last executing test programs: 20m41.389166413s ago: executing program 0 (id=1): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f0000000240)={0xe, 0x2}) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a000000"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 20m39.670456109s ago: executing program 0 (id=10): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x70}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) 20m38.443628333s ago: executing program 0 (id=13): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0', [], 0xa, "26716ec47a07f6f5264a85c9"}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x20000040) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$key(0xf, 0x3, 0x2) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x4804) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 20m36.7514285s ago: executing program 0 (id=16): ioprio_set$pid(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB], 0x17) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000080)) request_key(&(0x7f0000000080)='id_legacy\x00', 0x0, &(0x7f00000001c0)='syz', 0x0) syz_mount_image$bfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00f300000000b30000000000"], 0x1, 0x71, &(0x7f0000000140)="$eJzszrENAVAUBdDrLyASnUIYwA5GESWdiljJDiYwgg0UWs1XfArfABI5J3kvue827/I4Tc6zpA6T2tntD5vVtu3wl0qSUZJxkum85duydYNXf70f1+/59b8AAAAAAAAAwLeSRZ8/Ds8AAAD//9ZiI98=") 20m33.262034752s ago: executing program 0 (id=19): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r4, 0x100, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x4, 0x41c}}}, 0x7) 20m31.492480245s ago: executing program 0 (id=20): ioprio_set$pid(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB], 0x17) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000080)) request_key(&(0x7f0000000080)='id_legacy\x00', 0x0, &(0x7f00000001c0)='syz', 0x0) syz_mount_image$bfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00f300000000b30000000000"], 0x1, 0x71, &(0x7f0000000140)="$eJzszrENAVAUBdDrLyASnUIYwA5GESWdiljJDiYwgg0UWs1XfArfABI5J3kvue827/I4Tc6zpA6T2tntD5vVtu3wl0qSUZJxkum85duydYNXf70f1+/59b8AAAAAAAAAwLeSRZ8/Ds8AAAD//9ZiI98=") io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 20m31.344313885s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/142, 0x8e}], 0x1, 0x36, 0xffffffff) 20m30.502776178s ago: executing program 4 (id=5): ioprio_set$pid(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB], 0x17) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000080)) request_key(&(0x7f0000000080)='id_legacy\x00', 0x0, &(0x7f00000001c0)='syz', 0x0) syz_mount_image$bfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00f300000000b30000000000"], 0x1, 0x71, &(0x7f0000000140)="$eJzszrENAVAUBdDrLyASnUIYwA5GESWdiljJDiYwgg0UWs1XfArfABI5J3kvue827/I4Tc6zpA6T2tntD5vVtu3wl0qSUZJxkum85duydYNXf70f1+/59b8AAAAAAAAAwLeSRZ8/Ds8AAAD//9ZiI98=") io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 20m26.391566922s ago: executing program 4 (id=23): ioprio_set$pid(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB], 0x17) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000080)) request_key(&(0x7f0000000080)='id_legacy\x00', 0x0, &(0x7f00000001c0)='syz', 0x0) syz_mount_image$bfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00f300000000b30000000000"], 0x1, 0x71, &(0x7f0000000140)="$eJzszrENAVAUBdDrLyASnUIYwA5GESWdiljJDiYwgg0UWs1XfArfABI5J3kvue827/I4Tc6zpA6T2tntD5vVtu3wl0qSUZJxkum85duydYNXf70f1+/59b8AAAAAAAAAwLeSRZ8/Ds8AAAD//9ZiI98=") io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 20m24.272299708s ago: executing program 2 (id=25): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xfffffe80, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x800c0}, 0x8010) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) close(0x3) close(0x3) 20m24.212434452s ago: executing program 4 (id=26): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0', [], 0xa, "26716ec47a07f6f5264a85c9"}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x20000040) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$key(0xf, 0x3, 0x2) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x4804) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 20m22.891527192s ago: executing program 4 (id=27): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x4, 0x41c}}}, 0x7) 20m21.062786291s ago: executing program 4 (id=28): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) r0 = open(0x0, 0x64842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) fstat(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x20, 0x3, 0x3e0, 0x138, 0xa, 0x148, 0x0, 0x10, 0x348, 0x2a8, 0x2a8, 0x348, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010100, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x6, 0x40000009, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x16}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x1, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xed, 0x281, 0xff, 'netbios-ns\x00', {0x1000}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x440) 20m17.12491055s ago: executing program 32 (id=17): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) lseek(0xffffffffffffffff, 0x100, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x4, 0x41c}}}, 0x7) 20m15.972702965s ago: executing program 33 (id=20): ioprio_set$pid(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB], 0x17) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000080)) request_key(&(0x7f0000000080)='id_legacy\x00', 0x0, &(0x7f00000001c0)='syz', 0x0) syz_mount_image$bfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00f300000000b30000000000"], 0x1, 0x71, &(0x7f0000000140)="$eJzszrENAVAUBdDrLyASnUIYwA5GESWdiljJDiYwgg0UWs1XfArfABI5J3kvue827/I4Tc6zpA6T2tntD5vVtu3wl0qSUZJxkum85duydYNXf70f1+/59b8AAAAAAAAAwLeSRZ8/Ds8AAAD//9ZiI98=") io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 20m11.539508563s ago: executing program 2 (id=36): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) lseek(0xffffffffffffffff, 0x100, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x4, 0x41c}}}, 0x7) 20m7.406460586s ago: executing program 2 (id=38): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) r0 = open(0x0, 0x64842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x20, 0x3, 0x3e0, 0x138, 0xa, 0x148, 0x0, 0x10, 0x348, 0x2a8, 0x2a8, 0x348, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010100, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x6, 0x40000009, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x16}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x1, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xed, 0x281, 0xff, 'netbios-ns\x00', {0x1000}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x440) 20m5.332083623s ago: executing program 34 (id=28): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) r0 = open(0x0, 0x64842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) fstat(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x20, 0x3, 0x3e0, 0x138, 0xa, 0x148, 0x0, 0x10, 0x348, 0x2a8, 0x2a8, 0x348, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010100, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x6, 0x40000009, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x16}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x1, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xed, 0x281, 0xff, 'netbios-ns\x00', {0x1000}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x440) 19m51.364204715s ago: executing program 35 (id=38): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) r0 = open(0x0, 0x64842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x20, 0x3, 0x3e0, 0x138, 0xa, 0x148, 0x0, 0x10, 0x348, 0x2a8, 0x2a8, 0x348, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010100, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x6, 0x40000009, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x16}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x1, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xed, 0x281, 0xff, 'netbios-ns\x00', {0x1000}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x440) 3m42.964224034s ago: executing program 8 (id=1711): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0xc0104d03, &(0x7f0000000900)) 3m42.689471307s ago: executing program 8 (id=1717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 3m41.726900459s ago: executing program 8 (id=1721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0x1, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m41.539705591s ago: executing program 8 (id=1722): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r1) 3m41.179499874s ago: executing program 8 (id=1725): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001600), 0x20000, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x43403d0e, &(0x7f0000000140)) 3m40.695116436s ago: executing program 8 (id=1731): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x980, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000004240)='/proc/cgroups\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 3m25.137254655s ago: executing program 36 (id=1731): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x980, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000004240)='/proc/cgroups\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 11.544152891s ago: executing program 3 (id=2477): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000004) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="0503222ed3fc14f9fd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 11.485776978s ago: executing program 6 (id=2479): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 11.140611754s ago: executing program 6 (id=2482): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x62003, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x34]}}]}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="170900000c001000ee0fe6c736e36824fd0009000000000000000000000000000a5f08000a0000000000060002000000000014001f00000000000000002300000000000000001400200000000000ffff00000000000000000001050022000100000054435604e7d00396eb412fb7052b74b2bd97144c9e693c0c8124b801d618a525d0cf545700"/156], 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e"], 0xe0}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$comedi(0xffffff9c, &(0x7f0000000240)='/dev/comedi4\x00', 0x22000, 0x0) ioctl$COMEDI_INSN(r3, 0x8020640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x1, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x282a, &(0x7f0000000440)={0x0, 0xee1f, 0x2000, 0x6, 0x2ee}, &(0x7f0000000100), &(0x7f0000000200), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$XFS_IOC_INUMBERS(r5, 0x80405880, &(0x7f0000000500)={{0x5, 0x2, 0x4f3, 0x9, 0x9}, [{0x5c, 0x1, 0x7, 0x2}, {0x7, 0x100, 0x3, 0x3}, {0x100000000, 0xd, 0x82, 0x2}, {0x2, 0x8001, 0xad, 0x7}, {0x6, 0x8, 0x4, 0x7f}, {0xb, 0xffffffffffffffff, 0x6, 0x6d}, {0x7, 0x478, 0x7, 0xc1}, {0x58d, 0x37, 0x1, 0x6}, {0x1, 0x200, 0x7f, 0xfd}]}) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) 10.615134802s ago: executing program 3 (id=2485): setns(0xc9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004844) 9.693649653s ago: executing program 3 (id=2487): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) lseek(r0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) read(r0, &(0x7f0000000100), 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) 9.607766639s ago: executing program 6 (id=2488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x3d3a, 0x4) sendto$inet(r2, &(0x7f0000000300)="01", 0x1, 0x4040, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0xa6b4, 0x4, 0x1, 0x270}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2116, 0x40, 0x2, 0x30d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc192, 0x1, 0x2, 0x3c6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcfde, 0x200, 0x2, 0x322}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa9fa, 0x10, 0x0, 0x241}, 0xffffffffffffffff, 0x0, 0x0, 0x0}], 0x4, &(0x7f00000022c0)={0x2e, 0x33, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, 0x0, '\x00', {0x3, 0xe47, 0x0, &(0x7f00000012c0)=@buf_1k="e00ac65febbce0040adaf8149c404477fc5c002a2726892a59ad8562e4dd4583e69269094ca58a36981f77d92d3c165ad6f67457eaf973da4031a1c561ecfc25c99272e8907026969eca80329742ffbe0bb56de1ff396db9462d7b2e3549ba650371730893892c25e9693c61c9afb0a3a9d90609cdcfe68571b14c2436e0aeeec2949fb36a5b8a9678f976d09e4a444dca3479d0be695f7bf1046415b4c637df1320a5eae780a5fa26257bb13d204eee091e94f62b013fa3d98abfb05a7bdf734be3abd602b9f2a30d0b4b62da41fb414cce734667446d534276a5769f9d4c89b89508cc3e8cac04067c741019f4b71acdd0ff62855a537a60d07b3804ff1dc86732c012cf89d395a7e8755836c0c9c6b50106ae597689617488542871f95ae7e8aeee994f696d2f40b7d57c0a0f6f6913d4ab7daf1b7f36767bc209ed4fcece0a82aa27e5546d339ab53e46042014689a75b094f232b6353dd37764cb7bd2d897d07c63fde489d3702ba5208f52fd17376ada5759ce11eb04e8a9ab3c6f15e952c2db4c1aa52c7d19ea5b6fabb473a1803f32ac16c6d6301773bfb0eb68db0399f7dd883a3fec1c72f9392ccb9ef9bee4e64b330b9364d3a1fd2963f3f9fa44090ea13711a4789e3947814df7da122fdec3e3190fcf007e10ff5e9df98033b9deeed72dd2daeae348d40668a0c5ddc2bd0812ca8069fde23483bc5c446343380b5d4ee89eb9a914d8b2b618daded6d42bff84a3bfa44ee320b2d86ee133370d86216e7065dc746a6b7a7ba958020a1e39ab5080b76ae967d5b234da7c50b7413a6da9ee0c1f9f5c39f8cb5579e86e9d0c963c2cd2e724c6a7d80f643725e9f47261d59b50d237c01035e813a410f3ce3498fba489860fe381f68e89fdd4d6e4a9a07326fde305a90b7bc1d7e852caecdfc619c6468d7f6dafbaafbd5ca8d93d34f328c31d3c5c74fb97a656f3ea26e7b806d9dcc2a8f9334aed276f768503fd3057eedfbd37b84e3dde5ff313a39da41e10176e07f829e950866bb72ea6c8d4c47e774d749a66797887d0fde83ecefdee58be96973256dce8ade9ba2ed8a4f0e363f3f94b25642307b035fa7d93524c569f5479e9dd5d839f97621094ba5122b7d6d6875db2475bee6b14b2b0dc7483dcfa68d5b4d22fb7e010f01b46a48bc3b341788e0d646fefe349c34ecf346b84123acf2e49609aff2cb430cf5596b0d6cfcda90bb5a57cccaf1d30452401ec9ff5780f2e12d934ab48655e590dfef7db7d22324b0df7b54f9b577299986d3ee9b8551e22427d1a7c24cd85ae26b620d46f8aeeff1ab4c01a22ee00b3dd701074b3e4871af5d3729a4872fb71d2c5c3bdb73469d6c04c7b695fef0eb7c1749d3a670aaf47adce23bc36e6899b62298cef67fa5d3213347543d3abf6176ca1484914f72b8d144aca7ded3837bb65c34168"}}, &(0x7f0000002340)) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x68) r5 = gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f00000023c0)={0x2e, 0x10, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002380)=@any_dev={0x1, 0xc08, 0x0, 0x0, 0x1000, 0x2, r5, 0x0, 0x20}}}, &(0x7f0000002440)) recvmmsg(r2, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x2100, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x3) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x20040, 0x40, 0xe}, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) prlimit64(r5, 0x3, &(0x7f00000001c0)={0x30, 0x31b7}, &(0x7f0000000240)) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9811"], 0xfce) 9.571940737s ago: executing program 5 (id=2489): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$midi(r5, &(0x7f00000001c0)=""/70, 0xffffffd8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004ec0)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 8.272178405s ago: executing program 5 (id=2491): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) write(r2, &(0x7f00000002c0)="fe", 0xfdef) read$watch_queue(r1, &(0x7f0000000780)=""/221, 0xfdef) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 8.031795517s ago: executing program 3 (id=2493): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 7.971311938s ago: executing program 7 (id=2494): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}}}]}]}]}}]}, 0x60}}, 0x0) 7.583036592s ago: executing program 6 (id=2495): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a00000"], 0xa8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) ptrace$getregset(0x4204, r2, 0x3, &(0x7f0000000340)={&(0x7f0000000280)=""/48, 0x30}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) 7.565493509s ago: executing program 1 (id=2496): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x3, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0xfff1}}}, 0x24}}, 0x2000400c) 7.563885542s ago: executing program 7 (id=2497): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000004) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="0503222ed3fc14f9fd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.432812679s ago: executing program 3 (id=2498): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 6.430799626s ago: executing program 1 (id=2499): setns(0xc9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004844) 6.394457115s ago: executing program 5 (id=2500): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000008c0)={0x10, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.243682931s ago: executing program 7 (id=2501): setns(0xc9, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @mcast1, 0x2}, 0x1c) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @broadcast}, r1}, 0x14) 6.141842633s ago: executing program 6 (id=2502): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) 6.00936392s ago: executing program 3 (id=2503): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @multicast1, @random="8528d5915819", @private=0x2}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040021}, 0x30) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000180)={0x0, "f1ffffffffff63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee04200"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.839862167s ago: executing program 7 (id=2504): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x35, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x800, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x10}, {0xe, 0x10}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x20040800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r2, 0x407, 0x0) 5.835774283s ago: executing program 1 (id=2505): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount$nfs4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='addr=:']) 5.533420618s ago: executing program 9 (id=2506): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009058223"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) 5.52327983s ago: executing program 6 (id=2507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x3d3a, 0x4) sendto$inet(r2, &(0x7f0000000300)="01", 0x1, 0x4040, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0xa6b4, 0x4, 0x1, 0x270}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2116, 0x40, 0x2, 0x30d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc192, 0x1, 0x2, 