 101.030439][ T5939] dummy0 speed is unknown, defaulting to 1000 [ 101.055716][ T5939] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.078280][ T5939] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 101.131320][ T5943] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.885904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 102.537854][ T5939] dummy0 speed is unknown, defaulting to 1000 [ 102.544919][ T5939] dummy0 speed is unknown, defaulting to 1000 [ 102.989515][ T5939] dummy0 speed is unknown, defaulting to 1000 [ 103.087237][ T5960] capability: warning: `syz.0.26' uses 32-bit capabilities (legacy support in use) [ 103.187567][ T5960] program syz.0.26 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.206354][ T5939] dummy0 speed is unknown, defaulting to 1000 [ 103.304100][ T5940] infiniband spz1: RDMA CMA: cma_listen_on_dev, error -98 [ 106.561769][ T5986] syz.1.32: attempt to access beyond end of device [ 106.561769][ T5986] loop1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 106.575080][ T5986] F2FS-fs (loop1): Unable to read 1th superblock [ 106.582920][ T5986] syz.1.32: attempt to access beyond end of device [ 106.582920][ T5986] loop1: rw=0, sector=8, nr_sectors = 8 limit=0 [ 106.597053][ T5986] F2FS-fs (loop1): Unable to read 2th superblock [ 107.415534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.975514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 113.545647][ T14] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 1016 jiffies old. [ 114.878553][ T6023] syz.1.33[6023]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 114.908659][ T6023] loop1: detected capacity change from 0 to 2048 [ 116.175364][ C0] sched: RT throttling activated [ 122.056842][ T6055] syz.0.42: attempt to access beyond end of device [ 122.056842][ T6055] loop0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 122.071880][ T6055] F2FS-fs (loop0): Unable to read 1th superblock [ 122.079307][ T6055] syz.0.42: attempt to access beyond end of device [ 122.079307][ T6055] loop0: rw=0, sector=8, nr_sectors = 8 limit=0 [ 122.092203][ T6055] F2FS-fs (loop0): Unable to read 2th superblock [ 122.765770][ T28] audit: type=1800 audit(1791800338.377:3): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.42" name="sub_compatible_id" dev="configfs" ino=8233 res=0 errno=0 [ 124.925896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 125.335469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 125.429112][ T6082] IPVS: Error connecting to the multicast addr [ 128.602588][ T6101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.51'. [ 130.455485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 133.460452][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.467328][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.725853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 138.457958][ T6141] Can't find ip_set type hash:ip,po [ 157.303012][ T6212] netlink: 'syz.1.76': attribute type 9 has an invalid length. [ 157.325506][ T6212] netlink: 27 bytes leftover after parsing attributes in process `syz.1.76'. [ 157.375919][ T6214] Zero length message leads to an empty skb [ 157.457321][ T6215] IPVS: Error connecting to the multicast addr [ 161.005710][ T28] audit: type=1800 audit(1791800377.257:4): pid=6227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.80" name="enable" dev="configfs" ino=7902 res=0 errno=0 [ 163.987083][ T6246] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 168.780243][ T6267] IPVS: Error connecting to the multicast addr [ 171.986886][ T6271] [ 171.989273][ T6271] ====================================================== [ 171.996302][ T6271] WARNING: possible circular locking dependency detected [ 172.003353][ T6271] syzkaller #0 Not tainted [ 172.007777][ T6271] ------------------------------------------------------ [ 172.015076][ T6271] syz.0.94/6271 is trying to acquire lock: [ 172.020870][ T6271] ffff888148ccdfc0 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: configfs_depend_item_unlocked+0x157/0x460 [ 172.032382][ T6271] [ 172.032382][ T6271] but task is already holding lock: [ 172.039734][ T6271] ffffffff8ec57308 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf9/0x550 [ 172.048957][ T6271] [ 172.048957][ T6271] which lock already depends on the new lock. [ 172.048957][ T6271] [ 172.059352][ T6271] [ 172.059352][ T6271] the existing dependency chain (in reverse order) is: [ 172.068346][ T6271] [ 172.068346][ T6271] -> #2 (tpg_instances_lock){+.+.}-{3:3}: [ 172.076245][ T6271] __mutex_lock+0x135/0xc80 [ 172.081259][ T6271] tcm_alloc+0x21/0x2d0 [ 172.085936][ T6271] usb_get_function+0x5d/0xb0 [ 172.091122][ T6271] config_usb_cfg_link+0x148/0x250 [ 172.096758][ T6271] configfs_symlink+0x5a5/0xfe0 [ 172.102116][ T6271] vfs_symlink+0x138/0x2b0 [ 172.107046][ T6271] do_symlinkat+0x1ba/0x400 [ 172.112060][ T6271] __x64_sys_symlinkat+0x99/0xb0 [ 172.117580][ T6271] do_syscall_64+0x55/0xb0 [ 172.122504][ T6271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.128909][ T6271] [ 172.128909][ T6271] -> #1 (&gi->lock){+.+.}-{3:3}: [ 172.136018][ T6271] __mutex_lock+0x135/0xc80 [ 172.141036][ T6271] config_usb_cfg_link+0x59/0x250 [ 172.146576][ T6271] configfs_symlink+0x5a5/0xfe0 [ 172.151939][ T6271] vfs_symlink+0x138/0x2b0 [ 172.156889][ T6271] do_symlinkat+0x1ba/0x400 [ 172.161900][ T6271] __x64_sys_symlinkat+0x99/0xb0 [ 172.167344][ T6271] do_syscall_64+0x55/0xb0 [ 172.172269][ T6271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.178704][ T6271] [ 172.178704][ T6271] -> #0 (&sb->s_type->i_mutex_key#21){++++}-{3:3}: [ 172.187399][ T6271] __lock_acquire+0x3a07/0x7eb0 [ 172.192756][ T6271] lock_acquire+0x19e/0x420 [ 172.197761][ T6271] down_write+0x97/0x200 [ 172.202507][ T6271] configfs_depend_item_unlocked+0x157/0x460 [ 172.209000][ T6271] usbg_make_tpg+0x1e1/0x550 [ 172.214093][ T6271] target_fabric_make_tpg+0xa4/0x6d0 [ 172.219898][ T6271] configfs_mkdir+0x515/0x9e0 [ 172.225094][ T6271] vfs_mkdir+0x2a5/0x470 [ 172.229851][ T6271] do_mkdirat+0x1dc/0x450 [ 172.234698][ T6271] __x64_sys_mkdirat+0x89/0xa0 [ 172.239984][ T6271] do_syscall_64+0x55/0xb0 [ 172.244923][ T6271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.251345][ T6271] [ 172.251345][ T6271] other info that might help us debug this: [ 172.251345][ T6271] [ 172.261568][ T6271] Chain exists of: [ 172.261568][ T6271] &sb->s_type->i_mutex_key#21 --> &gi->lock --> tpg_instances_lock [ 172.261568][ T6271] [ 172.275378][ T6271] Possible unsafe locking scenario: [ 172.275378][ T6271] [ 172.282831][ T6271] CPU0 CPU1 [ 172.288198][ T6271] ---- ---- [ 172.293544][ T6271] lock(tpg_instances_lock); [ 172.298206][ T6271] lock(&gi->lock); [ 172.304609][ T6271] lock(tpg_instances_lock); [ 172.311785][ T6271] lock(&sb->s_type->i_mutex_key#21); [ 172.317227][ T6271] [ 172.317227][ T6271] *** DEADLOCK *** [ 172.317227][ T6271] [ 172.325357][ T6271] 4 locks held by syz.0.94/6271: [ 172.330286][ T6271] #0: ffff8880189c8418 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 172.339515][ T6271] #1: ffff888078564160 