last executing test programs: 8.000368389s ago: executing program 1 (id=480): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffff, [{0x0, 0x1, 0x2}]}]}}, 0x0, 0x3e}, 0x20) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000004c0), 0x1000, r2}, 0x38) ioctl$FBIOBLANK(r1, 0x4611, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x5, 0x5]}, 0x8, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) r11 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 7.037121659s ago: executing program 2 (id=483): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) rseq(&(0x7f0000000300), 0xfff4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="ad43000001005400000001"], 0x14}}, 0x0) ioctl$UBLK_U_CMD_START_DEV(r1, 0xc0207506, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, 0x0}) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x932) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ustat(0x90000000000, &(0x7f0000000280)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000280)={0x0}) r6 = epoll_create1(0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x6}) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000440)='.\x00', 0x20000000) inotify_init() r8 = inotify_init1(0x80000) inotify_add_watch(r8, &(0x7f0000000240)='.\x00', 0x60000726) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000000)='.\x00', 0x400017e) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={r5}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x6b35e9d94325c671, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r10, 0x3, r4, 0x5}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0b0000006800010000000000fddb0007000300000008000500", @ANYRES8=r5, @ANYRES8=0x0], 0x40}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) 5.997415278s ago: executing program 2 (id=488): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) add_key$user(&(0x7f00000000c0), 0x0, &(0x7f0000000380)="7ccd08", 0x3, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x1003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) connect$bt_sco(r4, &(0x7f0000000080)={0x1f, @none}, 0x8) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x8000000, r0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x100013, 0xa4a82) ioctl$LOOP_SET_FD(r8, 0x4c00, 0xffffffffffffffff) 4.93691197s ago: executing program 1 (id=490): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000080)={0xa, 0x4e21, 0x10, @private2, 0xfffffffb}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800090400150000000000002d"], 0x1c}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r3, &(0x7f0000006540)={0x2020}, 0xfffffce2) fspick(r3, &(0x7f0000000000)='./sys_mount\x00', 0x0) io_setup(0x7f, &(0x7f0000001440)=0x0) r5 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x4, 0x71}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000240)) io_pgetevents(r4, 0x2, 0x2, &(0x7f0000000140)=[{}, {}], 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000800)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7df, r5, 0x0}]) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) write(0xffffffffffffffff, &(0x7f0000000200)='bfq', 0x3) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) 4.798024525s ago: executing program 3 (id=492): pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r3, &(0x7f0000000400)=@abs, &(0x7f00000004c0)=0x6e) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xd0, 0x2, 0x5, 0x100, 0x3, 0x20000000, 0x8, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x8, 0xfe9, 0x401, 0x7, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x7, 0x8]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB="08000000dd0000000000000000c8d05300000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r6, 0x0, 0xa002a0}, 0x38) syz_80211_inject_frame(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="50000000080211000001080211000000505050505050"], 0x36) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 4.777406426s ago: executing program 2 (id=493): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0xfb, 0x107, 0x1, 0x1, "1d00000c00", "0902935665a27c78c8d23d45f15c43cf03be7c3f9e5c1c9a108f3cfe97bdceba6eb860837cf964f1a40a0dfe429918a3c16e713966aef513ac9a2d7a804f79f99baa4e2de682cd3471308f680bba63ae00cd6eb7286d50bb0dcc5635983202a01ed1945cd59d70f9f1cea6ff6e9c1402093af700fe3871ad38f5c5f8df90974e54ec83f85730dbdcfb9c070816b79f030fe9801b492d19e69f5ad153977e9e549980b982fca4c898545f1433b1f69a09e5dfede50754ce31d40d4038caa306ee486f4f651edfff757fc3124b573a316c8183de6194ffde82251403cd85689ba3447ee3c5615f0b7f882e5e2fdf6060f84efb"}, 0x107, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000400)=0x79) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40040e0}, 0x20004800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r6, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c001}, 0x20040000) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000700)={&(0x7f00000001c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x144, r6, 0x4, 0x70bd28, 0x800, {}, [@WGDEVICE_A_PEERS={0x130, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf84f}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f55e4cc60af2a6151b38290ce82474b7473b5bd92ca3fd0dc43d1898ea145677"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @local}}]}, {0xdc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x804}, 0x20008000) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 3.557398144s ago: executing program 2 (id=494): clock_getres(0x17, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000087dd23b23c6206ab12af99aa4575a1af1c7c7d39ce3c833d2a27e752fd6ec751d7f868a4332cb24e5e0d18e899163af37b773acbe2e3c6e24fa484d83d4499f00885c6f2c0877a6b3797b490f5a7d25508609fcb021cd6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x1000004, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_OPERSTATE={0x5, 0x10, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x7f, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b5080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000820000009500"/72], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000280)=@sr0, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000300)='nilfs2\x00', 0x1a0c000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000000100)=0x7) ioctl$USBDEVFS_FREE_STREAMS(r4, 0xc0105500, &(0x7f0000000140)=ANY=[@ANYBLOB="a1"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x800) readv(r7, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0xcf00}, {0x0, 0xe00}], 0x10000000000000fb) r8 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r8, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f0000000340)={0x7, 0x4, &(0x7f0000000040)=[0x5, 0x6, 0xfff9, 0x9], &(0x7f00000000c0), &(0x7f00000002c0)=[0x100, 0x7, 0x1, 0xa8, 0x2, 0x9, 0x9, 0x80, 0x8], &(0x7f0000000300)=[0xeb]}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="14010000300001000000000000000000040100800c0002000000000000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0xfffffffc) ioctl$sock_x25_SIOCDELRT(r7, 0x890c, &(0x7f0000000740)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x5, 'team_slave_1\x00'}) quotactl_fd$Q_GETQUOTA(r9, 0xffffffff80000702, 0xee01, &(0x7f00000003c0)) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) read$FUSE(r7, &(0x7f0000002980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x2, 0x0) 3.492260286s ago: executing program 0 (id=496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, 0x0) r4 = syz_io_uring_setup(0x3084, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x800}, &(0x7f0000ffc000), &(0x7f0000ffc000), 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000006740)=[0xffffffffffffffff], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x200047, &(0x7f0000000300)={0x0, 0xf211, 0x800, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f0000000040), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x10000, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) openat$cgroup_int(r8, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000001000011851bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b0000000000", @ANYRESOCT=r3, @ANYBLOB="3b66b2c25cb59206e4838a88f0aa687659fb8334e252a2be93c833e6fea82297196245d1b978eeab8426887e8d685aa3ee08d4a9ac70e4235af186258214225e2526b7d16e9de653fcd407e1aa6ee296f30d96da60b0a77d2621a8906f5c496e8bbd8a1035171b2348e1574f20d576263c715f6810a84a2510bd1066f707933f5dfe31ff6b5cfbb6cd7a365ba56edd48dc5b10a395c33ad75570dd8cff695364c8f85cbe1145fbabc8f4aa38c961ff93cfa6011e"], 0x30}, 0x1, 0x0, 0x0, 0x20044c80}, 0x4000000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x44}}, 0x0) 3.470403664s ago: executing program 1 (id=497): socket$kcm(0x1e, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$inet6(0xa, 0x3, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdir(0x0, 0x0) 3.206290736s ago: executing program 0 (id=498): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0xa9, 0x2e, 0xc, 0x10, 0x11ba, 0x1003, 0x14c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x7, 0xe0, 0x40, "", [{{0x9, 0x4, 0x3, 0x7, 0x0, 0x41, 0x0, 0xba, 0x4}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4094) fstat(0xffffffffffffffff, &(0x7f0000000e80)) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) 3.205879943s ago: executing program 2 (id=499): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(r1, &(0x7f0000000080)='./file0\x00', 0x200, 0x7) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)="c1e220d8e43b10eefb0386fb", 0xc}, 0x1, 0x0, 0x0, 0x10011}, 0x24002094) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}, 0xffffff94}], 0x8000000000002f2, 0x40002022, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) lseek(r4, 0xb, 0x4) write$FUSE_INTERRUPT(r4, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r5, 0x9, 0x0) 2.951095219s ago: executing program 3 (id=500): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x3, 0x407, 0x8, 0x801003e, 0x80, '\v\b\x00', 0x9, 0xfffffff5}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x12) dup(r1) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000145802, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x103381) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r4 = socket(0x2c, 0x803, 0xffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000005b80)={'ip6gre0\x00', 0x0}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x21, r5, 0x8, 0xffff) r6 = dup(r3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000480)={{0x6, 0x6, 0x4a7, 0x6, 'syz1\x00', 0x6}, 0x5, 0x3, 0xb4, r5, 0x6, 0x3, 'syz1\x00', &(0x7f0000000180)=['\x00z\x05c\xeap\xeb\x029\xf4\xfd\tocQ;\xfa\xf4\x19\xe2\xdd@NTg\xe8\xd1\xa4\xcf<*\xd8\x98Q>\x97Q*7\xaa\xb9\xee\x95\x96\xbf\f\"\xbdE%\xed\xe6\xb8\x05\x80\x9d\xb2\x87n\xd5\xd8\x10\xcc<\xb1\x19\xce\xe0;\x85\x06\xa9(\xa1\a\xd1\xe3\r\xaa\f\xca#\x93+\xd7~\x9fI\x82h\xcb\xd6\x9a\xd3\x12\xfd\xfb/@\xd3\b\xdf\xc0\xe4ry\x81\xfdX\xa2\xa4\xa3})\x7f\xf3\'\xd3PeY\xd8Zp', '^\x00', '#\x00', '\x00', ':]))', '\x00\x00\x01\x00\x00\x00\x00\x00\x00'], 0x8e}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f000088f000/0x3000)=nil, 0x3000, 0x0) setpriority(0x2, 0x0, 0x8) socket$pppoe(0x18, 0x1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.543552418s ago: executing program 0 (id=501): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000005c0)=""/211, 0xd3}, {&(0x7f00000006c0)=""/165, 0xa5}, {&(0x7f0000000780)=""/12, 0xc}, {&(0x7f0000000880)=""/132, 0x84}, {&(0x7f0000000940)=""/80, 0x50}, {&(0x7f00000009c0)=""/76, 0x4c}, {&(0x7f0000000a40)=""/93, 0x5d}], 0x7, &(0x7f0000000b00)=""/109, 0x6d}, 0x2}, {{&(0x7f0000000b80)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000cc0)=""/149, 0x95}, {&(0x7f0000000dc0)=""/200, 0xc8}], 0x2, &(0x7f0000000f00)=""/164, 0xa4}, 0x6}, {{&(0x7f0000000fc0)=@hci, 0x80, &(0x7f0000001580)=[{&(0x7f0000001080)=""/106, 0x6a}, {&(0x7f0000001100)=""/232, 0xe8}, {&(0x7f0000001200)=""/2, 0x2}, {&(0x7f0000001240)=""/192, 0xc0}, {&(0x7f0000001300)=""/154, 0x9a}, {&(0x7f00000013c0)=""/243, 0xf3}, {&(0x7f00000014c0)=""/44, 0x2c}, {&(0x7f0000001500)=""/95, 0x5f}], 0x8, &(0x7f0000001600)=""/34, 0x22}, 0x101}, {{&(0x7f0000001680)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002880)}}, {{&(0x7f0000002900)=@l2, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002980)=""/87, 0x57}], 0x1, &(0x7f0000002a40)=""/130, 0x82}, 0x1}], 0x5, 0x40002302, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$BTRFS_IOC_SNAP_DESTROY(r6, 0x5000940f, &(0x7f0000002c00)={{r0}, "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"}) socket$kcm(0x2, 0x7, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x305) write$tun(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="3e030200000005000000ffffffffffffaa9eaaaaaabb81000002080046f8002c00640000070690780a010101ac14142f8903910000004e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000002400090243bd7000fedbdf250800000006000400"], 