0x3c6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcfde, 0x200, 0x2, 0x322}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa9fa, 0x10, 0x0, 0x241}, 0xffffffffffffffff, 0x0, 0x0, 0x0}], 0x4, &(0x7f00000022c0)={0x2e, 0x33, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, 0x0, '\x00', {0x3, 0xe47, 0x0, &(0x7f00000012c0)=@buf_1k="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"}}, &(0x7f0000002340)) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x68) r5 = gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f00000023c0)={0x2e, 0x10, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002380)=@any_dev={0x1, 0xc08, 0x0, 0x0, 0x1000, 0x2, r5, 0x0, 0x20}}}, &(0x7f0000002440)) recvmmsg(r2, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x2100, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x3) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x20040, 0x40, 0xe}, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) prlimit64(r5, 0x3, &(0x7f00000001c0)={0x30, 0x31b7}, &(0x7f0000000240)) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9811"], 0xfce) 4.041562616s ago: executing program 7 (id=2508): setns(0xc9, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @loopback, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000020000000000000000080822"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 4.040276536s ago: executing program 1 (id=2509): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) lseek(r0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) read(r0, &(0x7f0000000100), 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) 3.779421817s ago: executing program 1 (id=2510): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d104, 0x0, 0x0, 0x0, 0x100}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.778753126s ago: executing program 7 (id=2511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0x0, 0x4, 0x2, 0x1, 0x101, 0x7fff, 0x89b, 0x98, 0x8, 0x5, 0x8, 0x49, 0x4, 0x5, 0x4, 0x5f1b6026, 0x9, 0x200, 0x3, 0xb3f, 0x1, 0x0, 0x73a, 0x1d, 0x9, 0x1, 0x4, 0x6, 0x0, 0x81, 0x4, 0x1000, 0x2, 0x8ffc, 0x87, 0x81, 0x8, 0x1, 0xe9, 0x9, 0x7, 0x2, 0xfffffff8, 0x6, 0x2, 0x23, 0x9, 0x1, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x3, 0xfffffffa, 0xc, 0x10001, 0x5, 0x10001, 0x4, 0xfe7, 0x5, 0xa0, 0x0, 0x9, 0x3, 0x16db, 0xfffffff1, 0x812, 0x7, 0x2, 0x800, 0x10000, 0x5, 0x7, 0x8, 0x1bd, 0xd, 0x7, 0x3, 0x8, 0x6, 0x9, 0x3, 0x40000, 0x200, 0x0, 0xd4, 0xa1a, 0x588, 0x7, 0x6, 0xe, 0x9, 0x2, 0x6, 0x8000b44, 0x0, 0x4, 0x800, 0x5, 0x9, 0x8, 0x0, 0x2, 0x9, 0x407c, 0x6, 0x3, 0x5, 0x0, 0x7, 0x7, 0xb, 0xd8, 0x3, 0x4, 0x5, 0x1, 0x80000001, 0x7ff, 0xe, 0x5, 0x80, 0x0, 0x9, 0xe94c, 0x5, 0x6, 0x1, 0x8000, 0x2000003, 0xbf2d, 0x1ff, 0xfffffffa, 0x101, 0x5, 0x2, 0x10, 0x7fffffff, 0x1, 0x1, 0x1, 0x3, 0x47, 0x22, 0x96e4, 0x7, 0xf0, 0x8000, 0x6, 0x80000001, 0x4, 0x3, 0x5, 0x0, 0x5, 0xd2, 0xe, 0x0, 0x1000, 0xe, 0x8, 0xfd, 0x3, 0xa155, 0x9, 0x4, 0x4, 0x4920, 0x5, 0x10001, 0x2, 0x5, 0xc, 0x9, 0x2, 0x101, 0xb094, 0x4, 0x7, 0x6, 0x80000000, 0x81, 0x1, 0x0, 0x200, 0x2, 0x428, 0x2000, 0x0, 0x81, 0x0, 0x80000001, 0x3, 0x400, 0x1, 0x6, 0x6, 0xff, 0x5, 0x6, 0x0, 0x5, 0x8f76, 0x4, 0x8000, 0xffffff01, 0xf, 0x0, 0x6, 0xf, 0x3, 0x9, 0x8000, 0x7, 0xffffffff, 0x7ff, 0x2d, 0x1, 0x2, 0x9, 0x3, 0xffffffff, 0x400, 0xfffffffc, 0x6, 0x1, 0x8, 0x7, 0x80000000, 0x7, 0x0, 0xc, 0x0, 0x9, 0x22fbb94a, 0x1, 0x0, 0x5, 0x3, 0x7, 0x0, 0xfffffda3, 0x4, 0x6, 0xd75, 0x1, 0xbc, 0xa, 0x2, 0x8, 0x5, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7fff, 0x7, 0x9, 0x3, 0x5, 0x775, 0xffff, 0x800, 0x1, 0x2a28, 0x0, 0x6, 0x8, 0x3f, 0x10000, 0xc, 0x1, 0x7, 0x8, 0xe, 0x8, 0x3, 0x1, 0x7c, 0x1, 0x8000, 0x0, 0xeb3, 0x7, 0x81, 0x7, 0x3cb, 0x3, 0xb, 0x6, 0x1, 0x7, 0x8, 0xe8, 0x6, 0xffff, 0x9, 0x0, 0x6, 0x7f, 0xfffffff7, 0x8, 0x2, 0x3, 0xdd0f, 0xfa, 0x1, 0x77e, 0x5, 0x100, 0xffffffff, 0x101, 0x5, 0x0, 0x8, 0x6b, 0x2, 0x0, 0x5, 0x3, 0x4, 0x3, 0x5, 0x4, 0x7f, 0x2, 0x9, 0x4, 0x8000, 0x2, 0x80000001, 0xfffffffa, 0x4, 0x7, 0x3, 0x9, 0x1, 0x9, 0x8000, 0x9, 0x58, 0x2, 0x18fb, 0x2, 0x75f, 0x7, 0x3000000, 0x1, 0x16, 0x4, 0x66cf, 0x0, 0x3, 0x7, 0xff, 0x9, 0x101, 0x1, 0x7, 0xb5f, 0x2, 0x3, 0x2, 0x80000000, 0x9, 0x0, 0x1ff, 0x2, 0x10000, 0x8000, 0x4, 0xfff, 0x5256f118, 0x2, 0x1000, 0x8f35, 0x0, 0x7fffffff, 0x492, 0x8, 0x6, 0x4, 0x9, 0x1, 0x6, 0x1, 0xffff, 0xf, 0x38e, 0x5, 0x0, 0x6, 0x7, 0x256056b8, 0x9, 0x1, 0x80, 0x2, 0x7fffffff, 0x6, 0x1, 0x1c9, 0x1, 0x4, 0x6, 0x8001, 0x2, 0x179, 0x7f, 0x4, 0x4, 0x4, 0x100000, 0xfffffffb, 0xe, 0x81, 0xf25, 0x8001, 0x0, 0x5, 0x5, 0xfffff41b, 0x2, 0x7ff, 0x0, 0x8, 0x7, 0x9, 0xffffffff, 0x10001, 0x9e, 0x7, 0x200, 0x6, 0x2, 0x9, 0x8, 0x4, 0x3, 0x401a, 0x3ff, 0x3, 0x7, 0xd, 0x6, 0x1000, 0x9, 0x4, 0xf, 0xffffffff, 0x65, 0x1, 0x8, 0xa, 0x6, 0x8, 0x8001, 0x75, 0x6, 0x8, 0xfffffff9, 0x6, 0x0, 0x7ff, 0xea, 0x8001, 0x2, 0x101, 0x7, 0x80000000, 0x6, 0x2, 0x6, 0x4, 0x2, 0x3, 0x2, 0x6, 0x7, 0x3, 0x1, 0x0, 0x2, 0x471a, 0x80, 0x40, 0x9e9, 0x80000000, 0x7, 0x3, 0x6, 0xfffffff9, 0x464, 0x5, 0x9, 0xa2a, 0x0, 0x80000001, 0x0, 0x6, 0x10000, 0x0, 0x3, 0xffffffff, 0x9, 0x4, 0x3ff, 0x5, 0x2, 0x7c2d]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x6, 0x3, 0x5, 0x9, {0x5, 0x2, 0x1, 0x3, 0x3, 0xd446}, {0x9, 0x1, 0x2, 0x2, 0x8, 0x9}, 0x1, 0x6, 0xffffffff}}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 2.407091761s ago: executing program 5 (id=2512): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) write(r2, &(0x7f00000002c0)="fe", 0xfdef) read$watch_queue(r1, &(0x7f0000000780)=""/221, 0xfdef) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 1.172563223s ago: executing program 9 (id=2513): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x3, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0xfff1}}}, 0x24}}, 0x2000400c) 1.167163141s ago: executing program 1 (id=2514): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='file1\x00', 0x42, 0x1ff) ftruncate(r1, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='file2\x00', 0x42, 0x1ff) ftruncate(r2, 0x1000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='file3\x00', 0x42, 0x1ff) ftruncate(r3, 0x1000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./dev/loop1\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/loop2\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/loop3\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r3) r8 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r8, &(0x7f0000001100)='md0\x00', 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r9, 0x40140921, &(0x7f0000001400)="0000000007000000000000000000000006000000") ioctl(r9, 0x40140921, &(0x7f0000001500)="0100000007000000010000000100000006000000") ioctl(r9, 0x40140921, &(0x7f0000001600)="0200000007000000020000000200000006000000") ioctl(r9, 0x400c0930, 0x0) ioctl(r9, 0x40140921, &(0x7f0000001700)="030000000700000003000000ffffffff02000400") 765.634638ms ago: executing program 9 (id=2515): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 487.30644ms ago: executing program 9 (id=2516): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020) 382.068748ms ago: executing program 5 (id=2517): setns(0xc9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004844) 213.265761ms ago: executing program 9 (id=2518): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='freeze', 0x6) 176.355185ms ago: executing program 5 (id=2519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = syz_ublk_setup_io_uring(0xd34, &(0x7f0000000480)={0x0, 0x56ca, 0x1, 0xfffffffc, 0x8313}, &(0x7f0000000180), &(0x7f0000000240)=0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000640)={&(0x7f0000002000)={[{&(0x7f0000000340)="f2816b4da9bc64351dbd293ca3bbe9804a894729259fd6f6c97458f103cd9dd1f6123032a690d2add5e3bdb51c34e67d2da6bf30ea63865a034014dfc25b7f80d950e1d8617e8ae15e3e03094b91462997dfc6bd530d94871bcaef40691565e3bdadeab43575208bbeac1a69771233", 0x6f}]}, 0x1}, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaae1ffffffffff85dd60fca33f0000fa0e00000000000000000000000000000000fe8000000000000000000000fcb400aab23ecab2dd74e174dc18246e44cbfc51cbcb99a8dca250200a30663286a5"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRESOCT, @ANYRESHEX, @ANYRES16], 0x11c}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket(0x28, 0x3, 0x6) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe48, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2, 0x4}, 0xfffe}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8820}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) read$dsp(r4, &(0x7f0000000180)=""/93, 0x5d) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x20000014) ioctl$I2C_SLAVE_FORCE(0xffffffffffffffff, 0x706, 0x3d3) 0s ago: executing program 9 (id=2520): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x44) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x1dd, 0xbcff, 0x0, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) kernel console output (not intermixed with test programs): to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.516283][T13051] loop3: detected capacity change from 0 to 512 [ 1059.675158][T13048] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1059.711034][T13051] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1059.718553][T13048] binder: 13046:13048 ioctl c0306201 0 returned -14 [ 1059.741589][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 1059.758012][T13051] EXT4-fs (loop3): 1 truncate cleaned up [ 1059.833574][T13051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1059.943756][T13061] block2mtd: error: cannot open device /d [ 1059.950873][T13027] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.111508][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.256357][T13027] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.362145][T10788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.570533][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.599170][T13027] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.638447][T13078] ubi0: attaching mtd0 [ 1060.682708][T13078] ubi0: scanning is finished [ 1060.731026][T13083] loop9: detected capacity change from 0 to 512 [ 1060.812751][T13083] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1060.911809][T13083] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1062.125508][T13096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1267'. [ 1062.971688][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.144894][T10788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.156071][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.224458][T11415] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.328438][T13078] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1064.694564][T13102] loop6: detected capacity change from 0 to 2048 [ 1064.906791][T13102] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1065.006244][T13102] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1065.160150][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.226816][T13114] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1065.452600][T11127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.209162][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.264296][T13131] loop5: detected capacity change from 0 to 256 [ 1066.377391][T13131] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 1066.518563][T13134] syzkaller0: entered promiscuous mode [ 1066.591106][T13134] syzkaller0: entered allmulticast mode [ 1066.599808][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1066.599831][ T30] audit: type=1804 audit(1796776370.703:115): pid=13131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1280" name="/newroot/437/file0/bus" dev="loop5" ino=1048725 res=1 errno=0 [ 1066.647241][T13135] af_packet: tpacket_rcv: packet too big, clamped from 64983 to 3952. macoff=96 [ 1066.763990][ T30] audit: type=1804 audit(1796776370.743:116): pid=13131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1280" name="/newroot/437/file0/bus" dev="loop5" ino=1048725 res=1 errno=0 [ 1067.197655][T10788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.240675][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.662438][T13158] loop8: detected capacity change from 0 to 2048 [ 1067.797012][T13158] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1067.919452][T13158] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1068.282397][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.350803][T11276] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.481499][T13177] loop7: detected capacity change from 0 to 256 [ 1068.529342][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.607303][T13177] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 1068.756959][ T30] audit: type=1804 audit(1796776372.864:117): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1299" name="/newroot/81/file0/bus" dev="loop7" ino=1048728 res=1 errno=0 [ 1068.839843][ T30] audit: type=1804 audit(1796776372.894:118): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1299" name="/newroot/81/file0/bus" dev="loop7" ino=1048728 res=1 errno=0 [ 1069.356303][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.458359][T13199] loop8: detected capacity change from 0 to 1024 [ 1069.469539][T13199] EXT4-fs: Ignoring removed orlov option [ 1069.516482][T13199] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1069.607615][ T5897] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1069.674622][T13170] loop6: detected capacity change from 0 to 40427 [ 1069.703548][T13170] F2FS-fs (loop6): build fault injection rate: 174 [ 1069.737446][T13170] F2FS-fs (loop6): build fault injection type: 0x3bfe8c [ 1069.783139][T13170] F2FS-fs (loop6): invalid crc value [ 1069.801666][ T5897] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1069.862235][ T5897] usb 4-1: config 0 has no interface number 0 [ 1069.895346][ T5897] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1069.950144][ T5897] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1069.964547][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.973438][ T5897] usb 4-1: Product: syz [ 1069.978968][ T5897] usb 4-1: Manufacturer: syz [ 1069.983736][ T5897] usb 4-1: SerialNumber: syz [ 1070.002011][T11276] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.036215][ T5897] usb 4-1: config 0 descriptor?? [ 1070.188135][T13170] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1070.214158][T10788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.259403][T13170] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1070.385437][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.418933][T13170] F2FS-fs (loop6): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio.part.0+0x345/0xe00 [ 1070.434936][T13170] F2FS-fs (loop6): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 1070.527429][T11127] syz-executor: attempt to access beyond end of device [ 1070.527429][T11127] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1070.545368][T11127] CPU: 1 UID: 0 PID: 11127 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1070.545424][T11127] Tainted: [L]=SOFTLOCKUP [ 1070.545437][T11127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1070.545458][T11127] Call Trace: [ 1070.545469][T11127] [ 1070.545482][T11127] dump_stack_lvl+0x100/0x190 [ 1070.545529][T11127] f2fs_stop_checkpoint+0x5e6/0xb30 [ 1070.545590][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.545636][T11127] ? errseq_set+0xe3/0x150 [ 1070.545693][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.545746][T11127] f2fs_write_end_bio+0xf53/0x1340 [ 1070.545790][T11127] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 1070.545834][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.545890][T11127] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1070.545929][T11127] bio_endio+0x778/0x8e0 [ 1070.546054][T11127] submit_bio_noacct+0x64c/0x1ff0 [ 1070.546139][T11127] f2fs_submit_write_bio+0x133/0x330 [ 1070.546222][T11127] __submit_merged_bio+0x330/0x7b0 [ 1070.546269][T11127] ? rcu_is_watching+0x12/0xc0 [ 1070.546354][T11127] __submit_merged_write_cond+0x3fe/0x510 [ 1070.546423][T11127] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1070.546508][T11127] ? __pfx___might_resched+0x10/0x10 [ 1070.546564][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.546627][T11127] ? folio_clear_dirty_for_io+0x178/0x960 [ 1070.546719][T11127] f2fs_write_cache_pages+0x20e9/0x2630 [ 1070.546817][T11127] ? __bfs+0xef/0x2a0 [ 1070.546898][T11127] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1070.546964][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.547024][T11127] ? __kasan_check_byte+0x13/0x50 [ 1070.547079][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.547140][T11127] ? unwind_next_frame+0x3be/0x2090 [ 1070.547221][T11127] ? rcu_is_watching+0x12/0xc0 [ 1070.547290][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.547358][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.547404][T11127] ? __kasan_check_byte+0x13/0x50 [ 1070.547449][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.547510][T11127] ? is_bpf_text_address+0x94/0x1a0 [ 1070.547550][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.547592][T11127] ? kernel_text_address+0x8d/0x100 [ 1070.547689][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.547731][T11127] ? check_prev_add+0x354/0xe60 [ 1070.547770][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.547811][T11127] ? rcu_is_watching+0x12/0xc0 [ 1070.547865][T11127] f2fs_write_data_pages+0x799/0x16d0 [ 1070.547925][T11127] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1070.547980][T11127] ? do_writepages+0x4b5/0x600 [ 1070.548039][T11127] ? do_writepages+0x4b5/0x600 [ 1070.548094][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.548144][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.548189][T11127] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1070.548241][T11127] do_writepages+0x278/0x600 [ 1070.548307][T11127] ? __pfx_do_writepages+0x10/0x10 [ 1070.548366][T11127] ? do_raw_spin_unlock+0x145/0x1e0 [ 1070.548418][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.548469][T11127] ? _raw_spin_unlock+0x28/0x50 [ 1070.548514][T11127] filemap_writeback+0x22d/0x2e0 [ 1070.548581][T11127] ? __pfx_filemap_writeback+0x10/0x10 [ 1070.548643][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.548740][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.548787][T11127] ? find_held_lock+0x2b/0x80 [ 1070.548842][T11127] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 1070.548891][T11127] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 