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 172.350307][ T6271] #2: ffffffff8e92c330 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b9/0x9e0 [ 172.360032][ T6271] #3: ffffffff8ec57308 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf9/0x550 [ 172.369680][ T6271] [ 172.369680][ T6271] stack backtrace: [ 172.375561][ T6271] CPU: 1 PID: 6271 Comm: syz.0.94 Not tainted syzkaller #0 [ 172.382761][ T6271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 172.392915][ T6271] Call Trace: [ 172.396203][ T6271] [ 172.399210][ T6271] dump_stack_lvl+0x18c/0x250 [ 172.403889][ T6271] ? load_image+0x420/0x420 [ 172.408378][ T6271] ? show_regs_print_info+0x20/0x20 [ 172.413569][ T6271] ? print_circular_bug+0x12b/0x1a0 [ 172.418754][ T6271] check_noncircular+0x2fc/0x400 [ 172.423693][ T6271] ? look_up_lock_class+0x75/0x140 [ 172.428810][ T6271] ? print_deadlock_bug+0x5d0/0x5d0 [ 172.433993][ T6271] ? lockdep_lock+0xf5/0x230 [ 172.438574][ T6271] ? __lock_acquire+0x36dd/0x7eb0 [ 172.443593][ T6271] ? _find_first_zero_bit+0xd6/0x100 [ 172.448897][ T6271] __lock_acquire+0x3a07/0x7eb0 [ 172.453739][ T6271] ? is_bpf_text_address+0x28f/0x2a0 [ 172.459023][ T6271] ? verify_lock_unused+0x140/0x140 [ 172.464214][ T6271] ? __kernel_text_address+0xd/0x30 [ 172.469410][ T6271] lock_acquire+0x19e/0x420 [ 172.473898][ T6271] ? configfs_depend_item_unlocked+0x157/0x460 [ 172.480045][ T6271] ? trace_raw_output_contention_end+0xd0/0xd0 [ 172.486207][ T6271] ? __might_sleep+0xe0/0xe0 [ 172.490796][ T6271] ? rcu_is_watching+0x15/0xb0 [ 172.495586][ T6271] ? read_lock_is_recursive+0x20/0x20 [ 172.500951][ T6271] ? trace_contention_end+0x39/0xe0 [ 172.506145][ T6271] ? __mutex_lock+0x30d/0xc80 [ 172.510812][ T6271] ? do_syscall_64+0x55/0xb0 [ 172.515391][ T6271] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.521455][ T6271] down_write+0x97/0x200 [ 172.525689][ T6271] ? configfs_depend_item_unlocked+0x157/0x460 [ 172.531829][ T6271] ? down_read_killable+0x340/0x340 [ 172.537018][ T6271] configfs_depend_item_unlocked+0x157/0x460 [ 172.542988][ T6271] usbg_make_tpg+0x1e1/0x550 [ 172.547565][ T6271] ? snprintf+0xe9/0x140 [ 172.551795][ T6271] ? configfs_mkdir+0x4b9/0x9e0 [ 172.556689][ T6271] ? usbg_drop_tport+0x20/0x20 [ 172.561452][ T6271] ? vscnprintf+0x80/0x80 [ 172.565769][ T6271] target_fabric_make_tpg+0xa4/0x6d0 [ 172.571042][ T6271] ? target_fabric_release_wwn+0xb0/0xb0 [ 172.576663][ T6271] configfs_mkdir+0x515/0x9e0 [ 172.581327][ T6271] vfs_mkdir+0x2a5/0x470 [ 172.585632][ T6271] do_mkdirat+0x1dc/0x450 [ 172.589974][ T6271] ? vfs_mkdir+0x470/0x470 [ 172.594385][ T6271] __x64_sys_mkdirat+0x89/0xa0 [ 172.599137][ T6271] do_syscall_64+0x55/0xb0 [ 172.603554][ T6271] ? clear_bhb_loop+0x40/0x90 [ 172.608233][ T6271] ? clear_bhb_loop+0x40/0x90 [ 172.612921][ T6271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.618917][ T6271] RIP: 0033:0x7fe1a259e1d9 [ 172.623354][ T6271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.642958][ T6271] RSP: 002b:00007fe1a344a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 172.651414][ T6271] RAX: ffffffffffffffda RBX: 00007fe1a2825fa0 RCX: 00007fe1a259e1d9 [ 172.659373][ T6271] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 172.667346][ T6271] RBP: 00007fe1a2635888 R08: 0000000000000000 R09: 0000000000000000 [ 172.675299][ T6271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.683252][ T6271] R13: 00007fe1a2826038 R14: 00007fe1a2825fa0 R15: 00007ffd9e93b2c8 [ 172.691216][ T6271] [ 174.007320][ T6285] IPVS: Error connecting to the multicast addr