0x1c}}, 0x8800) 2.531431726s ago: executing program 1 (id=502): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r5, r5, r5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000440)=[{0xa, 0x0, 0x5, 0x7fff7ffc}, {0x5, 0x64, 0x9, 0x6}, {0x0, 0x0, 0x10, 0x7fffffff}]}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) socket(0x10, 0x3, 0x0) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 2.530945165s ago: executing program 3 (id=503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206030000000000000000000700000705000100070000000900020073b57a31000000078008c9f54000200005080013400000000e0500050002000000050004000100000011000300686173683a69702c706f727400000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0xffff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 'hsr0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc01c586a, &(0x7f0000000140)={r1, &(0x7f0000000000)='\x00', 0x10000, 0x0, 0x33, &(0x7f0000000080), 0x0}) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendmsg$nl_xfrm(r2, 0x0, 0xe61c1323c3c20c32) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140ffffffff"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close_range(r6, 0xffffffffffffffff, 0x0) 1.541169654s ago: executing program 1 (id=504): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x80002, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r6 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 1.477446041s ago: executing program 2 (id=505): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x22020400) r7 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r8 = dup(r6) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000040)=@x86={0x5, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x48, 0x9, 0x0, 0x7, 0x1, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x1f}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003a00)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000001f40)=[@pktinfo={{0x20, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0xe}}}}], 0x20}}], 0x1, 0x1000) epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001000010404000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="38410000440b00002400128009000100626f6e640000000014000280050001000100000008000200", @ANYBLOB="f7"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.421341671s ago: executing program 3 (id=506): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x58}}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x10, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x4, 0x7}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) openat$sequencer(0xffffff9c, 0x0, 0x8ec02, 0x0) ioctl$SIOCX25SENDCALLACCPT(r4, 0x89e9) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.238337499s ago: executing program 0 (id=507): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0xb5001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) sched_setattr(0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x471, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000780)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000480), r8) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x30, r7, 0x100000000) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e4000000000900fe5da7ded000000000000059ec8303cfef91b9000000000000000000008f5be75bf9a94245178c408cddc2c6cf7a168d68e9b59506ad7658f50a68adc6a1b1c092a82dca67078024ce823e88b87d4df9de10a449440a54227bd08cef4cb0630c6c148e3e6d2d4f4b0309fb098e64fec121e746b4d0f6e001912b795692899d874833c8172f1423b330f25e13c0"], 0x48) ioctl$BLKREPORTZONE(r7, 0xc0101282, &(0x7f0000000980)={0x7, 0x3, 0x0, [{0x7ff, 0x0, 0xe04, 0x3, 0x6, 0x20, 0x8, '\x00', 0x10000}, {0x5, 0xa3, 0x8, 0x5, 0xe8, 0x26, 0x3, '\x00', 0x6e5cd63d}, {0xfffffffffffffffa, 0x765, 0x329, 0xf, 0x6, 0x4, 0x0, '\x00', 0x942}]}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) socket$unix(0x1, 0x1, 0x0) 800.859671ms ago: executing program 0 (id=508): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x4, @private1, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@rthdr_2292={{0x24, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x34}]}}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x1}}], 0x34}, 0x10) r1 = msgget$private(0x0, 0x100) msgrcv(r1, &(0x7f0000000340)={0x0, ""/40}, 0x2c, 0x3, 0x2800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@bridge_dellink={0x24, 0x13, 0x1, 0x70bd2c, 0xfffffffc, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) r4 = openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) 618.840916ms ago: executing program 0 (id=509): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000001805017b0000000000000000050000000800b8"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x5, 0x20001000, 0xffffffffffffffff, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x884) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$inet_udp(0x2, 0x2, 0x0) openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x7a31, 0x7fff}, @sack_perm, @sack_perm, @mss={0x2, 0x4}, @window={0x3, 0x800, 0x6}, @window={0x3, 0x1, 0x10}, @sack_perm], 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) 610.085479ms ago: executing program 1 (id=510): r0 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/reserved_size', 0x149a82, 0x1a1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000380)='\f', 0x1}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, &(0x7f0000000140), &(0x7f0000000080)=0x24) connect$inet6(r5, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) ioctl$USBDEVFS_BULK(r8, 0x5523, 0x0) fstatfs(r0, &(0x7f00000003c0)=""/146) 317.631895ms ago: executing program 3 (id=511): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file1\x00', 0x0, 0x37) ftruncate(r1, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='file2\x00', 0x42, 0x1ff) ftruncate(r2, 0x1000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='file3\x00', 0x42, 0x1ff) ftruncate(r3, 0x1000000) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/loop0\x00', 0x2, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/loop2\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/loop3\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r3) r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x24) write(r6, &(0x7f0000001100), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r7, 0x40480923, &(0x7f0000001300)="000000005a00000003000000000000000500000000040000040000000300000000000000") ioctl(r7, 0x40140921, &(0x7f0000001400)="000000000700000000000000000000000600") ioctl(r7, 0x40140921, &(0x7f0000001500)="0100000007000000010000000100000006000000") ioctl(r7, 0x80140912, &(0x7f0000001600)="0200000007000000020000000200000006000000") ioctl(r7, 0x400c0930, 0x0) ioctl(r7, 0x40140921, &(0x7f0000001700)="030000000700000003000000ffffffff0200") 0s ago: executing program 3 (id=512): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) read$FUSE(0xffffffffffffffff, &(0x7f0000002680)={0x2020}, 0x2020) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB='-net -freezer -io -hugetlb -hugetlb +free'], 0x36) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffe, r6, 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53049c4) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$unix(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x7, 0xfffffffe, 0xe3, 0x3ff, 0x2}}]}}}]}, 0x78}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:46775' (ED25519) to the list of known hosts. [ 43.211334][ T5671] cgroup: Unknown subsys name 'net' [ 43.367044][ T5671] cgroup: Unknown subsys name 'cpuset' [ 43.373148][ T5671] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 44.648016][ T5671] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.961673][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.972830][ T5752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.976140][ T5752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.985117][ T5752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.988788][ T5752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.991001][ T5755] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.992653][ T5752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.996498][ T5755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.998156][ T5752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 49.000856][ T5757] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 49.000999][ T5755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 49.001922][ T5755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 49.002634][ T5755] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 49.014262][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 49.019497][ T5757] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 49.023685][ T5757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 49.027756][ T5756] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 49.029463][ T5757] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 49.031940][ T5756] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 49.049276][ T5756] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 49.716640][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.720014][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.722753][ T5758] bridge_slave_0: entered allmulticast mode [ 49.726150][ T5758] bridge_slave_0: entered promiscuous mode [ 49.764989][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.767806][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.770497][ T5758] bridge_slave_1: entered allmulticast mode [ 49.775181][ T5758] bridge_slave_1: entered promiscuous mode [ 49.831903][ T5758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.836648][ T5758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.889340][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.892764][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.895806][ T5750] bridge_slave_0: entered allmulticast mode [ 49.899028][ T5750] bridge_slave_0: entered promiscuous mode [ 49.924824][ T5758] team0: Port device team_slave_0 added [ 49.926752][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.929520][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.931884][ T5745] bridge_slave_0: entered allmulticast mode [ 49.934636][ T5745] bridge_slave_0: entered promiscuous mode [ 49.938270][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.941108][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.943655][ T5750] bridge_slave_1: entered allmulticast mode [ 49.946316][ T5750] bridge_slave_1: entered promiscuous mode [ 49.954114][ T5758] team0: Port device team_slave_1 added [ 49.956323][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.958793][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.961097][ T5745] bridge_slave_1: entered allmulticast mode [ 49.963905][ T5745] bridge_slave_1: entered promiscuous mode [ 50.017357][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.021698][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.024578][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.035021][ T5758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.045580][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.060261][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.072928][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.075712][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.085907][ T5758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.097610][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.148199][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.151180][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.154334][ T5749] bridge_slave_0: entered allmulticast mode [ 50.158067][ T5749] bridge_slave_0: entered promiscuous mode [ 50.163134][ T5750] team0: Port device team_slave_0 added [ 50.167982][ T5750] team0: Port device team_slave_1 added [ 50.172312][ T5745] team0: Port device team_slave_0 added [ 50.181518][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.184190][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.186883][ T5749] bridge_slave_1: entered allmulticast mode [ 50.190736][ T5749] bridge_slave_1: entered promiscuous mode [ 50.211583][ T5745] team0: Port device team_slave_1 added [ 50.219657][ T5758] hsr_slave_0: entered promiscuous mode [ 50.223742][ T5758] hsr_slave_1: entered promiscuous mode [ 50.256036][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.258592][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.267936][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.275188][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.300784][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.303217][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.313070][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.318998][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.330773][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.333450][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.342621][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.370626][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.374137][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.382185][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.406510][ T5749] team0: Port device team_slave_0 added [ 50.415151][ T5749] team0: Port device team_slave_1 added [ 50.457822][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.460587][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.470550][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.479677][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.482408][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.490218][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.503802][ T5750] hsr_slave_0: entered promiscuous mode [ 50.506255][ T5750] hsr_slave_1: entered promiscuous mode [ 50.508558][ T5750] debugfs: 'hsr0' already exists in 'hsr' [ 50.510559][ T5750] Cannot create hsr debugfs directory [ 50.544982][ T5745] hsr_slave_0: entered promiscuous mode [ 50.547306][ T5745] hsr_slave_1: entered promiscuous mode [ 50.549371][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 50.551108][ T5745] Cannot create hsr debugfs directory [ 50.610284][ T5749] hsr_slave_0: entered promiscuous mode [ 50.614428][ T5749] hsr_slave_1: entered promiscuous mode [ 50.617412][ T5749] debugfs: 'hsr0' already exists in 'hsr' [ 50.619794][ T5749] Cannot create hsr debugfs directory [ 50.790728][ T5758] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.801639][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.835957][ T5758] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.843260][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.879082][ T5758] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.884813][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.893163][ T5758] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.900436][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.006700][ T5750] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.014474][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.018692][ T5750] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.026605][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.032715][ T5750] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.039014][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.044660][ T5750] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.052727][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.083260][ T5756] Bluetooth: hci1: command tx timeout [ 51.083267][ T5747] Bluetooth: hci0: command tx timeout [ 51.095386][ T5756] Bluetooth: hci2: command tx timeout [ 51.095399][ T5747] Bluetooth: hci3: command tx timeout [ 51.122813][ T5749] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.127606][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.131372][ T5749] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.136309][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.139594][ T5749] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.143897][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.146646][ T5749] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.150912][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.233674][ T5758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.240960][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.250598][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.258646][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.265981][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.270377][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.277403][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.281369][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.289538][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.335153][ T5758] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.386435][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.390009][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.402261][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.418732][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.421276][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.445875][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.456426][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.458691][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.477815][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.480999][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.492537][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.520184][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.534896][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.537218][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.561287][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.563652][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.599039][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.645353][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.660797][ T1196] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.664138][ T1196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.688393][ T1196] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.691520][ T1196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.972402][ T5758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.986749][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.997779][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.073581][ T5749] veth0_vlan: entered promiscuous mode [ 52.086248][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.089951][ T5758] veth0_vlan: entered promiscuous mode [ 52.103340][ T5750] veth0_vlan: entered promiscuous mode [ 52.108654][ T5749] veth1_vlan: entered promiscuous mode [ 52.115197][ T5758] veth1_vlan: entered promiscuous mode [ 52.126532][ T5750] veth1_vlan: entered promiscuous mode [ 52.171878][ T5745] veth0_vlan: entered promiscuous mode [ 52.177101][ T5749] veth0_macvtap: entered promiscuous mode [ 52.183923][ T5749] veth1_macvtap: entered promiscuous mode [ 52.200749][ T5745] veth1_vlan: entered promiscuous mode [ 52.205453][ T5750] veth0_macvtap: entered promiscuous mode [ 52.214015][ T5758] veth0_macvtap: entered promiscuous mode [ 52.224976][ T5750] veth1_macvtap: entered promiscuous mode [ 52.229980][ T5758] veth1_macvtap: entered promiscuous mode [ 52.239777][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.263853][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.281286][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.292847][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.297505][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.305082][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.308528][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.312874][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.316640][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.337254][ T5745] veth0_macvtap: entered promiscuous mode [ 52.360155][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.364544][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.368789][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.378774][ T5745] veth1_macvtap: entered promiscuous mode [ 52.386264][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.405776][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.409043][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.412503][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.443840][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.449381][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.464150][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.469030][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.495192][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.499713][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.522476][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.535312][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.536700][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.539775][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.543268][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.555666][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.564057][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.567383][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.601272][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.606222][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.657158][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.657556][ T5749] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 52.663583][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.682618][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.685964][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.687323][ T5749] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 52.704253][ T5749] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 52.709784][ T1196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.712885][ T1196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.716991][ T5749] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 52.729809][ T5750] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 52.743977][ T1196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.752661][ T1196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.945376][ T5897] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 53.010595][ T5903] Zero length message leads to an empty skb [ 53.162255][ T5747] Bluetooth: hci3: command tx timeout [ 53.162926][ T5756] Bluetooth: hci0: command tx timeout [ 53.165090][ T5104] Bluetooth: hci2: command tx timeout [ 53.167612][ T5757] Bluetooth: hci1: command tx timeout [ 53.298128][ T5914] e1000e 0000:00:02.0 eth1: removed PHC [ 53.474351][ T5914] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 53.537993][ T5923] tipc: Started in network mode [ 53.543818][ T5923] tipc: Node identity 36abda0bf715, cluster identity 4711 [ 53.547066][ T5923] tipc: Enabled bearer , priority 0 [ 53.550502][ T5925] syzkaller0: entered promiscuous mode [ 53.554514][ T5925] syzkaller0: entered allmulticast mode [ 53.576606][ T5917] tipc: Resetting bearer [ 53.591513][ T5915] tipc: Resetting bearer [ 53.610439][ T5915] tipc: Disabling bearer [ 53.674909][ T5919] cdns-pci-usbssp 0000:00:02.0: probe with driver cdns-pci-usbssp failed with error -22 [ 53.846264][ T5938] syzkaller0: entered promiscuous mode [ 53.848865][ T5938] syzkaller0: entered allmulticast mode [ 53.983159][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 54.032168][ T5842] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.199474][ T5842] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 54.206367][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 54.211497][ T5842] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 54.223299][ T5842] usb 5-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 54.227075][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 54.229699][ T5842] usb 5-1: Product: syz [ 54.231041][ T5842] usb 5-1: Manufacturer: syz [ 54.238137][ T5935] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 54.245453][ T5842] usb_debug 5-1:1.0: debug converter detected [ 54.259695][ T5842] usb 5-1: debug converter now attached to ttyUSB0 [ 54.371466][ T5965] binder_alloc: 5964: binder_alloc_buf, no vma [ 54.512469][ T845] usb 5-1: USB disconnect, device number 2 [ 54.538478][ T845] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 54.543030][ T845] usb_debug 5-1:1.0: device disconnected [ 54.866281][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 55.242473][ T5747] Bluetooth: hci2: command tx timeout [ 55.244606][ T5757] Bluetooth: hci3: command tx timeout [ 55.245697][ T5992] netlink: 'syz.2.20': attribute type 1 has an invalid length. [ 55.252314][ T5747] Bluetooth: hci0: command tx timeout [ 55.254440][ T5757] Bluetooth: hci1: command tx timeout [ 55.525935][ T5995] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 55.782558][ T6006] syz_tun: entered allmulticast mode [ 55.806953][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 55.878299][ T6009] tipc: Enabled bearer , priority 0 [ 55.890523][ T6009] syzkaller0: entered promiscuous mode [ 55.895417][ T6009] syzkaller0: entered allmulticast mode [ 56.078235][ T6009] tipc: Resetting bearer [ 56.142527][ T6007] tipc: Resetting bearer [ 56.160277][ T9] libceph: connect (1)[c::]:6789 error -101 [ 56.164804][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 56.180431][ T6021] Bluetooth: MGMT ver 1.23 [ 56.215025][ T6007] tipc: Disabling bearer [ 56.427485][ T9] libceph: connect (1)[c::]:6789 error -101 [ 56.434114][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 56.693649][ T6004] syz_tun: left allmulticast mode [ 56.953669][ T9] libceph: connect (1)[c::]:6789 error -101 [ 56.968077][ T6018] ceph: No mds server is up or the cluster is laggy [ 56.976971][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 57.142888][ T6056] 0: reclassify loop, rule prio 0, protocol 700 [ 57.210535][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 57.213887][ T6064] netlink: 'syz.0.29': attribute type 30 has an invalid length. [ 57.265121][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 57.268094][ T6070] netlink: 'syz.0.29': attribute type 30 has an invalid length. [ 57.322719][ T5757] Bluetooth: hci1: command tx timeout [ 57.325158][ T5757] Bluetooth: hci0: command tx timeout [ 57.328208][ T5757] Bluetooth: hci3: command tx timeout [ 57.330519][ T5757] Bluetooth: hci2: command tx timeout [ 57.380406][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.400435][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.417805][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.432322][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.522234][ T6085] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003 [ 57.686370][ T6086] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 57.762188][ T6086] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 57.765593][ T6086] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 57.767845][ T6086] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 57.770831][ T6086] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 57.783817][ T6086] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 12834 usecs [ 57.827346][ T6086] pci 0000:00:01.0: Adding to iommu group 1 [ 57.857116][ T6086] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 57.859307][ T6086] pci 0000:00:01.0: vgaarb: bridge control possible [ 57.861406][ T6086] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 57.906266][ T6086] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 57.932479][ T6086] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 57.938985][ T6086] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 57.965095][ T6086] [drm] Found bochs VGA, ID 0xb0c5. [ 57.966815][ T6086] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 57.995582][ T6086] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 58.055401][ T6086] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 58.378152][ T6089] syzkaller0: entered promiscuous mode [ 58.386506][ T6089] syzkaller0: entered allmulticast mode [ 58.548933][ T6093] configfs-gadget.g1 gadget.0: HOST MAC 52:2a:c0:c8:9d:4b [ 58.551159][ T6093] configfs-gadget.g1 gadget.0: MAC 7e:e7:3f:04:46:d9 [ 58.832793][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 58.884277][ T6073] Set syz1 is full, maxelem 65536 reached [ 58.998282][ T9] usb 5-1: Dual-Role OTG device on HNP port [ 59.004210][ T9] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 59.008164][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.099044][ T9] rndis_host 5-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 52:2a:c0:c8:9d:4b [ 59.661257][ T6144] tipc: Started in network mode [ 59.664926][ T6144] tipc: Node identity 42cef2e4349f, cluster identity 4711 [ 59.671412][ T6144] tipc: Enabled bearer , priority 10 [ 59.797616][ T6143] tipc: Resetting bearer [ 59.821836][ T6143] tipc: Disabling bearer [ 60.954010][ T5117] usb 5-1: USB disconnect, device number 3 [ 61.051561][ T5117] rndis_host 5-1:1.0 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 62.309778][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.53'. [ 62.320824][ T6191] syzkaller0: entered promiscuous mode [ 62.325846][ T6191] syzkaller0: entered allmulticast mode [ 62.359919][ T6193] syz.3.53 uses obsolete (PF_INET,SOCK_PACKET) [ 62.562424][ T6199] tipc: Enabled bearer , priority 0 [ 62.591610][ T6199] syzkaller0: entered promiscuous mode [ 62.603168][ T6199] syzkaller0: entered allmulticast mode [ 62.625767][ T6199] tipc: Resetting bearer [ 62.640543][ T6198] tipc: Resetting bearer [ 62.721078][ T6198] tipc: Disabling bearer [ 63.061240][ T6222] tipc: Enabled bearer , priority 0 [ 63.064998][ T6222] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 63.068679][ T6222] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 63.077401][ T6222] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 63.083872][ T6222] tipc: Resetting bearer [ 63.088620][ T6224] tipc: Started in network mode [ 63.090314][ T6224] tipc: Node identity 9ab608eb6d8b, cluster identity 4711 [ 63.094120][ T6224] tipc: Enabled bearer , priority 0 [ 63.097503][ T6224] syzkaller0: entered promiscuous mode [ 63.099489][ T6224] syzkaller0: entered allmulticast mode [ 63.161771][ T6224] tipc: Resetting bearer [ 63.174893][ T6220] tipc: Resetting bearer [ 63.230925][ T6220] tipc: Disabling bearer [ 63.297587][ T6235] netlink: 20 bytes leftover after parsing attributes in process `syz.0.61'. [ 63.521714][ T6208] orangefs_mount: mount request failed with -4 [ 64.093819][ T24] tipc: Node number set to 3250510347 [ 66.972232][ T34] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 67.123401][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 67.881129][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 67.884887][ T34] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 67.887701][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.895967][ T34] usb 8-1: config 0 descriptor?? [ 68.134088][ T34] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 68.319064][ T6297] tipc: Resetting bearer [ 68.344855][ T34] usb 8-1: USB disconnect, device number 2 [ 68.347445][ C3] iowarrior 8-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 69.588885][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'. [ 69.617768][ T6373] syzkaller0: entered promiscuous mode [ 69.619680][ T6373] syzkaller0: entered allmulticast mode [ 69.872324][ T6379] random: crng reseeded on system resumption [ 70.067192][ T6385] fuse: fd is not a fuse device [ 70.072665][ T6385] fuse: fd is not a fuse device [ 70.778355][ T6403] overlayfs: overlapping lowerdir path [ 70.919125][ T6409] netlink: 'syz.0.104': attribute type 1 has an invalid length. [ 70.957797][ T6411] usbip_vudc: v_rx exit with error -32 [ 70.985329][ T6409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.070131][ T6409] bond1: entered promiscuous mode [ 71.072613][ T6409] bond1: entered allmulticast mode [ 71.164856][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.167497][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.154082][ T6451] netlink: 'syz.0.117': attribute type 1 has an invalid length. [ 74.191713][ T6466] netlink: 'syz.0.122': attribute type 11 has an invalid length. [ 74.248412][ T6466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.306014][ T6466] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 74.308487][ T6466] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 74.312037][ T845] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 74.462030][ T845] usb 8-1: Using ep0 maxpacket: 32 [ 74.467257][ T845] usb 8-1: config 0 has no interfaces? [ 74.471765][ T845] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 74.475627][ T845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.478897][ T845] usb 8-1: Product: syz [ 74.480654][ T845] usb 8-1: Manufacturer: syz [ 74.482507][ T845] usb 8-1: SerialNumber: syz [ 74.489125][ T845] usb 8-1: config 0 descriptor?? [ 74.958076][ T6462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.975728][ T6462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.998040][ T6472] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 75.005191][ T5828] usb 8-1: USB disconnect, device number 3 [ 75.269848][ T6476] fuse: fd is not a fuse device [ 75.439251][ T6481] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 75.444923][ T6481] bond2: (slave macvlan2): making interface the new active one [ 75.448380][ T6481] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 75.451219][ T845] bond_slave_0: entered promiscuous mode [ 75.453984][ T845] bond_slave_1: entered promiscuous mode [ 75.468781][ T6481] netlink: 14 bytes leftover after parsing attributes in process `syz.0.127'. [ 75.473000][ T6481] bond_slave_0: left promiscuous mode [ 75.476041][ T6481] bond_slave_1: left promiscuous mode [ 75.484718][ T6481] bond2: (slave macvlan2): Releasing active interface [ 75.497816][ T6481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.506333][ T6481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.511900][ T6481] bond0 (unregistering): Released all slaves [ 76.356460][ T6483] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 76.358977][ T6483] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 76.399393][ T6483] vhci_hcd vhci_hcd.0: Device attached [ 76.587314][ T6495] vhci_hcd: connection closed [ 76.592511][ T12] vhci_hcd vhci_hcd.1: stop threads [ 76.596541][ T12] vhci_hcd vhci_hcd.1: release socket [ 76.600065][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 76.668060][ T6501] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 76.676933][ T6501] usbip-vudc usbip-vudc.0: failed to lookup sock [ 78.254421][ T6490] Set syz1 is full, maxelem 65536 reached [ 78.553160][ T6524] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.596801][ T6528] syzkaller0: entered promiscuous mode [ 78.598734][ T6528] syzkaller0: entered allmulticast mode [ 78.629009][ T5117] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 78.778909][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 78.793518][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.797626][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.814962][ T6533] syzkaller0: entered promiscuous mode [ 78.817352][ T6533] syzkaller0: entered allmulticast mode [ 78.836505][ T6533] tipc: Started in network mode [ 78.838262][ T6533] tipc: Node identity e2d5d4d1fce6, cluster identity 4711 [ 78.840848][ T6533] tipc: Enabled bearer , priority 0 [ 78.845571][ T6532] tipc: Resetting bearer [ 78.860415][ T6532] tipc: Disabling bearer [ 78.949111][ T5117] usb 6-1: unable to get BOS descriptor or descriptor too short [ 78.956115][ T5117] usb 6-1: no configurations [ 78.958373][ T5117] usb 6-1: can't read configurations, error -22 [ 79.099407][ T6544] netlink: 72 bytes leftover after parsing attributes in process `syz.2.144'. [ 79.425101][ T6550] IPVS: Scheduler module ip_vs_ not found [ 79.526577][ T6553] syzkaller0: entered promiscuous mode [ 79.528539][ T6553] syzkaller0: entered allmulticast mode [ 79.627981][ T6555] syzkaller0: entered promiscuous mode [ 79.629673][ T6555] syzkaller0: entered allmulticast mode [ 79.797323][ T6560] syzkaller0: entered promiscuous mode [ 79.799542][ T6560] syzkaller0: entered allmulticast mode [ 79.948085][ T6562] syzkaller0: entered promiscuous mode [ 79.950080][ T6562] syzkaller0: entered allmulticast mode [ 79.979192][ T6564] bridge0: port 3(syz_tun) entered blocking state [ 79.983245][ T6564] bridge0: port 3(syz_tun) entered disabled state [ 79.986107][ T6564] syz_tun: entered allmulticast mode [ 79.988912][ T6564] syz_tun: entered promiscuous mode [ 79.992244][ T6564] bridge0: port 3(syz_tun) entered blocking state [ 79.994940][ T6564] bridge0: port 3(syz_tun) entered listening state [ 80.057584][ T6566] syzkaller0: entered promiscuous mode [ 80.059979][ T6566] syzkaller0: entered allmulticast mode [ 80.074243][ T6568] netlink: 76 bytes leftover after parsing attributes in process `syz.2.154'. [ 80.093725][ T6568] syzkaller0: entered promiscuous mode [ 80.095535][ T6568] syzkaller0: entered allmulticast mode [ 80.288850][ T6576] syzkaller0: entered promiscuous mode [ 80.292122][ T6576] syzkaller0: entered allmulticast mode [ 80.558201][ T6582] gfs2: not a GFS2 filesystem [ 80.610135][ T1066] bridge0: port 3(syz_tun) entered disabled state [ 81.409378][ T3389] cfg80211: failed to load regulatory.db [ 81.557282][ T6609] openvswitch: netlink: IP tunnel dst address not specified [ 81.594975][ T5747] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 81.601217][ T5747] CPU: 2 UID: 0 PID: 5747 Comm: kworker/u34:2 Not tainted syzkaller #0 PREEMPT(full) [ 81.601243][ T5747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.601270][ T5747] Workqueue: hci0 hci_rx_work [ 81.601438][ T5747] Call Trace: [ 81.601466][ T5747] [ 81.601476][ T5747] dump_stack_lvl+0x100/0x190 [ 81.601503][ T5747] sysfs_warn_dup.cold+0x1c/0x28 [ 81.601532][ T5747] sysfs_create_dir_ns+0x24b/0x2b0 [ 81.601587][ T5747] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 81.601616][ T5747] ? find_held_lock+0x2b/0x80 [ 81.601639][ T5747] ? kobject_add_internal+0x25f/0x930 [ 81.601678][ T5747] ? kobject_add_internal+0x25f/0x930 [ 81.601711][ T5747] ? do_raw_spin_unlock+0x145/0x1e0 [ 81.601736][ T5747] kobject_add_internal+0x2c8/0x930 [ 81.601771][ T5747] kobject_add+0x16a/0x1e0 [ 81.601800][ T5747] ? __pfx_kobject_add+0x10/0x10 [ 81.601828][ T5747] ? class_to_subsys+0x10f/0x150 [ 81.601858][ T5747] ? kobject_put+0xb9/0x640 [ 81.601883][ T5747] ? _raw_spin_unlock+0x28/0x50 [ 81.601912][ T5747] device_add+0x294/0x1970 [ 81.601958][ T5747] ? __pfx_dev_set_name+0x10/0x10 [ 81.601981][ T5747] ? __pfx_device_add+0x10/0x10 [ 81.602013][ T5747] ? mgmt_send_event_skb+0x2fb/0x460 [ 81.602063][ T5747] hci_conn_add_sysfs+0x1a3/0x260 [ 81.602090][ T5747] le_conn_complete_evt+0x11eb/0x1f60 [ 81.602127][ T5747] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 81.602149][ T5747] ? hci_event_packet+0x186/0xcd0 [ 81.602178][ T5747] hci_le_conn_complete_evt+0x23c/0x3a0 [ 81.602204][ T5747] ? skb_pull_data+0x15f/0x1e0 [ 81.602249][ T5747] hci_le_meta_evt+0x34a/0x5f0 [ 81.602276][ T5747] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 81.602302][ T5747] hci_event_packet+0x51c/0xcd0 [ 81.602327][ T5747] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 81.602351][ T5747] ? __pfx_hci_event_packet+0x10/0x10 [ 81.602378][ T5747] ? kcov_remote_start+0x384/0x670 [ 81.602404][ T5747] ? lockdep_hardirqs_on+0x78/0x100 [ 81.602432][ T5747] hci_rx_work+0x451/0xfc0 [ 81.602460][ T5747] process_one_work+0xa23/0x1940 [ 81.602498][ T5747] ? __pfx_process_one_work+0x10/0x10 [ 81.602533][ T5747] ? __pfx_hci_rx_work+0x10/0x10 [ 81.602557][ T5747] worker_thread+0x5ef/0xe50 [ 81.602594][ T5747] ? kthread+0x13a/0x450 [ 81.602618][ T5747] ? __pfx_worker_thread+0x10/0x10 [ 81.602642][ T5747] kthread+0x370/0x450 [ 81.602666][ T5747] ? __pfx_kthread+0x10/0x10 [ 81.602691][ T5747] ret_from_fork+0x72b/0xd50 [ 81.602716][ T5747] ? __pfx_ret_from_fork+0x10/0x10 [ 81.602738][ T5747] ? native_load_gs_index+0x1e/0xc0 [ 81.602766][ T5747] ? __switch_to+0x800/0x10f0 [ 81.602794][ T5747] ? __pfx_kthread+0x10/0x10 [ 81.602820][ T5747] ret_from_fork_asm+0x1a/0x30 [ 81.602859][ T5747] [ 81.712147][ T5747] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 81.716759][ T5747] Bluetooth: hci0: failed to register connection device [ 81.944486][ T6613] syzkaller0: entered promiscuous mode [ 81.946761][ T6613] syzkaller0: entered allmulticast mode [ 83.349530][ T5117] Process accounting resumed [ 83.505352][ T6637] syzkaller0: entered promiscuous mode [ 83.510796][ T6637] syzkaller0: entered allmulticast mode [ 83.577409][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.177'. [ 83.583524][ T6640] block nbd0: Unsupported socket: should be TCP or UNIX. [ 84.265552][ T6648] syz_tun: entered allmulticast mode [ 84.365501][ T6656] cgroup: release_agent respecified [ 84.447116][ T6657] input: syz0 as /devices/virtual/input/input6 [ 85.357198][ T6668] tmpfs: Unknown parameter 'grpquotas/usb/drivers/usbip-host/match_busid' [ 86.702053][ T5849] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 86.872132][ T5849] usb 6-1: Using ep0 maxpacket: 8 [ 86.882096][ T5849] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 86.885145][ T5849] usb 6-1: config 0 has no interface number 0 [ 86.887177][ T5849] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 86.890713][ T5849] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 86.896234][ T5849] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 86.901762][ T5849] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 86.913669][ T5849] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 86.916902][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.928205][ T5849] usb 6-1: config 0 descriptor?? [ 86.941136][ T5849] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 87.140808][ T42] audit: type=1326 audit(1785377670.149:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6694 comm="syz.3.193" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f86fec code=0x0 [ 87.672406][ T3389] usb 6-1: USB disconnect, device number 4 [ 87.672482][ C2] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 87.708977][ T6692] ldusb: No device or device unplugged -19 [ 87.709694][ T3389] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 87.715024][ T6706] ldusb: No device or device unplugged -19 [ 88.135626][ T6715] trusted_key: syz.0.198 sent an empty control message without MSG_MORE. [ 88.603989][ T6721] tmpfs: Unknown parameter 'grpquotas/usb/drivers/usbip-host/match_busid' [ 89.212221][ T6724] syzkaller0: entered promiscuous mode [ 89.214663][ T6724] syzkaller0: entered allmulticast mode [ 89.359140][ T6738] openvswitch: netlink: IP tunnel dst address not specified [ 89.753015][ T6746] process 'syz.2.207' launched './file2' with NULL argv: empty string added [ 90.042112][ T5747] Bluetooth: hci0: command 0x2016 tx timeout [ 90.762094][ T5849] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 90.964003][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 91.694985][ T6780] tmpfs: Unknown parameter 'grpquotas/usb/drivers/usbip-host/match_busid' [ 91.835157][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 91.839183][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 91.845762][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 91.857167][ T5849] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 91.865051][ T5849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.870511][ T5849] usb 7-1: Product: syz [ 91.872468][ T5849] usb 7-1: Manufacturer: syz [ 91.874422][ T5849] usb 7-1: SerialNumber: syz [ 91.881303][ T5849] usb 7-1: config 0 descriptor?? [ 91.995718][ T6787] syzkaller0: entered promiscuous mode [ 91.997691][ T6787] syzkaller0: entered allmulticast mode [ 92.103386][ T5849] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 92.124055][ T5747] Bluetooth: hci0: command 0x2016 tx timeout [ 92.268206][ T6802] netlink: 72 bytes leftover after parsing attributes in process `syz.1.217'. [ 92.304827][ T5849] usb 7-1: USB disconnect, device number 2 [ 93.406118][ T6819] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 93.408812][ T6819] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 93.430582][ T6819] vhci_hcd vhci_hcd.0: Device attached [ 93.510793][ T6823] cgroup: release_agent respecified [ 93.742229][ T1491] usb 40-1: SetAddress Request (3) to port 0 [ 93.745726][ T1491] usb 40-1: new SuperSpeed USB device number 3 using vhci_hcd [ 93.773801][ T6828] input: syz0 as /devices/virtual/input/input7 [ 93.831176][ T6830] binder: 6829:6830 ioctl c00c6211 0 returned -14 [ 93.983270][ T6820] vhci_hcd: connection reset by peer [ 93.988886][ T5820] vhci_hcd vhci_hcd.1: stop threads [ 93.991313][ T5820] vhci_hcd vhci_hcd.1: release socket [ 93.995276][ T5820] vhci_hcd vhci_hcd.1: disconnect device [ 94.623760][ T6835] vlan2: entered promiscuous mode [ 94.708951][ T6835] fuse: fd is not a fuse device [ 94.719572][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 94.730919][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 94.741175][ T6840] netlink: 72 bytes leftover after parsing attributes in process `syz.1.226'. [ 94.741611][ T42] audit: type=1326 audit(1785377677.779:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.0.224" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x0 [ 95.524572][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.228'. [ 95.884830][ T5757] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 95.888184][ T5757] Bluetooth: hci2: Injecting HCI hardware error event [ 95.894613][ T5757] Bluetooth: hci2: hardware error 0x00 [ 96.226742][ T6860] lo: entered allmulticast mode [ 96.230261][ T6860] lo: left allmulticast mode [ 96.245697][ T6860] bond0: entered promiscuous mode [ 96.247371][ T6860] bond_slave_0: entered promiscuous mode [ 96.249237][ T6860] bond_slave_1: entered promiscuous mode [ 96.254238][ T6860] batadv0: entered promiscuous mode [ 96.258464][ T6860] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 96.279394][ T6860] bond0: left promiscuous mode [ 96.281330][ T6860] bond_slave_0: left promiscuous mode [ 96.283536][ T6860] bond_slave_1: left promiscuous mode [ 96.311235][ T6860] batadv0: left promiscuous mode [ 96.493530][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.496878][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.839689][ T6874] cgroup: release_agent respecified [ 96.901887][ T6877] input: syz0 as /devices/virtual/input/input8 [ 96.920477][ T6878] netlink: 72 bytes leftover after parsing attributes in process `syz.3.232'. [ 97.914368][ T6895] 9p: Bad value for 'wfdno' [ 98.283692][ T5757] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 98.853620][ T1491] usb 40-1: device descriptor read/8, error -110 [ 99.273304][ T1491] usb usb40-port1: attempt power cycle [ 99.403329][ T6911] lo: entered allmulticast mode [ 99.405480][ T5756] Bluetooth: hci3: command 0x2016 tx timeout [ 99.420845][ T6911] lo: left allmulticast mode [ 99.486795][ T6911] bond0: entered promiscuous mode [ 99.492506][ T6911] bond_slave_0: entered promiscuous mode [ 99.513608][ T6911] bond_slave_1: entered promiscuous mode [ 99.521895][ T6911] batadv0: entered promiscuous mode [ 99.535364][ T6911] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 99.571760][ T6911] bond0: left promiscuous mode [ 99.574533][ T6911] bond_slave_0: left promiscuous mode [ 99.580128][ T6911] bond_slave_1: left promiscuous mode [ 99.589364][ T6911] batadv0: left promiscuous mode [ 99.862851][ T1491] usb usb40-port1: unable to enumerate USB device [ 100.564461][ T6913] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.569324][ T6913] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.425653][ T6928] cgroup: release_agent respecified [ 101.485057][ T5756] Bluetooth: hci3: command 0x2016 tx timeout [ 101.882065][ T5849] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 102.032059][ T5849] usb 8-1: Using ep0 maxpacket: 8 [ 102.038028][ T5849] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 102.044351][ T5849] usb 8-1: config 0 has no interface number 0 [ 102.049056][ T5849] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 102.056011][ T5849] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 102.060249][ T5849] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.063844][ T5849] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 102.068049][ T5849] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 102.070971][ T5849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.080659][ T5849] usb 8-1: config 0 descriptor?? [ 102.093141][ T5849] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 102.724724][ T3389] usb 8-1: USB disconnect, device number 4 [ 102.724791][ C3] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 102.732707][ T3389] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 102.774338][ T6949] netlink: 188 bytes leftover after parsing attributes in process `syz.0.251'. [ 103.033722][ T6955] Invalid ELF header magic: != ELF [ 103.089980][ T6955] ======================================================= [ 103.089980][ T6955] WARNING: The mand mount option has been deprecated and [ 103.089980][ T6955] and is ignored by this kernel. Remove the mand [ 103.089980][ T6955] option from the mount to silence this warning. [ 103.089980][ T6955] ======================================================= [ 103.803264][ T5756] Bluetooth: hci1: command 0x2016 tx timeout [ 104.355930][ T6979] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.882229][ T5757] Bluetooth: hci1: command 0x2016 tx timeout [ 105.953814][ T6982] bond1 (unregistering): Released all slaves [ 106.319723][ T7007] xt_connbytes: Forcing CT accounting to be enabled [ 106.329648][ T7007] xt_TPROXY: Can be used only with -p tcp or -p udp [ 106.948642][ T5756] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 107.705938][ T1041] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 107.855031][ T1041] usb 8-1: Using ep0 maxpacket: 32 [ 107.883305][ T1041] usb 8-1: config 0 has no interfaces? [ 107.920572][ T1041] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 107.927311][ T1041] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 107.930392][ T1041] usb 8-1: Product: syz [ 107.934083][ T1041] usb 8-1: Manufacturer: syz [ 107.942125][ T1041] usb 8-1: SerialNumber: syz [ 107.946594][ T1041] usb 8-1: config 0 descriptor?? [ 108.339595][ T7044] NILFS (loop2): device size too small [ 108.699881][ T1041] usb 8-1: USB disconnect, device number 5 [ 109.765746][ T7064] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 109.767872][ T7064] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 109.794452][ T7064] vhci_hcd vhci_hcd.0: Device attached [ 109.892050][ T34] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 110.042707][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 110.055166][ T34] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 110.060823][ T34] usb 8-1: config 179 has no interface number 0 [ 110.092971][ T34] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 110.098633][ T34] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 110.105292][ T34] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 110.110028][ T34] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 110.112122][ T5828] usb 40-1: SetAddress Request (7) to port 0 [ 110.115082][ T34] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 110.116609][ T5828] usb 40-1: new SuperSpeed USB device number 7 using vhci_hcd [ 110.125276][ T34] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 110.129324][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.143982][ T7063] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 110.317399][ T7065] vhci_hcd: connection reset by peer [ 110.321373][ T12] vhci_hcd vhci_hcd.1: stop threads [ 110.323303][ T12] vhci_hcd vhci_hcd.1: release socket [ 110.325167][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 111.012946][ T5756] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 111.017896][ T5756] Bluetooth: hci3: Injecting HCI hardware error event [ 111.022537][ T5757] Bluetooth: hci3: hardware error 0x00 [ 111.079842][ T1041] IPVS: starting estimator thread 0... [ 111.092795][ T7087] comedi comedi0: 8255: I/O base address not correctly aligned [ 111.192211][ T7090] IPVS: using max 43 ests per chain, 103200 per kthread [ 111.203606][ T7094] warning: `syz.1.279' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.280440][ T3389] usb 8-1: USB disconnect, device number 6 [ 111.283071][ C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 111.283111][ C3] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 111.487290][ T5117] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 111.674186][ T5117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.682811][ T5117] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 111.685844][ T5117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.694987][ T5117] usb 6-1: config 0 descriptor?? [ 112.446367][ T7109] Cannot find add_set index 2 as target [ 112.632604][ T5117] usbhid 6-1:0.0: can't add hid device: -71 [ 112.860373][ T5117] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 112.866275][ T5117] usb 6-1: USB disconnect, device number 5 [ 113.083352][ T5757] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 113.528162][ T7127] bond1 (unregistering): Released all slaves [ 113.758903][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 113.909938][ T42] audit: type=1804 audit(1785377696.949:4): pid=7135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.289" name="bus" dev="ramfs" ino=14019 res=1 errno=0 [ 113.922040][ T42] audit: type=1804 audit(1785377696.959:5): pid=7135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.289" name="bus" dev="ramfs" ino=14019 res=1 errno=0 [ 114.722109][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 114.898628][ T9] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 114.912425][ T9] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 114.927588][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.935294][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.172166][ T5828] usb 40-1: device descriptor read/8, error -110 [ 115.682108][ T3389] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 115.843548][ T3389] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.847361][ T3389] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 115.850320][ T3389] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.855440][ T3389] usb 7-1: config 0 descriptor?? [ 116.229164][ T5828] usb usb40-port1: attempt power cycle [ 116.273556][ T7166] comedi comedi3: comedi_config --init_data is deprecated [ 116.512118][ T5117] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 116.583474][ T3389] usbhid 7-1:0.0: can't add hid device: -71 [ 116.586680][ T3389] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 116.590453][ T3389] usb 7-1: USB disconnect, device number 3 [ 116.673322][ T5117] usb 8-1: Using ep0 maxpacket: 32 [ 116.677947][ T5117] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 116.683367][ T5117] usb 8-1: config 0 interface 0 has no altsetting 0 [ 116.686492][ T5117] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 116.690509][ T5117] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.697805][ T5117] usb 8-1: config 0 descriptor?? [ 116.843066][ T5828] usb usb40-port1: unable to enumerate USB device [ 116.926536][ T7166] xt_hashlimit: max too large, truncated to 1048576 [ 117.466442][ T9] usb 6-1: USB disconnect, device number 6 [ 117.656945][ T42] audit: type=1326 audit(1785377700.699:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.1.300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38fec code=0x7ffc0000 [ 117.675597][ T42] audit: type=1326 audit(1785377700.719:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.1.300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38fec code=0x7ffc0000 [ 117.685023][ T42] audit: type=1326 audit(1785377700.729:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.1.300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38fec code=0x7ffc0000 [ 117.694084][ T42] audit: type=1326 audit(1785377700.729:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.1.300" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f38fec code=0x7ffc0000 [ 117.703157][ T42] audit: type=1326 audit(1785377700.729:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.1.300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38fec code=0x7ffc0000 [ 117.711257][ T42] audit: type=1326 audit(1785377700.749:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.1.300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38fec code=0x7ffc0000 [ 117.718263][ T42] audit: type=1326 audit(1785377700.749:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.1.300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38fec code=0x7ffc0000 [ 117.725027][ T42] audit: type=1326 audit(1785377700.749:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.1.300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38fec code=0x7ffc0000 [ 118.146627][ T7196] syzkaller0: entered promiscuous mode [ 118.150155][ T7196] syzkaller0: entered allmulticast mode [ 118.837006][ T7214] xt_connbytes: Forcing CT accounting to be enabled [ 118.839955][ T7214] Cannot find del_set index 0 as target [ 119.377803][ T7222] netlink: 72 bytes leftover after parsing attributes in process `syz.0.308'. [ 119.598827][ T5117] usbhid 8-1:0.0: can't add hid device: -71 [ 119.600834][ T5117] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 119.609113][ T5117] usb 8-1: USB disconnect, device number 7 [ 119.686832][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'. [ 120.047967][ T7239] bond1 (unregistering): Released all slaves [ 120.212120][ T5850] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 120.362232][ T5850] usb 6-1: Using ep0 maxpacket: 8 [ 120.373857][ T5850] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 120.381852][ T5850] usb 6-1: config 179 has no interface number 0 [ 120.389018][ T5850] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 120.398398][ T5850] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 120.402255][ T5850] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 120.406384][ T5850] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 120.409999][ T5850] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 120.414024][ T5850] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 120.417630][ T5850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.425434][ T7238] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.068927][ T1491] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 121.243522][ T1491] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 121.259935][ T1491] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 121.268297][ T1491] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 121.274995][ T1491] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 121.283040][ T1491] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 121.293904][ T1491] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 121.297511][ T1491] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 121.303308][ T1491] usb 7-1: Product: syz [ 121.304780][ T1491] usb 7-1: Manufacturer: syz [ 121.335418][ T1491] cdc_wdm 7-1:1.0: skipping garbage [ 121.342658][ T1491] cdc_wdm 7-1:1.0: skipping garbage [ 121.402731][ T1491] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 121.422384][ T1491] cdc_wdm 7-1:1.0: Unknown control protocol [ 121.680639][ T5850] usb 6-1: USB disconnect, device number 7 [ 121.682002][ T7255] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.682644][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 121.687785][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 122.225401][ T7270] mmap: syz.2.315 (7270) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 123.386677][ T7290] xt_connbytes: Forcing CT accounting to be enabled [ 123.389616][ T7290] xt_TPROXY: Can be used only with -p tcp or -p udp [ 123.605123][ T7289] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 123.751333][ T5850] usb 7-1: USB disconnect, device number 4 [ 124.159425][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.326'. [ 124.225854][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 124.347935][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 124.585573][ T7310] erspan0: entered promiscuous mode [ 124.601386][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'. [ 125.315420][ T7319] netlink: 72 bytes leftover after parsing attributes in process `syz.0.330'. [ 125.669915][ T7333] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 125.672037][ T7333] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 125.675378][ T7333] vhci_hcd vhci_hcd.0: Device attached [ 125.840789][ T7333] wg2 speed is unknown, defaulting to 1000 [ 125.850850][ T7333] wg2 speed is unknown, defaulting to 1000 [ 125.871454][ T7333] wg2 speed is unknown, defaulting to 1000 [ 125.972876][ T5827] usb 44-1: SetAddress Request (2) to port 0 [ 125.981704][ T5827] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 126.388274][ T7334] vhci_hcd: connection reset by peer [ 126.399608][ T12] vhci_hcd vhci_hcd.3: stop threads [ 126.399751][ T1491] wg2 speed is unknown, defaulting to 1000 [ 126.403374][ T12] vhci_hcd vhci_hcd.3: release socket [ 126.406551][ T7333] infiniband syz2: set active [ 126.406589][ T7333] infiniband syz2: added wg2 [ 126.418990][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 126.438718][ T7333] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 126.452138][ T7333] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 126.466059][ T7333] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 126.528494][ T7333] RDS/IB: syz2: added [ 126.532458][ T7333] smc: adding ib device syz2 with port count 1 [ 126.535253][ T7333] smc: ib device syz2 port 1 has no pnetid [ 126.557013][ T1491] wg2 speed is unknown, defaulting to 1000 [ 126.566320][ T7333] wg2 speed is unknown, defaulting to 1000 [ 126.693379][ T7333] wg2 speed is unknown, defaulting to 1000 [ 126.826672][ T7333] wg2 speed is unknown, defaulting to 1000 [ 126.919623][ T7333] wg2 speed is unknown, defaulting to 1000 [ 127.211489][ T42] kauditd_printk_skb: 323 callbacks suppressed [ 127.211504][ T42] audit: type=1326 audit(1785377710.249:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.1.335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38fec code=0x7ffc0000 [ 127.222875][ T42] audit: type=1326 audit(1785377710.269:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.1.335" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f38fec code=0x7ffc0000 [ 127.230695][ T42] audit: type=1326 audit(1785377710.269:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.1.335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38fec code=0x7ffc0000 [ 127.239739][ T42] audit: type=1326 audit(1785377710.279:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.1.335" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f38fec code=0x7ffc0000 [ 127.558604][ T7359] xt_connbytes: Forcing CT accounting to be enabled [ 127.561016][ T7359] xt_TPROXY: Can be used only with -p tcp or -p udp [ 127.807398][ T42] audit: type=1326 audit(1785377710.849:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.1.335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38fec code=0x7ffc0000 [ 127.822545][ T42] audit: type=1326 audit(1785377710.869:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.1.335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38fec code=0x7ffc0000 [ 128.574355][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 