1070.548939][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.548995][T11127] f2fs_sync_dirty_inodes+0x46a/0x970 [ 1070.549063][T11127] block_operations+0x2a6/0xfc0 [ 1070.549123][T11127] ? __pfx_block_operations+0x10/0x10 [ 1070.549226][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.549276][T11127] ? ktime_get+0x22c/0x320 [ 1070.549318][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.549361][T11127] ? rcu_is_watching+0x12/0xc0 [ 1070.549422][T11127] f2fs_write_checkpoint+0x58b/0x53d0 [ 1070.549480][T11127] ? _raw_spin_unlock_irq+0x23/0x50 [ 1070.549521][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.549567][T11127] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1070.549605][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.549650][T11127] ? __wait_for_common+0x1f3/0x4c0 [ 1070.549695][T11127] ? __pfx_schedule_timeout+0x10/0x10 [ 1070.549764][T11127] ? __pfx___wait_for_common+0x10/0x10 [ 1070.549811][T11127] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1070.549862][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.549918][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.549963][T11127] ? rcu_is_watching+0x12/0xc0 [ 1070.550016][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.550061][T11127] ? kthread_stop+0x280/0x630 [ 1070.550123][T11127] kill_f2fs_super+0x3f1/0x4a0 [ 1070.550173][T11127] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1070.550241][T11127] ? lockdep_hardirqs_on+0x78/0x100 [ 1070.550286][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.550333][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.550393][T11127] deactivate_locked_super+0xc1/0x1b0 [ 1070.550446][T11127] deactivate_super+0xe7/0x110 [ 1070.550493][T11127] cleanup_mnt+0x21f/0x450 [ 1070.550549][T11127] task_work_run+0x150/0x240 [ 1070.550587][T11127] ? __pfx_task_work_run+0x10/0x10 [ 1070.550629][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.550684][T11127] exit_to_user_mode_loop+0x1d8/0x6f0 [ 1070.550730][T11127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.550775][T11127] ? rcu_is_watching+0x12/0xc0 [ 1070.550833][T11127] do_syscall_64+0x666/0x870 [ 1070.550888][T11127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.550926][T11127] RIP: 0033:0x7fce0419f0d7 [ 1070.550955][T11127] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1070.550993][T11127] RSP: 002b:00007ffc564b4c38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1070.551029][T11127] RAX: 0000000000000000 RBX: 00007fce0423330a RCX: 00007fce0419f0d7 [ 1070.551053][T11127] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc564b4cf0 [ 1070.551077][T11127] RBP: 00007ffc564b4cf0 R08: 00007ffc564b5cf0 R09: 00000000ffffffff [ 1070.551102][T11127] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc564b5d80 [ 1070.551125][T11127] R13: 00007fce0423330a R14: 0000000000106e7f R15: 00007ffc564b5dc0 [ 1070.551174][T11127] [ 1070.873577][ T5897] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1070.884192][T11127] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1071.124420][ T5897] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1071.214389][ T5897] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 1071.247689][ T5897] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 1071.265262][ T5897] usb 4-1: USB disconnect, device number 28 [ 1071.404509][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.260458][T13240] loop5: detected capacity change from 0 to 1024 [ 1072.286651][T13240] EXT4-fs: Ignoring removed orlov option [ 1072.341317][T13240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1072.442010][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.688099][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.236576][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.518309][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.930762][T13307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.940654][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.105118][ T5897] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1074.191065][T13317] Illegal XDP return value 4294967274 on prog (id 158) dev syz_tun, expect packet loss! [ 1074.291464][T13310] block nbd5: shutting down sockets [ 1074.307314][ T5897] usb 7-1: Using ep0 maxpacket: 32 [ 1074.317800][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.336085][ T5897] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1074.376174][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.423956][ T5897] usb 7-1: config 0 descriptor?? [ 1074.457347][ T5897] hub 7-1:0.0: USB hub found [ 1074.622036][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.678618][ T5897] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1074.721981][ T5897] usbhid 7-1:0.0: can't add hid device: -71 [ 1074.739519][ T5897] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1074.817365][ T5897] usb 7-1: USB disconnect, device number 2 [ 1075.396679][T13345] loop8: detected capacity change from 0 to 512 [ 1075.408238][T13345] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1075.428638][T13345] EXT4-fs (loop8): 1 truncate cleaned up [ 1075.454722][T13345] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1075.530747][T13345] EXT4-fs error (device loop8): ext4_validate_block_bitmap:440: comm syz.8.1371: bg 0: block 456: padding at end of block bitmap is not set [ 1075.650560][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.808513][T11276] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.396847][ T5608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.784046][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.801006][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.126536][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.257061][ T30] audit: type=1326 audit(1796776382.368:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13405 comm="syz.8.1394" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bdd9de99 code=0x7fc00000 [ 1078.772705][ T5897] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1078.834873][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.966502][ T5897] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1079.016712][ T5897] usb 7-1: config 0 has no interface number 0 [ 1079.036673][ T5897] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1079.068636][ T5897] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1079.098435][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.126540][ T5897] usb 7-1: Product: syz [ 1079.141028][ T5897] usb 7-1: Manufacturer: syz [ 1079.167262][ T5897] usb 7-1: SerialNumber: syz [ 1079.231439][ T5897] usb 7-1: config 0 descriptor?? [ 1079.482550][T10788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.873377][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.955176][T13451] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1080.026839][T13451] binder: 13449:13451 ioctl c0306201 0 returned -14 [ 1080.110891][ T5897] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1080.354914][ T5897] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1080.427991][ T5897] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 1080.464670][ T5897] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 1080.514534][ T5897] usb 7-1: USB disconnect, device number 3 [ 1080.937280][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.964486][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.208636][T13487] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1082.256200][T13487] binder: 13485:13487 ioctl c0306201 0 returned -14 [ 1082.276577][T13489] loop3: detected capacity change from 0 to 512 [ 1082.305793][T13489] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1082.326783][T13486] syz.5.1427 uses obsolete (PF_INET,SOCK_PACKET) [ 1082.360634][T13489] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.1428: bg 0: block 384: padding at end of block bitmap is not set [ 1082.391335][T13489] loop3: lost filesystem error report for type 5 error -117 [ 1082.400792][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1082.414612][ C0] EXT4-fs (loop3): initial error at time 1796776386: ext4_validate_block_bitmap:440 [ 1082.424059][ C0] EXT4-fs (loop3): last error at time 1796776386: ext4_validate_block_bitmap:440 [ 1082.447650][T13489] EXT4-fs (loop3): Remounting filesystem read-only [ 1082.454781][T13489] EXT4-fs (loop3): 1 truncate cleaned up [ 1082.463809][T13489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.511078][ T5608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.593631][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.751850][T13498] loop7: detected capacity change from 0 to 2048 [ 1082.817182][T13498] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.919436][T13498] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.006745][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.631156][T13528] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1444'. [ 1083.707996][T11185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.766267][T13529] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1444'. [ 1084.430999][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.637407][T13534] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1084.713207][T13534] binder: 13532:13534 ioctl c0306201 0 returned -14 [ 1085.406367][T13563] loop6: detected capacity change from 0 to 2048 [ 1085.551384][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.560675][T10788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.577846][T13563] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1085.594099][T13563] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1086.293758][T11127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.805311][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.294621][T13585] loop8: detected capacity change from 0 to 4096 [ 1087.365594][T13585] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1087.494917][T13585] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1087.613744][T13586] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1087.620466][T13586] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1087.640941][T12672] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.675307][T13593] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1087.694203][T13586] vhci_hcd vhci_hcd.0: Device attached [ 1087.707818][T13593] binder: 13592:13593 ioctl c0306201 0 returned -14 [ 1087.717529][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.731306][T13585] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.875573][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.002379][ T5888] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.030425][T10787] usb 40-1: SetAddress Request (2) to port 0 [ 1088.044289][T10787] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1088.187375][ T5888] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.236131][ T5888] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.414580][T13604] loop9: detected capacity change from 0 to 2048 [ 1088.489443][T13604] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1088.565508][T13604] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1088.592365][T10788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.930615][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.951105][T11415] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.203195][T13622] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1089.263780][T13609] block nbd5: shutting down sockets [ 1089.320677][T13591] vhci_hcd: connection reset by peer [ 1089.331093][ T1168] vhci_hcd vhci_hcd.3: stop threads [ 1089.336815][ T1168] vhci_hcd vhci_hcd.3: release socket [ 1089.367162][T13622] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1089.391393][ T1168] vhci_hcd vhci_hcd.3: disconnect device [ 1089.412716][ T30] audit: type=1800 audit(1796776393.534:120): pid=13621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1477" name="bTransferCharacteristics" dev="configfs" ino=53338 res=0 errno=0 [ 1089.826779][T13633] loop5: detected capacity change from 0 to 4096 [ 1089.861766][T13633] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1089.940274][T13633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1089.985454][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.227367][T13633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.237930][T13646] binder: 13637:13646 ioctl c00c620f 2000000002c0 returned -22 [ 1091.017647][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.078238][T13669] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1091.103400][T13670] loop5: detected capacity change from 0 to 512 [ 1091.170165][T13670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1091.263383][T13670] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1091.796460][T10788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.831062][T13664] block nbd8: shutting down sockets [ 1092.757473][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.153840][T10787] usb 40-1: device descriptor read/8, error -110 [ 1093.183211][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1093.515609][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.627897][T10787] usb usb40-port1: attempt power cycle [ 1094.814406][T10787] usb usb40-port1: unable to enumerate USB device [ 1095.520547][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.988511][T13690] netdevsim netdevsim5 netdevsim1 (unregistering): left allmulticast mode [ 1096.078717][T13690] team0: Port device netdevsim1 removed [ 1096.628511][T10787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.304420][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.214708][ T30] audit: type=1800 audit(1796776402.258:121): pid=13726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1512" name="bTransferCharacteristics" dev="configfs" ino=52978 res=0 errno=0 [ 1098.300870][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.408213][T13730] loop7: detected capacity change from 0 to 512 [ 1098.527271][T13730] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1098.599239][T10787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.643913][T13730] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1098.707079][T13739] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1517'. [ 1099.693203][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.703576][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.903573][T11185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1099.939198][T13748] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1099.956089][T13748] binder: 13747:13748 ioctl c0306201 0 returned -14 [ 1100.496138][T13766] loop3: detected capacity change from 0 to 2048 [ 1100.505257][ T30] audit: type=1800 audit(1796776404.619:122): pid=13769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1529" name="bTransferCharacteristics" dev="configfs" ino=53067 res=0 errno=0 [ 1100.589717][T13766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1100.612436][T13766] ext4 filesystem being mounted at /516/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1100.753350][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.929154][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.091818][ T50] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1101.163229][T13790] loop9: detected capacity change from 0 to 512 [ 1101.265239][ T5636] block nbd5: Receive control failed (result -32) [ 1101.276537][T13767] block nbd5: shutting down sockets [ 1101.302954][T13790] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1101.411523][T13790] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1102.495639][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.533264][T11415] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1102.740986][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.568048][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.700981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.734963][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.869934][T13823] loop5: detected capacity change from 0 to 2048 [ 1103.971343][T13823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1104.088375][T13823] ext4 filesystem being mounted at /487/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1104.389126][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1104.591114][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.731487][T13845] syz_tun: entered promiscuous mode [ 1105.555260][T13864] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1105.614302][T13864] binder: 13862:13864 ioctl c0306201 0 returned -14 [ 1105.638064][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.696940][T13867] loop8: detected capacity change from 0 to 2048 [ 1105.802025][T13867] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1105.906199][T13867] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1106.418986][T13874] syzkaller0: entered promiscuous mode [ 1106.424635][T13874] syzkaller0: entered allmulticast mode [ 1106.677581][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.272877][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.890173][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.938880][T11276] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.184331][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.834521][T10787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.836341][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1108.849427][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1108.854227][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.867068][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.897818][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.905998][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.945620][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.341324][T10787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.977951][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.017281][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.716983][T13894] syz_tun: entered promiscuous mode [ 1113.055854][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.644259][T14013] syz_tun: entered allmulticast mode [ 1113.715559][T14012] syz_tun: left allmulticast mode [ 1113.954104][ T194] net_ratelimit: 1 callbacks suppressed [ 1113.954124][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.969900][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.978800][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.990436][T14021] syz_tun: entered promiscuous mode [ 1114.052571][T14022] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1602'. [ 1114.093042][T14022] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1602'. [ 1114.145892][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.642349][T14044] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1613'. [ 1114.968135][T14051] syzkaller0: entered promiscuous mode [ 1114.992184][T14051] syzkaller0: entered allmulticast mode [ 1115.012719][T14054] loop6: detected capacity change from 0 to 2048 [ 1115.077994][T14054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1115.132879][T14054] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1115.245077][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.340153][T11127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.429584][T14072] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1115.449471][T14072] binder: 14071:14072 ioctl c0306201 0 returned -14 [ 1115.561755][T14075] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1622'. [ 1116.365062][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.416486][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.387005][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.389341][T14117] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1117.453150][T14117] binder: 14116:14117 ioctl c0306201 0 returned -14 [ 1118.413166][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.448667][T14159] loop8: detected capacity change from 0 to 2048 [ 1119.452935][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.463201][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.835557][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.858122][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.881428][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.151809][T14159] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1120.204846][T14172] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1120.278880][T14159] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1120.363057][T14172] binder: 14168:14172 ioctl c0306201 0 returned -14 [ 1120.626038][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.381762][T11276] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.692238][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.201181][T14212] loop7: detected capacity change from 0 to 2048 [ 1122.491334][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.752585][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.992693][T14212] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1123.005279][T14212] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1123.358667][T11185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.661258][T14241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1688'. [ 1123.770823][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.090905][ T5636] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1124.382551][T14258] syzkaller0: entered promiscuous mode [ 1124.623035][T14258] syzkaller0: entered allmulticast mode [ 1124.820948][ T5765] net_ratelimit: 1 callbacks suppressed [ 1124.820975][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.176355][T14270] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1698'. [ 1125.404500][T14271] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1698'. [ 1125.451550][T10206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.655395][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.854793][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.968833][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.989965][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.659238][T14287] mtrr: base(0x61616161000) is not aligned on a size(0x61616161000) boundary [ 1126.712639][ T30] audit: type=1800 audit(1796776430.843:123): pid=14289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1706" name="bTransferCharacteristics" dev="configfs" ino=54831 res=0 errno=0 [ 1126.889121][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.976502][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.018562][T14319] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1718'. [ 1128.189377][ T5636] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1128.209255][T14314] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1718'. [ 1128.542890][ T30] audit: type=1800 audit(1796776432.683:124): pid=14331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1723" name="bTransferCharacteristics" dev="configfs" ino=54202 res=0 errno=0 [ 1128.978416][T10787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.048175][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.881875][T14349] syzkaller0: entered promiscuous mode [ 1129.888646][T14349] syzkaller0: entered allmulticast mode [ 1130.108256][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.276063][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.345081][ T30] audit: type=1800 audit(1796776435.455:125): pid=14369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1739" name="bTransferCharacteristics" dev="configfs" ino=54266 res=0 errno=0 [ 1131.400435][T14364] loop3: detected capacity change from 0 to 2048 [ 1131.712752][T14364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1131.756317][T14364] ext4 filesystem being mounted at /543/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1132.126107][T10787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.330373][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.864129][T14387] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 1132.978989][T14387] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 1132.986587][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.365940][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.977462][T14407] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1751'. [ 1134.175768][T14409] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1751'. [ 1134.737642][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.047620][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.205412][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.780112][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.804166][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.772981][T14472] clocksource: Switched to clocksource kvm-clock [ 1137.867813][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.939736][T14476] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 1138.244121][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.310059][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.155236][T14505] random: crng reseeded on system resumption [ 1141.314556][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.356477][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.946691][ T30] audit: type=1400 audit(1796776446.088:126): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="/dev/ptmx" pid=14528 comm="syz.6.1801" [ 1142.336416][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.365422][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.587067][T14559] loop7: detected capacity change from 0 to 512 [ 1143.638883][T14559] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1143.652936][T14559] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1144.594684][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.603030][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.640021][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.926138][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1144.948160][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1144.970239][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1144.982359][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1144.990297][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1145.331735][T14531] batadv_slave_1: entered promiscuous mode [ 1145.341119][T14538] batadv_slave_1: left promiscuous mode [ 1145.476158][T11185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1145.602075][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.640734][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.701446][T12672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.713408][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.741080][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.865046][T14600] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1820'. [ 1146.951413][T14600] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1820'. [ 1147.006593][T14602] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1820'. [ 1147.048632][ T5636] Bluetooth: hci6: command tx timeout [ 1147.106726][T14600] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1820'. [ 1147.155664][T14605] loop5: detected capacity change from 0 to 512 [ 1147.205784][T14600] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1820'. [ 1147.269770][T14602] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1820'. [ 1147.297801][T14605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1147.341113][T14618] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1820'. [ 1147.372577][T14600] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1820'. [ 1147.384089][T14605] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1147.417948][T14600] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1820'. [ 1147.463929][T14600] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1820'. [ 1147.598611][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.839545][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.054831][T14627] syzkaller0: entered promiscuous mode [ 1148.085465][T14627] syzkaller0: entered allmulticast mode [ 1148.461944][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1149.120562][ T5636] Bluetooth: hci6: command tx timeout [ 1149.278371][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.323304][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.667912][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.771159][ T3290] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.197028][ T5636] Bluetooth: hci6: command tx timeout [ 1151.202777][ T3290] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.334414][T14674] tipc: Started in network mode [ 1151.345973][T14674] tipc: Node identity , cluster identity 4711 [ 1151.370987][T14674] tipc: Failed to obtain node identity [ 1151.376547][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.395337][T14674] tipc: Enabling of bearer rejected, failed to enable media [ 1151.482060][ T30] audit: type=1800 audit(1796776455.632:127): pid=14687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1842" name="bTransferCharacteristics" dev="configfs" ino=56361 res=0 errno=0 [ 1151.547018][T14689] loop7: detected capacity change from 0 to 512 [ 1151.619363][T14678] syzkaller0: entered promiscuous mode [ 1151.627053][T14678] syzkaller0: entered allmulticast mode [ 1151.664179][T14689] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1151.776343][T14689] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1152.528352][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.675341][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.683524][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.693583][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.755041][T14712] __nla_validate_parse: 5 callbacks suppressed [ 1152.755073][T14712] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1849'. [ 1153.017918][T14714] loop5: detected capacity change from 0 to 2048 [ 1153.086779][T14714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1153.099570][T14714] ext4 filesystem being mounted at /539/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1153.249120][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.285471][ T5636] Bluetooth: hci6: command tx timeout [ 1153.676289][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.684404][T14730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1153.695656][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.706619][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.719552][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.795495][T14731] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1856'. [ 1153.913104][T14732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1153.932067][T14733] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1856'. [ 1153.987836][T14730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.399300][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.491691][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.967215][ T3290] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.136306][T14744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1861'. [ 1156.181842][T11185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.216104][T14741] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.457372][ T3290] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.500868][T14747] loop3: detected capacity change from 0 to 2048 [ 1156.633531][T14747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1156.685913][T14741] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.732766][T14747] ext4 filesystem being mounted at /554/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1156.899482][T14741] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.007338][T14741] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.066445][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.588426][ T5934] net_ratelimit: 2 callbacks suppressed [ 1157.588456][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.596155][ T13] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.613669][T10788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.819787][ T13] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.942024][ T13] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.991553][ T13] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.165033][T14779] loop3: detected capacity change from 0 to 512 [ 1158.173139][T14774] usbip-vudc usbip-vudc.0: gadget not bound [ 1158.246949][T14779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1158.310250][ T3290] bridge_slave_1: left allmulticast mode [ 1158.346001][T14779] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1158.357945][ T3290] bridge_slave_1: left promiscuous mode [ 1158.393132][ T3290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.472019][ T3290] bridge_slave_0: left allmulticast mode [ 1158.489786][ T3290] bridge_slave_0: left promiscuous mode [ 1158.515819][ T3290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.127058][T14795] 9pnet_virtio: no channels available for device syz [ 1160.531953][ T3290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1160.593787][ T3290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1160.639960][ T3290] bond0 (unregistering): Released all slaves [ 1160.990656][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.009463][T14567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.049848][T14567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.077429][T14567] bridge_slave_0: entered allmulticast mode [ 1162.117378][T14567] bridge_slave_0: entered promiscuous mode [ 1162.189050][T14824] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.200000][T14824] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.239137][T14567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.289673][T14567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.352098][T14567] bridge_slave_1: entered allmulticast mode [ 1162.390586][T14567] bridge_slave_1: entered promiscuous mode [ 1162.484128][ T3290] hsr_slave_0: left promiscuous mode [ 1162.518072][ T3290] hsr_slave_1: left promiscuous mode [ 1162.541718][ T3290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1162.588968][ T3290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1162.620465][ T3290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1162.640143][ T3290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1162.672277][ T3290] veth1_macvtap: left promiscuous mode [ 1162.678794][ T3290] veth0_macvtap: left promiscuous mode [ 1162.686898][ T3290] veth1_vlan: left promiscuous mode [ 1162.696941][ T3290] veth0_vlan: left promiscuous mode [ 1162.710175][ T30] audit: type=1800 audit(1796776466.858:128): pid=14828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1884" name="bTransferCharacteristics" dev="configfs" ino=56707 res=0 errno=0 [ 1163.629704][ T3290] team0 (unregistering): Port device team_slave_1 removed [ 1163.676762][ T3290] team0 (unregistering): Port device team_slave_0 removed [ 1164.273604][T14824] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1164.284028][T14824] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.326373][T14845] scsi_nl_rcv_msg: discarding partial skb [ 1164.375829][ T5282] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1164.456318][T14848] loop7: detected capacity change from 0 to 512 [ 1164.552092][T14824] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1164.562490][T14824] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.754178][T14567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.755369][T14848] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1164.767553][T14567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.839813][T14848] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1166.265710][T14567] team0: Port device team_slave_0 added [ 1166.287564][T11185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.629715][ T1168] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1166.767748][ T1168] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.810852][ T30] audit: type=1800 audit(1796776470.950:129): pid=14877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1896" name="bTransferCharacteristics" dev="configfs" ino=56931 res=0 errno=0 [ 1166.855145][ T1168] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1166.902780][ T1168] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.940419][T14567] team0: Port device team_slave_1 added [ 1167.024438][ T1168] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1167.057013][ T1168] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.150048][ T1168] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1167.181261][ T1168] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.222330][T14567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1167.242411][T14567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1167.439578][T14567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1167.558623][T14567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1167.595239][T14567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1167.957655][ T5636] block nbd7: Receive control failed (result -32) [ 1167.965211][T14884] block nbd7: shutting down sockets [ 1168.041196][T14567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.322445][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1170.394401][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1170.405360][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1170.413837][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1170.424342][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1170.434713][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1170.445107][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1170.472772][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1170.483127][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1170.493455][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1170.503832][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1170.514145][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1171.684099][T14567] hsr_slave_0: entered promiscuous mode [ 1171.727394][T14567] hsr_slave_1: entered promiscuous mode [ 1171.733643][T14916] loop6: detected capacity change from 0 to 512 [ 1171.755692][T14567] debugfs: 'hsr0' already exists in 'hsr' [ 1171.780293][T14567] Cannot create hsr debugfs directory [ 1171.811116][T14916] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1171.942139][T14916] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1172.606152][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 1173.087736][T11127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.671674][ T30] audit: type=1326 audit(1796776477.833:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14944 comm="syz.7.1915" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b3419de99 code=0x0 [ 1174.905396][T14966] loop3: detected capacity change from 0 to 512 [ 1174.911911][T14967] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1174.937583][T14967] CPU: 0 UID: 0 PID: 14967 Comm: syz.6.1919 Tainted: G L syzkaller #0 PREEMPT(full) [ 1174.937642][T14967] Tainted: [L]=SOFTLOCKUP [ 1174.937656][T14967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1174.937687][T14967] Call Trace: [ 1174.937699][T14967] [ 1174.937715][T14967] dump_stack_lvl+0x100/0x190 [ 1174.937764][T14967] sysfs_warn_dup.cold+0x1c/0x28 [ 1174.937823][T14967] sysfs_create_dir_ns+0x24b/0x2b0 [ 1174.937878][T14967] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1174.937928][T14967] ? find_held_lock+0x2b/0x80 [ 1174.937985][T14967] ? kobject_add_internal+0x25f/0x930 [ 1174.938048][T14967] ? kobject_add_internal+0x25f/0x930 [ 1174.938113][T14967] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.938160][T14967] ? class_dir_child_ns_type+0xd/0x60 [ 1174.938225][T14967] kobject_add_internal+0x2c8/0x930 [ 1174.938297][T14967] kobject_add+0x16a/0x1e0 [ 1174.938358][T14967] ? __pfx_kobject_add+0x10/0x10 [ 1174.938423][T14967] ? get_device_parent+0x1b3/0x4c0 [ 1174.938475][T14967] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.938524][T14967] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.938569][T14967] ? kobject_put+0xb9/0x640 [ 1174.938645][T14967] device_add+0x294/0x1970 [ 1174.938713][T14967] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.938759][T14967] ? lockdep_init_map_type+0x5c/0x250 [ 1174.938807][T14967] ? __pfx_device_add+0x10/0x10 [ 1174.938864][T14967] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.938910][T14967] ? lockdep_init_map_type+0x5c/0x250 [ 1174.938956][T14967] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.939003][T14967] ? __init_waitqueue_head+0xca/0x150 [ 1174.939053][T14967] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.939103][T14967] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.939158][T14967] tty_register_device_attr+0x388/0x7f0 [ 1174.939213][T14967] ? lockdep_init_map_type+0x5c/0x250 [ 1174.939258][T14967] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.939307][T14967] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1174.939373][T14967] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.939419][T14967] ? tty_port_init+0x156/0x1c0 [ 1174.939471][T14967] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.939524][T14967] gsm_activate_mux+0x155/0x2a0 [ 1174.939581][T14967] gsmld_ioctl+0xbbc/0x15c0 [ 1174.939654][T14967] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1174.939728][T14967] ? __ldsem_down_read_nested+0xf3/0x890 [ 1174.939787][T14967] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.939845][T14967] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1174.939938][T14967] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1174.939985][T14967] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 1174.940033][T14967] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1174.940092][T14967] tty_ioctl+0x11b4/0x1640 [ 1174.940147][T14967] ? __pfx_tty_ioctl+0x10/0x10 [ 1174.940211][T14967] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.940258][T14967] ? find_held_lock+0x2b/0x80 [ 1174.940315][T14967] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.940362][T14967] ? hook_file_ioctl_common+0x140/0x440 [ 1174.940422][T14967] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.940469][T14967] ? __fget_files+0x21f/0x3d0 [ 1174.940534][T14967] ? __pfx_tty_ioctl+0x10/0x10 [ 1174.940588][T14967] __x64_sys_ioctl+0x18e/0x210 [ 1174.940639][T14967] do_syscall_64+0x115/0x870 [ 1174.940702][T14967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.940742][T14967] RIP: 0033:0x7fce0419de99 [ 1174.940772][T14967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1174.940811][T14967] RSP: 002b:00007fce05028028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1174.940848][T14967] RAX: ffffffffffffffda RBX: 00007fce04426090 RCX: 00007fce0419de99 [ 1174.940875][T14967] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 1174.940901][T14967] RBP: 00007fce04233eaf R08: 0000000000000000 R09: 0000000000000000 [ 1174.940926][T14967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1174.940950][T14967] R13: 00007fce04426128 R14: 00007fce04426090 R15: 00007ffc564b59c8 [ 1174.941002][T14967] [ 1175.337357][T14967] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1175.419339][ T5282] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1175.431958][T14966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1175.449132][T14966] ext4 filesystem being mounted at /564/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1176.931648][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.316846][T14567] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1181.676411][T14567] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1181.882121][T14567] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1182.319240][T14567] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1182.410063][T15028] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1182.472652][T14567] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1182.560299][T15028] block device autoloading is deprecated and will be removed. [ 1182.632943][T14567] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1183.039257][T14567] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1183.053258][T14567] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1183.069106][ T5282] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1183.387296][T15037] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.696502][ T5636] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1183.840274][ T5897] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1183.868848][T15037] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.025603][ T5897] usb 6-1: Using ep0 maxpacket: 32 [ 1184.053595][ T5897] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.087707][ T5897] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1184.126231][T15037] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.138763][ T5897] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1184.152417][ T5897] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1184.181401][ T5897] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1184.191554][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.200841][ T5897] usb 6-1: Product: syz [ 1184.212258][ T5897] usb 6-1: Manufacturer: syz [ 1184.222374][ T5897] usb 6-1: SerialNumber: syz [ 1184.288630][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1184.486980][ T5897] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input9 [ 1184.610346][T15037] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.770232][ T5897] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1184.782319][ T5897] (id 0x00) [ 1185.882419][ T5897] rc_core: IR keymap rc-imon-pad not found [ 1185.907973][ T5897] Registered IR keymap rc-empty [ 1185.922032][T15073] syzkaller0: entered promiscuous mode [ 1185.927568][T15073] syzkaller0: entered allmulticast mode [ 1185.943223][ T5897] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1185.974479][ T5897] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1186.078347][ T5897] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 1186.147463][ T5897] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input10 [ 1186.227946][ T5897] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:18> initialized [ 1188.268958][T15134] imon:send_packet: task interrupted [ 1188.269097][T15134] imon:send_packet: packet tx failed (-512) [ 1188.271419][T15134] imon:vfd_write: send packet #3 failed [ 1189.552830][T15141] misc userio: Invalid payload size [ 1191.389005][ T5282] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1191.614243][ T5897] usb 6-1: USB disconnect, device number 18 [ 1191.830678][T10205] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.022785][T15157] Bluetooth: hci3: unexpected event 0x05 length: 12 > 4 [ 1192.041164][ T1038] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.090452][T14567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.220752][ T1038] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.368797][ T194] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.447710][T14567] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.510810][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.518158][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.583290][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.590625][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1193.261029][T10788] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 1193.589491][T10788] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1193.610911][T10788] usb 7-1: config 0 has no interface number 0 [ 1193.631101][T10788] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1193.674547][T10788] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1193.711816][T10788] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1193.750334][T10788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.771419][T15173] netlink: 120 bytes leftover after parsing attributes in process `syz.7.1973'. [ 1193.793810][T10788] usb 7-1: config 0 descriptor?? [ 1193.818647][T15163] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1193.916423][T10788] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1194.055770][ T5636] Bluetooth: hci3: command tx timeout [ 1194.171228][T15187] loop3: detected capacity change from 0 to 512 [ 1195.142020][T15187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1195.207418][ T5897] usb 7-1: USB disconnect, device number 4 [ 1195.232521][T15187] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1196.286235][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.818073][T15210] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1978'. [ 1202.173009][T14567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1202.434738][T15254] loop9: detected capacity change from 0 to 512 [ 1203.293648][T15254] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1203.310034][T15254] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1204.432222][T11415] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.612562][T14567] veth0_vlan: entered promiscuous mode [ 1204.697859][T14567] veth1_vlan: entered promiscuous mode [ 1204.924294][T14567] veth0_macvtap: entered promiscuous mode [ 1205.639460][ T5765] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1205.713175][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1205.748366][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1205.757310][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1205.769425][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1205.781538][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1205.838630][ T5765] usb 4-1: Using ep0 maxpacket: 8 [ 1205.911057][ T5765] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1205.966721][ T5765] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1206.037411][ T5765] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1206.084750][ T5765] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1206.126814][ T5765] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1206.167419][ T5765] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1206.197836][ T5765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.477471][ T5765] usb 4-1: usb_control_msg returned -32 [ 1206.507032][ T5765] usbtmc 4-1:16.0: can't read capabilities [ 1206.603540][T15300] syzkaller0: entered promiscuous mode [ 1206.631989][T15300] syzkaller0: entered allmulticast mode [ 1206.754715][T15300] tipc: Started in network mode [ 1206.788875][T15300] tipc: Node identity 02ae01fb4c02, cluster identity 4711 [ 1206.824723][T15300] tipc: Enabled bearer , priority 0 [ 1206.921721][ T5765] usb 4-1: USB disconnect, device number 29 [ 1206.931956][T15285] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 1207.111284][T15288] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1999'. [ 1207.277164][T15296] tipc: Resetting bearer [ 1207.362977][T15296] tipc: Disabling bearer [ 1207.608282][ T5745] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1207.799078][ T5745] usb 4-1: Using ep0 maxpacket: 8 [ 1207.808221][ T5636] Bluetooth: hci0: command tx timeout [ 1207.821033][ T5745] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1207.829741][ T5745] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1207.839998][ T5745] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1207.852652][ T5745] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1207.862964][ T5745] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1207.876965][ T5745] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1207.886593][ T5745] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.181115][ T5745] usb 4-1: usb_control_msg returned -71 [ 1208.218375][ T5745] usbtmc 4-1:16.0: can't read capabilities [ 1208.251915][ T5745] usb 4-1: USB disconnect, device number 30 [ 1209.496686][ T1038] bridge_slave_1: left allmulticast mode [ 1209.534763][T15339] loop9: detected capacity change from 0 to 524287999 [ 1209.564422][ T1038] bridge_slave_1: left promiscuous mode [ 1209.587925][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.632582][ T1038] bridge_slave_0: left allmulticast mode [ 1209.675096][ T1038] bridge_slave_0: left promiscuous mode [ 1209.721438][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.900949][ T5636] Bluetooth: hci0: command tx timeout [ 1210.332436][T15390] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2021'. [ 1210.381018][T15390] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2021'. [ 1210.405250][T15390] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2021'. [ 1210.433514][T15390] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2021'. [ 1210.460470][T15390] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2021'. [ 1210.495849][T15390] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2021'. [ 1210.554394][T15394] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2021'. [ 1210.631125][T15390] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2021'. [ 1210.697282][T15390] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2021'. [ 1210.726521][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1210.793142][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1210.947932][ T1038] bond0 (unregistering): Released all slaves [ 1212.009637][ T5636] Bluetooth: hci0: command tx timeout [ 1212.107345][T15413] loop1: detected capacity change from 0 to 32768 [ 1212.125868][T15413] loop3: detected capacity change from 0 to 32768 [ 1212.568964][ T1038] hsr_slave_0: left promiscuous mode [ 1212.617603][ T1038] hsr_slave_1: left promiscuous mode [ 1212.657955][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1212.705268][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1212.723854][T15413] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1212.801812][ T1038] veth0_macvtap: left promiscuous mode [ 1212.829022][ T1038] veth1_vlan: left promiscuous mode [ 1212.857259][ T1038] veth0_vlan: left promiscuous mode [ 1213.705218][ T5865] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1213.756218][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 1213.795726][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 1213.932934][ T5865] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1213.961922][ T5865] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1213.983261][ T5865] usb 6-1: can't read configurations, error -71 [ 1214.054996][ T5636] Bluetooth: hci0: command tx timeout [ 1215.233322][T15291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.242923][T15291] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.250804][T15291] bridge_slave_0: entered allmulticast mode [ 1215.294805][T15291] bridge_slave_0: entered promiscuous mode [ 1215.321822][T15479] __nla_validate_parse: 3 callbacks suppressed [ 1215.321844][T15479] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2041'. [ 1215.364524][T15291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.377839][T15480] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2041'. [ 1215.404949][T15291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.434782][T15291] bridge_slave_1: entered allmulticast mode [ 1215.470431][T15291] bridge_slave_1: entered promiscuous mode [ 1215.813579][T15490] syz_tun: entered allmulticast mode [ 