128.679962][ T7368] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 128.682040][ T7368] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 128.691746][ T7368] vhci_hcd vhci_hcd.0: Device attached [ 128.763020][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 128.992073][ T1491] usb 40-1: SetAddress Request (11) to port 0 [ 128.994144][ T1491] usb 40-1: new SuperSpeed USB device number 11 using vhci_hcd [ 129.070321][ T7368] geneve2: entered allmulticast mode [ 129.097185][ T7375] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 129.101620][ T7375] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 129.107087][ T7375] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 129.126043][ T7375] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 129.157431][ T7375] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 129.444260][ T7369] vhci_hcd: connection reset by peer [ 129.448996][ T5892] vhci_hcd vhci_hcd.1: stop threads [ 129.451382][ T5892] vhci_hcd vhci_hcd.1: release socket [ 129.457188][ T5892] vhci_hcd vhci_hcd.1: disconnect device [ 129.540872][ T173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.547568][ T173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.599250][ T7387] ufs: You didn't specify the type of your ufs filesystem [ 129.599250][ T7387] [ 129.599250][ T7387] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 129.599250][ T7387] [ 129.599250][ T7387] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 129.609044][ T7387] ufs: failed to set blocksize [ 130.024455][ T7393] loop0: detected capacity change from 0 to 32768 [ 130.065024][ T7393] loop1: detected capacity change from 0 to 32768 [ 130.089911][ T7393] loop2: detected capacity change from 0 to 32768 [ 130.109505][ T7393] loop3: detected capacity change from 0 to 32768 [ 130.248175][ T7393] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 130.263434][ T7397] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 130.280382][ T7397] block device autoloading is deprecated and will be removed. [ 130.306389][ T7398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.348'. [ 130.725908][ T7407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'. [ 131.502184][ T5827] usb 44-1: device descriptor read/8, error -110 [ 132.102636][ T5827] usb usb44-port1: attempt power cycle [ 132.540837][ T7433] syzkaller0: entered promiscuous mode [ 132.544688][ T7433] syzkaller0: entered allmulticast mode [ 132.605348][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.608415][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.662874][ T5827] usb usb44-port1: unable to enumerate USB device [ 133.021536][ T7448] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 133.193545][ T7448] wg2 speed is unknown, defaulting to 1000 [ 133.695562][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.359'. [ 134.047627][ T1491] usb 40-1: device descriptor read/8, error -110 [ 134.453417][ T1491] usb usb40-port1: attempt power cycle [ 134.957038][ T7484] xt_TPROXY: Can be used only with -p tcp or -p udp [ 135.022931][ T1491] usb usb40-port1: unable to enumerate USB device [ 136.162662][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'. [ 136.343258][ T7519] random: crng reseeded on system resumption [ 136.382863][ T7518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.370'. [ 137.180006][ T42] audit: type=1326 audit(1785377720.219:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 137.194010][ T42] audit: type=1326 audit(1785377720.229:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 137.207801][ T42] audit: type=1326 audit(1785377720.239:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704efec code=0x7ffc0000 [ 137.223923][ T42] audit: type=1326 audit(1785377720.239:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 137.240799][ T42] audit: type=1326 audit(1785377720.239:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 137.257294][ T42] audit: type=1326 audit(1785377720.239:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf704efec code=0x7ffc0000 [ 137.898609][ T7539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.084630][ T42] audit: type=1326 audit(1785377721.129:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 138.095914][ T42] audit: type=1326 audit(1785377721.129:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 139.108607][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 139.760716][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 140.155553][ T7574] netlink: 'syz.3.385': attribute type 1 has an invalid length. [ 140.158846][ T7574] netlink: 224 bytes leftover after parsing attributes in process `syz.3.385'. [ 140.679964][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 141.304755][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'. [ 141.308619][ T7601] syz_tun: left allmulticast mode [ 141.310857][ T7601] syz_tun: left promiscuous mode [ 141.316389][ T7601] bridge0: port 3(syz_tun) entered disabled state [ 141.347287][ T7601] bridge_slave_1: left allmulticast mode [ 141.349248][ T7601] bridge_slave_1: left promiscuous mode [ 141.352268][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.390436][ T7601] bridge_slave_0: left allmulticast mode [ 141.398625][ T7601] bridge_slave_0: left promiscuous mode [ 141.405278][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.422422][ T7602] efs: cannot read volume header [ 141.872702][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.390'. [ 142.114536][ T7613] overlayfs: failed to resolve './file0': -2 [ 142.406581][ T7620] netlink: 'syz.3.393': attribute type 74 has an invalid length. [ 142.676441][ T7623] syzkaller0: entered promiscuous mode [ 142.678541][ T7623] syzkaller0: entered allmulticast mode [ 143.332007][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.400'. [ 143.838536][ T7664] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 143.838880][ T7664] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 143.839349][ T7664] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 143.840347][ T7664] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 143.840627][ T7664] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 143.840882][ T7664] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 143.841136][ T7664] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 143.841446][ T7664] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 143.841713][ T7664] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 143.842047][ T7664] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 144.458581][ T7674] syzkaller0: entered promiscuous mode [ 144.462930][ T7674] syzkaller0: entered allmulticast mode [ 145.314532][ T7689] loop1: detected capacity change from 0 to 32768 [ 145.320397][ T7680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.323150][ T7689] loop2: detected capacity change from 0 to 32768 [ 145.331729][ T7680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.333244][ T7689] loop3: detected capacity change from 0 to 32768 [ 145.340202][ T7689] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 145.442241][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.450563][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.455423][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.458688][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.520816][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'. [ 145.523675][ T7689] md: could not open device unknown-block(0,0). [ 145.523728][ T7689] md: error, md_import_device() returned -6 [ 145.698677][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'. [ 145.806974][ T7715] siw: device registration error -23 [ 146.331344][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.414'. [ 148.084780][ T7747] syzkaller0: entered promiscuous mode [ 148.087099][ T7747] syzkaller0: entered allmulticast mode [ 148.256086][ T42] audit: type=1326 audit(1785377731.299:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86fec code=0x7ffc0000 [ 148.289982][ T42] audit: type=1326 audit(1785377731.299:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86fec code=0x7ffc0000 [ 148.316157][ T42] audit: type=1326 audit(1785377731.299:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86fec code=0x7ffc0000 [ 148.341165][ T42] audit: type=1326 audit(1785377731.299:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.419" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f86fec code=0x7ffc0000 [ 148.352136][ T42] audit: type=1326 audit(1785377731.299:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86fec code=0x7ffc0000 [ 148.367370][ T42] audit: type=1326 audit(1785377731.299:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86fec code=0x7ffc0000 [ 148.418688][ T42] audit: type=1326 audit(1785377731.319:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86fec code=0x7ffc0000 [ 148.472629][ T42] audit: type=1326 audit(1785377731.319:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.419" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f86fec code=0x7ffc0000 [ 148.554261][ T42] audit: type=1326 audit(1785377731.319:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86fec code=0x7ffc0000 [ 148.600523][ T42] audit: type=1326 audit(1785377731.319:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86fec code=0x7ffc0000 [ 150.048498][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.051470][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.090434][ T7786] ufs: You didn't specify the type of your ufs filesystem [ 150.090434][ T7786] [ 150.090434][ T7786] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 150.090434][ T7786] [ 150.090434][ T7786] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 150.101613][ T7786] ufs: failed to set blocksize [ 150.373669][ T7788] syzkaller0: entered promiscuous mode [ 150.377877][ T7788] syzkaller0: entered allmulticast mode [ 150.676162][ T7796] syzkaller0: entered promiscuous mode [ 150.678601][ T7796] syzkaller0: entered allmulticast mode [ 150.835772][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'. [ 151.778592][ T7828] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.681471][ T5827] libceph: connect (1)[c::]:6789 error -101 [ 152.745956][ T5827] libceph: mon0 (1)[c::]:6789 connect error [ 152.966440][ T7837] ceph: No mds server is up or the cluster is laggy [ 153.033680][ T5827] libceph: connect (1)[c::]:6789 error -101 [ 153.036399][ T5827] libceph: mon0 (1)[c::]:6789 connect error [ 153.272629][ T7847] wg2 speed is unknown, defaulting to 1000 [ 154.061465][ T7852] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 154.064149][ T7852] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 154.072614][ T7843] rdma_rxe: rxe_newlink: failed to add wg2 [ 154.075979][ T7852] vhci_hcd vhci_hcd.0: Device attached [ 154.619088][ T5117] usb 44-1: SetAddress Request (6) to port 0 [ 154.623523][ T5117] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 155.046285][ T7866] syzkaller0: entered promiscuous mode [ 155.048257][ T7866] syzkaller0: entered allmulticast mode [ 155.727904][ T173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.739696][ T173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.239678][ T7883] ufs: You didn't specify the type of your ufs filesystem [ 156.239678][ T7883] [ 156.239678][ T7883] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 156.239678][ T7883] [ 156.239678][ T7883] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 156.293979][ T7883] ufs: failed to set blocksize [ 156.317786][ T7859] vhci_hcd: connection reset by peer [ 156.322516][ T13] vhci_hcd vhci_hcd.3: stop threads [ 156.325850][ T13] vhci_hcd vhci_hcd.3: release socket [ 156.328029][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 157.156907][ T7890] fuse: fd is not a fuse device [ 157.183795][ T5757] Bluetooth: hci1: unexpected event for opcode 0x4ad0 [ 158.917448][ T7918] 9p: Bad value for 'rfdno' [ 159.722215][ T5117] usb 44-1: device descriptor read/8, error -110 [ 160.113028][ T5117] usb usb44-port1: attempt power cycle [ 160.375951][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.379981][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.441451][ T7936] Cannot find del_set index 0 as target [ 160.692905][ T5117] usb usb44-port1: unable to enumerate USB device [ 160.747598][ T5117] libceph: connect (1)[c::]:6789 error -101 [ 160.750232][ T5117] libceph: mon0 (1)[c::]:6789 connect error [ 160.793015][ T7928] ceph: No mds server is up or the cluster is laggy [ 162.904879][ T7973] input: syz0 as /devices/virtual/input/input12 [ 162.922047][ T5756] Bluetooth: hci1: command 0x2016 tx timeout [ 163.005538][ T7975] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.007991][ T7975] bridge0: port 2(bridge_slave_1) entered