1215.868490][T15291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1215.945909][T15291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1216.279143][T15291] team0: Port device team_slave_0 added [ 1216.626933][T15291] team0: Port device team_slave_1 added [ 1217.240132][T15496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1217.881306][T15291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1217.909703][T15291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.052475][T15291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1218.134188][T15291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1218.190369][T15291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.327144][T15291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1218.691196][T15525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.808337][T15525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.830239][T15530] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2056'. [ 1218.876911][T15534] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2056'. [ 1218.904764][T15525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.912909][T15291] hsr_slave_0: entered promiscuous mode [ 1218.963401][T15291] hsr_slave_1: entered promiscuous mode [ 1218.981426][T15291] debugfs: 'hsr0' already exists in 'hsr' [ 1219.000558][T15291] Cannot create hsr debugfs directory [ 1219.458059][T15551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2062'. [ 1221.197663][T15582] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2073'. [ 1221.225170][T15582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2073'. [ 1223.464516][T15608] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2080'. [ 1224.801480][ T30] audit: type=1800 audit(1796776528.989:131): pid=15623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2086" name="bTransferCharacteristics" dev="configfs" ino=60484 res=0 errno=0 [ 1225.627188][T15640] loop9: detected capacity change from 0 to 524287999 [ 1226.531967][T15291] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1226.544553][T15648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2095'. [ 1226.597642][T15291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1226.616386][T15291] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1226.699340][T15291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1226.741440][T15291] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1226.808806][T15291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1226.846855][T15291] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1226.900562][T15291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1227.098702][ T5865] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1227.266551][ T30] audit: type=1800 audit(1796776531.450:132): pid=15674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2101" name="bTransferCharacteristics" dev="configfs" ino=59505 res=0 errno=0 [ 1227.320642][ T5865] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1227.340760][ T5865] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.390057][ T5865] usb 7-1: config 0 has no interface number 0 [ 1227.403544][ T5865] usb 7-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1227.422583][ T5865] usb 7-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1227.436213][ T5865] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1227.450329][ T5865] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1227.463262][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.494110][ T5865] usb 7-1: Product: syz [ 1227.514857][ T5865] usb 7-1: Manufacturer: syz [ 1227.528658][ T5865] usb 7-1: SerialNumber: syz [ 1227.552664][T15291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.566422][ T5865] usb 7-1: config 0 descriptor?? [ 1227.608406][ T5865] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22 [ 1227.666475][T15291] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.739858][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.747253][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.874335][T10205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.881568][T10205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1228.162045][T15693] loop9: detected capacity change from 0 to 524287999 [ 1229.422151][T15705] loop3: detected capacity change from 0 to 32768 [ 1229.471530][T15705] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1229.700633][T15713] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2112'. [ 1230.109301][T10788] usb 7-1: USB disconnect, device number 5 [ 1230.679107][ T30] audit: type=1800 audit(1796776534.852:133): pid=15737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2115" name="bTransferCharacteristics" dev="configfs" ino=59579 res=0 errno=0 [ 1231.149467][T15743] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.815616][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1231.827719][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1232.088492][T15743] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.369320][T15743] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.831057][T15743] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.576311][T10205] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.863360][ T5888] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.199012][ T48] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.461521][ T1160] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.719907][T15778] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2126'. [ 1236.867553][T15291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1237.113142][T15291] veth0_vlan: entered promiscuous mode [ 1237.181567][T15291] veth1_vlan: entered promiscuous mode [ 1237.232941][T15785] loop3: detected capacity change from 0 to 32768 [ 1237.268246][T15785] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1237.323655][ T30] audit: type=1800 audit(1796776541.515:134): pid=15788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2130" name="bTransferCharacteristics" dev="configfs" ino=59628 res=0 errno=0 [ 1237.358133][T15291] veth0_macvtap: entered promiscuous mode [ 1237.415640][T15291] veth1_macvtap: entered promiscuous mode [ 1237.521775][T15291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1237.664029][T15291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1237.764454][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.822243][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.899725][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.969498][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2132'. [ 1238.034431][T15802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2132'. [ 1238.043642][T15802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2132'. [ 1238.804350][T15801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1239.174577][T15802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.271389][T15802] bond1: (slave bond0): making interface the new active one [ 1239.329375][T15802] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1239.372816][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.445373][T15803] bond1: (slave bond0): Releasing active interface [ 1239.504895][T15803] bridge_slave_0: left allmulticast mode [ 1239.534170][T15803] bridge_slave_0: left promiscuous mode [ 1239.546465][T15803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.647088][T15803] bridge_slave_1: left allmulticast mode [ 1239.696481][T15803] bridge_slave_1: left promiscuous mode [ 1239.717431][T15803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.766395][T15803] bond0: (slave bond_slave_0): Releasing backup interface [ 1239.798250][T15803] bond0: (slave bond_slave_1): Releasing backup interface [ 1239.904816][T15803] team0: Port device team_slave_0 removed [ 1239.972202][T15827] 9pnet_virtio: no channels available for device syz [ 1239.989525][T15803] team0: Port device team_slave_1 removed [ 1240.046552][T15803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1240.112428][T15803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1240.188653][T15803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1240.245302][T15826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1240.261772][T15803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1240.319553][T15803] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1240.669970][T15829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1241.104493][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2139'. [ 1241.275241][T15839] loop3: detected capacity change from 0 to 32768 [ 1241.340568][T15839] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1241.561298][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.609381][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.881856][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.926194][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.329927][T15853] mmap: syz.3.2147 (15853) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1243.341657][ T5636] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1243.612255][T15872] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1243.694405][T15872] binder: 15868:15872 ioctl c0306201 0 returned -14 [ 1244.490117][ T5779] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1244.686860][ T5779] usb 7-1: Using ep0 maxpacket: 8 [ 1244.822825][ T5779] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1244.937773][ T5779] usb 7-1: config 179 has no interface number 0 [ 1245.064685][ T5779] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1245.352934][ T5779] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1245.474740][ T5779] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1245.518465][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1245.525790][ T5779] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1245.525849][ T5779] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1245.525920][ T5779] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1245.525963][ T5779] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.568018][T15888] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1245.580454][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1245.591974][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1245.616448][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1245.630022][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1245.840496][T15898] syzkaller0: entered promiscuous mode [ 1245.882504][T15898] syzkaller0: entered allmulticast mode [ 1246.789990][ T5630] syz_tun (unregistering): left allmulticast mode [ 1247.446851][ T1038] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1247.511260][ T1038] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.708353][ T5636] Bluetooth: hci6: command tx timeout [ 1248.101369][ T1038] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1248.192513][ T1038] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.482680][ T1038] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1248.550153][ T1038] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.764091][ T1038] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1248.803735][T15930] clocksource: Switched to clocksource tsc [ 1248.815000][ T1038] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.506852][T10787] usb 7-1: USB disconnect, device number 6 [ 1249.506880][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1249.522052][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1249.688066][ T5865] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1249.797666][ T5636] Bluetooth: hci6: command tx timeout [ 1249.878201][ T5865] usb 10-1: Using ep0 maxpacket: 8 [ 1249.908285][ T5865] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1249.942625][ T5865] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1249.986730][ T5865] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1250.040758][ T5865] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1250.077486][T10787] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 1250.117702][ T5865] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1250.163079][ T5865] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1250.193426][ T1038] erspan0: left allmulticast mode [ 1250.202537][ T5865] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.218170][ T1038] erspan0: left promiscuous mode [ 1250.228259][ T1038] bridge0: port 3(erspan0) entered disabled state [ 1250.237080][T10787] usb 7-1: device descriptor read/64, error -71 [ 1250.293281][ T1038] bridge_slave_1: left allmulticast mode [ 1250.318142][ T1038] bridge_slave_1: left promiscuous mode [ 1250.358311][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.405456][ T1038] bridge_slave_0: left allmulticast mode [ 1250.431062][ T1038] bridge_slave_0: left promiscuous mode [ 1250.437127][ T5636] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1250.468720][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.487069][ T5865] usb 10-1: GET_CAPABILITIES returned 0 [ 1250.504555][T10787] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 1250.517114][ T5865] usbtmc 10-1:16.0: can't read capabilities [ 1250.670434][T10787] usb 7-1: device descriptor read/64, error -71 [ 1250.760250][ T5765] usb 10-1: USB disconnect, device number 4 [ 1250.823599][T10787] usb usb7-port1: attempt power cycle [ 1251.178952][T10787] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 1251.224438][T10787] usb 7-1: device descriptor read/8, error -71 [ 1251.596411][T10787] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 1251.614767][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.648918][T10787] usb 7-1: device descriptor read/8, error -71 [ 1251.664952][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1251.700036][ T1038] bond0 (unregistering): Released all slaves [ 1251.766607][T10787] usb usb7-port1: unable to enumerate USB device [ 1251.876471][ T5636] Bluetooth: hci6: command tx timeout [ 1252.279419][T15988] syzkaller0: entered promiscuous mode [ 1252.295496][T15988] syzkaller0: entered allmulticast mode [ 1252.477756][ T5282] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1253.564076][T15997] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.652210][ T5636] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1253.791679][T15997] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.922744][T15997] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.953067][ T5636] Bluetooth: hci6: command tx timeout [ 1254.019886][ T1038] hsr_slave_0: left promiscuous mode [ 1254.040714][T16019] loop1: detected capacity change from 0 to 32768 [ 1254.059246][T16019] loop3: detected capacity change from 0 to 32768 [ 1254.065954][ T1038] hsr_slave_1: left promiscuous mode [ 1254.097095][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1254.105612][T16019] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1254.129684][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1254.178367][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1254.217687][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1254.277352][ T1038] veth1_macvtap: left promiscuous mode [ 1254.299519][ T1038] veth0_macvtap: left promiscuous mode [ 1254.413066][ T1038] veth1_vlan: left promiscuous mode [ 1254.427130][ T1038] veth0_vlan: left promiscuous mode [ 1254.849296][T16019] block device autoloading is deprecated and will be removed. [ 1254.920485][T16019] md: loop0 has zero or unknown size, marking faulty! [ 1254.953910][T16019] md: error, md_import_device() returned -22 [ 1255.345321][T16052] misc userio: Can't change port proto on an already running userio instance [ 1255.444765][ T8017] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 1255.605653][ T8017] usb 6-1: device descriptor read/64, error -71 [ 1255.737990][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 1255.808957][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 1255.855395][ T8017] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 1256.004486][ T8017] usb 6-1: device descriptor read/64, error -71 [ 1256.126099][ T8017] usb usb6-port1: attempt power cycle [ 1256.162826][T16044] batadv_slave_1: entered promiscuous mode [ 1256.203171][ T5282] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1256.268330][T15997] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.289197][T16044] batadv_slave_1: left promiscuous mode [ 1256.557356][ T1168] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.613873][ T8017] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 1256.674205][ T8017] usb 6-1: device descriptor read/8, error -71 [ 1256.688974][ T1168] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.719284][T12672] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.754094][T12672] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.935130][ T8017] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 1257.006301][T16072] random: crng reseeded on system resumption [ 1257.284134][ T8017] usb 6-1: device descriptor read/8, error -71 [ 1257.395867][ T1038] IPVS: stop unused estimator thread 0... [ 1257.430471][ T8017] usb usb6-port1: unable to enumerate USB device [ 1258.052721][T15894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.093833][T15894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.130032][T15894] bridge_slave_0: entered allmulticast mode [ 1258.189545][T15894] bridge_slave_0: entered promiscuous mode [ 1258.235426][T15894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.257936][T15894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.281040][T15894] bridge_slave_1: entered allmulticast mode [ 1258.341669][T15894] bridge_slave_1: entered promiscuous mode [ 1258.445003][T16116] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2225'. [ 1258.466179][T16116] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2225'. [ 1258.480474][T16116] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2225'. [ 1258.497161][T16116] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2225'. [ 1258.514489][T16116] 9pnet_virtio: no channels available for device syz [ 1259.475402][T16124] random: crng reseeded on system resumption [ 1260.810520][T15894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1260.862701][T15894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1261.362510][T16150] random: crng reseeded on system resumption [ 1261.527121][T15894] team0: Port device team_slave_0 added [ 1261.612107][T15894] team0: Port device team_slave_1 added [ 1262.618459][T15894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1262.642456][T15894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.744094][T15894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1262.800287][T15894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1263.639872][T15894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.795178][T15894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.880269][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2240'. [ 1264.185824][T15894] hsr_slave_0: entered promiscuous mode [ 1264.234374][T15894] hsr_slave_1: entered promiscuous mode [ 1264.263354][T15894] debugfs: 'hsr0' already exists in 'hsr' [ 1264.305892][T15894] Cannot create hsr debugfs directory [ 1266.361538][T16219] random: crng reseeded on system resumption [ 1266.872965][T16222] loop9: detected capacity change from 0 to 524287999 [ 1267.530769][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 1267.548796][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 1267.564781][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 1267.582575][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 1270.096106][T16271] random: crng reseeded on system resumption [ 1270.531638][ T8017] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 1271.310404][T16277] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1271.316977][T16277] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1271.418211][T15894] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1271.442936][T16281] loop9: detected capacity change from 0 to 524287999 [ 1271.475578][T16277] vhci_hcd vhci_hcd.0: Device attached [ 1271.496798][ T8017] usb 2-1: device descriptor read/64, error -71 [ 1271.528509][T15894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1271.529619][T15894] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1271.659489][T15894] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1271.663404][T15894] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1271.751622][ T8017] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 1271.758140][ T5745] usb 48-1: SetAddress Request (2) to port 0 [ 1271.758257][ T5745] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1271.835177][T15894] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1271.838055][T15894] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1271.899520][ T8017] usb 2-1: device descriptor read/64, error -71 [ 1272.018239][T15894] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1272.032652][ T8017] usb usb2-port1: attempt power cycle [ 1272.477139][ T8017] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 1272.548146][ T8017] usb 2-1: device descriptor read/8, error -71 [ 1272.808768][ T8017] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 1272.965706][ T8017] usb 2-1: device descriptor read/8, error -71 [ 1273.076450][ T8017] usb usb2-port1: unable to enumerate USB device [ 1273.608736][T16316] pimreg3: entered allmulticast mode [ 1273.645307][T10787] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1273.818169][T10787] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1273.818494][T15894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1273.913085][T10787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1273.945347][T10787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1273.975037][T10787] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1274.030071][T10787] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1274.067826][T15894] 8021q: adding VLAN 0 to HW filter on device team0 [ 1274.108382][T10787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.131076][T10205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.138284][T10205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1274.206035][T10787] usb 6-1: config 0 descriptor?? [ 1274.257430][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.264638][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1274.668880][T10787] usbhid 6-1:0.0: can't add hid device: -71 [ 1274.699290][T10787] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1274.741555][T10787] usb 6-1: USB disconnect, device number 25 [ 1275.430463][T16340] loop9: detected capacity change from 0 to 524287999 [ 1275.462203][T16278] vhci_hcd: connection reset by peer [ 1275.506319][T12672] vhci_hcd vhci_hcd.7: stop threads [ 1275.544479][T12672] vhci_hcd vhci_hcd.7: release socket [ 1275.601228][T12672] vhci_hcd vhci_hcd.7: disconnect device [ 1275.970674][T16347] batadv_slave_1: entered promiscuous mode [ 1276.012372][T16344] batadv_slave_1: left promiscuous mode [ 1276.815369][ T5745] usb 48-1: device descriptor read/8, error -110 [ 1277.218533][ T5745] usb usb48-port1: attempt power cycle [ 1279.515376][ T5745] usb usb48-port1: unable to enumerate USB device [ 1279.628186][T16374] lo speed is unknown, defaulting to 1000 [ 1279.728485][T16374] lo speed is unknown, defaulting to 1000 [ 1279.784563][T16374] lo speed is unknown, defaulting to 1000 [ 1279.901784][T16374] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1279.988112][T16374] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1280.060958][T16374] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1280.268867][T16374] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1280.358653][T16374] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1280.892671][T15894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1280.931031][T16374] lo speed is unknown, defaulting to 1000 [ 1281.044203][T16374] lo speed is unknown, defaulting to 1000 [ 1281.104119][T16374] lo speed is unknown, defaulting to 1000 [ 1281.149157][T16374] lo speed is unknown, defaulting to 1000 [ 1281.157714][T15894] veth0_vlan: entered promiscuous mode [ 1281.204012][T16374] lo speed is unknown, defaulting to 1000 [ 1281.237054][T15894] veth1_vlan: entered promiscuous mode [ 1281.265496][T16374] lo speed is unknown, defaulting to 1000 [ 1281.424009][T15894] veth0_macvtap: entered promiscuous mode [ 1281.487339][T15894] veth1_macvtap: entered promiscuous mode [ 1282.506838][T15894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1282.507807][T16408] loop9: detected capacity change from 0 to 524287999 [ 1282.519543][T15894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1282.543766][ T1086] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.598041][T16411] base or size exceeds the MTRR width [ 1282.707997][ T1086] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.728618][ T1086] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.847093][ T1086] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.289569][T10205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.342308][T10205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.564596][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.624390][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.175450][T16456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2155'. [ 1286.654089][T16464] loop9: detected capacity change from 0 to 524287999 [ 1286.771613][T16465] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.371582][T16465] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.641010][T16465] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.923158][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1287.941334][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1287.955457][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1287.970104][T16478] PM: suspend entry (s2idle) [ 1287.977111][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1287.985215][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1288.073535][T16478] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 1288.114406][T16465] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.184435][T16478] PM: suspend exit [ 1288.792887][ T57] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.886709][T16493] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1289.034490][ T13] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.392972][ T194] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.038176][ T1086] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.088152][ T5636] Bluetooth: hci3: command tx timeout [ 1290.347974][T16512] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2323'. [ 1292.167911][ T5636] Bluetooth: hci3: command tx timeout [ 1293.053021][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1293.061739][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1293.256865][T16550] misc userio: Invalid payload size [ 1293.280074][T16479] lo speed is unknown, defaulting to 1000 [ 1293.741111][T16552] syzkaller0: entered promiscuous mode [ 1293.749939][T16552] syzkaller0: entered allmulticast mode [ 1294.246560][ T5636] Bluetooth: hci3: command tx timeout [ 1296.332078][ T5636] Bluetooth: hci3: command tx timeout [ 1299.873425][T16636] 9pnet_virtio: no channels available for device syz [ 1300.281616][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2359'. [ 1300.769762][T10206] bridge_slave_1: left promiscuous mode [ 1300.815539][T10206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.883958][T10206] bridge_slave_0: left promiscuous mode [ 1300.922370][T10206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.173888][T16657] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1302.925962][T10206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1302.945493][T10206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.959653][T10206] bond0 (unregistering): Released all slaves [ 1303.605403][T16702] overlayfs: overlapping lowerdir path [ 1303.661045][T16713] random: crng reseeded on system resumption [ 1305.382777][T10206] hsr_slave_0: left promiscuous mode [ 1305.471383][T10206] hsr_slave_1: left promiscuous mode [ 1305.507691][T10206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1305.574158][T10206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1306.713296][T10206] team0 (unregistering): Port device team_slave_1 removed [ 1306.837037][T10206] team0 (unregistering): Port device team_slave_0 removed [ 1307.297019][ T5636] Bluetooth: hci0: adv larger than maximum supported [ 1307.297101][ T5636] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1307.775757][T16479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.856604][T16479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.911534][T16479] bridge_slave_0: entered allmulticast mode [ 1307.968672][T16479] bridge_slave_0: entered promiscuous mode [ 1308.006900][T16479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.053258][T16479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.081512][T16479] bridge_slave_1: entered allmulticast mode [ 1308.127201][T16479] bridge_slave_1: entered promiscuous mode [ 1308.355973][T16479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1308.443638][T16479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1308.794869][T16479] team0: Port device team_slave_0 added [ 1308.825937][T16766] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1308.848282][T16479] team0: Port device team_slave_1 added [ 1308.849269][T16766] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1309.006709][T16778] overlayfs: overlapping lowerdir path [ 1309.805285][T16479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1309.874121][T16479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1309.947810][T16766] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1309.981172][T16766] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1310.010574][T16479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1310.061142][T10206] IPVS: stop unused estimator thread 0... [ 1310.070710][T16766] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1310.073480][T16479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1310.092484][T16766] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1310.121698][T16479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1310.183973][T16766] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1310.190064][T16479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1310.255582][T16766] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1310.328529][T16766] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1310.362152][T16766] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1310.365318][T16479] hsr_slave_0: entered promiscuous mode [ 1310.380209][T16766] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1310.403217][T16479] hsr_slave_1: entered promiscuous mode [ 1310.415120][T16766] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1310.423717][T16479] debugfs: 'hsr0' already exists in 'hsr' [ 1310.442118][T16766] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1310.442638][T16479] Cannot create hsr debugfs directory [ 1310.468425][T16766] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1310.485300][T16766] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1310.513779][T16773] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1310.877127][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 1311.225416][ T5636] Bluetooth: hci2: adv larger than maximum supported [ 1311.225453][ T5636] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1311.996166][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 1312.076146][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 1312.134539][T16835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2409'. [ 1312.215023][ T5282] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1312.237172][ T5636] Bluetooth: hci0: command 0x0c1a tx timeout [ 1312.396004][ T5636] Bluetooth: hci6: command 0x0c1a tx timeout [ 1312.438756][T16838] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2409'. [ 1312.482929][ T5636] Bluetooth: hci3: command 0x0c1a tx timeout [ 1312.884838][T16846] overlayfs: overlapping lowerdir path [ 1312.917792][T16852] random: crng reseeded on system resumption [ 1312.965743][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 1313.712913][T16840] syzkaller0: entered promiscuous mode [ 1313.747841][T16840] syzkaller0: entered allmulticast mode [ 1314.092668][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 1314.176774][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 1314.383801][ T5636] Bluetooth: hci0: command 0x0c1a tx timeout [ 1314.566725][ T5636] Bluetooth: hci6: command 0x0c1a tx timeout [ 1314.572964][ T5636] Bluetooth: hci3: command 0x0c1a tx timeout [ 1316.528368][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 1316.635722][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 1316.641816][ T50] Bluetooth: hci6: command 0x0c1a tx timeout [ 1316.829348][T16890] loop0: detected capacity change from 0 to 32768 [ 1316.887422][T16890] loop1: detected capacity change from 0 to 32768 [ 1316.948926][T16890] loop3: detected capacity change from 0 to 32768 [ 1317.011170][T16890] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1317.108719][T16893] md: array md0 already initialised! [ 1317.377809][T16896] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1317.492771][T16890] md/raid:md0: not clean -- starting background reconstruction [ 1317.512908][T16890] md/raid:md0: device loop2 operational as raid disk 2 [ 1317.540089][T16890] md/raid:md0: device loop1 operational as raid disk 1 [ 1317.753005][T16890] md/raid:md0: cannot start dirty degraded array. [ 1318.277891][T16890] md/raid:md0: failed to run raid set. [ 1318.284257][T16890] md: pers->run() failed ... [ 1319.012303][T16915] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2424'. [ 1323.070344][T16479] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1323.205410][T16479] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1323.280883][T16479] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1323.378310][T16479] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1323.429255][T16479] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1323.497693][T16479] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1323.518402][T16479] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1323.529874][T16962] random: crng reseeded on system resumption [ 1323.547583][T16963] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1323.572316][T16479] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1323.589466][T16964] netlink: 'syz.9.2436': attribute type 39 has an invalid length. [ 1323.741717][T16975] md: array md0 already has disks! [ 1323.876059][T16963] md: could not open device unknown-block(7,1). [ 1324.024537][T16963] md: error, md_import_device() returned -16 [ 1324.151949][T16978] md: could not open device unknown-block(7,2). [ 1324.453651][T16978] md: error, md_import_device() returned -16 [ 1324.788502][T16975] md/raid:md0: not clean -- starting background reconstruction [ 1324.878982][T16975] md/raid:md0: device loop2 operational as raid disk 2 [ 1324.981142][T16975] md/raid:md0: device loop1 operational as raid disk 1 [ 1325.134462][T16479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1325.255046][T16479] 8021q: adding VLAN 0 to HW filter on device team0 [ 1325.530089][T16995] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.776309][T16975] md/raid:md0: couldn't allocate thread. [ 1325.922550][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.929817][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1326.138490][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.145710][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1327.189845][T16995] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.383713][T16995] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.530532][T16975] md: pers->run() failed ... [ 1327.661033][T16995] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.331223][T17031] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.863176][ T1168] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.065171][ T57] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.573124][T17031] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.737014][ T194] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.202502][ T48] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.790484][T17031] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.977911][T16479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1332.018381][T17031] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.462046][T10205] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.553198][ T12] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.631618][ T12] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.731728][ T48] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.169553][T10787] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1333.365392][T10787] usb 