listening state [ 163.010335][ T7975] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.012673][ T7975] bridge0: port 1(bridge_slave_0) entered listening state [ 163.067220][ T7975] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.128282][ T7975] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.212530][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'. [ 163.252039][ T5117] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 163.368688][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 163.376661][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 163.381270][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 163.385665][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 163.551444][ T34] IPVS: starting estimator thread 0... [ 163.656189][ T7995] IPVS: using max 43 ests per chain, 103200 per kthread [ 165.396202][ T8015] syzkaller0: entered promiscuous mode [ 165.398332][ T8015] syzkaller0: entered allmulticast mode [ 165.919040][ T42] kauditd_printk_skb: 361 callbacks suppressed [ 165.919058][ T42] audit: type=1326 audit(1785377748.959:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.2.476" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 165.926747][ T42] audit: type=1326 audit(1785377748.969:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.2.476" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 165.926795][ T42] audit: type=1326 audit(1785377748.969:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.2.476" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 165.926829][ T42] audit: type=1326 audit(1785377748.969:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.2.476" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 165.926864][ T42] audit: type=1326 audit(1785377748.969:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.2.476" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 165.926922][ T42] audit: type=1326 audit(1785377748.969:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.2.476" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 165.926958][ T42] audit: type=1326 audit(1785377748.969:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.2.476" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 165.926995][ T42] audit: type=1326 audit(1785377748.969:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.2.476" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 165.938527][ T42] audit: type=1326 audit(1785377748.969:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.2.476" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 166.096148][ T42] audit: type=1326 audit(1785377749.039:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.2.476" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 166.097505][ T8045] bond1 (unregistering): Released all slaves [ 166.833760][ T8056] wg2 speed is unknown, defaulting to 1000 [ 167.619560][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 169.139681][ T8111] binder: 8109:8111 ioctl 4018620d 0 returned -22 [ 169.157577][ T8111] binder: 8109:8111 ioctl c0306201 0 returned -14 [ 169.547871][ T8118] netlink: 24 bytes leftover after parsing attributes in process `syz.2.488'. [ 170.732522][ T29] libceph: connect (1)[c::]:6789 error -101 [ 170.739521][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 170.992213][ T29] libceph: connect (1)[c::]:6789 error -101 [ 170.994393][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 171.195065][ T8133] bond0 (unregistering): Released all slaves [ 171.208601][ T8143] ceph: No mds server is up or the cluster is laggy [ 171.431856][ T8130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.444630][ T8149] netlink: 27 bytes leftover after parsing attributes in process `syz.2.494'. [ 171.464943][ T8149] /dev/sr0: Can't open blockdev [ 171.473264][ T8149] usb usb9: usbfs: process 8149 (syz.2.494) did not claim interface 0 before use [ 171.479760][ T8149] netlink: 'syz.2.494': attribute type 1 has an invalid length. [ 171.483284][ T8149] netlink: 224 bytes leftover after parsing attributes in process `syz.2.494'. [ 173.133444][ T8175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.236888][ T8203] sctp_transport_update_pmtu: 43 callbacks suppressed [ 174.236902][ T8203] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 174.246178][ T8203] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 174.250010][ T8203] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 174.254654][ T8203] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 174.258300][ T8203] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 174.262030][ T8203] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 174.267989][ T8203] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 174.268257][ T8203] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 174.268509][ T8203] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 174.268754][ T8203] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 174.459816][ T8204] bond1 (unregistering): Released all slaves [ 174.684758][ T8215] loop3: detected capacity change from 0 to 32768 [ 174.764111][ T8215] md: array md0 already has disks! [ 174.802354][ T8215] md: could not open device unknown-block(7,1). [ 174.805514][ T8215] md: error, md_import_device() returned -16 [ 174.859092][ T8215] md/raid:md0: not clean -- starting background reconstruction [ 174.863390][ T8215] md/raid:md0: device loop0 operational as raid disk 0 [ 174.866262][ T8215] md/raid:md0: device loop2 operational as raid disk 2 [ 174.868961][ T8215] md/raid:md0: device loop1 operational as raid disk 1 [ 174.891906][ T8215] md/raid:md0: raid level 5 active with 3 out of 3 devices, algorithm 0 [ 174.908814][ T8215] md0: detected capacity change from 0 to 4096 [ 175.001942][ T845] [ 175.002767][ T845] ====================================================== [ 175.004942][ T845] WARNING: possible circular locking dependency detected [ 175.007110][ T845] syzkaller #0 Not tainted [ 175.008655][ T845] ------------------------------------------------------ [ 175.010822][ T845] kworker/2:2/845 is trying to acquire lock: [ 175.012781][ T845] ffff888023220358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_start_sync+0x79/0xbe0 [ 175.015808][ T845] [ 175.015808][ T845] but task is already holding lock: [ 175.017873][ T8217] bridge1: entered promiscuous mode [ 175.018370][ T845] ffffc90004acfd08 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 175.018424][ T845] [ 175.018424][ T845] which lock already depends on the new lock. [ 175.018424][ T845] [ 175.018429][ T845] [ 175.018429][ T845] the existing dependency chain (in reverse order) is: [ 175.031187][ T845] [ 175.031187][ T845] -> #3 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 175.034526][ T845] lock_acquire+0x1b9/0x370 [ 175.036508][ T845] process_one_work+0x98e/0x1940 [ 175.038506][ T845] worker_thread+0x5ef/0xe50 [ 175.040601][ T845] kthread+0x370/0x450 [ 175.042270][ T845] ret_from_fork+0x72b/0xd50 [ 175.043927][ T845] ret_from_fork_asm+0x1a/0x30 [ 175.045571][ T845] [ 175.045571][ T845] -> #2 ((wq_completion)md_misc){+.+.}-{0:0}: [ 175.048615][ T845] lock_acquire+0x1b9/0x370 [ 175.050269][ T845] touch_wq_lockdep_map+0xad/0x1c0 [ 175.052316][ T845] __flush_workqueue+0x131/0x1200 [ 175.054107][ T845] md_alloc+0x30/0x10a0 [ 175.055641][ T845] md_probe+0x73/0xf0 [ 175.057381][ T845] blk_probe_dev+0x149/0x1e0 [ 175.059222][ T845] blk_request_module+0x16/0xc0 [ 175.060898][ T845] blkdev_get_no_open+0x9b/0xf0 [ 175.062964][ T845] blkdev_open+0x141/0x4f0 [ 175.064558][ T845] do_dentry_open+0x6ab/0x14d0 [ 175.064662][ T8217] bridge1: entered allmulticast mode [ 175.066404][ T845] vfs_open+0x82/0x3f0 [ 175.066427][ T845] path_openat+0x2873/0x4280 [ 175.066442][ T845] do_file_open+0x20e/0x430 [ 175.072972][ T845] do_sys_openat2+0x10f/0x1e0 [ 175.074736][ T845] __ia32_compat_sys_openat+0x12d/0x210 [ 175.076692][ T845] __do_fast_syscall_32+0xe7/0x970 [ 175.078551][ T845] do_fast_syscall_32+0x32/0x70 [ 175.080342][ T845] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.082523][ T845] [ 175.082523][ T845] -> #1 (major_names_lock){+.+.}-{4:4}: [ 175.084925][ T845] lock_acquire+0x1b9/0x370 [ 175.086663][ T845] __mutex_lock+0x1a4/0x1bd0 [ 175.088389][ T845] blk_probe_dev+0x28/0x1e0 [ 175.090019][ T845] blk_request_module+0x16/0xc0 [ 175.091738][ T845] blkdev_get_no_open+0x9b/0xf0 [ 175.093454][ T845] bdev_file_open_by_dev+0x70/0x210 [ 175.095280][ T845] md_import_device+0x120/0x360 [ 175.097098][ T845] md_add_new_disk+0xdbf/0x1820 [ 175.098835][ T845] md_ioctl+0x2b28/0x36b0 [ 175.100480][ T845] compat_blkdev_ioctl+0x682/0x7b0 [ 175.102326][ T845] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 175.104285][ T845] __do_fast_syscall_32+0xe7/0x970 [ 175.106113][ T845] do_fast_syscall_32+0x32/0x70 [ 175.107875][ T845] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.110048][ T845] [ 175.110048][ T845] -> #0 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 175.112759][ T845] check_prev_add+0xeb/0xe60 [ 175.112789][ T845] __lock_acquire+0x136c/0x1a40 [ 175.112804][ T845] lock_acquire+0x1b9/0x370 [ 175.112818][ T845] __mutex_lock+0x1a4/0x1bd0 [ 175.112831][ T845] md_start_sync+0x79/0xbe0 [ 175.112846][ T845] process_one_work+0xa23/0x1940 [ 175.112860][ T845] worker_thread+0x5ef/0xe50 [ 175.112873][ T845] kthread+0x370/0x450 [ 175.112886][ T845] ret_from_fork+0x72b/0xd50 [ 175.112898][ T845] ret_from_fork_asm+0x1a/0x30 [ 175.112911][ T845] [ 175.112911][ T845] other info that might help us debug this: [ 175.112911][ T845] [ 175.112915][ T845] Chain exists of: [ 175.112915][ T845] &mddev->reconfig_mutex --> (wq_completion)md_misc --> (work_completion)(&mddev->sync_work) [ 175.112915][ T845] [ 175.112935][ T845] Possible unsafe locking scenario: [ 175.112935][ T845] [ 175.112937][ T845] CPU0 CPU1 [ 175.112941][ T845] ---- ---- [ 175.112943][ T845] lock((work_completion)(&mddev->sync_work)); [ 175.112951][ T845] lock((wq_completion)md_misc); [ 175.112958][ T845] lock((work_completion)(&mddev->sync_work)); [ 175.112966][ T845] lock(&mddev->reconfig_mutex); [ 175.112973][ T845] [ 175.112973][ T845] *** DEADLOCK *** [ 175.112973][ T845] [ 175.112975][ T845] 2 locks held by kworker/2:2/845: [ 175.112981][ T845] #0: ffff8880214ec540 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 175.113010][ T845] #1: ffffc90004acfd08 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 175.113038][ T845] [ 175.113038][ T845] stack backtrace: [ 175.113044][ T845] CPU: 2 UID: 0 PID: 845 Comm: kworker/2:2 Not tainted syzkaller #0 PREEMPT(full) [ 175.113056][ T845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.113064][ T845] Workqueue: md_misc md_start_sync [ 175.113079][ T845] Call Trace: [ 175.113083][ T845] [ 175.113092][ T845] dump_stack_lvl+0x100/0x190 [ 175.113103][ T845] print_circular_bug.cold+0x178/0x1c7 [ 175.113120][ T845] check_noncircular+0x146/0x160 [ 175.113137][ T845] check_prev_add+0xeb/0xe60 [ 175.113152][ T845] __lock_acquire+0x136c/0x1a40 [ 175.113169][ T845] ? __lock_acquire+0x49f/0x1a40 [ 175.113184][ T845] lock_acquire+0x1b9/0x370 [ 175.113199][ T845] ? md_start_sync+0x79/0xbe0 [ 175.113214][ T845] ? __pfx___might_resched+0x10/0x10 [ 175.113229][ T845] ? __mutex_unlock_slowpath+0x35d/0x930 [ 175.113243][ T845] __mutex_lock+0x1a4/0x1bd0 [ 175.113255][ T845] ? md_start_sync+0x79/0xbe0 [ 175.113269][ T845] ? md_start_sync+0x79/0xbe0 [ 175.113283][ T845] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 175.113294][ T845] ? lockdep_hardirqs_on+0x78/0x100 [ 175.113306][ T845] ? __pfx___mutex_lock+0x10/0x10 [ 175.113318][ T845] ? mddev_suspend+0x4a5/0x860 [ 175.113330][ T845] ? __pfx_mddev_suspend+0x10/0x10 [ 175.113344][ T845] ? md_start_sync+0x79/0xbe0 [ 175.113358][ T845] md_start_sync+0x79/0xbe0 [ 175.113373][ T845] process_one_work+0xa23/0x1940 [ 175.113390][ T845] ? __pfx_process_one_work+0x10/0x10 [ 175.113406][ T845] ? __pfx_md_start_sync+0x10/0x10 [ 175.113421][ T845] worker_thread+0x5ef/0xe50 [ 175.113436][ T845] ? __pfx_worker_thread+0x10/0x10 [ 175.113451][ T845] ? kthread+0x13a/0x450 [ 175.113463][ T845] ? __pfx_worker_thread+0x10/0x10 [ 175.113477][ T845] kthread+0x370/0x450 [ 175.113489][ T845] ? __pfx_kthread+0x10/0x10 [ 175.113502][ T845] ret_from_fork+0x72b/0xd50 [ 175.113515][ T845] ? __pfx_ret_from_fork+0x10/0x10 [ 175.113527][ T845] ? __switch_to+0x800/0x10f0 [ 175.113542][ T845] ? __pfx_kthread+0x10/0x10 [ 175.113555][ T845] ret_from_fork_asm+0x1a/0x30 [ 175.113571][ T845] [ 175.169106][ T8225] md: resync of RAID array md0 [ 175.201919][ T8225] md: md0: resync done. [ 175.286888][ T8228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.512'. [ 175.286963][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.512'. [ 175.642104][ T5756] Bluetooth: hci0: command 0x2016 tx timeout