7-1: Using ep0 maxpacket: 8 [ 1333.391839][T10787] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.442249][T10787] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1333.489189][T10787] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1333.526251][T10787] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.548432][T16479] veth0_vlan: entered promiscuous mode [ 1333.566446][T10787] usb 7-1: config 0 descriptor?? [ 1333.617842][T16479] veth1_vlan: entered promiscuous mode [ 1333.803231][T16479] veth0_macvtap: entered promiscuous mode [ 1333.893048][T16479] veth1_macvtap: entered promiscuous mode [ 1333.951329][T16479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1333.981430][ T5779] usb 7-1: USB disconnect, device number 11 [ 1334.458855][T16479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1335.060834][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.076344][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.086174][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.136052][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.588496][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.605338][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.787310][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.106246][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1338.664586][T17143] syzkaller0: entered promiscuous mode [ 1338.690112][T17143] syzkaller0: entered allmulticast mode [ 1342.084623][T17184] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2494'. [ 1342.431188][T17191] syzkaller0: entered promiscuous mode [ 1342.506610][T17191] syzkaller0: entered allmulticast mode [ 1342.589130][T17197] 9pnet_virtio: no channels available for device syz [ 1342.735459][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2495'. [ 1343.983544][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1344.341472][ T24] usb 6-1: device descriptor read/64, error -71 [ 1344.674536][ T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1345.015164][ T24] usb 6-1: device descriptor read/64, error -71 [ 1345.401886][ T24] usb usb6-port1: attempt power cycle [ 1345.919844][ T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1345.933380][ T5865] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 1345.963972][ T24] usb 6-1: device descriptor read/8, error -71 [ 1346.360577][ T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1346.516184][ T24] usb 6-1: device descriptor read/8, error -71 [ 1346.668075][ T5865] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1346.782885][ T24] usb usb6-port1: unable to enumerate USB device [ 1347.270975][ T5865] usb 10-1: config 0 has no interface number 0 [ 1347.277218][ T5865] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1347.376921][ T5865] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1348.039807][T17218] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.480375][ T5865] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1348.499014][ T5865] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.609411][ T5865] usb 10-1: config 0 descriptor?? [ 1348.631111][ T5865] usb 10-1: can't set config #0, error -71 [ 1348.708548][ T5865] usb 10-1: USB disconnect, device number 5 [ 1348.937326][T17256] loop3: detected capacity change from 0 to 32768 [ 1348.998980][T17256] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1349.106629][T17242] syzkaller0: entered promiscuous mode [ 1349.128260][T17242] syzkaller0: entered allmulticast mode [ 1349.179122][T17256] md: could not open device unknown-block(7,1). [ 1349.186064][T17256] md: error, md_import_device() returned -16 [ 1349.239204][T17256] md: could not open device unknown-block(7,2). [ 1349.245661][T17256] md: error, md_import_device() returned -16 [ 1349.332058][T17256] md/raid:md0: not clean -- starting background reconstruction [ 1349.394036][T17256] md/raid:md0: device loop0 operational as raid disk 0 [ 1349.410852][T17256] md/raid:md0: device loop2 operational as raid disk 2 [ 1349.419740][T17256] md/raid:md0: device loop1 operational as raid disk 1 [ 1349.562765][T17256] md/raid:md0: raid level 5 active with 3 out of 3 devices, algorithm 0 [ 1349.653694][T17256] md0: detected capacity change from 0 to 4096 [ 1349.776020][ T5865] [ 1349.778429][ T5865] ====================================================== [ 1349.785455][ T5865] WARNING: possible circular locking dependency detected [ 1349.792568][ T5865] syzkaller #0 Tainted: G L [ 1349.798549][ T5865] ------------------------------------------------------ [ 1349.805564][ T5865] kworker/0:7/5865 is trying to acquire lock: [ 1349.811633][ T5865] ffff88805a656358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_start_sync+0x79/0xbe0 [ 1349.821280][ T5865] [ 1349.821280][ T5865] but task is already holding lock: [ 1349.828643][ T5865] ffffc900044bfd08 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1349.839932][ T5865] [ 1349.839932][ T5865] which lock already depends on the new lock. [ 1349.839932][ T5865] [ 1349.850343][ T5865] [ 1349.850343][ T5865] the existing dependency chain (in reverse order) is: [ 1349.859355][ T5865] [ 1349.859355][ T5865] -> #3 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 1349.868853][ T5865] lock_acquire+0x1b9/0x370 [ 1349.873895][ T5865] process_one_work+0x98e/0x1940 [ 1349.879367][ T5865] worker_thread+0x5ef/0xe50 [ 1349.884514][ T5865] kthread+0x370/0x450 [ 1349.889126][ T5865] ret_from_fork+0x72b/0xd50 [ 1349.894253][ T5865] ret_from_fork_asm+0x1a/0x30 [ 1349.899558][ T5865] [ 1349.899558][ T5865] -> #2 ((wq_completion)md_misc){+.+.}-{0:0}: [ 1349.907846][ T5865] lock_acquire+0x1b9/0x370 [ 1349.912907][ T5865] touch_wq_lockdep_map+0xad/0x1c0 [ 1349.918572][ T5865] __flush_workqueue+0x131/0x1200 [ 1349.924149][ T5865] md_alloc+0x30/0x10a0 [ 1349.928844][ T5865] md_probe+0x73/0xf0 [ 1349.933366][ T5865] blk_probe_dev+0x149/0x1e0 [ 1349.938491][ T5865] blk_request_module+0x16/0xc0 [ 1349.943882][ T5865] blkdev_get_no_open+0x9b/0xf0 [ 1349.949360][ T5865] blkdev_open+0x141/0x4f0 [ 1349.954307][ T5865] do_dentry_open+0x6ab/0x14d0 [ 1349.959610][ T5865] vfs_open+0x82/0x3f0 [ 1349.964222][ T5865] path_openat+0x2873/0x4280 [ 1349.969352][ T5865] do_file_open+0x20e/0x430 [ 1349.974400][ T5865] do_sys_openat2+0x10f/0x1e0 [ 1349.979607][ T5865] __x64_sys_openat+0x12d/0x210 [ 1349.984990][ T5865] do_syscall_64+0x115/0x870 [ 1349.990115][ T5865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.996548][ T5865] [ 1349.996548][ T5865] -> #1 (major_names_lock){+.+.}-{4:4}: [ 1350.004307][ T5865] lock_acquire+0x1b9/0x370 [ 1350.009346][ T5865] __mutex_lock+0x1a4/0x1bd0 [ 1350.014475][ T5865] blk_probe_dev+0x28/0x1e0 [ 1350.019499][ T5865] blk_request_module+0x16/0xc0 [ 1350.025142][ T5865] blkdev_get_no_open+0x9b/0xf0 [ 1350.030534][ T5865] bdev_file_open_by_dev+0x70/0x210 [ 1350.036276][ T5865] md_import_device+0x120/0x360 [ 1350.041652][ T5865] md_add_new_disk+0xdbf/0x1820 [ 1350.047113][ T5865] md_ioctl+0x2b28/0x36b0 [ 1350.051967][ T5865] blkdev_ioctl+0x5ad/0x6f0 [ 1350.056994][ T5865] __x64_sys_ioctl+0x18e/0x210 [ 1350.062298][ T5865] do_syscall_64+0x115/0x870 [ 1350.067427][ T5865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.073851][ T5865] [ 1350.073851][ T5865] -> #0 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 1350.082128][ T5865] check_prev_add+0xeb/0xe60 [ 1350.087250][ T5865] __lock_acquire+0x136c/0x1a40 [ 1350.092636][ T5865] lock_acquire+0x1b9/0x370 [ 1350.097670][ T5865] __mutex_lock+0x1a4/0x1bd0 [ 1350.102816][ T5865] md_start_sync+0x79/0xbe0 [ 1350.107862][ T5865] process_one_work+0xa23/0x1940 [ 1350.113331][ T5865] worker_thread+0x5ef/0xe50 [ 1350.118446][ T5865] kthread+0x370/0x450 [ 1350.123058][ T5865] ret_from_fork+0x72b/0xd50 [ 1350.128189][ T5865] ret_from_fork_asm+0x1a/0x30 [ 1350.133502][ T5865] [ 1350.133502][ T5865] other info that might help us debug this: [ 1350.133502][ T5865] [ 1350.143749][ T5865] Chain exists of: [ 1350.143749][ T5865] &mddev->reconfig_mutex --> (wq_completion)md_misc --> (work_completion)(&mddev->sync_work) [ 1350.143749][ T5865] [ 1350.159873][ T5865] Possible unsafe locking scenario: [ 1350.159873][ T5865] [ 1350.167447][ T5865] CPU0 CPU1 [ 1350.172814][ T5865] ---- ---- [ 1350.178167][ T5865] lock((work_completion)(&mddev->sync_work)); [ 1350.184417][ T5865] lock((wq_completion)md_misc); [ 1350.191968][ T5865] lock((work_completion)(&mddev->sync_work)); [ 1350.200733][ T5865] lock(&mddev->reconfig_mutex); [ 1350.205763][ T5865] [ 1350.205763][ T5865] *** DEADLOCK *** [ 1350.205763][ T5865] [ 1350.213893][ T5865] 2 locks held by kworker/0:7/5865: [ 1350.219083][ T5865] #0: ffff888020ee8d40 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1350.229662][ T5865] #1: ffffc900044bfd08 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1350.241368][ T5865] [ 1350.241368][ T5865] stack backtrace: [ 1350.247260][ T5865] CPU: 0 UID: 0 PID: 5865 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 1350.247318][ T5865] Tainted: [L]=SOFTLOCKUP [ 1350.247332][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1350.247362][ T5865] Workqueue: md_misc md_start_sync [ 1350.247422][ T5865] Call Trace: [ 1350.247437][ T5865] [ 1350.247452][ T5865] dump_stack_lvl+0x100/0x190 [ 1350.247497][ T5865] print_circular_bug.cold+0x178/0x1c7 [ 1350.247566][ T5865] check_noncircular+0x146/0x160 [ 1350.247614][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.247666][ T5865] check_prev_add+0xeb/0xe60 [ 1350.247704][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.247752][ T5865] __lock_acquire+0x136c/0x1a40 [ 1350.247797][ T5865] ? clockevents_program_event+0x1ef/0x820 [ 1350.247857][ T5865] lock_acquire+0x1b9/0x370 [ 1350.247912][ T5865] ? md_start_sync+0x79/0xbe0 [ 1350.247974][ T5865] ? __pfx___might_resched+0x10/0x10 [ 1350.248016][ T5865] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 1350.248080][ T5865] __mutex_lock+0x1a4/0x1bd0 [ 1350.248127][ T5865] ? md_start_sync+0x79/0xbe0 [ 1350.248180][ T5865] ? md_start_sync+0x79/0xbe0 [ 1350.248232][ T5865] ? __lock_acquire+0x49f/0x1a40 [ 1350.248273][ T5865] ? irqentry_exit+0x24d/0xa00 [ 1350.248313][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.248354][ T5865] ? lockdep_hardirqs_on+0x78/0x100 [ 1350.248393][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.248435][ T5865] ? __pfx___mutex_lock+0x10/0x10 [ 1350.248485][ T5865] ? md_spares_need_change+0x1dc/0x320 [ 1350.248525][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.248572][ T5865] ? md_start_sync+0x79/0xbe0 [ 1350.248619][ T5865] md_start_sync+0x79/0xbe0 [ 1350.248671][ T5865] process_one_work+0xa23/0x1940 [ 1350.248713][ T5865] ? __pfx_process_one_work+0x10/0x10 [ 1350.248745][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.248792][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.248836][ T5865] worker_thread+0x5ef/0xe50 [ 1350.248874][ T5865] ? __pfx_worker_thread+0x10/0x10 [ 1350.248907][ T5865] ? kthread+0x13a/0x450 [ 1350.248957][ T5865] ? __pfx_worker_thread+0x10/0x10 [ 1350.248993][ T5865] kthread+0x370/0x450 [ 1350.249043][ T5865] ? __pfx_kthread+0x10/0x10 [ 1350.249096][ T5865] ret_from_fork+0x72b/0xd50 [ 1350.249141][ T5865] ? __pfx_ret_from_fork+0x10/0x10 [ 1350.249185][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1350.249225][ T5865] ? __switch_to+0x800/0x10f0 [ 1350.249278][ T5865] ? __switch_to_asm+0x39/0x70 [ 1350.249324][ T5865] ? __pfx_kthread+0x10/0x10 [ 1350.249376][ T5865] ret_from_fork_asm+0x1a/0x30 [ 1350.249434][ T5865] [ 1350.558890][T17273] md: resync of RAID array md0 [ 1350.830663][T17273] md: md0: resync done. [ 1353.999730][T17218] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.081414][T12672] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.177432][T17218] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.230038][T12672] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.299354][T17218] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.347339][T12672] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.418838][ T3290] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.433102][ T3290] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.458464][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1354.464975][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1354.476791][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.486297][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.498844][T12672] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.641103][T12672] bridge_slave_1: left allmulticast mode [ 1354.649343][T12672] bridge_slave_1: left promiscuous mode [ 1354.659629][T12672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.672053][T12672] bridge_slave_0: left allmulticast mode [ 1354.680087][T12672] bridge_slave_0: left promiscuous mode [ 1354.687216][T12672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.907755][T12672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1354.919725][T12672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1354.930945][T12672] bond0 (unregistering): Released all slaves [ 1355.126200][T12672] hsr_slave_0: left promiscuous mode [ 1355.132126][T12672] hsr_slave_1: left promiscuous mode [ 1355.142164][T12672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1355.151416][T12672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1355.162272][T12672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1355.172127][T12672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1355.187282][T12672] veth1_macvtap: left promiscuous mode [ 1355.192828][T12672] veth0_macvtap: left promiscuous mode [ 1355.200287][T12672] veth1_vlan: left promiscuous mode [ 1355.207484][T12672] veth0_vlan: left promiscuous mode [ 1355.401341][T12672] team0 (unregistering): Port device team_slave_1 removed [ 1355.424161][T12672] team0 (unregistering): Port device team_slave_0 removed [ 1355.516124][ T5282] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1355.787668][T12672] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.867332][T12672] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.914932][T12672] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.966723][T12672] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.022558][ T5282] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1356.073210][T12672] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.162147][T12672] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.249021][T12672] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.331443][T12672] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.467460][ T5282] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1356.527122][T12672] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.569641][T12672] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.619650][T12672] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.690684][T12672] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.836430][T12672] bridge_slave_1: left allmulticast mode [ 1356.842823][T12672] bridge_slave_1: left promiscuous mode [ 1356.852979][T12672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.870641][T12672] bridge_slave_0: left allmulticast mode [ 1356.876916][T12672] bridge_slave_0: left promiscuous mode [ 1356.882677][T12672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.898541][T12672] bridge_slave_1: left allmulticast mode [ 1356.913285][T12672] bridge_slave_1: left promiscuous mode [ 1356.920885][T12672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.931223][T12672] bridge_slave_0: left allmulticast mode [ 1356.940603][T12672] bridge_slave_0: left promiscuous mode [ 1356.948206][T12672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.966096][T12672] pimreg3: left allmulticast mode [ 1357.109739][T12672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.122668][T12672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.132593][T12672] bond0 (unregistering): Released all slaves [ 1357.193350][T12672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.208736][T12672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.219896][T12672] bond0 (unregistering): Released all slaves [ 1357.364924][T12672] bond0 (unregistering): Released all slaves [ 1357.375575][T12672] bond1 (unregistering): Released all slaves [ 1357.387636][ T5282] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1357.917735][ T5282] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1357.929804][T12672] hsr_slave_0: left promiscuous mode [ 1357.936582][T12672] hsr_slave_1: left promiscuous mode [ 1357.942380][T12672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1357.949925][T12672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1357.957823][T12672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1357.965306][T12672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1357.978122][T12672] hsr_slave_0: left promiscuous mode [ 1357.983887][T12672] hsr_slave_1: left promiscuous mode [ 1357.989527][T12672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1357.997276][T12672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1358.005089][T12672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1358.012474][T12672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1358.024219][T12672] hsr_slave_0: left promiscuous mode [ 1358.030029][T12672] hsr_slave_1: left promiscuous mode [ 1358.045165][T12672] veth1_macvtap: left promiscuous mode [ 1358.050719][T12672] veth0_macvtap: left promiscuous mode [ 1358.056346][T12672] veth1_vlan: left promiscuous mode [ 1358.061788][T12672] veth0_vlan: left promiscuous mode [ 1358.069492][T12672] veth1_macvtap: left promiscuous mode [ 1358.075028][T12672] veth0_macvtap: left promiscuous mode [ 1358.080557][T12672] veth1_vlan: left promiscuous mode [ 1358.085863][T12672] veth0_vlan: left promiscuous mode [ 1358.091903][T12672] veth1_macvtap: left promiscuous mode [ 1358.097464][T12672] veth0_macvtap: left promiscuous mode [ 1358.103336][T12672] veth1_vlan: left promiscuous mode [ 1358.108614][T12672] veth0_vlan: left promiscuous mode [ 1358.322381][T12672] team0 (unregistering): Port device team_slave_1 removed [ 1358.335149][T12672] team0 (unregistering): Port device team_slave_0 removed [ 1358.495494][T12672] team0 (unregistering): Port device team_slave_1 removed [ 1358.508542][T12672] team0 (unregistering): Port device team_slave_0 removed [ 1359.496470][ T5282] 8021q: adding VLAN 0 to HW filter on device eth22